Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft
File: g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft (raw, json)
Hash identifier: YmMO5nhiwUTIm8uKA3bDAY1394dHuLUPrh7Zsby4y5Q=
Subject key identifier: B6:38:10:4A:DC:EB:54:B7:13:6C:7D:5C:51:47:5D:AE:39:1B:9A:48
Authority key identifier: 83:87:C2:19:C9:84:1E:BA:FA:A3:D4:08:06:C9:84:F9:F3:E4:E4:61
Certificate issuer: /CN=8387c219c9841ebafaa3d40806c984f9f3e4e461
Certificate serial: 01A181F4879171DF886F6AC10CF9191B8E0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g4fCGcmEHrr6o9QIBsmE-fPk5GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft
Manifest number: 12D7
Signing time: Wed 28 Oct 2026 10:00:48 +0000
Manifest this update: Wed 28 Oct 2026 10:00:48 +0000
Manifest next update: Thu 29 Oct 2026 10:00:48 +0000
Files and hashes: 1: FiY50YnA9bU0VuqY_xB52WjpoQU.roa (hash: HLxKWl8h4/WN5MAo6nKsQwk0EYZk/ybbMsE7JxuTVx4=)
2: g4fCGcmEHrr6o9QIBsmE-fPk5GE.crl (hash: ZYSMmY033gG158hPAAo5Ypt4xeaOH44gNKbqdzQYtRY=)
3: gp8VTUjNUe2SHA6Nw6jMCrBEmpI.roa (hash: KkGcwa9MsEC5A+egSiEpb4oola97UKCGunqwzbxcwVw=)
4: q6vOzN1DPBf1vx1ss5zgg7dDXIU.roa (hash: pJZycJNT80sKDVuDlXh5Ajg519IZ1fSYiagFEg9PFpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/g4fCGcmEHrr6o9QIBsmE-fPk5GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 10:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:f4:87:91:71:df:88:6f:6a:c1:0c:f9:19:1b:8e:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8387c219c9841ebafaa3d40806c984f9f3e4e461
Validity
Not Before: Oct 28 10:00:48 2026 GMT
Not After : Oct 29 10:00:48 2026 GMT
Subject: CN=b638104adceb54b7136c7d5c51475dae391b9a48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:90:0c:c6:1c:95:d4:89:d6:87:dd:8d:4c:20:
c0:72:4e:b0:4d:f7:c5:d1:6d:18:4c:63:b9:d0:d5:
d4:b2:21:4e:de:34:60:a9:bf:0b:d6:23:da:12:52:
3d:f7:ea:c0:dd:ff:01:c4:5e:f5:dd:e5:18:c0:ae:
27:3d:5c:54:30:ab:6f:ca:e4:c7:26:8c:31:7e:e5:
79:da:e4:ab:78:ca:3f:2e:e7:c4:51:f5:73:c9:c6:
aa:83:8e:17:5f:6e:1f:23:24:d4:cf:9c:d0:44:a4:
26:29:84:69:33:24:d5:b3:77:fc:c5:2c:ec:cb:a0:
6e:e7:6d:66:47:33:3c:de:0d:e8:51:ea:0f:75:8d:
29:4d:39:94:80:1a:99:af:f8:2b:67:13:b2:20:34:
71:11:e0:e5:23:3a:59:2b:17:73:1b:ac:e9:f1:8d:
9f:c5:86:83:11:2a:ab:15:61:5b:d6:40:1e:49:d9:
13:d2:a2:28:37:fe:06:8c:d5:cf:b1:0a:84:48:73:
2b:3d:3f:24:30:60:8e:ed:ad:f9:6a:a2:6a:b8:0a:
f8:fe:61:d4:e2:f0:85:8b:e1:9d:f6:95:d9:0d:0b:
93:71:b7:e6:1e:3f:25:0f:b4:35:31:13:a0:39:f8:
d8:0a:19:e3:a3:2a:4f:a2:0c:96:84:26:1e:66:95:
ea:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:38:10:4A:DC:EB:54:B7:13:6C:7D:5C:51:47:5D:AE:39:1B:9A:48
X509v3 Authority Key Identifier:
keyid:83:87:C2:19:C9:84:1E:BA:FA:A3:D4:08:06:C9:84:F9:F3:E4:E4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g4fCGcmEHrr6o9QIBsmE-fPk5GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:cb:63:d9:8b:e4:c0:9e:2f:fc:be:a7:2d:18:51:f3:2a:3a:
22:bb:e4:c9:54:0a:97:72:f7:37:c6:3c:d5:84:a2:4b:6f:c3:
31:cb:2e:46:fa:e0:0b:4f:49:23:40:9a:e9:a8:fb:74:b8:34:
a5:db:48:bc:ca:0c:6a:a7:48:5a:c3:d1:bd:e9:a7:9b:e6:53:
3b:1f:e3:35:2a:e2:ba:fb:db:1e:a5:96:8c:a3:49:67:2e:8c:
61:bb:31:cf:9b:6b:fc:23:a7:2c:f4:3f:bd:b0:92:5e:2f:c7:
87:fe:09:cc:95:9b:9e:0e:fd:bf:8c:76:b6:e2:1c:62:b8:4d:
0d:8b:9c:28:62:03:c1:f2:78:5f:8e:5b:eb:12:75:1f:1b:57:
8a:8a:ca:7d:c5:93:eb:22:d7:d2:b5:33:29:78:a2:5a:12:7f:
0e:17:14:d2:20:8b:fd:48:48:a5:c8:5d:fe:ff:dd:3f:56:f5:
82:0e:a6:9b:0c:56:03:cb:c6:bf:06:85:c7:82:af:8c:64:af:
8d:41:01:d0:ff:c8:0b:f4:fe:c8:c5:f2:e1:0c:5f:dc:5f:12:
23:bd:d7:9f:cd:ee:50:a1:c6:ce:e5:33:c5:4c:04:aa:0b:c9:
e4:ab:32:01:61:32:ef:05:46:9d:2c:cc:15:cf:e2:ee:ab:e1:
e6:94:d0:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 16:33:56 2026 by rpki-client