Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.mft
File: G_FOjQs977AwQnATDRFHrg3ZLYs.mft (raw, json)
Hash identifier: Pylimb/sFQxrF0hfb7pws6Ty89MeRXmNIG6v0ybCB4w=
Subject key identifier: 15:1D:FB:6D:1C:E5:C3:F7:F1:4A:5D:F4:0E:CC:DB:D2:9C:D4:B9:1C
Authority key identifier: 1B:F1:4E:8D:0B:3D:EF:B0:30:42:70:13:0D:11:47:AE:0D:D9:2D:8B
Certificate issuer: /CN=1bf14e8d0b3defb0304270130d1147ae0dd92d8b
Certificate serial: 01A1039220A970A74E0119D97D7A10F35196
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_FOjQs977AwQnATDRFHrg3ZLYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.mft
Manifest number: 0D7F
Signing time: Sat 03 Oct 2026 21:01:10 +0000
Manifest this update: Sat 03 Oct 2026 21:01:10 +0000
Manifest next update: Sun 04 Oct 2026 21:01:10 +0000
Files and hashes: 1: G_FOjQs977AwQnATDRFHrg3ZLYs.crl (hash: 9FZwH+AzYLCspfTf29CKghoUPR5aj93suo1dmIt3vOU=)
2: HM3veogcFYi0WJB7lr909iQ8ZfQ.roa (hash: rEWeHfmczSgGJR8/ER5dg8E/KF7D8W9GBFoejJSi06I=)
3: eqG_Lu9K1qeyCezwmD8iSckpXF8.roa (hash: NNiUw+36eLooMz2fegl+jBJENlw1OVfq6vuvVM1umzI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/G_FOjQs977AwQnATDRFHrg3ZLYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:03:92:20:a9:70:a7:4e:01:19:d9:7d:7a:10:f3:51:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bf14e8d0b3defb0304270130d1147ae0dd92d8b
Validity
Not Before: Oct 3 21:01:10 2026 GMT
Not After : Oct 4 21:01:10 2026 GMT
Subject: CN=151dfb6d1ce5c3f7f14a5df40eccdbd29cd4b91c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:60:06:a7:29:ad:cc:4d:fb:03:8c:3f:92:a9:
1a:1a:2a:36:7b:6d:a6:6c:7e:e6:92:52:48:20:42:
36:c5:a0:5b:64:fd:71:5a:7a:67:ce:56:c2:9b:e3:
57:99:4e:cd:00:87:93:03:1c:d8:91:35:ef:1d:cb:
1c:48:e9:7d:00:de:f2:00:17:f2:d3:75:e3:2b:c9:
aa:be:7f:31:1f:ba:6a:3b:5d:f5:d4:41:91:56:77:
64:bb:31:c8:99:8c:a3:ec:72:e1:67:3b:3e:19:3e:
2b:bd:d4:6f:92:d4:ec:78:15:33:c1:c5:7e:9d:b0:
d3:b2:e6:12:19:1e:2f:69:5a:d5:b1:57:d8:91:21:
7a:14:79:cb:72:c6:82:28:e1:92:0d:80:02:ed:1d:
e5:0b:3f:96:4b:39:3d:5c:f4:e5:18:da:33:19:93:
0f:02:db:e8:08:48:2e:72:6d:75:30:f9:46:82:a2:
8f:8a:30:81:4e:bd:5a:97:0c:18:8e:6e:c8:d7:61:
6d:fa:45:74:80:6f:de:65:10:1e:31:6b:5d:36:78:
1c:ab:2b:78:d5:8a:21:3b:ae:77:53:2d:17:0f:76:
17:e6:24:78:8e:04:14:2d:75:17:e1:07:08:ce:1b:
5b:e5:12:da:c9:71:d7:67:09:11:ac:93:08:a1:f0:
c3:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:1D:FB:6D:1C:E5:C3:F7:F1:4A:5D:F4:0E:CC:DB:D2:9C:D4:B9:1C
X509v3 Authority Key Identifier:
keyid:1B:F1:4E:8D:0B:3D:EF:B0:30:42:70:13:0D:11:47:AE:0D:D9:2D:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_FOjQs977AwQnATDRFHrg3ZLYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:e4:d5:4c:49:aa:f0:93:7b:84:05:68:d1:9a:cc:7b:26:55:
91:fd:1b:17:c9:03:03:68:5b:79:fe:ca:66:db:1b:d2:58:6e:
ef:8d:6f:54:2e:68:92:4d:d0:71:33:13:56:40:b2:3a:2f:72:
af:87:c9:29:9a:a4:c8:16:23:9b:20:13:8f:5a:c1:45:19:5c:
42:fa:a9:c4:81:69:13:02:9a:03:69:1f:87:4d:da:6f:7d:1b:
4c:80:56:4d:9c:1c:54:27:25:85:3e:d7:4d:32:26:6f:b2:71:
f4:c4:ac:a1:de:ab:52:8b:c8:89:fc:3d:ff:c6:0c:74:aa:49:
81:ed:0e:01:fb:10:44:b3:1a:0e:c2:d1:8d:7c:93:20:81:c2:
c6:21:74:4b:88:3d:20:3e:b8:27:56:12:46:c0:f8:50:ea:15:
67:9f:da:5d:80:10:c9:13:3f:23:ab:48:3e:c3:83:f7:ad:1e:
9a:2e:a6:e5:93:7b:ce:36:b4:87:2c:2e:f8:68:7f:11:b8:67:
7b:60:da:06:09:a3:50:74:f4:b6:8e:e1:ae:1b:7f:1c:fc:78:
87:da:93:ac:5a:e2:f9:e9:03:e0:da:85:d9:2b:f5:ca:2e:ed:
de:ff:2b:cb:f4:e3:59:53:a6:bb:e5:f0:e0:58:1f:a1:05:d5:
48:2b:09:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 02:38:14 2026 by rpki-client