Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/g5gORnj87fIiN5FtOxFASJ5QStg.mft
File: g5gORnj87fIiN5FtOxFASJ5QStg.mft (raw, json)
Hash identifier: RGhfBjzu1I+zT91H6ZO0zzdlHY40Rs3A0ZOEJ83rqEs=
Subject key identifier: A5:06:EE:7D:20:D5:E2:94:81:D9:70:3C:92:B4:82:B3:1B:AC:B1:E5
Authority key identifier: 83:98:0E:46:78:FC:ED:F2:22:37:91:6D:3B:11:40:48:9E:50:4A:D8
Certificate issuer: /CN=83980e4678fcedf22237916d3b1140489e504ad8
Certificate serial: 01A09057AA05A0AEDC59787C9A00E146927F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g5gORnj87fIiN5FtOxFASJ5QStg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/g5gORnj87fIiN5FtOxFASJ5QStg.mft
Manifest number: C4
Signing time: Fri 11 Sep 2026 12:00:59 +0000
Manifest this update: Fri 11 Sep 2026 12:00:59 +0000
Manifest next update: Sat 12 Sep 2026 12:00:59 +0000
Files and hashes: 1: KES46lk8wU4dhFv89NhcKEmi-vM.roa (hash: sSJndlld1sP0Se7NuGKbaMt7Q9VWzKyrrn6CaglRzow=)
2: dxkbbmxX8WMKJH5WhnQ57-p4X90.roa (hash: i6/kNCYkfe+S16lTl6/WYXB9fGMN9TWf4ZsR+HsilEU=)
3: g5gORnj87fIiN5FtOxFASJ5QStg.crl (hash: vwPD68yKOmpSmCV5npnGWN1Bvxp+Eu4JrmB0ZoZbekQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/g5gORnj87fIiN5FtOxFASJ5QStg.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/g5gORnj87fIiN5FtOxFASJ5QStg.mft
rsync://rpki.ripe.net/repository/DEFAULT/g5gORnj87fIiN5FtOxFASJ5QStg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:90:57:aa:05:a0:ae:dc:59:78:7c:9a:00:e1:46:92:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83980e4678fcedf22237916d3b1140489e504ad8
Validity
Not Before: Sep 11 12:00:59 2026 GMT
Not After : Sep 12 12:00:59 2026 GMT
Subject: CN=a506ee7d20d5e29481d9703c92b482b31bacb1e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:85:9b:0a:75:ef:c9:39:51:09:1b:28:17:ae:
89:c6:a7:f3:d7:18:0b:2a:75:d5:2d:c1:59:ec:d0:
32:fa:e7:d8:5a:c8:0a:d9:d1:09:fe:6d:8c:bc:76:
4c:57:6f:c7:83:2c:2a:20:ad:79:72:dd:54:4c:9d:
ff:5f:88:be:1d:e4:b4:bc:ad:62:7b:6e:9d:19:66:
3d:09:62:81:0e:0d:65:72:59:7f:9e:37:04:05:ce:
a2:29:8b:19:d4:ab:85:e1:92:13:f5:a4:92:49:86:
e4:c8:3d:84:3f:e4:20:d3:f4:44:d1:1d:26:88:1a:
f9:1c:bd:bb:c5:d0:ec:e5:50:e1:0e:eb:19:4d:c7:
88:b1:a2:b4:7d:1c:fd:fa:d0:a2:35:97:25:a8:5b:
ad:7f:bd:3a:a3:ff:ac:72:e7:2c:60:79:aa:9b:2e:
40:cd:7a:08:ba:ac:a4:26:76:27:26:68:48:19:c0:
9b:b7:f1:87:d5:a2:e3:65:de:f7:0e:a0:78:d3:9c:
02:a3:e2:69:8e:c8:d9:9a:17:e1:32:50:83:fc:45:
fe:95:50:55:0d:33:40:45:44:63:13:5a:00:6d:ca:
d1:09:37:a6:51:00:f5:8e:ff:53:61:5a:2f:32:48:
13:1a:69:eb:a6:7a:34:5e:dd:d6:5c:bf:b0:22:34:
86:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:06:EE:7D:20:D5:E2:94:81:D9:70:3C:92:B4:82:B3:1B:AC:B1:E5
X509v3 Authority Key Identifier:
keyid:83:98:0E:46:78:FC:ED:F2:22:37:91:6D:3B:11:40:48:9E:50:4A:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5gORnj87fIiN5FtOxFASJ5QStg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/g5gORnj87fIiN5FtOxFASJ5QStg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/g5gORnj87fIiN5FtOxFASJ5QStg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:4f:20:3c:28:03:6d:42:8a:df:f7:61:04:c9:76:86:26:aa:
09:2a:8d:57:45:61:a7:3f:c6:4a:d7:18:00:7e:4d:8a:bf:f2:
30:16:98:1d:13:e1:07:2a:05:9c:e7:60:30:f4:41:d3:5b:bb:
25:2f:d3:25:72:c2:b1:98:3e:a1:20:15:9b:23:11:e4:b7:82:
a3:1c:ee:f3:f7:89:79:5c:c8:87:48:d4:bd:24:c8:43:35:ee:
0d:17:1d:ab:ed:49:78:fd:1a:10:8a:8c:55:e9:4b:9d:20:e1:
c6:1e:e1:15:c9:c7:6c:a8:5b:71:94:02:d1:b8:7d:a4:d7:9a:
1a:50:b2:e7:a8:3c:5f:b4:cc:6f:18:8f:c0:d7:60:e3:b3:67:
9a:b5:0a:50:e7:38:fd:1d:59:57:fb:38:be:b2:bf:da:be:22:
43:78:8a:c5:17:11:c7:5a:b1:13:b1:c1:64:09:12:9d:10:db:
6c:72:39:c7:1b:18:65:7c:e4:32:6c:0c:62:74:98:24:b9:1c:
a0:8c:94:85:61:53:3d:eb:4f:7b:77:b8:3b:a2:19:f4:2b:5a:
f3:8e:46:24:a0:7c:bb:23:15:e6:61:c5:0b:82:d8:6a:36:0f:
0a:ad:52:e3:39:41:35:e1:dc:cf:9a:5d:d7:a2:e0:6a:eb:5c:
49:95:1a:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 15:42:40 2026 by rpki-client