Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.mft
File: G_FOjQs977AwQnATDRFHrg3ZLYs.mft (raw, json)
Hash identifier: aYOQnhqU7hL1yM0a+c0c3fR9iIcQAunwbufvPdgr7CQ=
Subject key identifier: 4E:6A:62:82:F3:6F:F2:03:93:6F:6D:EE:2E:5E:6B:32:99:43:C0:B0
Authority key identifier: 1B:F1:4E:8D:0B:3D:EF:B0:30:42:70:13:0D:11:47:AE:0D:D9:2D:8B
Certificate issuer: /CN=1bf14e8d0b3defb0304270130d1147ae0dd92d8b
Certificate serial: 01A0D91721B87764EE5E69AB9A789AF3BB63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_FOjQs977AwQnATDRFHrg3ZLYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.mft
Manifest number: 0D69
Signing time: Fri 25 Sep 2026 15:02:46 +0000
Manifest this update: Fri 25 Sep 2026 15:02:46 +0000
Manifest next update: Sat 26 Sep 2026 15:02:46 +0000
Files and hashes: 1: G_FOjQs977AwQnATDRFHrg3ZLYs.crl (hash: hZCK01AQlAvESVcX50ELkWKIqFvrMAZs6CvUcuME69s=)
2: HM3veogcFYi0WJB7lr909iQ8ZfQ.roa (hash: rEWeHfmczSgGJR8/ER5dg8E/KF7D8W9GBFoejJSi06I=)
3: eqG_Lu9K1qeyCezwmD8iSckpXF8.roa (hash: NNiUw+36eLooMz2fegl+jBJENlw1OVfq6vuvVM1umzI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/G_FOjQs977AwQnATDRFHrg3ZLYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:17:21:b8:77:64:ee:5e:69:ab:9a:78:9a:f3:bb:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bf14e8d0b3defb0304270130d1147ae0dd92d8b
Validity
Not Before: Sep 25 15:02:46 2026 GMT
Not After : Sep 26 15:02:46 2026 GMT
Subject: CN=4e6a6282f36ff203936f6dee2e5e6b329943c0b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:91:54:8e:af:7d:ef:4f:2f:09:58:a6:d5:b5:
41:79:1d:10:e3:69:ce:ff:46:5e:75:a9:74:97:c1:
ab:45:e7:ad:60:ea:f7:14:07:c3:8a:46:db:86:e5:
af:e0:97:d0:a7:e1:e0:2a:ab:c3:c2:76:56:5c:58:
19:44:7e:16:2b:42:2f:03:f0:41:f2:11:1b:ac:34:
c9:f7:e7:3e:c1:6e:fb:60:d5:fd:c9:5f:70:81:7b:
99:28:ec:e9:2a:11:ec:3b:80:ab:cd:a1:1f:b3:69:
d7:90:d1:63:b7:63:dd:00:69:a9:fb:10:26:58:a3:
1c:e0:1b:6a:69:56:a8:0a:e0:3d:dc:cb:1e:14:eb:
c3:12:36:f6:96:05:2b:e9:85:0c:1d:50:da:33:a2:
c9:3e:23:25:5b:e9:c1:fe:b5:2a:09:32:30:15:75:
8d:21:fc:44:a0:bc:f9:65:6c:5c:98:48:e2:05:2f:
8f:03:f4:3f:a7:30:7e:d7:19:76:50:55:53:78:0c:
ee:a8:38:87:9f:4d:07:96:6f:2a:f4:49:d7:0d:cc:
fe:ab:67:5c:9b:d9:43:c9:45:d0:ca:17:5e:fa:58:
61:d4:d9:66:d0:aa:fc:f2:6b:78:be:0f:6e:4a:77:
01:4f:2c:81:66:e4:f1:7b:e6:41:07:d8:14:26:b7:
56:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:6A:62:82:F3:6F:F2:03:93:6F:6D:EE:2E:5E:6B:32:99:43:C0:B0
X509v3 Authority Key Identifier:
keyid:1B:F1:4E:8D:0B:3D:EF:B0:30:42:70:13:0D:11:47:AE:0D:D9:2D:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_FOjQs977AwQnATDRFHrg3ZLYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:26:e4:83:bb:d1:08:0f:c9:8b:c8:84:90:ec:79:d0:a3:a9:
46:59:e2:61:b1:84:18:14:ac:0c:31:82:45:55:82:90:e5:aa:
eb:30:53:97:14:59:dd:74:be:63:aa:6f:2a:a4:e1:37:5b:ba:
51:49:62:a6:ef:1d:5d:16:ce:31:a5:bd:92:ee:d3:c2:eb:86:
7a:03:16:f6:cf:23:a4:e5:8f:c6:2a:56:a7:87:fc:01:66:c0:
d6:a9:8c:e6:81:89:82:5d:cb:5a:9d:19:20:4c:7e:f9:4e:3b:
7c:4c:96:d0:3b:93:1a:41:5c:6a:6e:43:cb:61:d2:f7:d3:a7:
00:f0:6c:b1:ae:10:3f:d9:4a:77:06:55:bd:76:18:b8:2c:6f:
b2:08:46:8e:5c:ec:d6:07:57:b9:de:34:5e:f2:3f:e7:31:b2:
3e:3f:71:1e:f3:14:d4:96:c6:6f:fd:e5:fe:30:aa:c0:fe:dd:
51:f4:9e:c3:68:9a:2d:6c:8c:55:3e:e4:f2:34:83:ee:3d:ea:
0e:e1:15:70:c7:53:d3:31:31:99:3c:cf:34:f7:eb:eb:f2:6e:
67:d6:62:eb:46:d1:15:4a:91:b0:89:cf:55:cc:fd:11:bb:13:
09:ea:23:0d:c2:46:6b:62:c6:13:fe:d2:3c:78:ea:71:26:c2:
a6:86:b7:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 20:06:26 2026 by rpki-client