Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/8961d3-11ce-4916-8478-13a0346762f0/1/G0p0-DX7ePRqdSJYKnAkw-ladQE.mft
File: G0p0-DX7ePRqdSJYKnAkw-ladQE.mft (raw, json)
Hash identifier: BnSlHYW3Nj9dT8kkkir726ctbQLxMOnX27xFcjFCJKA=
Subject key identifier: 5D:4F:EF:06:CB:2D:43:19:2D:E4:89:62:C7:CA:2B:A8:01:06:31:91
Authority key identifier: 1B:4A:74:F8:35:FB:78:F4:6A:75:22:58:2A:70:24:C3:E9:5A:75:01
Certificate issuer: /CN=1b4a74f835fb78f46a7522582a7024c3e95a7501
Certificate serial: 01A0DC172720875D77C3D585A9438F7E408B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G0p0-DX7ePRqdSJYKnAkw-ladQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/8961d3-11ce-4916-8478-13a0346762f0/1/G0p0-DX7ePRqdSJYKnAkw-ladQE.mft
Manifest number: 52
Signing time: Sat 26 Sep 2026 05:01:39 +0000
Manifest this update: Sat 26 Sep 2026 05:01:39 +0000
Manifest next update: Sun 27 Sep 2026 05:01:39 +0000
Files and hashes: 1: 0qUdSlK1egMK84cFUL2xD9vza_I.roa (hash: +RRA24eEQxCoeLXCIa32FRmyRiqw4gZq4NFf5EgQysk=)
2: G0p0-DX7ePRqdSJYKnAkw-ladQE.crl (hash: 3Oen/oDNYy3dgDlYyuUoBqhA52u71dz1Wz20zlMl7Iw=)
3: Xm2UGEkdiKhG1oMWDxl5AaWM7Sg.asa (hash: quX3s05TDBTsl7FDpEE0QIqSfiJxqhXmhPqfuYs2tQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/8961d3-11ce-4916-8478-13a0346762f0/1/G0p0-DX7ePRqdSJYKnAkw-ladQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/8961d3-11ce-4916-8478-13a0346762f0/1/G0p0-DX7ePRqdSJYKnAkw-ladQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/G0p0-DX7ePRqdSJYKnAkw-ladQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:17:27:20:87:5d:77:c3:d5:85:a9:43:8f:7e:40:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b4a74f835fb78f46a7522582a7024c3e95a7501
Validity
Not Before: Sep 26 05:01:39 2026 GMT
Not After : Sep 27 05:01:39 2026 GMT
Subject: CN=5d4fef06cb2d43192de48962c7ca2ba801063191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:14:ff:27:86:f3:ca:5f:9a:b3:14:f0:48:c4:
fb:13:6e:04:96:84:11:01:32:7e:1d:fa:1d:92:6c:
7b:2e:ca:9c:51:98:6c:b1:f6:c2:d6:a9:6d:8e:a5:
a2:b6:97:31:c3:c1:f8:7b:fd:68:68:50:6e:94:9b:
d9:6a:0f:4d:b2:ca:b9:5b:93:85:6d:7b:e3:ef:fa:
83:29:47:8e:00:de:52:1d:51:0c:5a:b1:4e:d9:85:
b3:d1:9b:e0:74:d1:b2:e1:53:7b:0f:ff:7e:32:13:
00:a0:5a:d2:7a:6b:7f:82:b4:36:9d:1b:af:60:94:
74:c5:90:68:1b:a4:cf:86:74:19:c1:ee:c7:d9:23:
da:51:cf:73:99:ad:e5:63:25:ac:54:d8:0e:d2:80:
ee:ef:2f:27:51:6c:c4:0c:5d:82:e8:f4:d4:2b:2e:
c3:a1:56:3c:0a:37:88:8d:fe:3a:17:67:00:2a:24:
d1:68:ad:aa:b0:21:1e:c0:43:5d:58:20:76:ac:44:
68:75:9e:5f:43:38:7d:b0:b9:58:2d:c0:c6:9f:39:
1a:2f:f1:ad:22:57:19:35:99:b2:ca:97:29:a4:9c:
42:25:73:72:f5:31:9e:c2:06:c4:50:3c:2c:4a:cb:
8b:95:59:d4:2b:f9:72:d7:ce:00:7e:1c:c1:c1:40:
3f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:4F:EF:06:CB:2D:43:19:2D:E4:89:62:C7:CA:2B:A8:01:06:31:91
X509v3 Authority Key Identifier:
keyid:1B:4A:74:F8:35:FB:78:F4:6A:75:22:58:2A:70:24:C3:E9:5A:75:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G0p0-DX7ePRqdSJYKnAkw-ladQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8961d3-11ce-4916-8478-13a0346762f0/1/G0p0-DX7ePRqdSJYKnAkw-ladQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8961d3-11ce-4916-8478-13a0346762f0/1/G0p0-DX7ePRqdSJYKnAkw-ladQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:25:ff:e2:46:6d:ee:d3:45:b6:73:b3:d1:77:11:7a:09:54:
4b:5e:9b:57:55:2e:88:d6:b3:48:ad:d0:0b:d4:59:b1:33:46:
f0:55:f2:f8:96:fc:73:01:59:f7:c1:f4:e1:b1:9b:c8:57:0f:
6a:a9:aa:00:de:4d:98:4c:2e:2d:48:97:f1:11:18:05:62:44:
b3:9a:34:31:b5:0d:6d:f0:c4:7a:1c:b1:3c:af:81:27:2c:bc:
e0:97:9f:ad:4f:e0:f0:c9:36:f6:7c:d1:71:b2:90:3d:da:62:
61:03:c9:48:df:cd:96:da:23:b6:da:71:a6:64:c1:1e:00:10:
c0:d5:32:09:91:f0:05:79:8a:f1:47:6d:1a:e9:06:5b:2e:fd:
22:4c:36:bb:6c:74:fd:aa:40:ef:e3:b1:61:db:7a:7b:43:df:
b9:93:35:0e:0c:5f:66:e3:9e:d4:c6:de:fc:72:c3:6a:a0:4a:
29:71:84:40:b1:6f:4e:00:fc:b0:94:e3:07:2c:45:9b:70:c8:
cb:a7:e9:a6:ee:be:c7:24:dc:fd:3f:13:7c:5e:4f:97:69:f6:
b4:d9:23:90:7d:7c:fc:7f:5c:73:e8:e2:1b:6e:26:ea:2e:c8:
d4:08:41:54:02:6e:ca:48:1d:12:a2:a2:b7:48:ee:c8:ad:5c:
25:ec:9f:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:55:41 2026 by rpki-client