Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.mft
File: G_FOjQs977AwQnATDRFHrg3ZLYs.mft (raw, json)
Hash identifier: xMPc3z3FG8OtMaJX1PFc2tbDA3YGSNtTDKIAyx6F2sk=
Subject key identifier: A9:43:2A:4E:00:6E:58:63:A9:FA:9E:A1:04:38:A8:C7:DD:FA:2A:5C
Authority key identifier: 1B:F1:4E:8D:0B:3D:EF:B0:30:42:70:13:0D:11:47:AE:0D:D9:2D:8B
Certificate issuer: /CN=1bf14e8d0b3defb0304270130d1147ae0dd92d8b
Certificate serial: 019D38D3525FA65A01658A7A55657F04C5D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_FOjQs977AwQnATDRFHrg3ZLYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.mft
Manifest number: 0B87
Signing time: Sun 29 Mar 2026 09:01:06 +0000
Manifest this update: Sun 29 Mar 2026 09:01:06 +0000
Manifest next update: Mon 30 Mar 2026 09:01:06 +0000
Files and hashes: 1: G_FOjQs977AwQnATDRFHrg3ZLYs.crl (hash: NSKMyIqZD1J4wnwPS8QnHWo9q4Bzla8LKITl6JgNxKM=)
2: HM3veogcFYi0WJB7lr909iQ8ZfQ.roa (hash: rEWeHfmczSgGJR8/ER5dg8E/KF7D8W9GBFoejJSi06I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/G_FOjQs977AwQnATDRFHrg3ZLYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:52:5f:a6:5a:01:65:8a:7a:55:65:7f:04:c5:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bf14e8d0b3defb0304270130d1147ae0dd92d8b
Validity
Not Before: Mar 29 09:01:06 2026 GMT
Not After : Mar 30 09:01:06 2026 GMT
Subject: CN=a9432a4e006e5863a9fa9ea10438a8c7ddfa2a5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:87:f9:4c:34:52:f9:de:e7:e7:13:1c:54:0a:
d8:a4:22:8a:e4:ee:a3:4b:36:9e:55:b6:bd:09:2f:
fc:aa:2d:d5:54:1c:59:3c:ba:76:e6:71:b0:14:aa:
be:8c:b3:46:70:83:d9:50:fa:35:d8:bc:8b:5a:85:
20:a9:02:ce:10:ca:1f:fa:bb:ed:ce:67:e8:99:e3:
14:1a:5d:8d:c5:6f:af:6f:bc:1d:2f:8a:45:c9:50:
a2:8e:3e:8c:76:62:c0:8b:f9:12:85:4d:ab:1c:f7:
42:45:dc:5a:f6:81:87:22:0d:e1:80:18:8e:d5:8f:
ad:4b:37:d1:a8:d4:41:8c:2b:11:ef:50:04:68:02:
2f:4c:6c:f1:d5:72:d5:af:7f:50:66:3f:fa:7f:c1:
0f:22:ce:59:db:7b:44:af:ab:44:b8:ea:1e:f2:83:
f7:92:ea:46:4c:1a:89:2e:97:a8:98:f2:de:2b:66:
98:12:cc:64:cd:dc:9b:52:89:a6:28:98:5a:8a:c7:
38:d0:e0:5c:fa:7f:9d:8e:be:1e:59:c5:97:1c:8e:
ab:95:da:0b:80:70:e1:f3:58:c3:ab:48:3e:3d:d1:
fa:72:1d:59:dc:be:2d:12:b3:43:23:cb:1c:9c:3a:
a2:32:4d:c4:7b:2a:12:81:3e:35:50:22:5d:f3:18:
50:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:43:2A:4E:00:6E:58:63:A9:FA:9E:A1:04:38:A8:C7:DD:FA:2A:5C
X509v3 Authority Key Identifier:
keyid:1B:F1:4E:8D:0B:3D:EF:B0:30:42:70:13:0D:11:47:AE:0D:D9:2D:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_FOjQs977AwQnATDRFHrg3ZLYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:c7:55:7f:d7:c7:e6:ef:fe:7a:05:1d:f1:ca:a0:1f:cf:49:
9e:73:37:6d:b0:1e:bf:5e:fd:0f:3c:2d:bf:d5:0d:d2:68:a1:
a5:1a:45:9c:3c:6d:38:70:81:7a:6c:04:c0:81:2b:ac:42:91:
5e:8e:19:5c:39:f4:ab:af:b6:63:1b:26:54:62:6a:3a:73:75:
96:34:e6:30:a5:af:ab:c2:cd:a6:0b:fd:37:99:03:32:e5:38:
fa:ce:b9:01:b3:4f:8e:63:1c:b8:30:aa:33:f2:93:60:21:5e:
f3:47:04:6b:dd:6a:76:20:01:8c:f6:66:33:6c:b5:59:94:26:
d1:8f:ae:9d:2b:4e:c0:c8:f8:a3:7b:b4:f9:a3:1d:36:df:71:
79:72:8d:e3:0e:5a:96:59:5d:35:fc:d7:37:30:2c:42:e1:9f:
99:8d:14:a9:92:dc:12:3c:b6:f5:17:7a:bb:76:06:4d:79:25:
59:22:0f:8a:70:41:4f:3c:2a:93:03:89:46:7a:1a:64:06:bd:
9b:c8:55:b0:fe:59:ea:87:71:4c:7b:86:c4:a9:9a:e4:a3:b8:
d0:95:81:36:9c:f2:b7:34:2c:fd:5c:9c:f7:3e:9e:4e:70:bc:
8f:d5:d7:c4:d2:77:a9:93:2d:9c:b3:cf:02:42:98:7b:26:a8:
70:6d:f6:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:27:41 2026 by rpki-client