
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft
File: g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft (raw, json)
Hash identifier: IFsI2A5SPrFJQKK2+vdROyVrpHOdlrMD2rjN+Dty8Lc=
Subject key identifier: 2A:F4:A3:A8:C1:90:FE:3F:E4:CD:16:F3:68:74:9A:3B:EA:96:85:F8
Authority key identifier: 83:87:C2:19:C9:84:1E:BA:FA:A3:D4:08:06:C9:84:F9:F3:E4:E4:61
Certificate issuer: /CN=8387c219c9841ebafaa3d40806c984f9f3e4e461
Certificate serial: 019EB957FC4A12878937AFBB7DE7642AFC91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g4fCGcmEHrr6o9QIBsmE-fPk5GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft
Manifest number: 1166
Signing time: Fri 12 Jun 2026 01:00:11 +0000
Manifest this update: Fri 12 Jun 2026 01:00:11 +0000
Manifest next update: Sat 13 Jun 2026 01:00:11 +0000
Files and hashes: 1: FiY50YnA9bU0VuqY_xB52WjpoQU.roa (hash: HLxKWl8h4/WN5MAo6nKsQwk0EYZk/ybbMsE7JxuTVx4=)
2: g4fCGcmEHrr6o9QIBsmE-fPk5GE.crl (hash: 8MLX0LJq+JPUD7s8glfMAjwuUVKXXlp8groWYE4Pq/s=)
3: gp8VTUjNUe2SHA6Nw6jMCrBEmpI.roa (hash: KkGcwa9MsEC5A+egSiEpb4oola97UKCGunqwzbxcwVw=)
4: q6vOzN1DPBf1vx1ss5zgg7dDXIU.roa (hash: pJZycJNT80sKDVuDlXh5Ajg519IZ1fSYiagFEg9PFpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/g4fCGcmEHrr6o9QIBsmE-fPk5GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:57:fc:4a:12:87:89:37:af:bb:7d:e7:64:2a:fc:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8387c219c9841ebafaa3d40806c984f9f3e4e461
Validity
Not Before: Jun 12 01:00:11 2026 GMT
Not After : Jun 13 01:00:11 2026 GMT
Subject: CN=2af4a3a8c190fe3fe4cd16f368749a3bea9685f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:0a:db:95:ab:b0:83:08:10:b7:14:9c:ba:5a:
f7:5c:b8:f8:41:ef:d3:c9:bd:07:dd:c9:99:a5:b6:
5c:95:2d:80:79:15:51:de:0a:7d:48:38:e9:ce:18:
09:5e:1b:85:a3:47:44:71:08:e4:6a:03:ae:b6:f9:
55:4f:c8:12:27:5f:a7:01:94:b8:b9:84:1f:d1:43:
7c:7a:4a:d7:86:0a:6b:b1:0f:79:ff:5b:f6:12:e6:
22:58:1b:f3:4c:d1:c7:c5:3d:5d:dd:6a:84:67:a2:
bb:9d:36:b1:ff:1b:ca:57:a5:6f:40:81:92:5a:b2:
5b:65:73:20:f4:23:b9:b0:59:50:34:a0:ff:15:21:
65:ff:37:d8:22:d2:05:ce:ab:7c:b2:b1:d9:42:59:
0e:cb:24:47:5e:8b:d0:93:25:ef:9c:66:db:87:d9:
c4:bd:99:41:8b:54:2a:19:69:44:56:a3:2f:36:b9:
23:ac:ae:10:e2:eb:71:dc:75:9c:b2:d3:1f:2a:76:
69:c0:23:36:79:3f:91:90:09:e0:85:64:07:79:d4:
a5:84:da:1e:d1:e8:36:ac:7e:dd:65:b4:35:d7:71:
dd:56:e2:a3:a0:52:98:dd:d1:0d:e2:47:4c:41:ea:
3f:2b:85:dd:94:40:11:62:99:02:3a:02:c5:86:71:
e3:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:F4:A3:A8:C1:90:FE:3F:E4:CD:16:F3:68:74:9A:3B:EA:96:85:F8
X509v3 Authority Key Identifier:
keyid:83:87:C2:19:C9:84:1E:BA:FA:A3:D4:08:06:C9:84:F9:F3:E4:E4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g4fCGcmEHrr6o9QIBsmE-fPk5GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:85:60:33:17:80:a3:31:ce:5d:a3:a9:8d:17:17:62:76:8b:
73:11:a8:c2:0f:08:40:0c:19:c6:8a:ad:cf:4b:ff:c0:ec:dd:
dd:50:0a:b4:d1:d1:7f:fc:c6:be:f9:3b:a3:80:f0:71:77:f4:
7e:16:74:e2:ac:14:a1:60:8b:8e:80:33:55:d4:a7:ce:39:56:
67:14:d9:01:6a:63:5c:ff:eb:8b:a9:53:84:18:fb:9f:3a:41:
38:1d:fc:c3:02:04:36:7c:37:40:05:65:02:ec:e8:17:d5:2f:
69:66:ad:10:44:49:6a:e2:8e:5e:dc:1c:70:01:7a:8b:f2:d2:
a6:3c:ca:10:72:a5:75:2e:92:30:86:ce:ff:5d:29:19:8a:03:
db:0a:4c:d7:cd:94:bb:29:f9:00:6c:14:e8:03:b8:05:1f:a4:
4b:18:4d:0d:6c:fb:96:a2:20:55:d7:30:ff:08:13:63:34:c0:
60:6d:67:3a:ea:65:c8:a0:96:96:4d:96:a4:44:e8:fd:17:2e:
11:67:44:de:b4:39:31:76:09:67:76:12:35:71:e4:95:e4:d5:
c8:29:dc:b0:80:0d:16:a8:b1:49:b2:7e:65:09:90:30:40:59:
82:aa:d8:dc:8f:c9:a4:f0:62:c9:1d:75:6f:eb:04:a8:20:70:
ce:fd:ca:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 03:39:33 2026 by rpki-client