Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/G0ILeZxSBqGe93F-48cxL9iDMK4.mft
File: G0ILeZxSBqGe93F-48cxL9iDMK4.mft (raw, json)
Hash identifier: E4rs1SNtJKKXjc/4l76A9hXqcrNiLRap46PhhZgPHuo=
Subject key identifier: 1D:C4:D5:6C:15:F8:8D:84:36:83:FD:6F:62:B9:81:94:AE:B1:DF:81
Authority key identifier: 1B:42:0B:79:9C:52:06:A1:9E:F7:71:7E:E3:C7:31:2F:D8:83:30:AE
Certificate issuer: /CN=1b420b799c5206a19ef7717ee3c7312fd88330ae
Certificate serial: 01A0D2A6179E32ED0ED74926C3F9EF1A52A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G0ILeZxSBqGe93F-48cxL9iDMK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/G0ILeZxSBqGe93F-48cxL9iDMK4.mft
Manifest number: 0C70
Signing time: Thu 24 Sep 2026 09:01:35 +0000
Manifest this update: Thu 24 Sep 2026 09:01:35 +0000
Manifest next update: Fri 25 Sep 2026 09:01:35 +0000
Files and hashes: 1: 6HQUO6STMbW7BVm3pNinweHOQTY.roa (hash: 2bOuMAF3TgRjyY2xveVCaA/5uJyPdOr15OyOQ9K3vns=)
2: 72AO_uZr1ZlnSoUNX8Iuehbu71c.asa (hash: f1Ct3IEiol+T1+n4aR9eM5dXAUSe/92OdYarA8CZAlg=)
3: G0ILeZxSBqGe93F-48cxL9iDMK4.crl (hash: BBxJlBBdu9s14jRvGRuCdsWrw3tHq0gHp+VmT4/NM90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/G0ILeZxSBqGe93F-48cxL9iDMK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/G0ILeZxSBqGe93F-48cxL9iDMK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/G0ILeZxSBqGe93F-48cxL9iDMK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 09:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:a6:17:9e:32:ed:0e:d7:49:26:c3:f9:ef:1a:52:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b420b799c5206a19ef7717ee3c7312fd88330ae
Validity
Not Before: Sep 24 09:01:35 2026 GMT
Not After : Sep 25 09:01:35 2026 GMT
Subject: CN=1dc4d56c15f88d843683fd6f62b98194aeb1df81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2c:12:a9:73:1e:2d:af:a6:d0:f2:2c:59:a6:
7a:21:12:dd:16:16:51:d2:a6:f9:43:b6:e7:9e:e7:
f2:22:d8:01:e8:11:d8:74:f5:de:7f:d3:e0:03:51:
0c:e4:7f:b6:63:d3:57:1b:02:e4:ab:b7:1f:47:e0:
bb:8d:2c:34:fb:04:69:73:8e:fb:ba:b9:81:36:26:
c4:eb:2b:1d:4c:41:df:0e:66:85:eb:33:13:c9:af:
83:2f:55:29:8a:3c:93:f4:01:37:85:fa:bc:2e:73:
f4:b7:15:93:7d:ee:11:c9:cb:d3:ad:02:ee:06:72:
da:72:1d:4e:e8:49:8e:44:72:fb:79:e6:84:80:8a:
55:2e:2a:54:3d:d0:f7:eb:4d:37:94:89:16:2e:ea:
7a:94:cd:29:b5:f0:e0:eb:83:bf:3e:9a:b8:1d:80:
06:9b:89:1c:f7:3a:77:5a:f3:c7:4a:6c:07:02:8a:
f3:9c:65:da:c5:f6:8e:15:ae:28:40:64:18:8f:f0:
1f:f1:f8:e0:23:88:2c:3d:02:3b:c0:94:fe:b0:e2:
06:91:f6:6a:dc:ee:91:c7:53:05:91:40:29:a9:e9:
eb:a3:aa:86:2b:36:11:bc:e4:ae:5c:7e:0d:18:79:
d2:5f:84:72:67:57:6e:d4:76:89:db:cf:8c:ad:c6:
af:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:C4:D5:6C:15:F8:8D:84:36:83:FD:6F:62:B9:81:94:AE:B1:DF:81
X509v3 Authority Key Identifier:
keyid:1B:42:0B:79:9C:52:06:A1:9E:F7:71:7E:E3:C7:31:2F:D8:83:30:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G0ILeZxSBqGe93F-48cxL9iDMK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/G0ILeZxSBqGe93F-48cxL9iDMK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/G0ILeZxSBqGe93F-48cxL9iDMK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:14:6a:4e:ad:fe:4c:19:8b:cb:66:f4:d5:b5:a2:57:d7:fe:
f0:b9:02:4f:ef:d7:8c:c7:30:3f:d8:40:66:fd:6a:f8:3f:74:
28:76:18:2c:ba:a4:9f:ce:ee:30:e8:8d:c6:b6:e9:2f:57:e1:
cc:af:4b:a5:bc:ce:db:9d:e7:f4:e4:58:9d:63:53:65:56:5b:
f8:c5:16:d9:6f:f8:d2:5b:46:4a:0e:ff:54:fa:4a:06:44:eb:
92:50:5e:74:a3:db:f9:c2:c8:34:48:45:b7:df:c1:3e:05:15:
eb:be:b3:91:50:68:5f:2e:be:2c:2b:73:ca:7a:98:e8:55:a4:
1a:9a:92:07:35:cc:9d:c7:70:68:28:d3:92:ed:ca:3e:34:19:
bc:6e:86:81:34:f0:27:90:42:19:55:75:bf:fd:93:8f:54:ba:
f7:90:5c:0c:71:13:91:d9:95:de:d4:ae:ee:f5:54:95:91:5e:
58:73:1d:89:c9:17:07:a2:b5:df:41:76:83:69:8b:68:4b:39:
16:14:2e:59:49:bb:03:86:7c:58:44:46:d6:c9:14:f5:49:56:
f8:43:a6:74:1e:4a:4b:35:7f:d7:fc:fb:9e:cd:42:7b:f2:85:
2b:f0:f5:bf:ac:d4:e9:b0:80:52:3a:26:38:ad:49:8f:92:73:
bc:6e:02:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDSpheeMu0O10kmw/nvGlKiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiNDIwYjc5OWM1MjA2YTE5ZWY3NzE3ZWUzYzczMTJmZDg4
MzMwYWUwHhcNMjYwOTI0MDkwMTM1WhcNMjYwOTI1MDkwMTM1WjAzMTEwLwYDVQQD
EygxZGM0ZDU2YzE1Zjg4ZDg0MzY4M2ZkNmY2MmI5ODE5NGFlYjFkZjgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuywSqXMeLa+m0PIsWaZ6IRLdFhZR
0qb5Q7bnnufyItgB6BHYdPXef9PgA1EM5H+2Y9NXGwLkq7cfR+C7jSw0+wRpc477
urmBNibE6ysdTEHfDmaF6zMTya+DL1UpijyT9AE3hfq8LnP0txWTfe4RycvTrQLu
BnLach1O6EmORHL7eeaEgIpVLipUPdD36003lIkWLup6lM0ptfDg64O/Ppq4HYAG
m4kc9zp3WvPHSmwHAorznGXaxfaOFa4oQGQYj/Af8fjgI4gsPQI7wJT+sOIGkfZq
3O6Rx1MFkUApqenro6qGKzYRvOSuXH4NGHnSX4RyZ1du1HaJ28+MrcavYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB3E1WwV+I2ENoP9b2K5gZSusd+BMB8GA1UdIwQY
MBaAFBtCC3mcUgahnvdxfuPHMS/YgzCuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzBJTGVaeFNCcUdlOTNGLTQ4Y3hMOWlETUs0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi80MTdkNzctMGU5ZS00MDkxLWI1MTAt
OTQ2MDE4MjQxYzUxLzEvRzBJTGVaeFNCcUdlOTNGLTQ4Y3hMOWlETUs0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi80MTdkNzctMGU5ZS00MDkxLWI1MTAtOTQ2MDE4MjQxYzUx
LzEvRzBJTGVaeFNCcUdlOTNGLTQ4Y3hMOWlETUs0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWBRqTq3+
TBmLy2b01bWiV9f+8LkCT+/XjMcwP9hAZv1q+D90KHYYLLqkn87uMOiNxrbpL1fh
zK9LpbzO253n9ORYnWNTZVZb+MUW2W/40ltGSg7/VPpKBkTrklBedKPb+cLINEhF
t9/BPgUV676zkVBoXy6+LCtzynqY6FWkGpqSBzXMncdwaCjTku3KPjQZvG6GgTTw
J5BCGVV1v/2Tj1S695BcDHETkdmV3tSu7vVUlZFeWHMdickXB6K130F2g2mLaEs5
FhQuWUm7A4Z8WERG1skU9UlW+EOmdB5KSzV/1/z7ns1Ce/KFK/D1v6zU6bCAUjom
OK1Jj5JzvG4C/w==
-----END CERTIFICATE-----
Generated at Thu Sep 24 18:19:17 2026 by rpki-client