Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.mft
File: G95wrxU0lDVJRmSKzWQRY-KvGx0.mft (raw, json)
Hash identifier: 75eHfzDEGnuHu01/vhhs9MIzp9bHVU6oPXsq6s1Ypvs=
Subject key identifier: D4:41:66:28:30:8E:28:9A:91:78:33:FB:F5:50:19:6D:35:73:AC:A9
Authority key identifier: 1B:DE:70:AF:15:34:94:35:49:46:64:8A:CD:64:11:63:E2:AF:1B:1D
Certificate issuer: /CN=1bde70af153494354946648acd641163e2af1b1d
Certificate serial: 01A11A19952CA1C6BB3F0A54F356E830CBF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G95wrxU0lDVJRmSKzWQRY-KvGx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.mft
Manifest number: 0F9D
Signing time: Thu 08 Oct 2026 06:00:46 +0000
Manifest this update: Thu 08 Oct 2026 06:00:46 +0000
Manifest next update: Fri 09 Oct 2026 06:00:46 +0000
Files and hashes: 1: 1-G_9qaTlg9_9ZXzg69NS2bmEGWE.roa (hash: +lDVdHNQmmTIYvQZgxKxtZPdzwOYciN1IB8yFnfGP4A=)
2: G95wrxU0lDVJRmSKzWQRY-KvGx0.crl (hash: 3DYegf5LCcPUziCTcq8iEtCCKRS8Y+FjVy3vyZVJt4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/G95wrxU0lDVJRmSKzWQRY-KvGx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 06:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1a:19:95:2c:a1:c6:bb:3f:0a:54:f3:56:e8:30:cb:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bde70af153494354946648acd641163e2af1b1d
Validity
Not Before: Oct 8 06:00:46 2026 GMT
Not After : Oct 9 06:00:46 2026 GMT
Subject: CN=d4416628308e289a917833fbf550196d3573aca9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:4d:d5:ab:d1:07:13:18:ef:c2:6c:67:19:c9:
7e:cc:9c:54:e1:0f:53:5c:5f:b7:46:98:95:47:2b:
25:ec:f7:77:fb:42:38:8d:3f:2d:a4:e3:2f:2e:85:
18:45:54:89:72:fa:ec:10:c0:78:f6:31:c0:34:bd:
75:a2:de:23:c8:c7:f2:f1:d4:3c:d8:51:ce:e9:be:
ef:b9:15:4f:6c:6c:ed:91:d2:84:83:36:ce:44:4d:
3b:10:01:7d:b9:1c:ba:25:08:67:6c:f2:5f:b3:3d:
7c:b1:86:6f:36:da:a7:90:82:16:8a:b6:15:2c:f7:
b4:1f:b8:f2:26:89:5f:73:1b:7f:09:31:14:c0:76:
03:63:ef:8c:a7:4e:ad:2e:b7:ed:2c:72:5e:2f:b2:
67:8d:83:1b:5c:00:4e:01:9f:36:73:fa:b6:65:fd:
33:51:42:08:3b:80:19:ae:a1:7e:d5:1c:cd:c4:db:
18:dc:dd:58:da:c3:51:3a:09:8c:62:dc:32:11:5e:
37:f7:b1:92:6f:c6:82:62:b1:4a:62:c6:09:65:2d:
c9:1c:b8:9b:4d:fe:e9:66:97:9c:ae:9e:1f:fe:5d:
dc:60:99:39:0e:00:c7:e8:4b:9b:f4:20:36:46:24:
92:54:4f:21:1b:a1:8c:1e:1b:d5:59:bf:c1:e3:aa:
3a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:41:66:28:30:8E:28:9A:91:78:33:FB:F5:50:19:6D:35:73:AC:A9
X509v3 Authority Key Identifier:
keyid:1B:DE:70:AF:15:34:94:35:49:46:64:8A:CD:64:11:63:E2:AF:1B:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G95wrxU0lDVJRmSKzWQRY-KvGx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:de:5a:46:d9:42:77:42:56:62:41:8b:e4:68:11:79:db:43:
e6:73:6e:47:ad:42:52:fb:64:ad:e8:f4:3a:e0:08:9f:a4:6b:
31:1f:7a:e6:7d:f2:25:25:f9:63:f0:a6:45:1c:8b:cc:88:76:
a4:74:d7:50:83:93:ba:ae:d4:73:9f:b8:c9:94:2c:2d:34:eb:
39:28:9e:7b:65:4e:92:93:75:ba:da:65:45:b3:17:a4:df:ca:
d5:6c:57:8f:e4:36:6e:c8:cb:48:5c:bc:c6:94:cf:ec:06:25:
fd:f4:c0:3e:f8:2d:54:c3:bf:d2:5e:5b:f4:b1:0a:19:a2:02:
b3:f6:d6:9a:83:67:18:2b:ad:db:b2:4d:29:08:6c:2b:6f:8b:
0b:c3:33:c8:36:5a:2d:e2:f7:1f:b4:87:9f:5c:b7:f6:e6:a3:
a5:69:43:8c:53:cf:f6:24:e3:40:eb:95:9c:b3:3c:50:9e:e6:
02:5a:0c:d5:f1:5f:a5:ef:b2:f1:00:6e:ec:c8:50:be:83:2a:
e7:47:06:3e:c2:17:b6:f8:8c:8f:78:78:f1:da:5e:9c:85:6b:
1a:63:6f:5c:dd:49:af:c7:8f:4b:57:a7:e5:01:9e:a4:bd:0e:
fb:28:eb:d5:86:43:7c:b5:ad:3f:e4:8d:99:d8:10:bd:15:01:
bb:77:d0:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 17:03:09 2026 by rpki-client