Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/G0ILeZxSBqGe93F-48cxL9iDMK4.mft
File: G0ILeZxSBqGe93F-48cxL9iDMK4.mft (raw, json)
Hash identifier: C6fRtwnikV+aBqJNtlXz9CsPv5zhqpMiedJpmGxJm1o=
Subject key identifier: 99:4A:0C:6B:EE:73:8E:DB:96:69:21:EC:0B:F9:F4:AC:1E:AD:00:B2
Authority key identifier: 1B:42:0B:79:9C:52:06:A1:9E:F7:71:7E:E3:C7:31:2F:D8:83:30:AE
Certificate issuer: /CN=1b420b799c5206a19ef7717ee3c7312fd88330ae
Certificate serial: 019E1D5938889D7EEA9E0D8D675B3EE50D5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G0ILeZxSBqGe93F-48cxL9iDMK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/G0ILeZxSBqGe93F-48cxL9iDMK4.mft
Manifest number: 0B09
Signing time: Tue 12 May 2026 18:00:46 +0000
Manifest this update: Tue 12 May 2026 18:00:46 +0000
Manifest next update: Wed 13 May 2026 18:00:46 +0000
Files and hashes: 1: 6HQUO6STMbW7BVm3pNinweHOQTY.roa (hash: 2bOuMAF3TgRjyY2xveVCaA/5uJyPdOr15OyOQ9K3vns=)
2: 72AO_uZr1ZlnSoUNX8Iuehbu71c.asa (hash: f1Ct3IEiol+T1+n4aR9eM5dXAUSe/92OdYarA8CZAlg=)
3: G0ILeZxSBqGe93F-48cxL9iDMK4.crl (hash: kNVJbGFP/akGFK3zV1IUrVBvibwun3AVDKyRKrj1k14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/G0ILeZxSBqGe93F-48cxL9iDMK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/G0ILeZxSBqGe93F-48cxL9iDMK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/G0ILeZxSBqGe93F-48cxL9iDMK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:38:88:9d:7e:ea:9e:0d:8d:67:5b:3e:e5:0d:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b420b799c5206a19ef7717ee3c7312fd88330ae
Validity
Not Before: May 12 18:00:46 2026 GMT
Not After : May 13 18:00:46 2026 GMT
Subject: CN=994a0c6bee738edb966921ec0bf9f4ac1ead00b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:77:64:bc:81:50:5b:34:33:c6:7c:75:7b:c1:
2f:d1:62:84:07:88:b1:33:69:60:2b:ca:12:6d:72:
2f:f1:23:85:74:fa:27:ea:4b:f5:06:93:58:17:28:
2d:5b:c0:55:f2:b6:f4:72:dc:8b:26:40:65:df:b9:
24:1f:42:13:af:07:d6:4a:57:87:8d:b1:72:6b:50:
cb:67:48:f3:82:cb:33:fd:7c:36:49:78:67:1e:5e:
38:0b:17:50:97:d8:d5:13:dc:cc:19:24:b3:e4:e5:
8f:13:89:e3:2f:73:81:9c:dc:f3:54:66:44:7b:5e:
66:18:1b:1d:9d:05:e1:cd:5f:a4:3f:83:23:31:86:
ab:cf:fe:a5:94:aa:d4:03:dd:51:01:8b:99:f7:b4:
c0:77:5f:09:40:73:5b:9c:1e:c2:bc:01:63:99:a9:
bf:ac:54:02:ae:30:5d:81:48:70:78:33:8d:34:47:
67:e9:db:18:da:bc:d0:ac:e3:67:43:13:5d:fd:0c:
e5:47:b9:8d:c5:50:58:99:f4:de:d7:ad:36:b7:e6:
23:d7:a9:27:ec:8f:cc:f3:8e:26:4d:07:fe:4d:c6:
27:b9:d0:2f:c1:81:14:d7:a5:2f:eb:0d:2e:f4:be:
23:b1:78:3a:4c:01:4a:dc:b6:96:fe:a8:57:56:6a:
5f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:4A:0C:6B:EE:73:8E:DB:96:69:21:EC:0B:F9:F4:AC:1E:AD:00:B2
X509v3 Authority Key Identifier:
keyid:1B:42:0B:79:9C:52:06:A1:9E:F7:71:7E:E3:C7:31:2F:D8:83:30:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G0ILeZxSBqGe93F-48cxL9iDMK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/G0ILeZxSBqGe93F-48cxL9iDMK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/G0ILeZxSBqGe93F-48cxL9iDMK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:99:b7:ce:28:37:56:25:15:0b:30:67:d9:93:9e:49:06:10:
7c:3e:e7:4b:6d:45:4a:b9:78:51:7f:ac:1f:0f:08:fc:ef:50:
b2:bd:39:3e:49:dc:d4:12:a9:a4:fc:e8:d0:c9:0b:f4:4f:96:
80:9d:0f:98:c5:a5:ec:fb:e3:4f:51:d8:3e:c2:b6:00:a1:a5:
71:38:e7:ce:5a:a8:9e:58:bf:f8:2e:96:44:ee:82:a7:fe:41:
c5:db:fa:df:d4:88:64:7f:df:fa:89:34:4e:51:4b:b1:bb:10:
c6:ca:14:0b:1c:0e:ea:52:c7:63:ce:ff:39:fb:5b:9f:a7:1f:
9b:6b:0c:b1:4c:3b:6a:43:18:50:0c:42:5f:db:e9:85:ef:db:
6b:c2:46:eb:e8:0b:fd:7d:b7:85:67:81:3d:42:8a:f6:57:6a:
5f:3d:a2:8a:44:23:eb:11:1c:9e:30:82:88:83:30:06:d5:80:
24:f4:2d:f0:19:a0:50:c6:de:e7:9b:11:e6:89:01:2a:47:e2:
32:64:d3:75:68:9c:17:05:ab:0f:4e:09:98:61:4a:fd:9d:fd:
1f:68:9e:6f:bd:9e:41:61:61:0c:1c:a7:c3:f7:94:76:97:6d:
97:9d:41:80:74:a8:b7:5f:27:3f:63:5c:fd:cd:02:f1:65:e7:
1a:5e:2b:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:23:28 2026 by rpki-client