Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/g5gORnj87fIiN5FtOxFASJ5QStg.mft
File: g5gORnj87fIiN5FtOxFASJ5QStg.mft (raw, json)
Hash identifier: EyfbRe/BXifLvNM+ID23BpfPQOd4w/uwsDHCK+KIQxw=
Subject key identifier: DB:42:69:39:2D:8B:10:73:34:06:88:2D:38:B6:7B:CE:7B:9B:70:16
Authority key identifier: 83:98:0E:46:78:FC:ED:F2:22:37:91:6D:3B:11:40:48:9E:50:4A:D8
Certificate issuer: /CN=83980e4678fcedf22237916d3b1140489e504ad8
Certificate serial: 01A185636AA202064B19060108B44374461A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g5gORnj87fIiN5FtOxFASJ5QStg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/g5gORnj87fIiN5FtOxFASJ5QStg.mft
Manifest number: 0145
Signing time: Thu 29 Oct 2026 02:00:47 +0000
Manifest this update: Thu 29 Oct 2026 02:00:47 +0000
Manifest next update: Fri 30 Oct 2026 02:00:47 +0000
Files and hashes: 1: HVq4LT3LKDiD16ZQHswy0Fh1pd8.roa (hash: IvlmHI6d0Kx6oU0CEcnxanjVK+2m4JyMZI6pRFv0o7k=)
2: ITL4MAGKUDxveTUd4GedM8lre78.roa (hash: P5LTJO/QGvv8WuSP0LT5up/QVyyWT8HjcaJZFTRkLFE=)
3: g5gORnj87fIiN5FtOxFASJ5QStg.crl (hash: TaHm5/FKZ4x1+uvoqMJG6rthjzybdlX3j6oz/cVui14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/g5gORnj87fIiN5FtOxFASJ5QStg.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/g5gORnj87fIiN5FtOxFASJ5QStg.mft
rsync://rpki.ripe.net/repository/DEFAULT/g5gORnj87fIiN5FtOxFASJ5QStg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:85:63:6a:a2:02:06:4b:19:06:01:08:b4:43:74:46:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83980e4678fcedf22237916d3b1140489e504ad8
Validity
Not Before: Oct 29 02:00:47 2026 GMT
Not After : Oct 30 02:00:47 2026 GMT
Subject: CN=db4269392d8b10733406882d38b67bce7b9b7016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:65:8b:90:da:55:21:bd:4b:d5:e7:e4:3b:77:
67:a0:0c:73:6a:f4:e9:20:eb:f9:3b:ca:25:b6:27:
dc:16:b8:30:0c:dd:e2:b9:ad:23:59:bb:b9:87:9c:
b8:0a:98:5c:73:0a:c5:5b:17:f4:84:53:db:7a:7e:
a6:c9:d0:80:23:90:67:9d:04:a5:34:ac:85:d9:ed:
00:3e:bc:ab:78:7a:5e:bf:d6:fb:24:09:73:de:7a:
aa:4e:87:03:cc:3a:25:c3:53:23:94:c4:36:4f:16:
1f:94:3c:53:99:d9:dc:c0:1f:d9:fa:81:c4:bd:1a:
56:23:8b:ba:6c:1c:c2:54:6a:13:93:42:32:cb:0c:
81:47:fa:2d:3e:d5:41:af:40:f6:25:67:e6:93:cd:
7d:dc:f0:c4:cd:56:b2:95:da:fb:67:3d:02:5d:8c:
99:a3:e3:b2:36:3e:46:68:15:57:40:a0:86:e3:51:
6b:0a:2b:49:dc:64:6e:ab:5a:46:06:9d:c4:44:12:
f9:ce:8b:d6:03:13:fb:ed:e8:ba:6a:de:9e:14:32:
8c:9c:8f:e5:d4:b7:f0:42:50:15:89:c6:b8:10:6a:
b6:44:a9:9f:03:d2:cb:6e:5f:df:ea:c1:fe:fa:69:
05:b3:51:20:06:ea:f1:e5:e9:8e:bd:8c:34:a3:5d:
53:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:42:69:39:2D:8B:10:73:34:06:88:2D:38:B6:7B:CE:7B:9B:70:16
X509v3 Authority Key Identifier:
keyid:83:98:0E:46:78:FC:ED:F2:22:37:91:6D:3B:11:40:48:9E:50:4A:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5gORnj87fIiN5FtOxFASJ5QStg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/g5gORnj87fIiN5FtOxFASJ5QStg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/g5gORnj87fIiN5FtOxFASJ5QStg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:82:9a:1b:9a:20:fe:f3:7b:d8:db:fc:3f:e0:2c:95:07:b0:
6f:9e:e1:a9:3f:32:b3:40:d1:9f:be:78:f3:f6:70:6e:b7:94:
33:28:cf:f4:89:1b:0c:31:e0:dc:3b:a6:25:9a:d3:5b:53:de:
b1:d7:03:7c:a9:ea:7b:a0:1c:2f:82:05:5b:9b:46:79:2e:38:
f8:6b:3f:df:18:5c:ca:34:5c:73:fa:15:2e:46:46:2e:e9:63:
93:df:21:73:63:7a:27:0f:75:cc:08:2e:b6:4d:d3:24:bc:70:
d1:64:72:71:6d:d4:97:70:f5:d3:5c:97:25:2a:7e:62:29:d6:
de:aa:73:ea:ea:70:b0:19:5b:08:10:79:0c:0e:f7:c8:17:63:
18:67:e2:4d:c0:88:ff:46:99:05:5b:eb:ef:02:6f:a8:a5:38:
92:c0:22:5e:b4:17:8c:d2:56:24:ee:fd:14:a0:73:94:2d:aa:
ba:c5:af:c3:6f:42:1a:8f:d8:ac:1b:72:dd:79:c1:b3:73:eb:
ed:12:24:e0:e1:a4:04:bf:08:ed:c8:3e:93:38:b1:bb:66:13:
26:35:10:2c:76:b9:84:59:de:80:bf:70:52:11:8f:4c:87:70:
d2:c9:5a:1c:79:db:a4:f3:37:b6:7b:8a:14:10:28:95:fa:2d:
d6:39:8a:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGFY2qiAgZLGQYBCLRDdEYaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzOTgwZTQ2NzhmY2VkZjIyMjM3OTE2ZDNiMTE0MDQ4OWU1
MDRhZDgwHhcNMjYxMDI5MDIwMDQ3WhcNMjYxMDMwMDIwMDQ3WjAzMTEwLwYDVQQD
EyhkYjQyNjkzOTJkOGIxMDczMzQwNjg4MmQzOGI2N2JjZTdiOWI3MDE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGWLkNpVIb1L1efkO3dnoAxzavTp
IOv5O8oltifcFrgwDN3iua0jWbu5h5y4CphccwrFWxf0hFPben6mydCAI5BnnQSl
NKyF2e0APryreHpev9b7JAlz3nqqTocDzDolw1MjlMQ2TxYflDxTmdncwB/Z+oHE
vRpWI4u6bBzCVGoTk0IyywyBR/otPtVBr0D2JWfmk8193PDEzVayldr7Zz0CXYyZ
o+OyNj5GaBVXQKCG41FrCitJ3GRuq1pGBp3ERBL5zovWAxP77ei6at6eFDKMnI/l
1LfwQlAVica4EGq2RKmfA9LLbl/f6sH++mkFs1EgBurx5emOvYw0o11TywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNtCaTktixBzNAaILTi2e857m3AWMB8GA1UdIwQY
MBaAFIOYDkZ4/O3yIjeRbTsRQEieUErYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzVnT1Juajg3ZklpTjVGdE94RkFTSjVRU3RnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8yYzJlNjEtNzI3OS00ODNjLTg0NzUt
OWJmMTlkODQyMjBmLzEvZzVnT1Juajg3ZklpTjVGdE94RkFTSjVRU3RnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni8yYzJlNjEtNzI3OS00ODNjLTg0NzUtOWJmMTlkODQyMjBm
LzEvZzVnT1Juajg3ZklpTjVGdE94RkFTSjVRU3RnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK4KaG5og
/vN72Nv8P+AslQewb57hqT8ys0DRn7548/ZwbreUMyjP9IkbDDHg3DumJZrTW1Pe
sdcDfKnqe6AcL4IFW5tGeS44+Gs/3xhcyjRcc/oVLkZGLuljk98hc2N6Jw91zAgu
tk3TJLxw0WRycW3Ul3D101yXJSp+YinW3qpz6upwsBlbCBB5DA73yBdjGGfiTcCI
/0aZBVvr7wJvqKU4ksAiXrQXjNJWJO79FKBzlC2qusWvw29CGo/YrBty3XnBs3Pr
7RIk4OGkBL8I7cg+kzixu2YTJjUQLHa5hFnegL9wUhGPTIdw0slaHHnbpPM3tnuK
FBAolfot1jmKaQ==
-----END CERTIFICATE-----
Generated at Thu Oct 29 05:49:10 2026 by rpki-client