Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/G0ILeZxSBqGe93F-48cxL9iDMK4.mft
File: G0ILeZxSBqGe93F-48cxL9iDMK4.mft (raw, json)
Hash identifier: ian+JJErfy0VFKpsTEEN9Yo9IdqCU82dkv1FRd4yqqo=
Subject key identifier: 0A:59:B9:61:12:28:D5:08:B0:6B:A4:79:D4:CB:6F:3B:12:2D:78:E0
Authority key identifier: 1B:42:0B:79:9C:52:06:A1:9E:F7:71:7E:E3:C7:31:2F:D8:83:30:AE
Certificate issuer: /CN=1b420b799c5206a19ef7717ee3c7312fd88330ae
Certificate serial: 019F9022BDC76E1F4BA07FEBA0BFB27F584A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G0ILeZxSBqGe93F-48cxL9iDMK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/G0ILeZxSBqGe93F-48cxL9iDMK4.mft
Manifest number: 0BC9
Signing time: Thu 23 Jul 2026 18:00:23 +0000
Manifest this update: Thu 23 Jul 2026 18:00:23 +0000
Manifest next update: Fri 24 Jul 2026 18:00:23 +0000
Files and hashes: 1: 6HQUO6STMbW7BVm3pNinweHOQTY.roa (hash: 2bOuMAF3TgRjyY2xveVCaA/5uJyPdOr15OyOQ9K3vns=)
2: 72AO_uZr1ZlnSoUNX8Iuehbu71c.asa (hash: f1Ct3IEiol+T1+n4aR9eM5dXAUSe/92OdYarA8CZAlg=)
3: G0ILeZxSBqGe93F-48cxL9iDMK4.crl (hash: mBphOVWy+IynEsyEZkpZKVzwMC3B7diMYq/4lm+QKIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/G0ILeZxSBqGe93F-48cxL9iDMK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/G0ILeZxSBqGe93F-48cxL9iDMK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/G0ILeZxSBqGe93F-48cxL9iDMK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:22:bd:c7:6e:1f:4b:a0:7f:eb:a0:bf:b2:7f:58:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b420b799c5206a19ef7717ee3c7312fd88330ae
Validity
Not Before: Jul 23 18:00:23 2026 GMT
Not After : Jul 24 18:00:23 2026 GMT
Subject: CN=0a59b9611228d508b06ba479d4cb6f3b122d78e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:01:d4:41:a0:d0:06:77:e0:eb:58:87:50:04:
3f:54:4c:c3:af:cd:ed:c8:24:f1:00:fb:e8:fd:27:
ac:5e:4f:75:3f:05:ed:5e:fa:65:11:12:08:d2:90:
c7:29:20:7b:a0:f7:9e:f4:e8:17:15:45:57:68:0f:
5a:96:30:20:d2:1d:88:18:3d:3f:07:1f:df:79:e6:
88:24:92:74:a8:c8:05:29:89:24:77:80:78:c6:39:
57:da:91:f5:0e:c6:b6:a9:42:e2:7b:a8:50:26:ea:
35:9c:59:03:0c:67:d3:0a:09:41:67:7c:8b:11:86:
3d:c1:ff:ee:b2:32:14:10:96:c0:04:fa:1b:5d:6e:
21:83:af:cd:d0:16:2b:50:18:b4:7e:79:7a:c6:0c:
b9:00:0a:bd:b6:af:90:7f:58:b8:fc:32:a3:80:8b:
28:7d:b6:93:6a:85:eb:8d:89:5c:12:fc:e2:a4:96:
03:c4:20:0a:8b:37:95:a4:3c:04:33:30:5a:a6:d6:
ec:7a:76:f3:a1:bb:f2:56:46:42:cb:1e:53:06:c3:
a1:0f:46:b7:d7:8c:01:ff:d9:e3:d4:e4:d3:bb:72:
47:80:7b:04:29:a7:8d:f9:3f:0c:d0:73:5e:5f:2f:
2a:79:62:d9:36:60:ef:3f:bc:74:36:19:83:5a:7b:
75:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:59:B9:61:12:28:D5:08:B0:6B:A4:79:D4:CB:6F:3B:12:2D:78:E0
X509v3 Authority Key Identifier:
keyid:1B:42:0B:79:9C:52:06:A1:9E:F7:71:7E:E3:C7:31:2F:D8:83:30:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G0ILeZxSBqGe93F-48cxL9iDMK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/G0ILeZxSBqGe93F-48cxL9iDMK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/G0ILeZxSBqGe93F-48cxL9iDMK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:3c:0b:f7:a5:1a:c2:84:c6:1f:f8:4c:1b:4d:39:33:ea:10:
76:43:58:18:88:9a:8d:5a:2d:3c:cf:92:84:12:db:d6:3d:79:
c1:49:59:1a:d0:71:23:9c:d4:e3:d7:2c:12:66:14:11:c6:02:
c2:a8:56:3b:ee:06:2b:6a:51:99:ac:c8:57:95:fa:de:59:b5:
41:34:56:ca:a2:a5:45:66:3e:12:d7:e1:0f:09:d1:db:50:dd:
af:d6:b8:c6:5f:d6:6a:b9:d0:89:e4:9e:32:95:8c:b1:3f:4b:
69:d7:bd:93:89:63:98:86:92:97:2f:4a:b6:cb:76:8c:06:30:
ab:40:f4:f5:d6:22:e2:89:0e:e0:21:61:9a:b2:82:fc:4f:18:
0c:59:2d:d2:e8:56:56:00:9e:f3:6e:52:a2:28:d5:74:92:7e:
d4:4d:a8:e3:82:24:25:e7:50:b1:d1:48:3c:f4:1b:88:fb:22:
9b:b9:c3:f0:a1:8b:df:b4:08:ba:9a:bc:ce:c0:a0:96:d6:2c:
1f:43:c4:9b:8e:ab:43:d0:0f:58:87:88:72:f6:a0:61:ab:a0:
b0:92:58:21:18:29:b4:62:62:65:1b:15:79:64:ad:2c:7f:0a:
6d:d8:42:9b:a1:7e:89:02:e9:a0:6a:ba:4d:fb:c5:21:81:72:
f7:24:fd:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QIr3Hbh9LoH/roL+yf1hKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiNDIwYjc5OWM1MjA2YTE5ZWY3NzE3ZWUzYzczMTJmZDg4
MzMwYWUwHhcNMjYwNzIzMTgwMDIzWhcNMjYwNzI0MTgwMDIzWjAzMTEwLwYDVQQD
EygwYTU5Yjk2MTEyMjhkNTA4YjA2YmE0NzlkNGNiNmYzYjEyMmQ3OGUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwHUQaDQBnfg61iHUAQ/VEzDr83t
yCTxAPvo/SesXk91PwXtXvplERII0pDHKSB7oPee9OgXFUVXaA9aljAg0h2IGD0/
Bx/feeaIJJJ0qMgFKYkkd4B4xjlX2pH1Dsa2qULie6hQJuo1nFkDDGfTCglBZ3yL
EYY9wf/usjIUEJbABPobXW4hg6/N0BYrUBi0fnl6xgy5AAq9tq+Qf1i4/DKjgIso
fbaTaoXrjYlcEvzipJYDxCAKizeVpDwEMzBaptbsenbzobvyVkZCyx5TBsOhD0a3
14wB/9nj1OTTu3JHgHsEKaeN+T8M0HNeXy8qeWLZNmDvP7x0NhmDWnt1awIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFApZuWESKNUIsGukedTLbzsSLXjgMB8GA1UdIwQY
MBaAFBtCC3mcUgahnvdxfuPHMS/YgzCuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzBJTGVaeFNCcUdlOTNGLTQ4Y3hMOWlETUs0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi80MTdkNzctMGU5ZS00MDkxLWI1MTAt
OTQ2MDE4MjQxYzUxLzEvRzBJTGVaeFNCcUdlOTNGLTQ4Y3hMOWlETUs0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi80MTdkNzctMGU5ZS00MDkxLWI1MTAtOTQ2MDE4MjQxYzUx
LzEvRzBJTGVaeFNCcUdlOTNGLTQ4Y3hMOWlETUs0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQjwL96Ua
woTGH/hMG005M+oQdkNYGIiajVotPM+ShBLb1j15wUlZGtBxI5zU49csEmYUEcYC
wqhWO+4GK2pRmazIV5X63lm1QTRWyqKlRWY+EtfhDwnR21Ddr9a4xl/WarnQieSe
MpWMsT9Lade9k4ljmIaSly9Ktst2jAYwq0D09dYi4okO4CFhmrKC/E8YDFkt0uhW
VgCe825SoijVdJJ+1E2o44IkJedQsdFIPPQbiPsim7nD8KGL37QIupq8zsCgltYs
H0PEm46rQ9APWIeIcvagYaugsJJYIRgptGJiZRsVeWStLH8KbdhCm6F+iQLpoGq6
TfvFIYFy9yT9QQ==
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:13:17 2026 by rpki-client