Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft
File: g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft (raw, json)
Hash identifier: PuBkjih2D9MSlPZ30lea2jN+88BNBHph0/+eOQi862E=
Subject key identifier: 1F:70:71:03:3C:EE:CD:C8:F9:70:9D:8E:CE:83:2A:75:95:96:77:A4
Authority key identifier: 83:87:C2:19:C9:84:1E:BA:FA:A3:D4:08:06:C9:84:F9:F3:E4:E4:61
Certificate issuer: /CN=8387c219c9841ebafaa3d40806c984f9f3e4e461
Certificate serial: 019FA116878C7DB16D5F72BBC1FFAFAE2FF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g4fCGcmEHrr6o9QIBsmE-fPk5GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft
Manifest number: 11DE
Signing time: Mon 27 Jul 2026 01:00:35 +0000
Manifest this update: Mon 27 Jul 2026 01:00:35 +0000
Manifest next update: Tue 28 Jul 2026 01:00:35 +0000
Files and hashes: 1: FiY50YnA9bU0VuqY_xB52WjpoQU.roa (hash: HLxKWl8h4/WN5MAo6nKsQwk0EYZk/ybbMsE7JxuTVx4=)
2: g4fCGcmEHrr6o9QIBsmE-fPk5GE.crl (hash: u/A38s/nnDCj5w7eT9/+HxCarG2As2moUys730sDXpQ=)
3: gp8VTUjNUe2SHA6Nw6jMCrBEmpI.roa (hash: KkGcwa9MsEC5A+egSiEpb4oola97UKCGunqwzbxcwVw=)
4: q6vOzN1DPBf1vx1ss5zgg7dDXIU.roa (hash: pJZycJNT80sKDVuDlXh5Ajg519IZ1fSYiagFEg9PFpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/g4fCGcmEHrr6o9QIBsmE-fPk5GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 01:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:16:87:8c:7d:b1:6d:5f:72:bb:c1:ff:af:ae:2f:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8387c219c9841ebafaa3d40806c984f9f3e4e461
Validity
Not Before: Jul 27 01:00:35 2026 GMT
Not After : Jul 28 01:00:35 2026 GMT
Subject: CN=1f7071033ceecdc8f9709d8ece832a75959677a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:3d:1c:dd:bf:16:15:d4:dd:75:d1:b1:62:71:
24:89:59:1a:53:67:35:7e:79:b1:d1:f5:a0:ec:a5:
3d:57:72:d4:e9:fa:47:5c:8f:94:72:e8:c0:46:f5:
cf:e8:02:59:9a:1c:a7:a2:88:e1:cc:2d:9e:1c:17:
5a:7b:ff:8f:a1:7f:32:53:86:8e:60:e6:75:b0:46:
b3:7b:62:c3:6e:63:9d:cc:27:30:91:fe:f3:c5:29:
56:34:06:a9:09:f0:83:8c:48:be:e8:fb:1a:4c:25:
5d:ae:d7:d2:69:e2:d0:3c:83:4a:69:8a:a5:90:a5:
97:de:89:1d:be:c5:ba:d8:63:7c:58:bf:65:a3:6b:
4c:5d:22:67:43:8e:f4:15:d7:75:b4:83:43:91:88:
c3:32:26:14:a8:e3:ed:1a:40:92:bf:97:7a:1b:bd:
b4:fa:eb:ea:15:be:b4:cd:3f:ce:e8:62:21:f0:ad:
2d:28:bb:68:b3:47:c7:71:f2:09:73:85:ea:a1:9b:
ee:0f:55:db:1e:b3:d9:61:5e:d3:fb:cc:58:c6:f8:
45:2c:bb:74:3f:2a:e8:60:6d:33:2a:37:d3:7b:28:
c1:e5:8d:ac:f5:d9:20:8b:b4:da:7b:99:fa:14:ae:
d9:93:68:7a:81:54:dc:b1:b6:12:e0:1f:8f:90:15:
e2:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:70:71:03:3C:EE:CD:C8:F9:70:9D:8E:CE:83:2A:75:95:96:77:A4
X509v3 Authority Key Identifier:
keyid:83:87:C2:19:C9:84:1E:BA:FA:A3:D4:08:06:C9:84:F9:F3:E4:E4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g4fCGcmEHrr6o9QIBsmE-fPk5GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:dd:95:15:bc:e9:63:7d:4f:a3:c6:67:f5:62:d1:86:e4:7c:
82:5d:83:a5:1b:3d:44:d8:92:49:88:72:12:16:3f:b0:95:9c:
a4:c2:f1:21:49:a1:5a:5c:95:bf:ba:09:3d:a8:2a:98:50:99:
6b:95:e8:b8:5e:56:c3:f5:9d:da:1e:7c:45:34:80:84:35:0c:
d2:22:06:69:f1:e6:58:ea:b1:59:87:6a:69:e9:b0:96:35:4c:
2c:04:f5:8e:7b:b3:eb:f7:3b:ad:1d:54:7f:ab:c6:68:a5:6e:
18:84:1d:56:eb:ae:b3:ac:58:7c:f4:1e:cf:34:49:e5:59:96:
76:ae:52:1a:44:64:af:6b:15:ef:e0:21:bc:23:54:5a:c8:f6:
dd:d1:37:12:ab:42:84:c9:c5:05:af:6f:03:79:42:e3:f2:ec:
1a:b4:b5:22:77:88:2d:da:de:d1:db:20:2c:26:25:f3:ef:ad:
6a:9d:36:54:fe:9a:f6:b4:a9:c9:c1:ab:8a:5b:c1:b5:7b:ac:
dd:72:42:6a:b2:9c:ce:d2:3f:88:1a:93:3d:b6:05:19:d1:98:
d7:ed:b5:c3:11:a1:6e:e6:31:d8:b5:af:88:f5:7f:c0:50:32:
1d:35:28:3f:46:d6:c7:57:e7:58:e7:b6:62:86:fd:f6:33:f9:
25:3e:13:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:27:19 2026 by rpki-client