
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/a56723-d37c-417b-a8a1-6e22bf436304/1/G_5rmg5omKei6dhNPb9jJ7RT5mI.mft
File: G_5rmg5omKei6dhNPb9jJ7RT5mI.mft (raw, json)
Hash identifier: 7pe1XDa3hn/YIsG5U9+aZqKtDFHX2TSsDviWVDVpJdQ=
Subject key identifier: 77:B3:22:8F:F3:C8:C3:53:79:88:2B:07:62:33:79:83:B4:6A:75:55
Authority key identifier: 1B:FE:6B:9A:0E:68:98:A7:A2:E9:D8:4D:3D:BF:63:27:B4:53:E6:62
Certificate issuer: /CN=1bfe6b9a0e6898a7a2e9d84d3dbf6327b453e662
Certificate serial: 01A0B4D16257EA0FDD294EF8D0E30AE49C6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_5rmg5omKei6dhNPb9jJ7RT5mI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/a56723-d37c-417b-a8a1-6e22bf436304/1/G_5rmg5omKei6dhNPb9jJ7RT5mI.mft
Manifest number: 1A5F
Signing time: Fri 18 Sep 2026 14:00:15 +0000
Manifest this update: Fri 18 Sep 2026 14:00:15 +0000
Manifest next update: Sat 19 Sep 2026 14:00:15 +0000
Files and hashes: 1: G_5rmg5omKei6dhNPb9jJ7RT5mI.crl (hash: 8DwUsuYICWinX5rylQy/bUO4xldcr8eDYt8pej5S6ho=)
2: a3hPdOwSId_u28xBd8rkOIlv6uQ.roa (hash: Ap2RCwOQSh9WDaQFvJ/mvW1z9+S2Nlt5BkUs4q9QkBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/a56723-d37c-417b-a8a1-6e22bf436304/1/G_5rmg5omKei6dhNPb9jJ7RT5mI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/a56723-d37c-417b-a8a1-6e22bf436304/1/G_5rmg5omKei6dhNPb9jJ7RT5mI.mft
rsync://rpki.ripe.net/repository/DEFAULT/G_5rmg5omKei6dhNPb9jJ7RT5mI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 14:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b4:d1:62:57:ea:0f:dd:29:4e:f8:d0:e3:0a:e4:9c:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bfe6b9a0e6898a7a2e9d84d3dbf6327b453e662
Validity
Not Before: Sep 18 14:00:15 2026 GMT
Not After : Sep 19 14:00:15 2026 GMT
Subject: CN=77b3228ff3c8c35379882b0762337983b46a7555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:74:22:b9:a4:61:72:d8:e8:1c:69:6c:7e:36:
c2:5d:b4:dd:82:ff:c1:96:69:16:e9:83:f5:a6:7b:
cd:84:4c:83:d0:04:87:6e:61:fa:a0:0d:76:0c:fd:
2c:90:82:68:23:93:43:aa:77:15:a9:21:24:a5:86:
1c:f6:56:e0:d8:f1:e1:a6:73:b9:84:e5:ae:43:14:
81:8e:6b:0a:8c:f3:ba:3d:25:8d:19:9c:8a:59:42:
58:1e:96:a3:1f:91:22:b9:c6:29:df:6a:b7:cd:b7:
a6:4c:f4:1a:d5:86:b6:d3:a0:92:9a:73:2b:df:cf:
e8:40:e7:6b:1b:70:13:dc:99:0b:fd:96:36:33:32:
ae:88:40:51:fb:3c:3e:c8:0c:ad:70:09:2b:b3:ea:
4b:d5:64:52:3b:99:c0:fc:37:9a:70:19:dd:67:17:
52:4a:54:2e:ff:cb:45:8f:fd:99:2b:9c:8c:22:f2:
5e:6d:8f:07:85:88:2d:4b:4c:16:ff:b6:72:4f:22:
e9:59:6d:34:fc:bd:ed:89:30:3a:23:e3:d9:eb:1d:
4a:28:35:3f:87:34:ef:fa:59:40:41:0f:c4:e1:25:
0a:ae:f5:f9:c5:6c:68:d5:1c:1b:c3:74:2f:a7:db:
d1:40:01:b5:80:7a:18:ce:96:eb:b5:65:71:79:36:
13:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:B3:22:8F:F3:C8:C3:53:79:88:2B:07:62:33:79:83:B4:6A:75:55
X509v3 Authority Key Identifier:
keyid:1B:FE:6B:9A:0E:68:98:A7:A2:E9:D8:4D:3D:BF:63:27:B4:53:E6:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_5rmg5omKei6dhNPb9jJ7RT5mI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/a56723-d37c-417b-a8a1-6e22bf436304/1/G_5rmg5omKei6dhNPb9jJ7RT5mI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/a56723-d37c-417b-a8a1-6e22bf436304/1/G_5rmg5omKei6dhNPb9jJ7RT5mI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:2e:08:f8:ef:da:97:9c:2a:be:5a:bd:b6:8f:1b:96:9d:73:
e8:1b:d7:fd:a4:20:c8:0a:6a:c4:4a:e3:f2:77:9a:6a:b9:e3:
87:c8:da:b6:3b:4d:c5:dc:b1:1b:a9:3c:8d:63:99:b0:61:f9:
26:55:93:f2:2c:d5:ae:f8:c3:33:0e:d5:a3:97:c5:94:33:1f:
20:cc:ff:2c:73:24:c3:8b:d9:a1:20:93:6c:3e:35:d7:a7:36:
d2:b4:72:af:f0:7e:a0:42:e6:a4:25:a1:f4:3b:df:e0:42:7c:
63:2a:a8:ea:53:dc:27:ba:b9:c4:58:e3:7d:ad:b7:e9:6d:d1:
cc:c7:fd:3d:e9:a4:3a:ea:15:39:0a:67:e6:62:31:65:4f:02:
9e:b4:df:ac:11:87:42:b4:61:f3:9f:5d:15:4e:db:20:2d:a2:
e8:f0:82:24:e0:f4:cd:07:7a:b5:06:dd:64:d0:1f:e3:91:aa:
79:d3:84:08:a0:4a:80:57:63:a9:51:cf:3d:8b:d4:78:b4:64:
b2:5d:71:9b:37:09:c3:8d:53:98:6e:38:4f:72:45:25:b3:f2:
b3:c3:e3:99:82:d0:5c:22:f5:c7:00:59:70:41:15:92:af:1b:
f9:d4:f6:ed:42:17:1b:2f:46:66:44:e9:5a:b1:6f:6e:a3:4d:
e1:6e:90:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 20:05:41 2026 by rpki-client