Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.mft
File: G_FOjQs977AwQnATDRFHrg3ZLYs.mft (raw, json)
Hash identifier: XSbnMX/fxTrEJBXUq2ukhCp5V4cZk1mWTeq0E3zJj0Q=
Subject key identifier: 39:4B:4F:83:F7:03:7C:7E:5F:38:5D:BF:28:8D:E2:8B:E1:66:E1:38
Authority key identifier: 1B:F1:4E:8D:0B:3D:EF:B0:30:42:70:13:0D:11:47:AE:0D:D9:2D:8B
Certificate issuer: /CN=1bf14e8d0b3defb0304270130d1147ae0dd92d8b
Certificate serial: 019E8FEEB225B89CDE546F8333EE4E1D78AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_FOjQs977AwQnATDRFHrg3ZLYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.mft
Manifest number: 0C3A
Signing time: Thu 04 Jun 2026 00:00:45 +0000
Manifest this update: Thu 04 Jun 2026 00:00:45 +0000
Manifest next update: Fri 05 Jun 2026 00:00:45 +0000
Files and hashes: 1: G_FOjQs977AwQnATDRFHrg3ZLYs.crl (hash: ZLbrSl+bWo9iSitUX5vs9z+T0c+2fewSZEnDaQLwCZU=)
2: HM3veogcFYi0WJB7lr909iQ8ZfQ.roa (hash: rEWeHfmczSgGJR8/ER5dg8E/KF7D8W9GBFoejJSi06I=)
3: eqG_Lu9K1qeyCezwmD8iSckpXF8.roa (hash: NNiUw+36eLooMz2fegl+jBJENlw1OVfq6vuvVM1umzI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/G_FOjQs977AwQnATDRFHrg3ZLYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8f:ee:b2:25:b8:9c:de:54:6f:83:33:ee:4e:1d:78:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bf14e8d0b3defb0304270130d1147ae0dd92d8b
Validity
Not Before: Jun 4 00:00:45 2026 GMT
Not After : Jun 5 00:00:45 2026 GMT
Subject: CN=394b4f83f7037c7e5f385dbf288de28be166e138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2c:87:34:03:69:33:62:f5:a8:af:4c:64:0c:
46:f4:ac:38:11:1d:d3:1c:5c:1b:45:21:40:f0:00:
b1:7e:17:fa:ec:5e:1a:4a:e0:05:59:74:03:58:b0:
6c:42:25:04:5e:77:2b:43:fe:73:bd:3c:e8:76:4f:
a9:ff:4b:f4:b2:3c:0d:6b:39:d0:c7:8e:be:e0:36:
60:23:ab:6b:b4:af:fb:68:a5:44:0b:42:73:f5:84:
e1:7c:55:83:0a:77:38:67:34:76:4c:14:41:2d:a6:
e5:4a:72:2a:84:f6:c9:c7:b6:e9:81:98:ce:30:5b:
7d:e6:dd:8f:e7:38:b2:5f:95:a6:37:cf:f4:59:3b:
63:25:1a:da:c8:57:ea:ea:6f:a7:e8:96:9e:b2:04:
3c:ae:27:ed:92:e5:bb:2c:42:bb:e3:0c:7f:94:01:
04:15:1f:2d:71:e9:b7:b2:b1:3e:f3:7d:a6:c2:79:
cc:2b:3a:48:a5:b7:f9:77:48:c0:9d:ff:8a:84:09:
d0:c9:de:5c:83:e8:48:e4:d2:aa:a8:dc:b6:86:12:
97:b8:b6:5f:a5:80:d5:76:41:e7:d3:d5:c1:d9:26:
0c:05:ff:63:d5:03:1e:72:1e:87:84:b6:5d:56:51:
c5:66:a9:eb:9e:d2:b7:a6:55:3e:10:48:0d:be:b5:
4a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:4B:4F:83:F7:03:7C:7E:5F:38:5D:BF:28:8D:E2:8B:E1:66:E1:38
X509v3 Authority Key Identifier:
keyid:1B:F1:4E:8D:0B:3D:EF:B0:30:42:70:13:0D:11:47:AE:0D:D9:2D:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_FOjQs977AwQnATDRFHrg3ZLYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:af:f0:85:9b:ed:f0:a7:e3:b7:75:dd:8a:ba:11:e6:ad:30:
c9:f2:94:1f:18:b0:a6:57:2d:0e:85:ae:cb:ff:2b:f6:35:a7:
ad:00:ea:57:aa:65:ca:4f:f2:03:1a:21:7d:d4:3a:a5:db:e9:
e2:af:5a:58:47:98:3d:2a:de:2b:30:06:8b:ad:7d:11:5e:e4:
d5:61:ff:db:13:5d:08:31:b7:6a:8b:eb:d5:4b:f0:7c:b2:0c:
05:40:ed:4b:43:8d:83:a0:ae:08:5f:50:e4:bc:4b:02:3c:05:
b4:8d:74:06:8a:1d:68:f8:59:2b:ab:da:cd:52:c2:69:72:82:
a0:d4:7a:5b:88:0c:8a:3f:ce:df:fa:79:ec:f0:ce:c8:80:75:
19:09:21:bb:80:39:be:e9:80:ee:08:1d:a7:db:c5:1f:57:cb:
0d:b9:d1:33:35:8f:5b:85:6d:f8:5f:16:71:74:44:33:bf:f6:
c9:cc:d0:52:56:30:12:90:20:6d:61:df:aa:d9:fc:30:0f:05:
9c:be:0a:9d:59:c6:dd:ac:0a:e1:01:a2:73:04:cf:09:c8:9b:
16:1d:f1:72:83:d5:a8:e4:fb:06:db:c4:b0:d3:8f:e2:74:fb:
37:87:f5:3a:16:c8:ce:19:fb:12:3f:70:27:1c:33:43:7b:fe:
5b:0e:9f:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 08:00:49 2026 by rpki-client