Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/g5gORnj87fIiN5FtOxFASJ5QStg.mft
File: g5gORnj87fIiN5FtOxFASJ5QStg.mft (raw, json)
Hash identifier: u6psYwx38e2uyKOc33xLIo37i0rUhY70BjsEH/4NCUI=
Subject key identifier: 62:DD:94:0B:62:1E:50:C7:83:18:49:E2:93:EB:95:7F:17:A4:FA:BE
Authority key identifier: 83:98:0E:46:78:FC:ED:F2:22:37:91:6D:3B:11:40:48:9E:50:4A:D8
Certificate issuer: /CN=83980e4678fcedf22237916d3b1140489e504ad8
Certificate serial: 019F916C4C2853C216FEA269434166CB4C33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g5gORnj87fIiN5FtOxFASJ5QStg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/g5gORnj87fIiN5FtOxFASJ5QStg.mft
Manifest number: 40
Signing time: Fri 24 Jul 2026 00:00:21 +0000
Manifest this update: Fri 24 Jul 2026 00:00:21 +0000
Manifest next update: Sat 25 Jul 2026 00:00:21 +0000
Files and hashes: 1: KES46lk8wU4dhFv89NhcKEmi-vM.roa (hash: sSJndlld1sP0Se7NuGKbaMt7Q9VWzKyrrn6CaglRzow=)
2: dxkbbmxX8WMKJH5WhnQ57-p4X90.roa (hash: i6/kNCYkfe+S16lTl6/WYXB9fGMN9TWf4ZsR+HsilEU=)
3: g5gORnj87fIiN5FtOxFASJ5QStg.crl (hash: taEzyiQFM8pcLirPWHpGrUfLSGVrs6q7XybwHOJcl2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/g5gORnj87fIiN5FtOxFASJ5QStg.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/g5gORnj87fIiN5FtOxFASJ5QStg.mft
rsync://rpki.ripe.net/repository/DEFAULT/g5gORnj87fIiN5FtOxFASJ5QStg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:4c:28:53:c2:16:fe:a2:69:43:41:66:cb:4c:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83980e4678fcedf22237916d3b1140489e504ad8
Validity
Not Before: Jul 24 00:00:21 2026 GMT
Not After : Jul 25 00:00:21 2026 GMT
Subject: CN=62dd940b621e50c7831849e293eb957f17a4fabe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:57:0f:ed:52:40:e8:e9:9e:af:c6:0b:ca:41:
29:e9:32:c9:08:71:0d:74:9a:7a:93:11:67:df:e2:
e7:06:0f:34:a0:05:be:ca:5a:0e:2d:04:25:af:09:
ec:81:60:7b:01:7b:6f:ad:ae:82:ea:db:2d:9a:6a:
1e:9d:dc:dc:95:bb:4e:c8:70:0c:48:08:7b:53:4e:
45:69:80:1c:da:d6:11:0f:cc:e8:7d:92:6d:28:71:
29:8b:91:87:8e:aa:76:66:9e:0f:b8:3b:57:14:a7:
ad:d7:fb:77:a4:fc:d2:ff:12:3b:b7:6a:4c:95:8e:
58:74:65:1e:94:0a:5c:17:46:3d:e0:34:25:7f:a1:
6f:c7:9e:c7:ea:77:e1:55:bb:b1:3b:62:55:4b:a3:
99:6a:7e:60:46:c4:be:e0:f5:a9:63:50:fd:b9:3d:
ce:f5:3c:d0:b0:bb:d4:29:05:68:ec:98:8a:8f:23:
00:2b:6e:90:f6:5c:b4:70:83:49:8c:f3:72:f2:08:
bd:22:9b:a2:aa:e4:47:01:fb:43:94:7a:ec:30:74:
f8:db:92:91:1a:95:2d:6e:29:7b:bc:be:5c:21:6f:
eb:86:a3:3f:09:24:06:de:2c:fa:f2:a5:ae:c3:2c:
67:de:8b:c2:26:29:dd:f9:a9:c3:59:f1:81:b6:a4:
90:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:DD:94:0B:62:1E:50:C7:83:18:49:E2:93:EB:95:7F:17:A4:FA:BE
X509v3 Authority Key Identifier:
keyid:83:98:0E:46:78:FC:ED:F2:22:37:91:6D:3B:11:40:48:9E:50:4A:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5gORnj87fIiN5FtOxFASJ5QStg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/g5gORnj87fIiN5FtOxFASJ5QStg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/g5gORnj87fIiN5FtOxFASJ5QStg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:84:f1:53:5e:b0:ab:92:ef:05:80:b7:93:0b:21:12:05:b3:
6c:f0:14:c1:46:dd:32:a2:2b:41:a2:04:0b:be:36:39:46:3e:
45:02:ad:81:68:b3:d1:f9:fc:9c:c1:dd:76:2f:aa:de:64:fe:
58:ac:f9:c9:0b:73:f4:cb:86:b9:de:69:56:eb:bd:cb:a0:36:
ce:5c:fb:f9:b9:6c:db:92:b1:23:35:f8:51:57:82:8e:6c:52:
f5:3d:e2:3a:13:a6:2a:e4:6a:37:46:96:ea:f1:d9:8e:c6:58:
c1:48:92:84:5a:e9:bf:03:fd:6e:fc:83:be:f2:b3:0b:9e:25:
ab:12:83:f0:74:3e:58:4a:08:1d:25:42:90:eb:2d:22:cd:84:
b4:20:50:0a:2f:a5:cb:e2:13:1e:26:42:4d:9e:a0:9c:c7:31:
f1:e9:f6:e7:3c:2d:37:4d:6d:fa:1b:1b:9a:2c:d0:f7:64:cb:
8c:1b:93:7c:bd:07:ba:d3:0c:56:7c:e4:95:48:7d:44:90:1f:
a6:30:86:ee:0a:d9:bb:df:a3:bf:ae:fb:9b:c9:dd:ea:69:8e:
96:51:c4:5d:1c:64:ee:8e:69:08:8c:44:52:5e:c9:9f:84:84:
f0:e2:89:cb:10:a3:04:16:1e:04:fe:69:c9:f3:70:3e:f8:aa:
1a:91:1f:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:31:34 2026 by rpki-client