Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/1a300b-ba87-4f38-9db2-550745ccdeb0/1/g95n01Eg9Y_rQvF0KXUkbj6GhYw.mft
File: g95n01Eg9Y_rQvF0KXUkbj6GhYw.mft (raw, json)
Hash identifier: JNuNmeHzlaYQmrDcQlS0jqvflEjSgtSiLB/jRtQvdtk=
Subject key identifier: 23:06:42:A7:6B:F2:CF:B6:4F:A7:44:D0:40:6F:0A:6A:C6:01:7D:8C
Authority key identifier: 83:DE:67:D3:51:20:F5:8F:EB:42:F1:74:29:75:24:6E:3E:86:85:8C
Certificate issuer: /CN=83de67d35120f58feb42f1742975246e3e86858c
Certificate serial: 01A13B5B806E8CA40F8A809A39A73B1C1FD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g95n01Eg9Y_rQvF0KXUkbj6GhYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/1a300b-ba87-4f38-9db2-550745ccdeb0/1/g95n01Eg9Y_rQvF0KXUkbj6GhYw.mft
Manifest number: AB
Signing time: Wed 14 Oct 2026 17:00:14 +0000
Manifest this update: Wed 14 Oct 2026 17:00:14 +0000
Manifest next update: Thu 15 Oct 2026 17:00:14 +0000
Files and hashes: 1: VbKJonlhe1F5DkNoQxo7uZm3120.roa (hash: GBv6fwxw0ftuofIeqMxid8GFdyjI4W6j2/qOfqs8Jmo=)
2: g95n01Eg9Y_rQvF0KXUkbj6GhYw.crl (hash: bEm580vXYCnAMhh+lIpBQ4QNME4T/q/194eK8RhHbf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/1a300b-ba87-4f38-9db2-550745ccdeb0/1/g95n01Eg9Y_rQvF0KXUkbj6GhYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/1a300b-ba87-4f38-9db2-550745ccdeb0/1/g95n01Eg9Y_rQvF0KXUkbj6GhYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/g95n01Eg9Y_rQvF0KXUkbj6GhYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 14:43:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3b:5b:80:6e:8c:a4:0f:8a:80:9a:39:a7:3b:1c:1f:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83de67d35120f58feb42f1742975246e3e86858c
Validity
Not Before: Oct 14 17:00:14 2026 GMT
Not After : Oct 15 17:00:14 2026 GMT
Subject: CN=230642a76bf2cfb64fa744d0406f0a6ac6017d8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5a:0a:f2:db:e7:9f:3b:85:0a:6e:a4:ff:ce:
cf:07:88:ec:da:da:49:e1:7c:c7:c8:9c:69:14:39:
46:a0:c3:a3:4f:a0:13:e8:f2:a1:61:34:44:2d:39:
11:e3:ce:e6:de:6d:c4:7f:ce:6b:eb:4a:b0:ea:1b:
c2:77:bd:ca:e2:fb:3c:9f:79:89:dd:1d:84:5b:fd:
b9:a2:57:9e:29:1c:44:bd:97:50:2f:8d:0f:0e:38:
87:05:b7:e6:c4:62:55:09:5d:85:10:ae:dd:00:5a:
3f:5e:e1:78:e6:bb:5b:12:f8:7a:eb:3b:86:a9:bf:
30:44:b1:59:17:f2:ef:ee:c6:b5:98:08:e6:13:c8:
5c:5b:8a:be:62:67:09:6a:dd:80:28:94:43:88:fb:
55:60:76:e4:26:34:23:16:b3:ba:48:47:bf:48:7a:
b7:29:57:89:95:65:cb:52:af:01:25:0f:78:21:01:
b1:c7:ec:4a:40:c8:48:78:2e:ea:11:90:8c:8b:b2:
3f:17:88:de:09:24:5c:b5:69:be:eb:19:c7:41:3a:
7b:a9:9f:a3:5c:7c:fe:5b:9f:d3:49:e8:b1:d6:a2:
32:bc:f0:16:e3:02:5f:04:62:43:77:c3:3e:32:d5:
f5:58:38:c7:7b:7f:fa:8e:b8:a8:9a:40:45:b2:91:
14:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:06:42:A7:6B:F2:CF:B6:4F:A7:44:D0:40:6F:0A:6A:C6:01:7D:8C
X509v3 Authority Key Identifier:
keyid:83:DE:67:D3:51:20:F5:8F:EB:42:F1:74:29:75:24:6E:3E:86:85:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g95n01Eg9Y_rQvF0KXUkbj6GhYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/1a300b-ba87-4f38-9db2-550745ccdeb0/1/g95n01Eg9Y_rQvF0KXUkbj6GhYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/1a300b-ba87-4f38-9db2-550745ccdeb0/1/g95n01Eg9Y_rQvF0KXUkbj6GhYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:0f:9f:f2:54:45:c4:f5:e1:e1:a5:29:16:06:98:4d:40:7b:
51:3f:43:4f:cf:b1:36:02:03:f8:e9:06:10:e7:b2:ef:43:c2:
16:eb:20:65:f2:97:c3:00:11:bc:fc:e0:ce:be:d6:e4:5b:85:
37:8d:db:e8:8b:6c:53:d6:06:96:88:7b:8a:f4:b7:e9:69:8b:
4a:ab:ec:8d:e7:94:a3:82:ea:f2:b5:de:59:81:d5:b4:bb:c7:
6c:91:a4:5e:33:c3:39:56:bb:bc:bb:7e:51:63:0b:43:00:d8:
34:c5:2c:03:32:51:cd:1b:a5:13:bd:12:68:be:43:4b:41:ec:
d2:17:4f:5b:3a:d4:5c:9d:10:eb:a5:1a:8a:eb:74:fd:59:f7:
79:c9:51:a6:21:3c:6d:19:a9:35:88:07:79:3a:82:d3:36:4b:
7f:68:b9:5c:1a:16:18:31:cb:b5:a7:7b:92:d5:ea:a9:03:c1:
81:bd:30:65:01:18:20:79:1d:2b:f6:06:01:13:ab:14:c2:7d:
ca:3e:6e:85:08:78:29:7f:a3:c7:7f:2f:be:9e:df:51:55:a6:
c4:9d:85:52:f0:c5:6a:76:a8:06:ff:67:f9:93:37:b0:98:d7:
4e:2a:eb:af:7d:79:7a:df:ce:34:41:86:5a:e1:aa:ac:92:ad:
fc:52:ef:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 22:28:33 2026 by rpki-client