Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/G0ILeZxSBqGe93F-48cxL9iDMK4.mft
File: G0ILeZxSBqGe93F-48cxL9iDMK4.mft (raw, json)
Hash identifier: mtKK+u12C3ts8L3QM1QHwqPA7YDus9mOLdcjfdW8ng0=
Subject key identifier: 52:D0:14:BD:52:55:4F:A9:6B:39:52:F9:6F:F9:0F:9D:5E:46:A0:DB
Authority key identifier: 1B:42:0B:79:9C:52:06:A1:9E:F7:71:7E:E3:C7:31:2F:D8:83:30:AE
Certificate issuer: /CN=1b420b799c5206a19ef7717ee3c7312fd88330ae
Certificate serial: 019D29CE64FC9B7730A4B2B196F2E60D7CAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G0ILeZxSBqGe93F-48cxL9iDMK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/G0ILeZxSBqGe93F-48cxL9iDMK4.mft
Manifest number: 0A8A
Signing time: Thu 26 Mar 2026 11:01:25 +0000
Manifest this update: Thu 26 Mar 2026 11:01:25 +0000
Manifest next update: Fri 27 Mar 2026 11:01:25 +0000
Files and hashes: 1: 6HQUO6STMbW7BVm3pNinweHOQTY.roa (hash: 2bOuMAF3TgRjyY2xveVCaA/5uJyPdOr15OyOQ9K3vns=)
2: G0ILeZxSBqGe93F-48cxL9iDMK4.crl (hash: b/mE3hr9K8AXS487mMprgv1HAN8ozItUNx2e3I2vPfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/G0ILeZxSBqGe93F-48cxL9iDMK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/G0ILeZxSBqGe93F-48cxL9iDMK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/G0ILeZxSBqGe93F-48cxL9iDMK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:64:fc:9b:77:30:a4:b2:b1:96:f2:e6:0d:7c:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b420b799c5206a19ef7717ee3c7312fd88330ae
Validity
Not Before: Mar 26 11:01:25 2026 GMT
Not After : Mar 27 11:01:25 2026 GMT
Subject: CN=52d014bd52554fa96b3952f96ff90f9d5e46a0db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:11:f2:23:a3:12:3a:65:db:67:30:86:de:8f:
e3:f6:87:21:35:d5:f4:ac:f0:36:cf:ab:a8:2e:25:
27:c4:a3:48:28:ef:16:51:01:db:c5:a8:ae:a3:4e:
76:f2:76:53:f7:c0:5d:45:6a:87:db:5a:9f:52:fb:
57:1b:0d:eb:96:6d:4f:b2:74:95:cd:d9:2a:a2:4f:
48:7e:69:e3:ed:73:08:f7:60:42:e3:d3:82:4c:48:
8e:bc:5e:88:6f:7f:b4:49:c0:45:63:70:e8:e1:0b:
59:63:9b:66:bd:21:01:e6:75:b8:0e:29:a0:40:af:
88:c8:a0:f0:c4:19:b2:5e:a3:a9:8a:2d:0f:2d:66:
1f:4f:44:c0:6d:85:ee:13:f8:7d:34:e8:98:77:ec:
1d:eb:fd:de:be:ed:70:92:b0:90:11:5f:cd:47:46:
96:f5:9b:50:a0:23:f7:a0:78:e1:86:97:b7:dc:9f:
ee:84:0b:02:66:93:6c:c1:5f:bd:a1:18:d2:eb:00:
3b:2e:73:eb:7c:90:0a:9d:0b:dc:ef:fc:ba:69:1a:
25:76:04:d9:70:0e:58:59:a6:ae:89:ec:75:2b:65:
88:2b:38:af:08:e2:d0:f0:76:01:f6:b6:13:a0:33:
47:dc:84:4c:a0:51:9d:0f:f6:4e:e3:cb:a9:cd:92:
f7:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:D0:14:BD:52:55:4F:A9:6B:39:52:F9:6F:F9:0F:9D:5E:46:A0:DB
X509v3 Authority Key Identifier:
keyid:1B:42:0B:79:9C:52:06:A1:9E:F7:71:7E:E3:C7:31:2F:D8:83:30:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G0ILeZxSBqGe93F-48cxL9iDMK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/G0ILeZxSBqGe93F-48cxL9iDMK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/G0ILeZxSBqGe93F-48cxL9iDMK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:8c:27:f9:f2:ca:5e:64:e8:30:7b:6b:2c:74:01:03:ed:39:
f6:4e:65:0c:c8:34:4e:82:1b:41:99:79:5e:f3:d7:ec:37:0f:
29:5c:82:d9:79:c5:37:d8:6a:56:ae:bd:77:22:9d:f5:8d:62:
00:35:b2:72:14:df:62:19:14:28:27:25:05:75:c5:2f:58:3a:
01:94:be:f9:c0:5b:e0:04:fa:e7:80:0e:db:2a:00:aa:0e:be:
8f:bb:17:33:33:f5:94:4b:58:b0:5e:ca:23:b1:63:de:d4:de:
c4:1f:8e:1f:a1:cf:b5:88:80:0c:ba:11:6d:65:de:ce:ca:68:
8f:33:7a:74:6f:d3:14:3f:3b:83:1d:e8:02:fc:fd:07:17:f2:
f4:b0:ac:5c:7f:95:b9:4b:ae:a8:ba:d5:a9:54:8d:e0:d9:c4:
a5:d2:10:3b:3b:65:0e:27:f0:54:46:00:5e:eb:74:33:90:55:
a2:5a:04:2d:b9:77:6f:ae:2e:e1:a1:f5:4a:ec:fd:ed:86:f6:
d1:9f:93:5c:c3:dc:b0:8f:ed:20:c4:98:17:4c:76:f6:a3:8b:
31:e0:5c:2c:7d:8a:08:07:0d:56:7c:e0:a5:c1:61:41:7b:6d:
c7:54:6a:c1:eb:cf:78:0e:67:e2:39:b5:21:8d:ee:0a:43:2a:
b2:22:76:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:54:38 2026 by rpki-client