Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.mft
File: G_x3OM0P0OBEf510nOajkEf9y6w.mft (raw, json)
Hash identifier: Os67DEkxW2ZdB8U0Pj3KIoRZMllQe6d5KiXxzi4sR/I=
Subject key identifier: 82:74:6F:C5:20:AE:15:C4:EE:8A:95:C2:5D:60:F8:AB:8C:88:74:44
Authority key identifier: 1B:FC:77:38:CD:0F:D0:E0:44:7F:9D:74:9C:E6:A3:90:47:FD:CB:AC
Certificate issuer: /CN=1bfc7738cd0fd0e0447f9d749ce6a39047fdcbac
Certificate serial: 019F91A395A77F028613A15E82255B2D3A7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_x3OM0P0OBEf510nOajkEf9y6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.mft
Manifest number: 19C7
Signing time: Fri 24 Jul 2026 01:00:44 +0000
Manifest this update: Fri 24 Jul 2026 01:00:44 +0000
Manifest next update: Sat 25 Jul 2026 01:00:44 +0000
Files and hashes: 1: 2VcsFpRmgA_Z1BeWY4uxeTXBUVc.roa (hash: mUnxfErIPYDX4fuBIeMZdyj/2aTN4t69gc8x5SXXjwg=)
2: G_x3OM0P0OBEf510nOajkEf9y6w.crl (hash: md26Mi6UZrxascqzmjRgcBIowzMvqvAWQTJWl5/vsbQ=)
3: bU_6jYeoULQ5cmwXMFiWLFBuBqw.roa (hash: RO8BXt2ZgZKfrDL72bFJWFqlC3jg76pa5ceJ9+7Pztg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/G_x3OM0P0OBEf510nOajkEf9y6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a3:95:a7:7f:02:86:13:a1:5e:82:25:5b:2d:3a:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bfc7738cd0fd0e0447f9d749ce6a39047fdcbac
Validity
Not Before: Jul 24 01:00:44 2026 GMT
Not After : Jul 25 01:00:44 2026 GMT
Subject: CN=82746fc520ae15c4ee8a95c25d60f8ab8c887444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fa:e4:aa:e9:cf:13:b0:86:91:e5:b5:a7:a7:
cd:c0:23:ff:12:d2:11:33:1a:d7:27:a8:cf:68:d0:
62:f2:ce:6e:9a:8c:e7:24:0c:cd:76:98:23:0b:01:
d9:42:a0:75:88:eb:97:b9:dd:1b:c4:da:15:c6:78:
cb:bb:25:f6:0b:1e:c3:be:a7:47:3f:57:f5:53:8f:
45:61:af:54:45:72:3d:84:2d:0d:4a:a0:9a:cb:a4:
d3:cf:05:0f:d2:43:17:4c:5f:27:f5:04:0f:c1:78:
39:8a:00:67:98:85:83:ba:1e:c8:98:30:b1:e3:32:
30:b6:b5:de:ac:c3:4f:91:fa:59:e9:7d:1a:38:e1:
ba:6a:af:cd:7c:2a:2c:f1:41:55:5e:56:7c:fd:44:
d1:42:8d:cf:37:f0:04:9f:be:7d:6c:48:45:12:49:
5a:b3:cc:70:3c:fc:93:38:fe:00:86:fb:b6:4c:91:
04:03:14:ef:da:32:bc:a0:f5:4e:5b:82:14:cd:8b:
08:a4:b7:2f:06:c0:f9:10:19:02:c3:93:6f:82:37:
a9:59:71:6d:1c:a9:83:80:69:c6:5d:72:7c:b6:ea:
03:dd:e6:87:87:a4:a2:9a:b0:95:9f:dc:5e:b5:f1:
00:cf:42:6d:94:be:71:a9:96:2e:34:5a:04:df:3c:
b9:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:74:6F:C5:20:AE:15:C4:EE:8A:95:C2:5D:60:F8:AB:8C:88:74:44
X509v3 Authority Key Identifier:
keyid:1B:FC:77:38:CD:0F:D0:E0:44:7F:9D:74:9C:E6:A3:90:47:FD:CB:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_x3OM0P0OBEf510nOajkEf9y6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:ac:80:58:75:d5:ea:7f:ad:63:1f:fe:c6:b1:4e:26:cf:1d:
66:79:06:1b:24:8a:95:c5:94:9b:f0:6e:86:2a:64:03:d6:73:
1b:49:e4:68:c9:5e:70:13:76:be:6b:96:47:f9:c4:4e:70:06:
9a:5d:5b:3d:a4:a6:26:5b:5a:39:75:13:b6:2a:f7:52:f5:99:
0b:b3:d9:58:bf:13:d2:50:d8:5c:80:5c:de:b8:48:58:07:c6:
5e:a5:de:57:52:22:53:c2:e2:01:f2:5d:42:2d:11:d0:0e:3a:
e6:09:15:8f:cb:ec:3c:ec:ce:e5:ca:61:b2:33:2f:79:14:5a:
f0:b9:5e:db:39:e6:ff:6c:38:4c:7b:43:b2:ad:16:fd:a5:c8:
e9:49:9c:e3:97:97:be:c8:75:53:03:ee:e3:b3:da:b7:f1:2d:
f9:da:84:3a:36:dc:35:d8:c1:f3:d8:8a:bd:aa:ec:c4:30:e6:
a0:3f:e7:91:ca:17:ea:1b:45:94:d5:1d:12:a6:68:38:9b:cd:
be:00:ca:8d:d4:92:18:5b:8b:9b:cf:4b:36:87:1d:c8:c0:b5:
da:c4:09:b1:e5:4e:cb:b8:a9:c6:ab:e2:9c:59:d3:15:7f:d0:
97:a8:6b:91:02:38:02:f7:bb:d7:32:96:e5:11:cd:72:e7:8b:
66:34:5f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:03:19 2026 by rpki-client