Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.mft
File: G_x3OM0P0OBEf510nOajkEf9y6w.mft (raw, json)
Hash identifier: jSbTiMNcAJb26P/KkYC8rof9lrVY/QUXkN7GD95yDZM=
Subject key identifier: 24:85:F9:2E:09:5B:FF:37:16:1C:5E:4F:A1:56:74:98:40:95:21:23
Authority key identifier: 1B:FC:77:38:CD:0F:D0:E0:44:7F:9D:74:9C:E6:A3:90:47:FD:CB:AC
Certificate issuer: /CN=1bfc7738cd0fd0e0447f9d749ce6a39047fdcbac
Certificate serial: 01A18F7941D170E6C6BAAC7CC18DA341CD6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_x3OM0P0OBEf510nOajkEf9y6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.mft
Manifest number: 1ACF
Signing time: Sat 31 Oct 2026 01:00:50 +0000
Manifest this update: Sat 31 Oct 2026 01:00:50 +0000
Manifest next update: Sun 01 Nov 2026 01:00:50 +0000
Files and hashes: 1: 2VcsFpRmgA_Z1BeWY4uxeTXBUVc.roa (hash: mUnxfErIPYDX4fuBIeMZdyj/2aTN4t69gc8x5SXXjwg=)
2: G_x3OM0P0OBEf510nOajkEf9y6w.crl (hash: qZuPjOXugsPucB00jLl/9rl2cWVAI0mS3v0Zw4AMWg4=)
3: bU_6jYeoULQ5cmwXMFiWLFBuBqw.roa (hash: RO8BXt2ZgZKfrDL72bFJWFqlC3jg76pa5ceJ9+7Pztg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/G_x3OM0P0OBEf510nOajkEf9y6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8f:79:41:d1:70:e6:c6:ba:ac:7c:c1:8d:a3:41:cd:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bfc7738cd0fd0e0447f9d749ce6a39047fdcbac
Validity
Not Before: Oct 31 01:00:50 2026 GMT
Not After : Nov 1 01:00:50 2026 GMT
Subject: CN=2485f92e095bff37161c5e4fa156749840952123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e1:b3:4f:16:7b:b7:de:6d:b0:bd:06:a0:29:
db:a1:73:b6:7a:c8:ff:ee:83:71:a0:13:36:17:dc:
59:bf:88:b6:eb:dd:32:d2:4e:ce:a5:4d:8f:40:22:
fe:cd:29:d1:2f:5b:da:84:83:97:14:04:9e:68:8a:
06:9b:e9:c1:b5:59:e2:fc:ca:98:3a:74:ee:cd:68:
a7:97:ae:5f:43:ad:0b:4e:5f:2e:55:ba:22:fc:3a:
cb:82:48:ab:de:1b:5d:a2:de:ac:25:14:76:84:f5:
c6:9c:4e:f0:41:1c:a5:cf:fe:c0:25:5c:89:3b:9f:
e6:0a:3c:c6:35:a1:3f:27:45:6f:3a:6d:ce:03:52:
d0:02:16:33:b9:d7:3f:7a:1c:69:d4:f6:7a:92:0e:
d9:34:82:41:20:e5:a2:78:3e:73:6d:bc:55:f6:e2:
e4:5a:38:fe:da:7b:6b:58:c5:31:31:25:86:37:f6:
8b:28:07:23:81:28:db:56:b0:b1:61:a8:86:3f:68:
32:cb:e6:77:0d:47:8d:32:27:58:3c:56:64:1a:ff:
0d:bd:1a:71:24:96:43:9e:18:9b:79:0d:fc:02:9e:
07:75:12:99:8c:30:16:6e:27:06:df:01:90:32:53:
3a:30:26:5d:78:81:be:25:51:db:37:8b:86:1f:cb:
29:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:85:F9:2E:09:5B:FF:37:16:1C:5E:4F:A1:56:74:98:40:95:21:23
X509v3 Authority Key Identifier:
keyid:1B:FC:77:38:CD:0F:D0:E0:44:7F:9D:74:9C:E6:A3:90:47:FD:CB:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_x3OM0P0OBEf510nOajkEf9y6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:5a:e3:48:61:32:73:3c:45:f4:70:91:f2:76:f0:1a:03:89:
ae:aa:bd:f9:9c:06:29:7c:84:f5:da:76:f4:de:7f:ca:21:4e:
f3:d7:e6:21:db:e8:f3:61:26:41:bb:47:ab:55:79:46:ed:6e:
53:6c:af:72:b2:86:b5:18:f1:42:93:de:67:b1:1c:1b:69:dc:
5c:3a:17:b5:af:6e:c0:a1:5a:e9:9d:3a:5d:83:5f:9c:5e:6c:
c8:6a:7a:84:f5:71:b1:8e:dc:e7:e8:fe:f7:85:91:d8:2c:61:
d9:63:bb:4f:40:9c:16:3a:eb:fa:ce:65:1e:af:31:68:b1:5e:
d2:8a:dd:11:a8:fe:b8:c1:87:51:46:07:e3:2c:6f:30:4b:ef:
2d:43:4b:0c:9d:5f:f2:ec:21:3a:22:e2:33:21:ec:be:b3:f4:
7c:82:1d:dd:33:98:cc:1e:74:fd:4e:8d:97:98:66:9c:2b:c8:
65:37:c2:bf:ab:6d:b4:16:f5:9c:25:1e:78:76:03:5e:fe:a7:
fa:af:c2:23:9c:40:9f:8a:0d:b0:24:b2:4d:00:f0:6b:e0:d6:
b0:4b:4d:34:fb:ad:48:94:37:54:df:9a:92:0e:12:ab:ae:c2:
de:e5:6b:7a:e6:6b:1d:c4:53:e1:79:6d:4e:fe:2a:25:8e:1e:
ca:40:5d:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 09:41:06 2026 by rpki-client