Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/1972a2-3b6f-4316-ab7e-a0bcc912d735/1/G-o-mbuw3aeAhCGaYTSS5ebZtFo.mft
File: G-o-mbuw3aeAhCGaYTSS5ebZtFo.mft (raw, json)
Hash identifier: Uys6cQSrBmjnLCEPOh5+M3YLfUkvhnQUwweQCaV2+nw=
Subject key identifier: 97:C4:59:00:84:E1:67:E0:44:FC:E4:F3:BD:A7:13:4C:94:A3:90:36
Authority key identifier: 1B:EA:3E:99:BB:B0:DD:A7:80:84:21:9A:61:34:92:E5:E6:D9:B4:5A
Certificate issuer: /CN=1bea3e99bbb0dda78084219a613492e5e6d9b45a
Certificate serial: 01A0D5A69DA316FAE2B93F94504F1AB4AA42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-o-mbuw3aeAhCGaYTSS5ebZtFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/1972a2-3b6f-4316-ab7e-a0bcc912d735/1/G-o-mbuw3aeAhCGaYTSS5ebZtFo.mft
Manifest number: 0524
Signing time: Thu 24 Sep 2026 23:01:01 +0000
Manifest this update: Thu 24 Sep 2026 23:01:01 +0000
Manifest next update: Fri 25 Sep 2026 23:01:01 +0000
Files and hashes: 1: G-o-mbuw3aeAhCGaYTSS5ebZtFo.crl (hash: d7JDJQZzPDnxrW2JFX3h3Q7OFjzS5h+Ldg5htQhM+OI=)
2: gKtJxrK81I9Dyc2P943nU7n_NFg.roa (hash: FbX29T2UzXYU9Jzwc1cwk5IktOA+UziqBTJuxuNpfOg=)
3: mNtB-xH-QhdKLqJsjGj6xp9WKiw.roa (hash: hEJab2DxVlPrR69lL6u2AYQEme1levJMaPuY085myQg=)
4: rgz-y7ThQzU-4VqCfX9Ota3d-p0.roa (hash: piFE9GnT4z5N6g/l0DAbRB4nCDUBJdWgytzAmBqGihU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/1972a2-3b6f-4316-ab7e-a0bcc912d735/1/G-o-mbuw3aeAhCGaYTSS5ebZtFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/1972a2-3b6f-4316-ab7e-a0bcc912d735/1/G-o-mbuw3aeAhCGaYTSS5ebZtFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-o-mbuw3aeAhCGaYTSS5ebZtFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:a6:9d:a3:16:fa:e2:b9:3f:94:50:4f:1a:b4:aa:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bea3e99bbb0dda78084219a613492e5e6d9b45a
Validity
Not Before: Sep 24 23:01:01 2026 GMT
Not After : Sep 25 23:01:01 2026 GMT
Subject: CN=97c4590084e167e044fce4f3bda7134c94a39036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:78:24:2b:0a:78:64:7c:5a:ef:7e:2f:81:ac:
2e:5d:a6:48:a2:1b:60:18:33:5e:12:45:f0:e6:b7:
3e:bf:6e:48:da:5c:ba:d4:d4:c2:c5:82:24:82:c1:
7d:b7:77:df:c4:50:13:c0:86:30:fa:ed:34:af:ab:
02:6a:b7:ac:af:45:72:6a:a4:a9:85:64:b3:34:b6:
58:8b:15:2a:34:dd:0a:45:c7:c1:a0:e6:7b:d4:e7:
61:3f:43:6b:ce:41:d3:d7:9c:dc:d4:00:cc:d7:95:
9e:d9:44:a5:ef:4d:86:35:db:b7:fc:87:d3:d3:7a:
fb:9e:1b:64:a9:6e:fc:33:55:bf:6f:40:a1:81:38:
1d:24:be:b9:97:24:d0:55:ad:30:d5:40:4e:47:d5:
c2:70:dc:7c:af:50:5e:e6:42:aa:6a:dc:b0:e0:4a:
9f:53:95:bf:a4:e1:06:ce:3e:19:d1:e1:c5:ef:08:
de:1b:40:4f:8d:49:a8:14:51:04:ce:73:94:ce:92:
19:42:8e:1f:30:29:7f:e7:ae:c9:6c:bd:28:9c:78:
02:58:b1:b5:6a:af:d3:2d:03:d9:dc:4d:4f:f7:f6:
53:a6:34:d4:65:0f:d2:95:73:3d:d5:47:2b:f6:ae:
cb:a4:68:c6:00:a0:ca:6d:2f:23:91:d3:a5:dc:79:
43:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:C4:59:00:84:E1:67:E0:44:FC:E4:F3:BD:A7:13:4C:94:A3:90:36
X509v3 Authority Key Identifier:
keyid:1B:EA:3E:99:BB:B0:DD:A7:80:84:21:9A:61:34:92:E5:E6:D9:B4:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-o-mbuw3aeAhCGaYTSS5ebZtFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/1972a2-3b6f-4316-ab7e-a0bcc912d735/1/G-o-mbuw3aeAhCGaYTSS5ebZtFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/1972a2-3b6f-4316-ab7e-a0bcc912d735/1/G-o-mbuw3aeAhCGaYTSS5ebZtFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:f8:7e:d7:a9:a3:d9:a3:a9:cb:66:d9:94:99:cc:2f:57:e7:
a8:ca:b3:0c:2a:5c:c8:30:8c:00:bb:36:c8:29:95:8d:6f:4e:
51:ad:4e:19:7d:ee:25:26:3e:c0:c8:47:f3:84:e5:d1:81:8f:
0c:1e:c0:a2:ef:21:bf:8e:16:db:cc:81:57:96:2e:4d:62:6f:
0c:4c:2e:9f:dc:6e:ca:d1:77:f1:c7:29:98:54:8a:95:ec:0c:
0e:f6:e9:2f:ca:85:f8:18:55:bd:11:99:ed:13:9c:6f:ab:e7:
44:eb:9e:87:37:7c:ed:a4:f0:c9:4a:b7:88:2b:65:a5:0f:29:
b3:48:d6:1e:9f:83:09:be:0e:57:fd:05:f8:92:3a:42:69:a5:
d8:8b:8b:5c:62:59:81:25:9e:d8:21:d1:67:ac:de:12:bb:ce:
cf:cf:82:5c:35:1e:7d:47:ad:bd:4f:e6:96:b6:31:07:31:4a:
82:6c:c3:79:76:96:b0:f6:f9:35:95:33:59:d3:51:4f:4f:69:
e3:70:c9:1f:05:b9:98:40:10:29:6d:1c:66:c2:e7:83:46:4a:
b4:32:aa:e3:b1:5b:5d:57:93:f1:32:f6:d9:25:9b:4a:71:aa:
31:85:5c:10:63:bb:99:d3:b2:67:70:71:04:5b:9f:08:43:40:
9c:46:13:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 10:54:47 2026 by rpki-client