Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.mft
File: G_x3OM0P0OBEf510nOajkEf9y6w.mft (raw, json)
Hash identifier: STUdib8zs0UZrFtsiD83Qx3EllPH0cGpJvnu7YjnuKI=
Subject key identifier: E2:E9:B2:5A:0B:F8:74:0C:BC:6A:8D:93:A0:BD:44:63:22:6E:09:36
Authority key identifier: 1B:FC:77:38:CD:0F:D0:E0:44:7F:9D:74:9C:E6:A3:90:47:FD:CB:AC
Certificate issuer: /CN=1bfc7738cd0fd0e0447f9d749ce6a39047fdcbac
Certificate serial: 019E1EDA35A2A4ABA22AE6694328DACE85BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_x3OM0P0OBEf510nOajkEf9y6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.mft
Manifest number: 1907
Signing time: Wed 13 May 2026 01:01:17 +0000
Manifest this update: Wed 13 May 2026 01:01:17 +0000
Manifest next update: Thu 14 May 2026 01:01:17 +0000
Files and hashes: 1: 2VcsFpRmgA_Z1BeWY4uxeTXBUVc.roa (hash: mUnxfErIPYDX4fuBIeMZdyj/2aTN4t69gc8x5SXXjwg=)
2: G_x3OM0P0OBEf510nOajkEf9y6w.crl (hash: CFU1TLHZCuSErzs6iiSGzW7XqoNqgshdzhlyL5JjlCs=)
3: bU_6jYeoULQ5cmwXMFiWLFBuBqw.roa (hash: RO8BXt2ZgZKfrDL72bFJWFqlC3jg76pa5ceJ9+7Pztg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/G_x3OM0P0OBEf510nOajkEf9y6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:da:35:a2:a4:ab:a2:2a:e6:69:43:28:da:ce:85:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bfc7738cd0fd0e0447f9d749ce6a39047fdcbac
Validity
Not Before: May 13 01:01:17 2026 GMT
Not After : May 14 01:01:17 2026 GMT
Subject: CN=e2e9b25a0bf8740cbc6a8d93a0bd4463226e0936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:86:96:b3:af:39:22:04:0a:60:7c:46:a3:9a:
77:8e:78:cb:e6:11:59:15:fd:14:32:41:bf:2c:ab:
a3:a7:2b:7a:6d:d5:2a:8e:89:71:2d:97:ec:ac:6b:
92:b5:9e:e5:1b:c5:c9:83:bc:56:9f:ae:17:8e:e0:
0e:e1:db:eb:f0:ba:62:31:98:61:5d:3c:15:07:92:
14:06:bc:b6:a9:e4:69:5c:50:4a:b6:f8:04:5f:e3:
96:90:85:46:7a:e4:0e:70:f5:4e:e9:40:f3:40:b2:
ed:c6:f4:93:97:9b:dc:61:7b:27:6c:ac:5c:86:3a:
e0:f0:67:f7:a8:43:63:6f:06:43:5a:bd:3f:f1:48:
4b:4f:ab:05:f0:10:c5:9a:50:1d:df:51:7d:f7:cb:
05:e0:05:34:db:4f:c1:b4:64:e1:81:e5:08:01:4d:
51:39:d9:12:4a:9d:53:6e:de:e9:30:f4:23:45:35:
fa:02:28:61:b9:4c:a9:0d:02:34:aa:4d:c9:58:5e:
ff:d6:1b:5f:b7:6a:35:22:05:4a:3a:51:1a:2c:aa:
b0:88:d7:1e:e8:7a:9d:a2:13:f2:be:52:e8:9e:21:
8a:26:74:7c:96:a1:21:3b:d7:e9:f0:86:96:9b:07:
3e:7a:cf:9d:0b:4f:49:d9:90:6c:8e:7f:ce:bf:1e:
c3:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:E9:B2:5A:0B:F8:74:0C:BC:6A:8D:93:A0:BD:44:63:22:6E:09:36
X509v3 Authority Key Identifier:
keyid:1B:FC:77:38:CD:0F:D0:E0:44:7F:9D:74:9C:E6:A3:90:47:FD:CB:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_x3OM0P0OBEf510nOajkEf9y6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:44:da:e6:51:09:7b:ad:c3:8f:e9:93:24:8c:06:1a:0f:28:
46:32:fc:51:e5:67:3b:f0:4d:05:fe:f6:93:55:bf:aa:c9:6d:
bb:d6:fb:b3:4d:0d:34:bb:90:7b:45:de:a4:71:4e:49:7e:67:
d3:39:27:19:39:19:62:0e:c0:7f:93:09:68:4a:f2:eb:6b:d3:
e9:ba:5f:35:2e:6d:d8:7a:6f:a3:3a:27:1d:6f:ad:31:1f:56:
2e:21:cc:29:8f:1d:31:9c:10:7e:ce:6e:e4:85:70:b0:a4:89:
8d:52:f0:cd:0d:02:89:5a:a8:f1:74:88:90:ec:14:05:2a:b5:
59:e9:2e:cf:11:eb:24:e4:20:c4:27:1e:45:fe:d4:9c:10:4a:
41:ae:24:e3:ed:16:ca:b9:0d:af:48:2d:cf:f6:0d:09:43:ac:
9b:46:bc:8f:19:d9:72:4e:1b:f5:97:b1:f9:6e:d1:53:3b:7b:
21:ff:be:a4:73:49:20:b7:08:67:6f:88:95:97:87:8b:a7:fd:
b6:8e:41:b5:65:b0:8f:c4:08:cb:b5:ed:3c:f4:d8:ef:56:5b:
2d:c4:e9:43:1b:cb:07:6f:7f:fc:14:67:41:e7:1f:d9:05:d6:
9b:b5:dd:87:0a:37:d5:d9:50:e7:98:63:9e:66:ac:87:83:f8:
2d:e7:c2:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4e2jWipKuiKuZpQyjazoW9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiZmM3NzM4Y2QwZmQwZTA0NDdmOWQ3NDljZTZhMzkwNDdm
ZGNiYWMwHhcNMjYwNTEzMDEwMTE3WhcNMjYwNTE0MDEwMTE3WjAzMTEwLwYDVQQD
EyhlMmU5YjI1YTBiZjg3NDBjYmM2YThkOTNhMGJkNDQ2MzIyNmUwOTM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoaWs685IgQKYHxGo5p3jnjL5hFZ
Ff0UMkG/LKujpyt6bdUqjolxLZfsrGuStZ7lG8XJg7xWn64XjuAO4dvr8LpiMZhh
XTwVB5IUBry2qeRpXFBKtvgEX+OWkIVGeuQOcPVO6UDzQLLtxvSTl5vcYXsnbKxc
hjrg8Gf3qENjbwZDWr0/8UhLT6sF8BDFmlAd31F998sF4AU020/BtGThgeUIAU1R
OdkSSp1Tbt7pMPQjRTX6AihhuUypDQI0qk3JWF7/1htft2o1IgVKOlEaLKqwiNce
6HqdohPyvlLoniGKJnR8lqEhO9fp8IaWmwc+es+dC09J2ZBsjn/Ovx7DsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOLpsloL+HQMvGqNk6C9RGMibgk2MB8GA1UdIwQY
MBaAFBv8dzjND9DgRH+ddJzmo5BH/cusMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR194M09NMFAwT0JFZjUxMG5PYWprRWY5eTZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS83MDhiNGQtYTYzZi00MzlkLTljY2Ut
MTQ4YWJmZjkxOWFkLzEvR194M09NMFAwT0JFZjUxMG5PYWprRWY5eTZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS83MDhiNGQtYTYzZi00MzlkLTljY2UtMTQ4YWJmZjkxOWFk
LzEvR194M09NMFAwT0JFZjUxMG5PYWprRWY5eTZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWUTa5lEJ
e63Dj+mTJIwGGg8oRjL8UeVnO/BNBf72k1W/qsltu9b7s00NNLuQe0XepHFOSX5n
0zknGTkZYg7Af5MJaEry62vT6bpfNS5t2HpvozonHW+tMR9WLiHMKY8dMZwQfs5u
5IVwsKSJjVLwzQ0CiVqo8XSIkOwUBSq1WekuzxHrJOQgxCceRf7UnBBKQa4k4+0W
yrkNr0gtz/YNCUOsm0a8jxnZck4b9Zex+W7RUzt7If++pHNJILcIZ2+IlZeHi6f9
to5BtWWwj8QIy7XtPPTY71ZbLcTpQxvLB29//BRnQecf2QXWm7Xdhwo31dlQ55hj
nmash4P4LefCKQ==
-----END CERTIFICATE-----
Generated at Wed May 13 05:13:30 2026 by rpki-client