Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/d8b0c3-3f70-43db-85a4-5be1202367e9/1/G2pafunSGn3UW7v_9DGzZN6gta4.mft
File: G2pafunSGn3UW7v_9DGzZN6gta4.mft (raw, json)
Hash identifier: 2b6XLdAYhPXs2Lvvn32hGSqkluCgidw1y+iLO1s+P5s=
Subject key identifier: 97:5B:57:91:38:4C:0E:C6:4C:D3:54:AF:24:0B:1D:C5:C8:80:2F:0E
Authority key identifier: 1B:6A:5A:7E:E9:D2:1A:7D:D4:5B:BB:FF:F4:31:B3:64:DE:A0:B5:AE
Certificate issuer: /CN=1b6a5a7ee9d21a7dd45bbbfff431b364dea0b5ae
Certificate serial: 019FA2296563BC65A507CDA93D6154601A7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2pafunSGn3UW7v_9DGzZN6gta4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/d8b0c3-3f70-43db-85a4-5be1202367e9/1/G2pafunSGn3UW7v_9DGzZN6gta4.mft
Manifest number: 0BFB
Signing time: Mon 27 Jul 2026 06:00:49 +0000
Manifest this update: Mon 27 Jul 2026 06:00:49 +0000
Manifest next update: Tue 28 Jul 2026 06:00:49 +0000
Files and hashes: 1: G2pafunSGn3UW7v_9DGzZN6gta4.crl (hash: Dhs9nQcir6pxSQ/bvKhWoLsqQrS0ReyL4FViKNxK2LU=)
2: tjiTHEP-kK7YvaF4jOv_5AENFR8.roa (hash: +t1GaH9nJ8B0HL8q2iIaAV18s/F2KC1qzK08FxWPKP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/d8b0c3-3f70-43db-85a4-5be1202367e9/1/G2pafunSGn3UW7v_9DGzZN6gta4.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/d8b0c3-3f70-43db-85a4-5be1202367e9/1/G2pafunSGn3UW7v_9DGzZN6gta4.mft
rsync://rpki.ripe.net/repository/DEFAULT/G2pafunSGn3UW7v_9DGzZN6gta4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 06:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:29:65:63:bc:65:a5:07:cd:a9:3d:61:54:60:1a:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b6a5a7ee9d21a7dd45bbbfff431b364dea0b5ae
Validity
Not Before: Jul 27 06:00:49 2026 GMT
Not After : Jul 28 06:00:49 2026 GMT
Subject: CN=975b5791384c0ec64cd354af240b1dc5c8802f0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:71:a7:4a:d7:d4:89:b4:87:2f:65:5e:89:1f:
ee:aa:e2:ed:60:1b:6d:d7:0a:cb:d3:39:a3:48:02:
c5:eb:ff:ee:eb:a6:9f:af:1e:7b:05:78:29:74:54:
6a:ff:cd:d5:c8:57:28:ee:4a:fa:4f:8d:b5:4e:cf:
fc:84:cc:ce:96:21:ad:1c:1c:0f:3b:68:fa:6c:06:
33:af:17:59:7b:6c:4d:80:3f:e0:98:20:bf:d3:12:
08:99:4e:1d:d2:eb:2d:34:6a:de:90:81:1e:e6:e4:
3c:8e:95:f8:1f:5d:6a:c1:cb:74:00:fb:ae:d8:a3:
52:32:8b:51:db:cd:13:bf:4e:73:7e:dd:9c:48:49:
57:6b:3e:32:e8:c9:9f:3d:19:45:e0:cf:00:f1:31:
be:9a:e5:3a:80:26:30:1f:76:b6:14:04:71:bd:1b:
89:a9:30:c8:e0:1f:0a:0f:ab:3d:8a:cb:90:19:01:
4d:6e:d0:fb:21:26:d9:c1:48:7d:6f:6f:30:bd:b9:
f3:05:7b:f4:d9:7c:ff:cd:32:70:08:eb:85:d4:41:
36:30:71:25:6c:f7:44:99:be:d7:20:01:62:b0:55:
65:b5:86:89:a0:f0:7c:a4:1d:7f:15:42:7f:a5:52:
15:f8:07:b1:be:12:31:49:0e:98:e6:cb:d6:9e:45:
c0:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:5B:57:91:38:4C:0E:C6:4C:D3:54:AF:24:0B:1D:C5:C8:80:2F:0E
X509v3 Authority Key Identifier:
keyid:1B:6A:5A:7E:E9:D2:1A:7D:D4:5B:BB:FF:F4:31:B3:64:DE:A0:B5:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2pafunSGn3UW7v_9DGzZN6gta4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/d8b0c3-3f70-43db-85a4-5be1202367e9/1/G2pafunSGn3UW7v_9DGzZN6gta4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/d8b0c3-3f70-43db-85a4-5be1202367e9/1/G2pafunSGn3UW7v_9DGzZN6gta4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:f8:e2:74:b3:b4:e3:1f:d8:35:59:06:88:1f:60:16:c9:d0:
7f:c7:c0:cd:d5:4e:69:e9:d9:9e:f8:3e:71:f5:a2:4c:59:5d:
de:66:fa:a2:b7:84:c3:48:3f:53:f0:bf:68:1b:99:d5:cb:ed:
0a:7b:92:44:d9:a4:6d:3a:a4:19:00:ef:f5:ee:b6:40:4e:77:
26:b1:1a:a3:2d:38:c5:b8:3a:ff:d5:ba:b4:f5:20:ac:3d:3c:
36:43:24:16:a8:0d:d2:aa:cc:37:35:17:ba:3d:68:2a:60:87:
57:30:e9:42:70:9f:e6:9c:79:4a:b4:b4:96:6b:f8:0e:c3:cb:
54:95:b8:d4:bd:b0:e5:f5:4a:cd:4d:09:31:df:1b:12:a6:c2:
d6:b8:aa:ff:e7:4b:0a:af:e7:8d:8c:2c:11:90:51:f8:22:20:
22:49:a9:69:93:33:51:05:f0:66:65:e8:50:73:ef:72:10:92:
26:52:70:f7:1c:15:da:d9:29:cf:16:e8:cd:e4:b8:9b:20:d8:
42:9f:6b:df:e7:1e:e7:ca:ef:47:ea:e6:58:cc:3f:e4:1f:d5:
24:3b:32:6b:2e:09:73:0e:04:82:73:b1:3e:c1:7e:c3:ab:58:
96:3b:a0:e7:a7:4f:d2:0e:1c:f6:fa:e2:c3:36:8d:e3:09:d7:
a3:71:a8:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+iKWVjvGWlB82pPWFUYBp+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiNmE1YTdlZTlkMjFhN2RkNDViYmJmZmY0MzFiMzY0ZGVh
MGI1YWUwHhcNMjYwNzI3MDYwMDQ5WhcNMjYwNzI4MDYwMDQ5WjAzMTEwLwYDVQQD
Eyg5NzViNTc5MTM4NGMwZWM2NGNkMzU0YWYyNDBiMWRjNWM4ODAyZjBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnGnStfUibSHL2VeiR/uquLtYBtt
1wrL0zmjSALF6//u66afrx57BXgpdFRq/83VyFco7kr6T421Ts/8hMzOliGtHBwP
O2j6bAYzrxdZe2xNgD/gmCC/0xIImU4d0ustNGrekIEe5uQ8jpX4H11qwct0APuu
2KNSMotR280Tv05zft2cSElXaz4y6MmfPRlF4M8A8TG+muU6gCYwH3a2FARxvRuJ
qTDI4B8KD6s9isuQGQFNbtD7ISbZwUh9b28wvbnzBXv02Xz/zTJwCOuF1EE2MHEl
bPdEmb7XIAFisFVltYaJoPB8pB1/FUJ/pVIV+AexvhIxSQ6Y5svWnkXA/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJdbV5E4TA7GTNNUryQLHcXIgC8OMB8GA1UdIwQY
MBaAFBtqWn7p0hp91Fu7//Qxs2TeoLWuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzJwYWZ1blNHbjNVVzd2XzlER3paTjZndGE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9kOGIwYzMtM2Y3MC00M2RiLTg1YTQt
NWJlMTIwMjM2N2U5LzEvRzJwYWZ1blNHbjNVVzd2XzlER3paTjZndGE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi9kOGIwYzMtM2Y3MC00M2RiLTg1YTQtNWJlMTIwMjM2N2U5
LzEvRzJwYWZ1blNHbjNVVzd2XzlER3paTjZndGE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtPjidLO0
4x/YNVkGiB9gFsnQf8fAzdVOaenZnvg+cfWiTFld3mb6oreEw0g/U/C/aBuZ1cvt
CnuSRNmkbTqkGQDv9e62QE53JrEaoy04xbg6/9W6tPUgrD08NkMkFqgN0qrMNzUX
uj1oKmCHVzDpQnCf5px5SrS0lmv4DsPLVJW41L2w5fVKzU0JMd8bEqbC1riq/+dL
Cq/njYwsEZBR+CIgIkmpaZMzUQXwZmXoUHPvchCSJlJw9xwV2tkpzxbozeS4myDY
Qp9r3+ce58rvR+rmWMw/5B/VJDsyay4Jcw4EgnOxPsF+w6tYljug56dP0g4c9vri
wzaN4wnXo3GojQ==
-----END CERTIFICATE-----
Generated at Mon Jul 27 11:04:09 2026 by rpki-client