Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.mft
File: G_FOjQs977AwQnATDRFHrg3ZLYs.mft (raw, json)
Hash identifier: JigmMGE7Aa9SbcLe9LMSvhFP4RYvE/J12KeQOWqQfJU=
Subject key identifier: 32:E0:2C:A0:A1:15:E5:20:F6:85:6D:7F:68:66:D6:63:97:DC:19:CE
Authority key identifier: 1B:F1:4E:8D:0B:3D:EF:B0:30:42:70:13:0D:11:47:AE:0D:D9:2D:8B
Certificate issuer: /CN=1bf14e8d0b3defb0304270130d1147ae0dd92d8b
Certificate serial: 019D2771CCA0BFBC5377B421E700CDE5D767
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_FOjQs977AwQnATDRFHrg3ZLYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.mft
Manifest number: 0B7E
Signing time: Thu 26 Mar 2026 00:01:02 +0000
Manifest this update: Thu 26 Mar 2026 00:01:02 +0000
Manifest next update: Fri 27 Mar 2026 00:01:02 +0000
Files and hashes: 1: G_FOjQs977AwQnATDRFHrg3ZLYs.crl (hash: gyJ4u+30xqExI7K26BJqjy37C2j79NBzH3hX9/aDLdc=)
2: HM3veogcFYi0WJB7lr909iQ8ZfQ.roa (hash: rEWeHfmczSgGJR8/ER5dg8E/KF7D8W9GBFoejJSi06I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/G_FOjQs977AwQnATDRFHrg3ZLYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:cc:a0:bf:bc:53:77:b4:21:e7:00:cd:e5:d7:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bf14e8d0b3defb0304270130d1147ae0dd92d8b
Validity
Not Before: Mar 26 00:01:02 2026 GMT
Not After : Mar 27 00:01:02 2026 GMT
Subject: CN=32e02ca0a115e520f6856d7f6866d66397dc19ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:66:86:73:93:96:98:05:e7:9a:c6:20:15:53:
34:d6:f6:eb:f7:28:84:a7:b1:b1:88:f9:18:71:16:
b2:cb:65:bd:4f:15:dc:09:e0:09:4f:bb:1a:7b:60:
09:a3:b6:b3:4a:33:5b:e0:79:73:84:12:b5:c2:ed:
81:30:7b:4d:57:79:42:64:47:cd:84:62:7a:5d:3c:
aa:3d:b8:8b:97:3d:f7:f1:44:b4:a6:99:4c:4d:25:
60:e3:98:ff:ae:cb:5b:ca:42:48:0a:dc:c4:ae:d8:
e2:e2:b5:34:1a:b4:12:bb:ec:e5:a8:32:fc:f9:e2:
ba:81:b7:51:bd:1a:19:a4:d1:b7:d2:2f:31:db:75:
f7:3b:14:71:1b:8d:82:ed:0d:a1:f8:0d:2b:56:08:
1b:60:e0:1e:dd:e0:0b:cd:df:8a:8c:a6:f5:87:03:
2d:6d:4e:ae:11:61:e3:25:27:8a:cd:cb:d4:2e:ba:
85:16:83:a7:18:91:c8:25:3e:77:96:ea:8c:a6:cd:
c9:12:14:10:44:97:f8:c4:ac:bb:89:ca:39:ab:89:
7e:70:78:e1:5b:9b:73:00:9d:c6:56:8b:29:36:b2:
a7:d4:34:e3:20:e7:66:34:61:e7:bb:d6:8b:d0:17:
9b:24:5b:d5:67:f3:89:10:2b:2c:a5:b6:36:2c:1c:
33:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:E0:2C:A0:A1:15:E5:20:F6:85:6D:7F:68:66:D6:63:97:DC:19:CE
X509v3 Authority Key Identifier:
keyid:1B:F1:4E:8D:0B:3D:EF:B0:30:42:70:13:0D:11:47:AE:0D:D9:2D:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_FOjQs977AwQnATDRFHrg3ZLYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:14:c6:92:b6:16:98:19:7d:ec:88:a9:50:a7:96:fc:c9:65:
03:16:36:2c:e0:4d:28:47:b7:58:f8:c2:8c:54:6b:ad:0d:29:
19:a0:a2:54:2e:14:01:af:d8:d9:9f:de:24:97:19:c7:b3:f9:
64:63:27:dd:d1:5c:35:d3:d1:29:27:07:dd:7c:72:f8:c7:ee:
be:c9:b8:52:b1:cd:6f:b7:b4:e8:3f:98:bb:c8:22:ad:dd:15:
a1:68:3c:1b:b9:94:6d:d6:00:a2:40:36:6d:88:68:65:21:39:
6e:c9:a5:de:ab:aa:95:30:65:bc:c9:16:ae:b2:72:23:cd:6f:
d2:1c:0f:f1:1d:da:ae:ad:7b:53:21:4c:11:f4:bc:7e:b6:16:
c0:f0:51:b4:f8:d2:e5:33:30:42:f7:02:75:82:4c:c4:7c:97:
f5:00:26:c2:8c:67:85:53:e3:7f:59:6e:f0:ff:2d:ac:7e:3f:
3c:46:56:ab:7b:2d:0d:f3:ed:7a:92:57:11:b4:28:c7:16:ca:
99:8f:d4:69:3c:9a:fa:04:5f:2c:10:51:45:c1:a8:5a:38:8c:
b8:7e:09:d8:cf:fb:5f:c9:68:71:60:60:df:54:05:54:59:c7:
49:0a:a8:9d:4b:6e:63:fb:9b:0f:98:bf:dd:8f:36:8f:b4:16:
fa:11:de:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:59:28 2026 by rpki-client