Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/77c34c-e460-405f-954e-f641422121d2/1/G1ODFvaFKl08opH096J6zyr3ibg.mft
File: G1ODFvaFKl08opH096J6zyr3ibg.mft (raw, json)
Hash identifier: vL4BeizPHOySNfzlDkDZT4+0rcdxiFAbL+A5oubAr2s=
Subject key identifier: DA:A7:48:92:19:2B:9C:30:AA:0B:21:D6:EF:37:B1:26:CB:1E:9A:95
Authority key identifier: 1B:53:83:16:F6:85:2A:5D:3C:A2:91:F4:F7:A2:7A:CF:2A:F7:89:B8
Certificate issuer: /CN=1b538316f6852a5d3ca291f4f7a27acf2af789b8
Certificate serial: 019F8F105515304A3E335846C27EA52E8C83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G1ODFvaFKl08opH096J6zyr3ibg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/77c34c-e460-405f-954e-f641422121d2/1/G1ODFvaFKl08opH096J6zyr3ibg.mft
Manifest number: 0199
Signing time: Thu 23 Jul 2026 13:00:39 +0000
Manifest this update: Thu 23 Jul 2026 13:00:39 +0000
Manifest next update: Fri 24 Jul 2026 13:00:39 +0000
Files and hashes: 1: 3Vfs46JpS4OIv6juqlsavP8vJjY.asa (hash: sB2s+Xl9S1p4i5AWfMPlsofSMh8d6xFVYKGmtBeEpqw=)
2: G1ODFvaFKl08opH096J6zyr3ibg.crl (hash: Dm5Vraa2cxkC9FQSIjzK61PRRV9NnF2TP8nrL0BWT8k=)
3: pO4-6JRTb_iUQ3eGXntbc3yEu38.roa (hash: 1+fcU0cN2SSHn14oJqXDeRbJ3y0/io2Qni1kI8nGGxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/77c34c-e460-405f-954e-f641422121d2/1/G1ODFvaFKl08opH096J6zyr3ibg.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/77c34c-e460-405f-954e-f641422121d2/1/G1ODFvaFKl08opH096J6zyr3ibg.mft
rsync://rpki.ripe.net/repository/DEFAULT/G1ODFvaFKl08opH096J6zyr3ibg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:10:55:15:30:4a:3e:33:58:46:c2:7e:a5:2e:8c:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b538316f6852a5d3ca291f4f7a27acf2af789b8
Validity
Not Before: Jul 23 13:00:39 2026 GMT
Not After : Jul 24 13:00:39 2026 GMT
Subject: CN=daa74892192b9c30aa0b21d6ef37b126cb1e9a95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:1a:0f:ec:e2:37:4e:0d:4f:14:75:03:bf:d7:
01:ab:12:b1:db:ec:07:b1:6c:f0:33:29:7f:34:89:
2e:bd:50:a7:58:c0:cc:a6:42:74:70:07:a8:45:bc:
c1:f2:eb:9b:7b:f7:f3:40:28:d5:37:b8:ba:ff:6f:
63:65:ef:a9:96:20:16:f4:d6:55:a0:c8:06:87:90:
63:d4:5f:98:2e:d7:39:22:ab:ad:4b:43:99:b9:0d:
be:89:ce:8a:dd:37:4f:4a:d5:4f:34:fd:22:ef:72:
aa:4e:35:91:7e:e6:8c:0e:39:e8:f1:64:ac:ac:fd:
37:be:43:0f:c2:a4:a5:b5:8d:11:04:f3:a6:47:d4:
1e:65:37:e4:ca:79:09:ad:10:db:59:bd:ac:20:cf:
76:74:9b:c5:cc:89:1a:da:9f:11:17:11:47:98:71:
70:2c:11:3b:1f:88:2d:93:5f:d0:7c:79:c1:c1:93:
a8:d6:cb:4c:eb:e6:01:b1:f4:4a:7f:a9:87:22:e6:
0f:b5:fb:79:73:d2:6e:cd:f5:a6:5c:54:7a:78:f8:
54:8f:7d:72:f4:6c:07:01:83:26:6d:76:f8:e4:e7:
c1:a0:f2:5a:05:72:c0:ff:33:42:1b:b5:3d:0b:a5:
2c:16:c8:92:b3:02:c0:69:13:17:ed:3e:0a:2c:ed:
ad:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:A7:48:92:19:2B:9C:30:AA:0B:21:D6:EF:37:B1:26:CB:1E:9A:95
X509v3 Authority Key Identifier:
keyid:1B:53:83:16:F6:85:2A:5D:3C:A2:91:F4:F7:A2:7A:CF:2A:F7:89:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G1ODFvaFKl08opH096J6zyr3ibg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/77c34c-e460-405f-954e-f641422121d2/1/G1ODFvaFKl08opH096J6zyr3ibg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/77c34c-e460-405f-954e-f641422121d2/1/G1ODFvaFKl08opH096J6zyr3ibg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:62:99:94:a4:8d:f6:cc:8e:f2:51:9d:62:33:2d:66:69:72:
5e:52:93:bd:95:34:ae:25:51:32:2f:9e:f7:11:a0:55:4a:33:
89:0d:1e:8a:40:ac:e4:fe:a3:c1:27:6c:63:44:e7:4b:2f:ed:
fb:42:3f:1f:38:66:68:96:b0:19:b4:e0:04:9c:52:e8:30:62:
16:d5:d0:da:f6:81:42:46:ed:82:6a:9f:00:00:a8:d9:b2:1c:
c5:d0:7e:60:4a:9e:84:3e:30:df:27:08:a9:bf:d7:a0:9f:30:
1a:2c:1e:81:bc:b7:30:19:a3:0b:85:03:da:97:0b:3e:7d:8b:
00:51:43:5c:e8:27:bb:18:35:ad:90:cb:c6:42:e1:1e:08:50:
dd:c4:35:11:2d:a6:d3:a2:ac:40:d2:2f:35:7b:bd:6f:28:25:
fa:09:a5:95:8c:76:cb:ae:3a:23:df:ee:85:e3:c8:31:53:55:
eb:95:0a:98:6d:ed:89:57:77:04:19:25:39:f7:8c:e8:9a:30:
e4:b5:51:45:0b:76:a2:de:e1:e2:0a:3c:95:84:6b:66:a4:77:
42:89:42:8a:be:0b:da:f2:fe:c7:27:2e:8f:7d:99:7f:13:9a:
08:32:71:79:a5:92:27:fc:20:64:64:72:56:59:c9:6c:8a:18:
07:ae:85:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:57:52 2026 by rpki-client