Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.mft
File: G_FOjQs977AwQnATDRFHrg3ZLYs.mft (raw, json)
Hash identifier: fl1LlVRcLwmcYlG6ayKZ8scyDiMYWaXlglNSTn3P3bc=
Subject key identifier: C5:98:6B:C6:A6:02:3A:F7:08:33:36:35:93:F0:04:F6:14:09:F6:A0
Authority key identifier: 1B:F1:4E:8D:0B:3D:EF:B0:30:42:70:13:0D:11:47:AE:0D:D9:2D:8B
Certificate issuer: /CN=1bf14e8d0b3defb0304270130d1147ae0dd92d8b
Certificate serial: 019F853205457001CA609D6F92E485C0B35E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_FOjQs977AwQnATDRFHrg3ZLYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.mft
Manifest number: 0CB9
Signing time: Tue 21 Jul 2026 15:01:15 +0000
Manifest this update: Tue 21 Jul 2026 15:01:15 +0000
Manifest next update: Wed 22 Jul 2026 15:01:15 +0000
Files and hashes: 1: G_FOjQs977AwQnATDRFHrg3ZLYs.crl (hash: RneLkigicWM/JZ+1ssjeNFU/tSUnZ+ggz49NLPFOkV8=)
2: HM3veogcFYi0WJB7lr909iQ8ZfQ.roa (hash: rEWeHfmczSgGJR8/ER5dg8E/KF7D8W9GBFoejJSi06I=)
3: eqG_Lu9K1qeyCezwmD8iSckpXF8.roa (hash: NNiUw+36eLooMz2fegl+jBJENlw1OVfq6vuvVM1umzI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/G_FOjQs977AwQnATDRFHrg3ZLYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:32:05:45:70:01:ca:60:9d:6f:92:e4:85:c0:b3:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bf14e8d0b3defb0304270130d1147ae0dd92d8b
Validity
Not Before: Jul 21 15:01:15 2026 GMT
Not After : Jul 22 15:01:15 2026 GMT
Subject: CN=c5986bc6a6023af70833363593f004f61409f6a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:08:6d:71:7d:06:1b:ee:79:d7:85:c4:ed:b5:
b4:4a:f4:fe:72:d5:7d:9c:78:a4:cb:07:17:33:b7:
69:9f:60:db:fd:58:af:c8:4e:f1:67:2b:a0:ee:9e:
05:e8:75:4d:2e:43:7c:dd:b0:14:d3:a0:91:bc:33:
d8:2d:5e:a0:92:25:06:49:d5:79:16:4a:84:c5:49:
fa:cb:4d:1d:5b:f9:c0:8b:d7:cf:11:81:cb:94:4f:
d5:d4:f1:9f:c0:c1:ae:d1:e0:71:8a:30:eb:fd:b9:
4e:35:8c:fe:f7:00:e1:ba:be:1e:06:2a:37:95:6f:
bb:e7:dd:f5:9d:0d:c5:c9:59:8f:3b:0b:d5:8b:bd:
d9:8c:a7:b2:a2:d9:0d:ac:83:74:e6:02:db:67:15:
1a:74:8d:4e:be:ed:70:90:8d:c2:b5:5f:46:76:d9:
7e:45:c3:7b:2a:fc:c1:e5:90:47:b7:46:50:9c:95:
42:96:db:3f:7f:15:d0:d2:32:a4:1c:08:60:88:25:
30:0e:d4:04:8f:97:5f:96:2c:db:89:1c:81:8c:22:
bb:bf:e4:d7:e6:df:50:eb:5d:bc:a4:f1:2e:25:d4:
b9:f8:41:58:bf:05:bf:47:5c:bc:1f:d7:c1:14:c7:
4f:90:71:b4:dc:cb:be:0e:d3:16:83:c2:06:cc:e3:
6a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:98:6B:C6:A6:02:3A:F7:08:33:36:35:93:F0:04:F6:14:09:F6:A0
X509v3 Authority Key Identifier:
keyid:1B:F1:4E:8D:0B:3D:EF:B0:30:42:70:13:0D:11:47:AE:0D:D9:2D:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_FOjQs977AwQnATDRFHrg3ZLYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:91:c5:0a:b1:c0:f8:bf:d6:15:04:f1:63:0f:3f:43:c6:82:
11:65:c4:1b:93:bc:5c:8f:70:26:cd:ac:17:51:13:94:0e:79:
b9:18:2c:b1:c7:c0:85:53:33:f7:96:4f:98:84:8e:11:80:36:
bf:f6:c8:b8:66:00:c1:d6:d9:c3:ff:a1:21:c3:fd:f5:d4:a8:
d1:84:01:ee:a3:e1:1d:51:c8:c9:8b:e0:e6:a2:5b:03:8f:9e:
ac:24:eb:8c:22:aa:c6:87:eb:7a:3b:0d:21:25:91:7d:ec:05:
e2:c3:7a:ff:19:2c:c6:4d:4b:a6:5d:da:83:24:78:f7:5c:a8:
72:ed:af:ab:58:a2:5d:23:b3:99:95:66:1c:45:8e:b9:12:e1:
1a:d1:19:04:db:47:99:60:3c:cd:e2:3f:64:2f:33:76:8a:9b:
69:01:b8:45:4a:02:40:72:6d:84:6a:68:cb:29:1c:c5:29:5e:
c8:75:73:f1:36:ee:26:0d:0a:ed:c8:0e:17:b1:7a:62:80:9d:
05:ad:18:01:6f:0e:c4:9c:26:20:90:85:7c:8e:4b:c1:c3:02:
07:7c:0a:01:12:90:25:bd:e5:15:f1:56:85:b3:15:89:d4:e4:
4c:ec:6f:c8:f0:5c:f4:93:76:39:d3:82:ac:c6:b3:68:5a:ea:
4c:a1:13:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:43:48 2026 by rpki-client