Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/77c34c-e460-405f-954e-f641422121d2/1/G1ODFvaFKl08opH096J6zyr3ibg.mft
File: G1ODFvaFKl08opH096J6zyr3ibg.mft (raw, json)
Hash identifier: z/C87rnDC9TDFAX9SBm4wvLUlkMrmJMmeVuMCw3JT5E=
Subject key identifier: D6:CC:82:24:41:4F:3A:24:8A:DD:CB:90:94:59:1D:4D:6D:29:C5:9C
Authority key identifier: 1B:53:83:16:F6:85:2A:5D:3C:A2:91:F4:F7:A2:7A:CF:2A:F7:89:B8
Certificate issuer: /CN=1b538316f6852a5d3ca291f4f7a27acf2af789b8
Certificate serial: 019EFC4B42BB2261A5B50E20182889669C5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G1ODFvaFKl08opH096J6zyr3ibg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/77c34c-e460-405f-954e-f641422121d2/1/G1ODFvaFKl08opH096J6zyr3ibg.mft
Manifest number: 014D
Signing time: Thu 25 Jun 2026 01:00:50 +0000
Manifest this update: Thu 25 Jun 2026 01:00:50 +0000
Manifest next update: Fri 26 Jun 2026 01:00:50 +0000
Files and hashes: 1: 3Vfs46JpS4OIv6juqlsavP8vJjY.asa (hash: sB2s+Xl9S1p4i5AWfMPlsofSMh8d6xFVYKGmtBeEpqw=)
2: G1ODFvaFKl08opH096J6zyr3ibg.crl (hash: K2/qwyYdugm0N019st/y6feQihmWtFKT4zmV/dQ0P+A=)
3: pO4-6JRTb_iUQ3eGXntbc3yEu38.roa (hash: 1+fcU0cN2SSHn14oJqXDeRbJ3y0/io2Qni1kI8nGGxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/77c34c-e460-405f-954e-f641422121d2/1/G1ODFvaFKl08opH096J6zyr3ibg.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/77c34c-e460-405f-954e-f641422121d2/1/G1ODFvaFKl08opH096J6zyr3ibg.mft
rsync://rpki.ripe.net/repository/DEFAULT/G1ODFvaFKl08opH096J6zyr3ibg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fc:4b:42:bb:22:61:a5:b5:0e:20:18:28:89:66:9c:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b538316f6852a5d3ca291f4f7a27acf2af789b8
Validity
Not Before: Jun 25 01:00:50 2026 GMT
Not After : Jun 26 01:00:50 2026 GMT
Subject: CN=d6cc8224414f3a248addcb9094591d4d6d29c59c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:31:50:8d:52:6e:dd:ba:d9:73:e8:61:2c:9d:
a4:67:d0:f4:9b:26:c1:51:ee:58:d3:c9:ac:71:90:
af:47:d9:42:ed:eb:9f:cf:03:0f:1e:63:80:dd:07:
93:50:1c:fc:88:5c:af:a3:d2:6b:9b:09:f4:27:d9:
47:a5:9e:1e:4e:32:9d:50:c4:9e:f6:49:92:75:6c:
a1:7a:0b:fe:16:1f:bc:e2:3d:39:cf:2e:10:ad:55:
4f:e6:13:0e:ad:ba:e8:7e:97:06:2b:92:35:48:27:
3f:66:49:9a:69:d4:41:89:34:e2:00:91:e5:4b:d4:
8a:df:43:1b:e0:11:55:35:18:c2:30:89:80:ae:08:
6d:4b:c5:e6:c5:77:ab:f4:4e:4e:89:1d:72:3a:af:
97:b7:f1:96:a2:17:e5:cb:fe:96:1a:65:7b:93:28:
ce:15:89:4d:12:f7:aa:4c:1a:a4:60:fd:39:75:ab:
17:2f:23:3a:37:1f:71:59:fc:d4:0c:fd:94:f1:f2:
d8:36:22:1b:02:54:20:51:e7:e2:a6:62:a9:13:69:
e4:85:0a:99:05:00:24:bd:cd:6b:7a:89:ea:7d:91:
fd:b6:44:4f:f4:d0:45:18:3c:d1:14:7d:29:2d:c0:
bb:20:f7:ee:a3:ed:7c:49:b2:8f:e3:3c:82:56:6a:
79:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:CC:82:24:41:4F:3A:24:8A:DD:CB:90:94:59:1D:4D:6D:29:C5:9C
X509v3 Authority Key Identifier:
keyid:1B:53:83:16:F6:85:2A:5D:3C:A2:91:F4:F7:A2:7A:CF:2A:F7:89:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G1ODFvaFKl08opH096J6zyr3ibg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/77c34c-e460-405f-954e-f641422121d2/1/G1ODFvaFKl08opH096J6zyr3ibg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/77c34c-e460-405f-954e-f641422121d2/1/G1ODFvaFKl08opH096J6zyr3ibg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:2d:13:74:13:2f:b3:db:e3:76:af:39:81:54:b1:92:40:f1:
56:70:60:aa:3d:6b:b7:0c:20:50:dd:fc:fd:c6:87:f6:76:17:
be:f1:90:4c:a2:13:74:ec:34:a0:c5:53:7f:1a:82:8b:1a:29:
c9:b6:42:a4:3f:05:0c:88:55:5e:e1:b1:d9:bc:9d:6b:6d:a1:
e3:c7:97:5a:12:52:93:6e:92:03:d9:2d:8f:d9:46:2e:e5:0c:
c9:8c:7a:63:1b:65:3b:96:db:b7:ca:7d:df:68:ff:16:27:c6:
c7:38:3d:bb:4e:40:aa:fe:51:c3:4f:95:f0:ec:c3:31:3d:8a:
70:43:1a:8a:c4:c3:a2:54:cd:05:83:d3:27:23:5d:89:22:1b:
6a:84:7f:91:60:05:23:60:8a:64:f8:b8:97:86:9e:4b:65:73:
5b:0d:3e:f3:43:48:f0:c1:06:7b:1e:81:d4:73:ce:27:55:02:
70:c9:ed:e7:9f:74:65:8f:dd:49:be:96:4f:7c:72:ef:2b:4f:
6d:71:0d:05:da:1d:e5:37:74:53:85:ca:05:5b:fa:5f:66:43:
6b:2a:93:3c:bf:d3:09:76:74:17:24:26:75:c6:be:42:fd:15:
4a:19:09:30:22:9e:6a:db:7d:fc:c0:f9:e7:2a:db:a3:01:41:
96:3f:d5:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 08:35:44 2026 by rpki-client