Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft
File: g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft (raw, json)
Hash identifier: zucDJKNFkniDfjYtZt9PL74TrbcT/LWL4ZtFfbY/cy0=
Subject key identifier: D6:E5:DE:B2:BC:57:C5:37:3D:33:42:E6:24:B0:DB:81:6C:84:2C:3A
Authority key identifier: 83:87:C2:19:C9:84:1E:BA:FA:A3:D4:08:06:C9:84:F9:F3:E4:E4:61
Certificate issuer: /CN=8387c219c9841ebafaa3d40806c984f9f3e4e461
Certificate serial: 01A08AC31141DB36FD1FA76D1A5DA2007313
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g4fCGcmEHrr6o9QIBsmE-fPk5GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft
Manifest number: 1257
Signing time: Thu 10 Sep 2026 10:00:34 +0000
Manifest this update: Thu 10 Sep 2026 10:00:34 +0000
Manifest next update: Fri 11 Sep 2026 10:00:34 +0000
Files and hashes: 1: FiY50YnA9bU0VuqY_xB52WjpoQU.roa (hash: HLxKWl8h4/WN5MAo6nKsQwk0EYZk/ybbMsE7JxuTVx4=)
2: g4fCGcmEHrr6o9QIBsmE-fPk5GE.crl (hash: /9fGI1DxYB1zTmdts41rPyyMd7a+oF+cAugDFiHvUTw=)
3: gp8VTUjNUe2SHA6Nw6jMCrBEmpI.roa (hash: KkGcwa9MsEC5A+egSiEpb4oola97UKCGunqwzbxcwVw=)
4: q6vOzN1DPBf1vx1ss5zgg7dDXIU.roa (hash: pJZycJNT80sKDVuDlXh5Ajg519IZ1fSYiagFEg9PFpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/g4fCGcmEHrr6o9QIBsmE-fPk5GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 10:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:c3:11:41:db:36:fd:1f:a7:6d:1a:5d:a2:00:73:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8387c219c9841ebafaa3d40806c984f9f3e4e461
Validity
Not Before: Sep 10 10:00:34 2026 GMT
Not After : Sep 11 10:00:34 2026 GMT
Subject: CN=d6e5deb2bc57c5373d3342e624b0db816c842c3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:aa:cf:7f:4c:74:49:04:34:97:0c:3d:22:e5:
d7:a4:5e:ff:49:e9:78:bc:ce:b1:0a:1b:a3:c3:81:
b2:8d:a1:8b:61:94:17:52:c4:ac:9c:7d:71:8f:dd:
b9:e9:52:28:f5:21:bc:3b:30:d8:2f:48:d8:93:68:
65:e6:06:ab:1f:4d:8e:97:fa:71:f3:cd:ed:14:5d:
d2:90:09:0c:1f:1d:9d:1b:d5:4e:c2:10:96:5b:8d:
65:44:e8:61:47:49:31:b4:30:b9:a4:29:16:34:7e:
e2:4c:99:33:3e:7c:5b:e6:54:4e:92:d6:c6:17:4f:
e8:66:8c:93:a3:b2:e5:a2:08:2c:dd:66:42:71:53:
0b:44:50:d9:26:15:a2:7c:5c:e6:de:28:98:a5:88:
55:2b:58:72:bf:75:77:9a:bc:bd:ab:2e:d6:ff:33:
60:01:29:70:90:fc:a5:1e:c5:1b:ef:7e:4c:18:49:
65:ca:fc:73:24:d5:7b:e2:fc:1c:de:96:38:d7:de:
b8:f5:66:6f:72:22:35:33:de:77:d7:0e:80:6e:9e:
ba:80:a8:d0:3e:c5:b0:83:0f:f7:20:2f:d6:a3:52:
ab:0f:99:d2:1f:89:9f:f0:92:d4:b4:0d:b8:ff:97:
bd:d3:ca:84:7a:68:9c:d7:99:a3:9d:58:fd:a9:af:
95:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:E5:DE:B2:BC:57:C5:37:3D:33:42:E6:24:B0:DB:81:6C:84:2C:3A
X509v3 Authority Key Identifier:
keyid:83:87:C2:19:C9:84:1E:BA:FA:A3:D4:08:06:C9:84:F9:F3:E4:E4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g4fCGcmEHrr6o9QIBsmE-fPk5GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:85:1a:9b:22:5c:41:42:78:2a:a4:54:93:d1:ab:7a:60:79:
51:99:0f:47:09:75:9a:31:72:59:ed:72:f7:68:9e:29:c6:22:
fd:a6:2d:be:7f:05:18:ac:84:90:94:5e:24:11:0c:02:27:13:
96:e6:63:12:9b:12:b8:1a:6c:35:16:8d:08:62:a3:77:9c:bf:
f2:b2:87:00:35:47:fd:53:5f:f3:20:ab:91:1e:d0:f7:cc:94:
23:af:0b:af:c4:a7:c1:af:74:41:2a:17:13:ce:a1:52:07:f9:
49:10:0c:1a:7b:ef:80:aa:1b:4c:4b:06:de:54:05:07:d4:f5:
c3:7b:1e:7e:f0:ae:eb:76:82:79:ba:ec:5f:37:68:b3:5c:91:
83:d9:c4:44:ff:1f:fc:98:ac:08:bd:70:4d:3b:b4:56:55:11:
7a:3a:23:e3:b7:62:32:7a:fe:9d:a0:a9:e8:f3:54:00:66:7e:
0c:6c:b0:b0:79:b4:58:75:c0:03:9d:b1:de:41:00:b1:e3:3b:
34:fb:af:01:89:bb:96:a2:b4:a7:60:3d:a0:76:c8:42:62:b7:
82:e7:f0:42:4f:4f:e6:fa:b1:61:f6:9b:67:5c:ed:a7:fe:8b:
04:93:0a:65:e0:20:42:e3:2a:a6:d7:e0:40:90:04:a1:90:60:
c5:8c:b7:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:39:25 2026 by rpki-client