Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.mft
File: G-9aoU0xQMfHxJiPGdqUMesaQPE.mft (raw, json)
Hash identifier: tVCoGOjXsFAkg5jCWNc9KAO+iajAj0zIan6IPW7yrTw=
Subject key identifier: D5:81:5D:51:21:06:E6:03:F6:B9:E5:40:06:CC:5C:BA:08:DB:83:CA
Authority key identifier: 1B:EF:5A:A1:4D:31:40:C7:C7:C4:98:8F:19:DA:94:31:EB:1A:40:F1
Certificate issuer: /CN=1bef5aa14d3140c7c7c4988f19da9431eb1a40f1
Certificate serial: 01A13F02D2515D0297812F56290D55C31433
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-9aoU0xQMfHxJiPGdqUMesaQPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.mft
Manifest number: 1AA6
Signing time: Thu 15 Oct 2026 10:01:51 +0000
Manifest this update: Thu 15 Oct 2026 10:01:51 +0000
Manifest next update: Fri 16 Oct 2026 10:01:51 +0000
Files and hashes: 1: BFSdsbEkPuA-YZXMwRkjbFSBL_4.roa (hash: 7mDFMoZc4IARD+ubLVsfgMsnY5+CrMhB4pwA/xSdkv8=)
2: G-9aoU0xQMfHxJiPGdqUMesaQPE.crl (hash: E91wII/x0Yh3I3Wof7LoyI/rA/DCkvK1snxlDABdZtY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-9aoU0xQMfHxJiPGdqUMesaQPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:02:d2:51:5d:02:97:81:2f:56:29:0d:55:c3:14:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bef5aa14d3140c7c7c4988f19da9431eb1a40f1
Validity
Not Before: Oct 15 10:01:51 2026 GMT
Not After : Oct 16 10:01:51 2026 GMT
Subject: CN=d5815d512106e603f6b9e54006cc5cba08db83ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ce:2e:d0:bc:eb:8a:44:10:14:69:e3:90:58:
54:e9:31:09:77:8b:f6:47:e2:17:72:b7:8c:ac:34:
81:6c:3c:3d:2d:a9:71:54:2a:31:1c:63:06:67:a6:
ae:8a:bb:e3:1e:11:d8:2b:ae:7a:f8:ce:8a:03:1b:
2d:1b:f9:f9:61:e6:16:4d:13:fa:6b:1d:f9:10:e5:
05:44:cc:8b:d6:4c:19:ee:cc:47:de:04:cf:35:81:
3c:9f:82:87:b9:3a:98:a5:3a:4d:05:81:f3:11:0a:
8c:56:b1:07:a7:ec:b2:e9:96:82:06:98:91:89:d2:
51:9a:28:2d:9e:98:71:a2:22:1c:f5:8a:1a:85:81:
25:b3:8b:6a:71:3d:33:9e:fa:c8:46:c9:13:49:f6:
d7:86:19:56:c6:6c:11:2f:42:ce:68:10:0a:0b:fd:
05:1a:a9:83:7c:dd:7e:98:df:8f:94:c9:47:91:bd:
a6:03:29:6c:b6:1d:14:b7:3a:ff:bc:b8:f8:fc:28:
6f:dd:5a:c1:0d:fb:13:bd:34:ca:74:3b:ce:cc:cb:
3b:45:3a:f9:04:69:1c:42:7a:6e:3b:60:1a:58:db:
96:37:ff:0e:67:ce:3e:46:2c:6b:d1:f8:3a:29:aa:
71:89:67:a7:19:31:42:ef:2c:17:f3:52:10:19:95:
83:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:81:5D:51:21:06:E6:03:F6:B9:E5:40:06:CC:5C:BA:08:DB:83:CA
X509v3 Authority Key Identifier:
keyid:1B:EF:5A:A1:4D:31:40:C7:C7:C4:98:8F:19:DA:94:31:EB:1A:40:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-9aoU0xQMfHxJiPGdqUMesaQPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:06:64:39:14:05:00:20:b8:0c:fd:95:4b:b0:8c:79:07:2a:
ef:55:57:6f:0e:33:5f:c2:2b:86:aa:a7:ea:85:3a:65:92:1b:
78:f1:3b:9b:89:e1:2e:17:a2:4c:68:b7:8e:87:c7:04:b0:dc:
98:6f:c4:ba:8f:38:2b:79:8b:c7:2f:c2:26:12:c9:b8:c6:d5:
63:d4:4e:29:b7:65:66:1d:f2:55:81:ed:d1:7e:fc:96:44:4a:
6c:96:bc:26:9f:cc:bc:e6:f4:57:cb:20:62:2c:ca:72:96:24:
2d:91:8a:48:40:14:c1:af:dc:34:80:69:44:cd:41:a6:29:5f:
75:65:1c:58:37:46:97:f4:72:cd:5f:fd:33:dc:cf:29:5a:8a:
46:f6:f2:bf:84:8b:2c:6e:a3:31:a9:b7:1c:2c:76:35:18:84:
8f:6e:4c:95:1e:da:33:7d:f9:4d:c1:c3:05:18:a6:52:e0:76:
06:47:5d:28:8d:b9:73:12:ee:c7:d1:02:7f:1a:77:5a:85:6a:
6c:c3:0b:de:ec:7f:66:24:03:25:b8:61:5e:f6:24:9c:f3:99:
d9:92:19:cc:85:04:1d:ea:0a:b7:68:a3:90:52:54:3a:41:34:
b2:33:38:da:04:bc:2c:9d:bc:3c:96:bf:77:51:57:28:55:5f:
ef:2c:d6:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 18:47:03 2026 by rpki-client