Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/1972a2-3b6f-4316-ab7e-a0bcc912d735/1/G-o-mbuw3aeAhCGaYTSS5ebZtFo.mft
File: G-o-mbuw3aeAhCGaYTSS5ebZtFo.mft (raw, json)
Hash identifier: nF4K+KctnB3BDa4f/w3lBtzeWqsctozjKYP+m8eF/Ek=
Subject key identifier: CA:31:85:61:D2:97:CF:08:82:1E:4F:06:99:17:D6:5C:85:35:94:3C
Authority key identifier: 1B:EA:3E:99:BB:B0:DD:A7:80:84:21:9A:61:34:92:E5:E6:D9:B4:5A
Certificate issuer: /CN=1bea3e99bbb0dda78084219a613492e5e6d9b45a
Certificate serial: 019E4EB3ED92838B81A9CCA2F7C1053696EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-o-mbuw3aeAhCGaYTSS5ebZtFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/1972a2-3b6f-4316-ab7e-a0bcc912d735/1/G-o-mbuw3aeAhCGaYTSS5ebZtFo.mft
Manifest number: 03D5
Signing time: Fri 22 May 2026 08:01:15 +0000
Manifest this update: Fri 22 May 2026 08:01:15 +0000
Manifest next update: Sat 23 May 2026 08:01:15 +0000
Files and hashes: 1: G-o-mbuw3aeAhCGaYTSS5ebZtFo.crl (hash: s7UP/G3rr2r4eo9OkqUsobA10RqX5tDIIgu4LTwpmVQ=)
2: gKtJxrK81I9Dyc2P943nU7n_NFg.roa (hash: FbX29T2UzXYU9Jzwc1cwk5IktOA+UziqBTJuxuNpfOg=)
3: mNtB-xH-QhdKLqJsjGj6xp9WKiw.roa (hash: hEJab2DxVlPrR69lL6u2AYQEme1levJMaPuY085myQg=)
4: rgz-y7ThQzU-4VqCfX9Ota3d-p0.roa (hash: piFE9GnT4z5N6g/l0DAbRB4nCDUBJdWgytzAmBqGihU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/1972a2-3b6f-4316-ab7e-a0bcc912d735/1/G-o-mbuw3aeAhCGaYTSS5ebZtFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/1972a2-3b6f-4316-ab7e-a0bcc912d735/1/G-o-mbuw3aeAhCGaYTSS5ebZtFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-o-mbuw3aeAhCGaYTSS5ebZtFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 May 2026 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4e:b3:ed:92:83:8b:81:a9:cc:a2:f7:c1:05:36:96:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bea3e99bbb0dda78084219a613492e5e6d9b45a
Validity
Not Before: May 22 08:01:15 2026 GMT
Not After : May 23 08:01:15 2026 GMT
Subject: CN=ca318561d297cf08821e4f069917d65c8535943c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:22:b4:21:f1:43:c6:8f:14:be:a0:40:d9:31:
1a:89:48:f6:79:68:3f:dd:8a:07:87:90:c2:a3:d7:
8c:4c:06:f7:c5:c8:16:61:a0:5b:9d:8b:04:77:85:
f6:f5:bf:6b:d4:20:dc:49:9b:44:a4:6b:21:77:62:
76:17:15:bf:41:c8:24:65:f9:8d:95:02:6d:e5:cf:
a1:26:91:dd:0a:ee:de:5d:cc:d8:8b:2b:e9:fa:2d:
28:55:72:5c:78:40:03:f7:83:fa:ef:87:b8:9e:88:
1d:ba:19:55:e6:d2:ca:96:4d:43:26:35:84:be:00:
6a:66:7e:ab:26:61:01:6d:7a:1b:11:0b:5a:39:13:
6c:7b:f9:09:85:0f:5b:71:84:d2:70:e3:31:24:74:
69:6e:be:10:06:62:71:ea:b2:a4:00:65:a3:4a:12:
3a:76:8f:21:a9:36:2e:c2:89:bb:df:18:27:b6:90:
0c:10:79:2a:31:0e:0f:90:37:17:31:43:f5:76:d8:
d1:23:28:1b:11:c4:1b:91:e6:c3:e0:d5:1e:24:ef:
24:42:25:1c:82:e6:d5:54:59:bc:59:bb:78:b1:49:
7b:12:85:58:60:2d:8a:cc:73:76:28:6e:8f:bc:78:
0d:98:0e:3f:57:ed:c7:c7:5a:cb:73:53:07:e9:54:
ff:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:31:85:61:D2:97:CF:08:82:1E:4F:06:99:17:D6:5C:85:35:94:3C
X509v3 Authority Key Identifier:
keyid:1B:EA:3E:99:BB:B0:DD:A7:80:84:21:9A:61:34:92:E5:E6:D9:B4:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-o-mbuw3aeAhCGaYTSS5ebZtFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/1972a2-3b6f-4316-ab7e-a0bcc912d735/1/G-o-mbuw3aeAhCGaYTSS5ebZtFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/1972a2-3b6f-4316-ab7e-a0bcc912d735/1/G-o-mbuw3aeAhCGaYTSS5ebZtFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:43:b1:b0:dd:29:5f:5d:83:ad:1b:b6:01:a6:92:25:d4:7e:
e0:8d:ea:4d:5e:2f:94:28:b7:0c:2f:5e:cc:07:e4:69:48:7c:
f9:66:cc:89:af:83:74:14:0b:04:aa:23:b6:c0:d4:fd:de:b8:
d5:ea:40:48:75:64:70:e5:6a:dd:9c:d9:ad:b4:7f:7e:15:3f:
24:ac:9e:27:dc:96:f6:97:8a:68:29:3b:0f:e5:40:e7:61:fe:
9e:8a:c7:99:2b:28:62:ec:c6:56:8f:c0:f9:5f:64:1f:cc:d8:
e2:ce:99:b1:ef:94:db:42:7a:7d:4b:a8:42:b7:e0:51:ef:c1:
24:10:21:5b:66:91:d1:a2:ec:a3:8e:2e:54:8b:45:cb:c7:44:
c3:4b:19:84:1b:1d:74:ed:c5:93:9a:f5:11:e2:eb:e4:a0:3c:
b3:d5:66:fd:3b:bd:ec:fd:92:9e:5a:28:e6:57:55:1e:c5:61:
28:c7:d0:43:50:59:33:38:42:7a:93:d3:87:4d:96:f1:d6:45:
b8:40:86:03:7d:46:f9:8c:69:b4:65:73:de:48:cc:f8:0f:9d:
a2:20:96:62:6a:ad:33:54:cd:96:63:1f:f3:1b:3d:a9:98:ea:
b2:76:6c:b2:0d:92:12:a8:ac:6e:57:f0:18:8a:52:34:13:95:
3d:e9:9b:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 15:16:55 2026 by rpki-client