Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/99b535-c42b-4e01-8793-722294783e9e/1/G3jb8-hZWC_R7aLy3N5UIilRRvE.mft
File: G3jb8-hZWC_R7aLy3N5UIilRRvE.mft (raw, json)
Hash identifier: JjNZvB+3gHcgsVcGVnf81y7F6VuXl1+4y3I1XWlKix0=
Subject key identifier: 5D:BE:84:BC:D5:76:04:69:86:BD:9D:84:90:C1:1B:29:71:AB:94:8C
Authority key identifier: 1B:78:DB:F3:E8:59:58:2F:D1:ED:A2:F2:DC:DE:54:22:29:51:46:F1
Certificate issuer: /CN=1b78dbf3e859582fd1eda2f2dcde5422295146f1
Certificate serial: 01A0EBF92472D40C4CD5CE1295289E47FAAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G3jb8-hZWC_R7aLy3N5UIilRRvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/99b535-c42b-4e01-8793-722294783e9e/1/G3jb8-hZWC_R7aLy3N5UIilRRvE.mft
Manifest number: 1A7B
Signing time: Tue 29 Sep 2026 07:02:48 +0000
Manifest this update: Tue 29 Sep 2026 07:02:48 +0000
Manifest next update: Wed 30 Sep 2026 07:02:48 +0000
Files and hashes: 1: G3jb8-hZWC_R7aLy3N5UIilRRvE.crl (hash: AhAygiDJb3meN75f7ua3Hk0G0jILDXEPLwrMJk51I0M=)
2: a_j0083lOlqZLjjJqW5npMU2K1c.roa (hash: faxoEGXKDneOWfMQo/aCLuHRodBLAUIu/JQekys4GcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/99b535-c42b-4e01-8793-722294783e9e/1/G3jb8-hZWC_R7aLy3N5UIilRRvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/99b535-c42b-4e01-8793-722294783e9e/1/G3jb8-hZWC_R7aLy3N5UIilRRvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/G3jb8-hZWC_R7aLy3N5UIilRRvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 07:02:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:f9:24:72:d4:0c:4c:d5:ce:12:95:28:9e:47:fa:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b78dbf3e859582fd1eda2f2dcde5422295146f1
Validity
Not Before: Sep 29 07:02:48 2026 GMT
Not After : Sep 30 07:02:48 2026 GMT
Subject: CN=5dbe84bcd576046986bd9d8490c11b2971ab948c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:12:b3:a2:52:8f:c2:f2:02:92:9f:a3:7f:f7:
d9:20:12:4c:5c:41:60:6b:85:e8:b5:e4:9b:ac:7a:
7f:7d:b9:e5:2a:96:2c:4a:7f:1e:95:9b:18:34:1f:
eb:1b:56:27:da:82:9c:a6:1e:8f:20:f9:41:86:cc:
b4:cc:d2:2b:98:1b:ca:2f:64:b6:22:09:49:de:ee:
d7:d0:bb:77:cf:1d:ea:6f:b1:b9:7a:c0:b1:d7:b9:
88:32:9d:c8:7a:c2:e0:a8:2e:c9:11:7f:55:14:0b:
84:b4:0b:1e:00:30:15:89:93:aa:8e:39:a0:0c:ce:
e2:a5:c1:83:01:7e:d8:9e:bb:5c:d5:91:b2:0f:5c:
a2:ab:e6:28:42:d0:f2:d3:12:35:55:d8:c9:5d:91:
9d:56:ac:3f:23:24:07:bb:b9:82:37:39:31:74:99:
e8:b4:6e:9d:e6:89:85:71:45:0b:ed:b6:fd:f3:a4:
09:30:db:a3:f6:59:1e:cf:be:e8:9e:43:4f:9d:ca:
f3:f3:35:8d:94:1b:dd:5f:29:4f:03:64:cb:17:53:
0d:46:bc:ed:c2:6c:87:99:bf:57:f0:f0:2c:25:95:
5c:4d:bb:2f:09:cb:f0:31:cb:c9:3f:2f:3c:ca:65:
f1:2b:8f:03:78:1f:81:d5:58:a3:ca:c5:a0:74:22:
94:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:BE:84:BC:D5:76:04:69:86:BD:9D:84:90:C1:1B:29:71:AB:94:8C
X509v3 Authority Key Identifier:
keyid:1B:78:DB:F3:E8:59:58:2F:D1:ED:A2:F2:DC:DE:54:22:29:51:46:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G3jb8-hZWC_R7aLy3N5UIilRRvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/99b535-c42b-4e01-8793-722294783e9e/1/G3jb8-hZWC_R7aLy3N5UIilRRvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/99b535-c42b-4e01-8793-722294783e9e/1/G3jb8-hZWC_R7aLy3N5UIilRRvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:99:12:8b:0e:81:de:72:0f:2c:ab:18:52:3f:e0:73:ce:41:
b4:c9:f5:12:00:b9:87:68:4b:bf:d1:d1:8a:c2:c3:62:b3:1c:
4e:b5:21:1b:03:24:eb:c5:de:21:50:d4:ff:15:5d:6a:0c:42:
66:8d:5a:97:30:07:91:05:7a:1f:e1:8a:c6:83:3c:af:b4:03:
23:b6:84:12:81:b9:d7:ab:b0:61:af:e8:7e:7f:71:1a:62:df:
b2:8e:f1:5a:fc:1a:f2:23:7c:55:9e:fd:2d:32:6f:2d:95:5a:
29:e1:30:8e:aa:db:2b:e9:3d:ed:74:36:fd:06:ed:40:da:9e:
2c:33:39:07:d4:6f:76:71:f8:b8:f9:10:65:07:f4:3c:d6:89:
9a:6d:50:a1:3f:85:51:e3:9c:80:1f:aa:33:76:95:65:fe:4d:
95:e0:d7:44:11:7f:7f:2d:82:ed:b6:6d:fd:ff:1b:15:69:fc:
83:b3:c6:f5:4b:23:a8:62:78:a6:82:89:c1:d5:ed:98:62:c5:
f2:64:47:b0:34:ef:f0:7c:2e:6d:97:76:d0:97:b2:d9:bd:75:
df:59:5f:ec:96:58:42:f6:c5:c8:ae:db:60:5b:d6:08:4f:9e:
6f:fe:9e:fd:cf:f0:82:ec:ae:72:0d:d6:bc:95:3e:c8:75:58:
d7:02:ad:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDr+SRy1AxM1c4SlSieR/qsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiNzhkYmYzZTg1OTU4MmZkMWVkYTJmMmRjZGU1NDIyMjk1
MTQ2ZjEwHhcNMjYwOTI5MDcwMjQ4WhcNMjYwOTMwMDcwMjQ4WjAzMTEwLwYDVQQD
Eyg1ZGJlODRiY2Q1NzYwNDY5ODZiZDlkODQ5MGMxMWIyOTcxYWI5NDhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBKzolKPwvICkp+jf/fZIBJMXEFg
a4XoteSbrHp/fbnlKpYsSn8elZsYNB/rG1Yn2oKcph6PIPlBhsy0zNIrmBvKL2S2
IglJ3u7X0Lt3zx3qb7G5esCx17mIMp3IesLgqC7JEX9VFAuEtAseADAViZOqjjmg
DM7ipcGDAX7Ynrtc1ZGyD1yiq+YoQtDy0xI1VdjJXZGdVqw/IyQHu7mCNzkxdJno
tG6d5omFcUUL7bb986QJMNuj9lkez77onkNPncrz8zWNlBvdXylPA2TLF1MNRrzt
wmyHmb9X8PAsJZVcTbsvCcvwMcvJPy88ymXxK48DeB+B1VijysWgdCKUnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF2+hLzVdgRphr2dhJDBGylxq5SMMB8GA1UdIwQY
MBaAFBt42/PoWVgv0e2i8tzeVCIpUUbxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzNqYjgtaFpXQ19SN2FMeTNONVVJaWxSUnZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC85OWI1MzUtYzQyYi00ZTAxLTg3OTMt
NzIyMjk0NzgzZTllLzEvRzNqYjgtaFpXQ19SN2FMeTNONVVJaWxSUnZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC85OWI1MzUtYzQyYi00ZTAxLTg3OTMtNzIyMjk0NzgzZTll
LzEvRzNqYjgtaFpXQ19SN2FMeTNONVVJaWxSUnZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdpkSiw6B
3nIPLKsYUj/gc85BtMn1EgC5h2hLv9HRisLDYrMcTrUhGwMk68XeIVDU/xVdagxC
Zo1alzAHkQV6H+GKxoM8r7QDI7aEEoG516uwYa/ofn9xGmLfso7xWvwa8iN8VZ79
LTJvLZVaKeEwjqrbK+k97XQ2/QbtQNqeLDM5B9RvdnH4uPkQZQf0PNaJmm1QoT+F
UeOcgB+qM3aVZf5NleDXRBF/fy2C7bZt/f8bFWn8g7PG9UsjqGJ4poKJwdXtmGLF
8mRHsDTv8HwubZd20Jey2b1131lf7JZYQvbFyK7bYFvWCE+eb/6e/c/wguyucg3W
vJU+yHVY1wKtWA==
-----END CERTIFICATE-----
Generated at Tue Sep 29 15:28:55 2026 by rpki-client