Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.mft
File: G_x3OM0P0OBEf510nOajkEf9y6w.mft (raw, json)
Hash identifier: +e6SK8ycW7gB2oG9mwpVyPmU5NjqRxqXCEv4B0K9/eg=
Subject key identifier: F4:04:1A:9F:D9:ED:45:6B:D4:FF:11:DD:2A:45:DC:21:2E:21:CD:4E
Authority key identifier: 1B:FC:77:38:CD:0F:D0:E0:44:7F:9D:74:9C:E6:A3:90:47:FD:CB:AC
Certificate issuer: /CN=1bfc7738cd0fd0e0447f9d749ce6a39047fdcbac
Certificate serial: 01A0D614E6DBF7C51E25E5FA8E25F3CBBE41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_x3OM0P0OBEf510nOajkEf9y6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.mft
Manifest number: 1A6F
Signing time: Fri 25 Sep 2026 01:01:28 +0000
Manifest this update: Fri 25 Sep 2026 01:01:28 +0000
Manifest next update: Sat 26 Sep 2026 01:01:28 +0000
Files and hashes: 1: 2VcsFpRmgA_Z1BeWY4uxeTXBUVc.roa (hash: mUnxfErIPYDX4fuBIeMZdyj/2aTN4t69gc8x5SXXjwg=)
2: G_x3OM0P0OBEf510nOajkEf9y6w.crl (hash: ztqwMqI0QAteshCvWbGZysSAtEyvhM7+xT+ayUM2Bts=)
3: bU_6jYeoULQ5cmwXMFiWLFBuBqw.roa (hash: RO8BXt2ZgZKfrDL72bFJWFqlC3jg76pa5ceJ9+7Pztg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/G_x3OM0P0OBEf510nOajkEf9y6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:14:e6:db:f7:c5:1e:25:e5:fa:8e:25:f3:cb:be:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bfc7738cd0fd0e0447f9d749ce6a39047fdcbac
Validity
Not Before: Sep 25 01:01:28 2026 GMT
Not After : Sep 26 01:01:28 2026 GMT
Subject: CN=f4041a9fd9ed456bd4ff11dd2a45dc212e21cd4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:03:0e:18:9a:ac:6a:88:d7:ae:51:e5:5d:c0:
da:f8:b5:df:59:0e:0e:95:f3:c7:2c:75:9b:cd:86:
14:6f:9f:7e:54:7d:4a:af:4e:29:bc:d8:ee:a5:02:
55:b9:66:ec:16:5e:d5:da:8b:fc:79:64:52:2d:9f:
c5:90:80:7e:36:0a:ec:b4:66:34:99:c5:d3:e6:57:
da:4c:b9:ab:f8:e2:aa:d7:97:85:3e:75:76:df:e7:
bf:9e:fe:7d:4f:9f:9d:c5:29:77:63:8b:6b:85:00:
6d:2a:76:79:4a:17:a9:9c:66:01:32:58:24:f2:20:
89:ca:40:68:e0:da:6b:1e:9b:56:a6:dc:f9:32:8d:
30:31:c6:d7:54:c4:7f:da:ff:0a:dd:6b:4e:2e:e0:
52:c6:5a:2e:9c:f3:34:7f:fa:d1:72:05:1d:5c:4c:
d6:8f:7c:54:a2:c1:7c:60:31:18:bd:2d:c3:71:5d:
78:52:ae:ba:d5:9c:6a:1a:70:ff:66:61:10:ab:85:
58:f8:8e:77:d7:74:54:4c:f0:73:fb:b1:de:ba:23:
46:7b:1f:58:13:ca:58:6a:98:53:3b:43:46:62:51:
68:15:6c:52:52:bc:bf:82:95:04:57:69:ff:5e:c9:
1b:40:90:c8:59:55:8a:1a:65:61:97:a1:f0:d6:03:
2e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:04:1A:9F:D9:ED:45:6B:D4:FF:11:DD:2A:45:DC:21:2E:21:CD:4E
X509v3 Authority Key Identifier:
keyid:1B:FC:77:38:CD:0F:D0:E0:44:7F:9D:74:9C:E6:A3:90:47:FD:CB:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_x3OM0P0OBEf510nOajkEf9y6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:54:92:df:19:55:1d:d8:6b:9a:43:af:b3:57:c0:de:06:5d:
c8:46:19:2d:85:3a:4f:bf:1f:10:ba:ff:9e:d2:5b:b5:34:21:
5b:c2:d9:63:b9:ca:48:54:fd:86:18:37:e7:6a:36:3c:b2:ae:
f1:e9:b7:0e:28:6d:53:78:fa:e7:70:44:82:b0:23:fd:65:51:
7e:f4:9c:c3:d9:d4:94:26:d7:10:80:7c:68:f4:be:63:b1:be:
d2:1b:e7:cd:6e:b4:9d:b1:f9:8c:d8:be:f9:40:27:d5:74:bb:
71:ca:50:d5:94:a7:50:27:e3:1d:25:87:8f:f9:e3:0d:33:03:
f6:9e:37:3f:f4:88:03:8e:c3:61:a6:67:1e:11:cf:8c:ba:ef:
73:e4:a0:c6:17:b8:be:29:2f:c3:6f:1d:6e:1c:c3:3b:9e:4b:
88:7d:c3:9f:81:fb:05:6c:36:77:9d:1f:70:6a:ea:39:57:75:
c1:7f:d8:ee:7e:81:d1:d9:67:c8:79:d1:86:d2:be:fc:0d:f0:
9f:a9:45:00:63:6f:72:b4:70:b6:fd:87:65:ba:81:a1:0b:11:
c6:f1:6e:c7:38:84:91:99:75:dd:fe:03:e0:5c:20:c5:ea:49:
19:bf:0e:fd:f9:94:1d:8e:2f:1a:12:c3:36:eb:56:38:34:7a:
ed:04:b4:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDWFObb98UeJeX6jiXzy75BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiZmM3NzM4Y2QwZmQwZTA0NDdmOWQ3NDljZTZhMzkwNDdm
ZGNiYWMwHhcNMjYwOTI1MDEwMTI4WhcNMjYwOTI2MDEwMTI4WjAzMTEwLwYDVQQD
EyhmNDA0MWE5ZmQ5ZWQ0NTZiZDRmZjExZGQyYTQ1ZGMyMTJlMjFjZDRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4QMOGJqsaojXrlHlXcDa+LXfWQ4O
lfPHLHWbzYYUb59+VH1Kr04pvNjupQJVuWbsFl7V2ov8eWRSLZ/FkIB+NgrstGY0
mcXT5lfaTLmr+OKq15eFPnV23+e/nv59T5+dxSl3Y4trhQBtKnZ5ShepnGYBMlgk
8iCJykBo4NprHptWptz5Mo0wMcbXVMR/2v8K3WtOLuBSxlounPM0f/rRcgUdXEzW
j3xUosF8YDEYvS3DcV14Uq661ZxqGnD/ZmEQq4VY+I5313RUTPBz+7HeuiNGex9Y
E8pYaphTO0NGYlFoFWxSUry/gpUEV2n/XskbQJDIWVWKGmVhl6Hw1gMuDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPQEGp/Z7UVr1P8R3SpF3CEuIc1OMB8GA1UdIwQY
MBaAFBv8dzjND9DgRH+ddJzmo5BH/cusMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR194M09NMFAwT0JFZjUxMG5PYWprRWY5eTZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS83MDhiNGQtYTYzZi00MzlkLTljY2Ut
MTQ4YWJmZjkxOWFkLzEvR194M09NMFAwT0JFZjUxMG5PYWprRWY5eTZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS83MDhiNGQtYTYzZi00MzlkLTljY2UtMTQ4YWJmZjkxOWFk
LzEvR194M09NMFAwT0JFZjUxMG5PYWprRWY5eTZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZVSS3xlV
HdhrmkOvs1fA3gZdyEYZLYU6T78fELr/ntJbtTQhW8LZY7nKSFT9hhg352o2PLKu
8em3DihtU3j653BEgrAj/WVRfvScw9nUlCbXEIB8aPS+Y7G+0hvnzW60nbH5jNi+
+UAn1XS7ccpQ1ZSnUCfjHSWHj/njDTMD9p43P/SIA47DYaZnHhHPjLrvc+Sgxhe4
vikvw28dbhzDO55LiH3Dn4H7BWw2d50fcGrqOVd1wX/Y7n6B0dlnyHnRhtK+/A3w
n6lFAGNvcrRwtv2HZbqBoQsRxvFuxziEkZl13f4D4FwgxepJGb8O/fmUHY4vGhLD
NutWODR67QS03A==
-----END CERTIFICATE-----
Generated at Fri Sep 25 09:45:17 2026 by rpki-client