Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/g5gORnj87fIiN5FtOxFASJ5QStg.mft
File: g5gORnj87fIiN5FtOxFASJ5QStg.mft (raw, json)
Hash identifier: Oe560HJWJ3yhJjaVXv4KpSxPwgQhqM/wJDF+CRgHuBY=
Subject key identifier: 0E:90:E2:42:0E:5F:49:83:B5:8D:47:F0:5B:5E:01:F6:12:91:E3:77
Authority key identifier: 83:98:0E:46:78:FC:ED:F2:22:37:91:6D:3B:11:40:48:9E:50:4A:D8
Certificate issuer: /CN=83980e4678fcedf22237916d3b1140489e504ad8
Certificate serial: 01A18374FFFB3BF63132C9AC27F155498B81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g5gORnj87fIiN5FtOxFASJ5QStg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/g5gORnj87fIiN5FtOxFASJ5QStg.mft
Manifest number: 0144
Signing time: Wed 28 Oct 2026 17:00:45 +0000
Manifest this update: Wed 28 Oct 2026 17:00:45 +0000
Manifest next update: Thu 29 Oct 2026 17:00:45 +0000
Files and hashes: 1: HVq4LT3LKDiD16ZQHswy0Fh1pd8.roa (hash: IvlmHI6d0Kx6oU0CEcnxanjVK+2m4JyMZI6pRFv0o7k=)
2: ITL4MAGKUDxveTUd4GedM8lre78.roa (hash: P5LTJO/QGvv8WuSP0LT5up/QVyyWT8HjcaJZFTRkLFE=)
3: g5gORnj87fIiN5FtOxFASJ5QStg.crl (hash: cKdyO+nKREA61RcsO5sgjOTQrcZ+8Ox3VGDFdr5OMsk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/g5gORnj87fIiN5FtOxFASJ5QStg.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/g5gORnj87fIiN5FtOxFASJ5QStg.mft
rsync://rpki.ripe.net/repository/DEFAULT/g5gORnj87fIiN5FtOxFASJ5QStg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 17:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:74:ff:fb:3b:f6:31:32:c9:ac:27:f1:55:49:8b:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83980e4678fcedf22237916d3b1140489e504ad8
Validity
Not Before: Oct 28 17:00:45 2026 GMT
Not After : Oct 29 17:00:45 2026 GMT
Subject: CN=0e90e2420e5f4983b58d47f05b5e01f61291e377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:ff:52:26:2e:99:bf:50:ab:43:bc:a1:b6:52:
c5:cf:23:64:6b:08:b0:a1:fa:a7:87:ea:7e:ab:da:
77:bc:37:ac:02:ad:27:b6:9c:a4:1c:ec:76:12:54:
2e:f1:fc:9a:25:8d:9e:52:37:9f:bf:29:49:5e:df:
46:27:02:d8:28:23:e9:c4:3e:76:1c:fb:dd:ee:16:
61:21:e0:b0:e6:a4:e9:fd:b8:ed:c9:7b:40:77:38:
ab:87:c4:aa:a1:cb:f4:3e:de:e9:7d:27:1b:8d:c8:
d4:c2:4a:82:60:cd:dc:87:db:98:fd:36:34:04:53:
14:d4:c8:5a:f8:8c:ec:64:67:99:06:b0:c8:26:0f:
0c:d3:57:a5:8f:b3:33:8e:3e:f9:3f:78:06:39:6e:
9a:14:ad:77:25:cc:15:45:27:ce:67:5d:43:2c:b9:
4d:fc:f3:68:99:a7:b7:c9:d8:d8:2c:92:35:fc:42:
3d:9a:40:f9:7d:2a:07:02:4c:cf:9c:08:7e:a5:33:
59:0d:27:30:0c:45:75:b4:b4:9a:d3:a6:69:e7:ac:
c4:01:ab:b2:61:73:95:fd:3a:b9:c4:29:aa:a6:5a:
0c:e7:74:37:a5:e6:be:92:c7:2b:e3:13:61:f5:52:
8d:b8:1f:2e:e8:1c:53:5d:b1:61:1a:9b:c1:2c:5e:
fd:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:90:E2:42:0E:5F:49:83:B5:8D:47:F0:5B:5E:01:F6:12:91:E3:77
X509v3 Authority Key Identifier:
keyid:83:98:0E:46:78:FC:ED:F2:22:37:91:6D:3B:11:40:48:9E:50:4A:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5gORnj87fIiN5FtOxFASJ5QStg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/g5gORnj87fIiN5FtOxFASJ5QStg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/g5gORnj87fIiN5FtOxFASJ5QStg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:23:33:56:38:9e:f0:62:1d:1a:51:4f:e0:71:4f:8d:34:26:
ba:81:5e:76:95:e5:99:a9:31:84:8d:3e:c9:3d:4a:8e:0c:3d:
84:9b:84:4f:3b:a4:19:8e:cd:d0:d4:f0:82:6c:6c:a3:ab:f2:
ab:13:47:8b:45:05:f5:2f:f8:1d:82:51:3c:aa:5e:d7:0e:58:
05:e3:c1:dc:24:57:44:97:ca:4e:8f:9c:28:b4:a5:a0:1a:54:
aa:1a:0e:fb:d0:38:3e:18:69:17:53:f4:0c:c5:b1:86:1d:47:
90:4d:17:e9:bf:20:ef:25:29:1b:d9:ad:b2:a4:e7:7d:0b:c6:
13:6d:7c:d0:53:f5:b5:40:af:06:00:d8:06:04:58:5c:21:06:
58:59:5f:7c:49:5e:6a:33:49:5d:bf:b6:c0:a5:20:ba:dc:fd:
bc:a9:8b:d5:57:e9:bc:43:63:d8:c2:3f:85:f6:5c:c0:b3:56:
0d:7b:d8:b5:d7:17:0d:f7:4f:78:50:19:cc:8c:24:56:e3:28:
6b:80:69:15:25:19:60:d6:28:78:79:d4:39:e0:78:c0:af:1d:
e8:41:84:6a:1b:67:68:44:5e:e2:fc:b1:6a:1d:3c:53:95:49:
b0:a0:fa:a2:ce:1a:e6:6b:90:13:1e:1a:1c:62:65:fe:96:2c:
74:b2:f7:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 03:14:45 2026 by rpki-client