Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.mft
File: G_FOjQs977AwQnATDRFHrg3ZLYs.mft (raw, json)
Hash identifier: YWyMQI71KTXbe/TqBbVV2T5bEbowmI4UzWUSsa1YhN8=
Subject key identifier: 9C:2F:BF:47:A8:3D:5A:17:60:FE:FB:29:A2:3C:02:46:11:EF:6C:77
Authority key identifier: 1B:F1:4E:8D:0B:3D:EF:B0:30:42:70:13:0D:11:47:AE:0D:D9:2D:8B
Certificate issuer: /CN=1bf14e8d0b3defb0304270130d1147ae0dd92d8b
Certificate serial: 01A0FBD8B0DDD795414E4513E51AEE88E09E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_FOjQs977AwQnATDRFHrg3ZLYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.mft
Manifest number: 0D7B
Signing time: Fri 02 Oct 2026 09:01:17 +0000
Manifest this update: Fri 02 Oct 2026 09:01:17 +0000
Manifest next update: Sat 03 Oct 2026 09:01:17 +0000
Files and hashes: 1: G_FOjQs977AwQnATDRFHrg3ZLYs.crl (hash: ibHUBhfX0V1Thso9NOM1V/z/i8buDjdEGrAFvlCwJrE=)
2: HM3veogcFYi0WJB7lr909iQ8ZfQ.roa (hash: rEWeHfmczSgGJR8/ER5dg8E/KF7D8W9GBFoejJSi06I=)
3: eqG_Lu9K1qeyCezwmD8iSckpXF8.roa (hash: NNiUw+36eLooMz2fegl+jBJENlw1OVfq6vuvVM1umzI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/G_FOjQs977AwQnATDRFHrg3ZLYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Oct 2026 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fb:d8:b0:dd:d7:95:41:4e:45:13:e5:1a:ee:88:e0:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bf14e8d0b3defb0304270130d1147ae0dd92d8b
Validity
Not Before: Oct 2 09:01:17 2026 GMT
Not After : Oct 3 09:01:17 2026 GMT
Subject: CN=9c2fbf47a83d5a1760fefb29a23c024611ef6c77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b7:3c:ca:c4:53:1b:03:96:78:59:bd:00:a3:
ec:ba:d5:f9:8c:12:3a:02:c5:97:b4:e8:f1:8c:d4:
c7:ce:1e:15:80:2f:d7:fd:a9:6f:ef:37:70:3a:83:
93:27:b8:f4:e3:f6:b6:0c:1a:07:b0:4a:03:5f:41:
5a:39:01:bc:2c:72:89:33:50:1f:39:e3:e8:69:f9:
75:40:a8:43:65:52:f5:42:61:c2:6e:3f:f6:ca:a6:
a8:ac:35:8b:a7:d6:ac:3e:79:3f:4c:df:19:50:60:
0e:f2:e1:e9:20:5a:cf:1a:91:a4:83:2d:cd:eb:3c:
2b:83:a2:e0:5a:b5:89:12:19:c1:7f:34:bf:ca:17:
0a:bd:a8:22:0e:85:05:1d:e4:2a:dd:fe:a6:1f:b0:
6b:ca:bb:6c:4b:9a:ef:32:e0:86:3b:94:75:93:10:
82:12:52:81:8d:ae:f4:35:e5:13:7e:db:75:a2:8d:
a0:c3:89:79:fb:5b:15:7f:00:2b:c5:e4:5c:00:30:
8a:be:e3:25:bf:80:67:e6:33:c8:58:93:96:7a:9b:
d7:c2:2f:fd:16:2d:34:21:84:c3:e6:6b:f0:6c:93:
58:e5:fb:36:d7:be:36:01:e2:d7:c3:2a:c2:d2:2c:
d0:69:d4:be:e4:23:5f:ef:10:ac:22:d9:97:44:e6:
50:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:2F:BF:47:A8:3D:5A:17:60:FE:FB:29:A2:3C:02:46:11:EF:6C:77
X509v3 Authority Key Identifier:
keyid:1B:F1:4E:8D:0B:3D:EF:B0:30:42:70:13:0D:11:47:AE:0D:D9:2D:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_FOjQs977AwQnATDRFHrg3ZLYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:e2:ce:86:5c:20:ff:eb:bc:e9:c7:40:98:9f:c2:da:04:e1:
e6:60:e1:37:22:5d:5f:f6:88:23:aa:44:77:db:16:a4:c5:88:
f2:b1:99:b0:4e:0f:ee:1e:46:1f:01:43:04:4f:5e:80:cf:38:
01:28:da:f9:5e:90:16:4d:61:6f:d5:0f:cb:db:d4:28:42:d7:
d6:e3:e4:a2:1f:e9:65:e4:bb:9e:e1:87:ab:eb:e8:58:8c:86:
dd:44:77:79:3b:64:00:88:dd:c8:bb:f0:06:55:97:c9:86:41:
b0:a0:57:e9:da:da:3a:bb:94:47:04:a9:67:9b:a3:14:76:8f:
de:1f:4f:85:27:df:41:50:d5:8a:e8:31:14:3c:8c:cf:4a:f1:
ab:de:89:c1:49:77:2d:43:85:b6:3b:20:17:74:16:0d:0c:01:
79:87:16:9c:1e:fa:98:b9:42:25:d5:93:f4:46:88:21:20:26:
9e:40:e9:92:4c:04:68:cc:7e:39:8c:16:ac:3b:34:6e:b1:15:
8f:8a:1e:63:d9:ec:60:3a:63:b4:7e:f1:27:43:88:6a:dd:37:
60:9d:99:fc:43:83:59:d1:79:2f:b4:e5:67:26:d0:2e:46:7f:
7a:1f:41:9d:55:5f:82:b3:d4:6d:62:ed:84:43:a2:20:e6:41:
5f:9f:a7:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 18:22:10 2026 by rpki-client