Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/g5gORnj87fIiN5FtOxFASJ5QStg.mft
File: g5gORnj87fIiN5FtOxFASJ5QStg.mft (raw, json)
Hash identifier: qGfCSdHGNAhYmW0XAgcKfF+ucugFOBSBAU4TxmsK4jc=
Subject key identifier: 8A:36:35:EB:7F:0A:16:FA:5E:F5:FC:09:63:E9:0F:EF:97:86:66:0D
Authority key identifier: 83:98:0E:46:78:FC:ED:F2:22:37:91:6D:3B:11:40:48:9E:50:4A:D8
Certificate issuer: /CN=83980e4678fcedf22237916d3b1140489e504ad8
Certificate serial: 019F9EF26FC80B2BC63F1A3C0F54FCDDDD65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g5gORnj87fIiN5FtOxFASJ5QStg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/g5gORnj87fIiN5FtOxFASJ5QStg.mft
Manifest number: 47
Signing time: Sun 26 Jul 2026 15:01:56 +0000
Manifest this update: Sun 26 Jul 2026 15:01:56 +0000
Manifest next update: Mon 27 Jul 2026 15:01:56 +0000
Files and hashes: 1: KES46lk8wU4dhFv89NhcKEmi-vM.roa (hash: sSJndlld1sP0Se7NuGKbaMt7Q9VWzKyrrn6CaglRzow=)
2: dxkbbmxX8WMKJH5WhnQ57-p4X90.roa (hash: i6/kNCYkfe+S16lTl6/WYXB9fGMN9TWf4ZsR+HsilEU=)
3: g5gORnj87fIiN5FtOxFASJ5QStg.crl (hash: qbd2uhv2DHcU3/4hhR8JS464XBXeTtkrmIQkUFH0svM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/g5gORnj87fIiN5FtOxFASJ5QStg.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/g5gORnj87fIiN5FtOxFASJ5QStg.mft
rsync://rpki.ripe.net/repository/DEFAULT/g5gORnj87fIiN5FtOxFASJ5QStg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9e:f2:6f:c8:0b:2b:c6:3f:1a:3c:0f:54:fc:dd:dd:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83980e4678fcedf22237916d3b1140489e504ad8
Validity
Not Before: Jul 26 15:01:56 2026 GMT
Not After : Jul 27 15:01:56 2026 GMT
Subject: CN=8a3635eb7f0a16fa5ef5fc0963e90fef9786660d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:12:9f:d9:21:2a:c8:42:ce:84:c3:78:90:56:
5e:ec:1d:13:7a:21:b5:ee:0b:81:15:bf:bb:b1:bd:
01:45:8a:6d:ea:28:97:37:bd:91:24:87:18:ac:2b:
c6:eb:09:59:27:67:d0:25:f0:ee:02:17:96:95:18:
62:f4:44:c4:56:c6:ae:c5:49:39:06:53:76:27:92:
65:27:66:ea:67:f2:d4:98:2b:c1:ae:fa:bc:40:94:
4c:75:43:dd:77:76:02:6c:38:a3:2f:39:26:c3:4d:
af:94:be:f7:9b:4f:be:7c:b6:8c:02:d1:98:7a:d3:
5b:6a:6e:17:8b:43:a6:23:52:26:d5:94:76:b2:8b:
01:fa:91:e0:7e:53:02:04:45:b9:8d:f7:8f:24:e3:
3a:a7:dd:99:56:a0:f5:b1:2a:20:b9:43:d9:01:e1:
5f:f2:87:1c:23:08:eb:5d:5e:33:e9:4e:32:40:3c:
ba:27:e7:18:8f:9c:9e:de:4d:58:21:da:9c:8a:3d:
26:05:f4:02:d2:94:46:65:11:f1:d7:44:cf:44:8f:
fd:45:2f:f9:2b:a0:61:b0:1c:44:31:37:df:12:a8:
fc:e4:31:e2:62:56:64:bb:8d:17:71:1e:f4:b4:89:
4a:a1:c9:db:3f:c4:ef:20:4b:1d:37:5b:bf:4e:73:
9e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:36:35:EB:7F:0A:16:FA:5E:F5:FC:09:63:E9:0F:EF:97:86:66:0D
X509v3 Authority Key Identifier:
keyid:83:98:0E:46:78:FC:ED:F2:22:37:91:6D:3B:11:40:48:9E:50:4A:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5gORnj87fIiN5FtOxFASJ5QStg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/g5gORnj87fIiN5FtOxFASJ5QStg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/g5gORnj87fIiN5FtOxFASJ5QStg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:aa:61:6d:b9:21:55:bc:5b:f5:02:ed:3d:ef:60:01:e9:a3:
be:7c:80:85:8e:b7:c4:e5:eb:2b:e2:71:2a:f2:8f:a4:53:02:
c5:d0:da:7f:04:cc:97:97:58:f7:b0:5f:69:3d:41:af:b9:66:
10:e4:92:ba:29:d0:da:d7:f1:77:78:30:b4:cc:54:de:5a:8d:
26:dc:2d:0a:4a:23:97:23:85:c9:29:6c:4c:06:0f:e0:d3:72:
37:86:37:c1:b0:8b:f0:cf:66:8c:18:13:1e:c5:78:ef:73:7c:
b0:f7:19:5d:6f:94:a5:58:ad:1d:62:6e:fb:27:4f:ae:cb:1e:
c5:bf:c3:18:05:e2:11:a7:ae:2f:10:51:ff:13:9d:74:a2:75:
8c:eb:a8:db:a0:32:3e:7c:08:b1:74:35:40:d8:9d:95:9c:f1:
f8:b8:d5:57:fa:7f:bb:d9:02:fe:0d:32:16:38:af:6e:e8:ba:
86:50:f7:a6:a1:54:46:e5:48:a9:af:10:f2:58:0d:4d:61:c5:
c0:a8:4e:63:af:aa:33:97:27:35:45:6d:68:9f:44:dc:fa:11:
99:d3:9d:ca:ae:29:b0:12:9d:aa:97:9d:42:1c:c1:d3:4f:0d:
77:5e:a6:7a:79:3b:29:0e:ec:21:bd:0c:70:c4:67:73:56:5a:
2e:32:e0:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 20:23:25 2026 by rpki-client