Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/77c34c-e460-405f-954e-f641422121d2/1/G1ODFvaFKl08opH096J6zyr3ibg.mft
File: G1ODFvaFKl08opH096J6zyr3ibg.mft (raw, json)
Hash identifier: c6h1B4gbYQBHoyEJiBFXR51ivWh05baj1n4DjopsFk4=
Subject key identifier: DA:E6:40:B8:87:11:F5:8A:C8:D2:AA:CE:C9:8B:AC:31:0B:3D:77:D1
Authority key identifier: 1B:53:83:16:F6:85:2A:5D:3C:A2:91:F4:F7:A2:7A:CF:2A:F7:89:B8
Certificate issuer: /CN=1b538316f6852a5d3ca291f4f7a27acf2af789b8
Certificate serial: 01A0E4E3BD27198AD750E3A625EEFB806C14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G1ODFvaFKl08opH096J6zyr3ibg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/77c34c-e460-405f-954e-f641422121d2/1/G1ODFvaFKl08opH096J6zyr3ibg.mft
Manifest number: 024A
Signing time: Sun 27 Sep 2026 22:02:05 +0000
Manifest this update: Sun 27 Sep 2026 22:02:05 +0000
Manifest next update: Mon 28 Sep 2026 22:02:05 +0000
Files and hashes: 1: 3Vfs46JpS4OIv6juqlsavP8vJjY.asa (hash: sB2s+Xl9S1p4i5AWfMPlsofSMh8d6xFVYKGmtBeEpqw=)
2: G1ODFvaFKl08opH096J6zyr3ibg.crl (hash: C0uFXJTqbWYSVFLnkpOoJFJxfY8jBn+WM17ZMJqR4uQ=)
3: pO4-6JRTb_iUQ3eGXntbc3yEu38.roa (hash: 1+fcU0cN2SSHn14oJqXDeRbJ3y0/io2Qni1kI8nGGxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/77c34c-e460-405f-954e-f641422121d2/1/G1ODFvaFKl08opH096J6zyr3ibg.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/77c34c-e460-405f-954e-f641422121d2/1/G1ODFvaFKl08opH096J6zyr3ibg.mft
rsync://rpki.ripe.net/repository/DEFAULT/G1ODFvaFKl08opH096J6zyr3ibg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 22:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e4:e3:bd:27:19:8a:d7:50:e3:a6:25:ee:fb:80:6c:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b538316f6852a5d3ca291f4f7a27acf2af789b8
Validity
Not Before: Sep 27 22:02:05 2026 GMT
Not After : Sep 28 22:02:05 2026 GMT
Subject: CN=dae640b88711f58ac8d2aacec98bac310b3d77d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c7:4d:6f:c0:cd:00:2e:2f:3b:4f:69:96:ee:
c1:40:34:c2:94:13:78:e7:e1:65:e1:60:50:99:41:
ca:3d:20:9c:b0:1b:00:9d:25:30:a1:67:a3:5d:19:
33:a5:f3:46:65:12:b4:84:18:58:b2:56:14:02:b1:
7d:e8:93:44:52:6f:f3:15:87:50:10:8b:ef:7e:e6:
ca:3c:c0:2a:ff:2d:e6:bd:db:5d:ed:7a:3d:ef:ed:
b7:86:38:e1:e5:6e:65:45:71:38:74:eb:22:18:10:
6c:6d:1b:26:7a:40:69:88:35:56:7c:3f:e4:eb:e5:
4b:32:36:af:fc:98:27:cd:55:ce:77:2d:55:61:c2:
11:b8:ba:a4:29:5b:a5:55:44:f9:fb:33:1a:ff:ce:
67:5b:b5:99:69:40:eb:6f:04:91:64:d4:d6:75:29:
81:77:61:64:cd:27:0d:b2:ee:d9:bb:12:2b:6b:92:
8e:ee:17:1f:08:6d:63:b4:fa:e6:8c:32:c4:a8:ae:
ae:4d:ab:0b:0c:24:26:49:3b:8c:27:af:1e:bd:63:
26:7a:15:8c:29:88:bb:20:3f:ca:0b:1e:77:c3:59:
68:dc:20:07:9c:da:05:bf:f2:64:3a:b3:58:78:26:
18:dc:32:c9:22:59:91:a0:7a:84:51:61:3b:07:f8:
59:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:E6:40:B8:87:11:F5:8A:C8:D2:AA:CE:C9:8B:AC:31:0B:3D:77:D1
X509v3 Authority Key Identifier:
keyid:1B:53:83:16:F6:85:2A:5D:3C:A2:91:F4:F7:A2:7A:CF:2A:F7:89:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G1ODFvaFKl08opH096J6zyr3ibg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/77c34c-e460-405f-954e-f641422121d2/1/G1ODFvaFKl08opH096J6zyr3ibg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/77c34c-e460-405f-954e-f641422121d2/1/G1ODFvaFKl08opH096J6zyr3ibg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:b5:d4:a5:1b:e0:44:df:0b:86:46:f1:3e:9a:e6:05:69:5e:
cc:49:44:92:a5:1d:b6:43:33:72:91:f9:19:99:b9:de:27:cf:
0b:5d:2e:88:be:1e:17:34:5d:af:84:97:6d:d4:02:e1:ae:09:
f4:e6:6f:71:92:04:82:69:1d:b7:30:08:f4:0e:44:c2:c0:a3:
76:6f:4a:d2:e0:e8:98:17:32:0b:c3:e1:ea:01:77:e8:bc:cb:
1b:94:a9:68:43:cc:cc:14:e7:8d:e7:90:01:bd:3d:ea:98:ba:
08:51:c9:18:24:a7:da:b6:c2:ba:fe:ac:4b:94:d6:af:2d:06:
7e:dc:2b:ab:30:f8:b1:e9:db:c6:3e:1a:1d:96:32:f9:7e:ff:
eb:bb:71:76:c4:f5:c3:42:58:42:47:7b:c6:a5:44:8f:b0:1b:
8f:a9:28:96:ce:4f:75:f5:8a:27:74:3c:55:82:5b:64:d2:74:
fb:a0:63:14:e8:75:25:e6:37:aa:0a:70:e0:f9:21:81:87:29:
07:8d:9f:4a:a8:04:19:b9:08:02:b0:aa:4d:a0:f2:17:a8:0d:
18:95:21:2f:59:69:b2:bc:ae:cb:b7:a2:e5:30:cf:68:86:3c:
56:09:f6:0d:f8:87:68:b7:bf:d6:c0:28:94:d3:fd:2e:68:a5:
6e:d5:f1:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 06:10:37 2026 by rpki-client