Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.mft
File: G_x3OM0P0OBEf510nOajkEf9y6w.mft (raw, json)
Hash identifier: faVSVnGYB2Lnlid7+gt6jfZ0v74At+73av+e9OPwFhY=
Subject key identifier: F6:41:37:BB:B3:E9:5A:E8:38:97:94:37:47:C6:DA:72:41:A2:4C:EA
Authority key identifier: 1B:FC:77:38:CD:0F:D0:E0:44:7F:9D:74:9C:E6:A3:90:47:FD:CB:AC
Certificate issuer: /CN=1bfc7738cd0fd0e0447f9d749ce6a39047fdcbac
Certificate serial: 019EB76AD8BB6D559972763786462EE1A363
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_x3OM0P0OBEf510nOajkEf9y6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.mft
Manifest number: 1956
Signing time: Thu 11 Jun 2026 16:01:33 +0000
Manifest this update: Thu 11 Jun 2026 16:01:33 +0000
Manifest next update: Fri 12 Jun 2026 16:01:33 +0000
Files and hashes: 1: 2VcsFpRmgA_Z1BeWY4uxeTXBUVc.roa (hash: mUnxfErIPYDX4fuBIeMZdyj/2aTN4t69gc8x5SXXjwg=)
2: G_x3OM0P0OBEf510nOajkEf9y6w.crl (hash: PnFkBb7z6e3cAimOEk6F55QHc1r0w4cLeWDZeJqFwvs=)
3: bU_6jYeoULQ5cmwXMFiWLFBuBqw.roa (hash: RO8BXt2ZgZKfrDL72bFJWFqlC3jg76pa5ceJ9+7Pztg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/G_x3OM0P0OBEf510nOajkEf9y6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:6a:d8:bb:6d:55:99:72:76:37:86:46:2e:e1:a3:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bfc7738cd0fd0e0447f9d749ce6a39047fdcbac
Validity
Not Before: Jun 11 16:01:33 2026 GMT
Not After : Jun 12 16:01:33 2026 GMT
Subject: CN=f64137bbb3e95ae83897943747c6da7241a24cea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9b:45:8c:61:ac:c8:98:9d:dd:01:0a:0c:6c:
95:46:ac:9f:79:8c:32:86:63:5d:f6:28:e3:85:f2:
11:1b:f5:f5:3c:17:82:4d:70:77:8b:e3:60:83:22:
f7:37:9c:29:e1:d8:79:4f:76:63:ee:87:30:89:3d:
cc:0d:6c:96:4e:1b:d0:14:12:18:e7:ea:b6:31:e4:
89:65:df:97:93:1d:a3:19:98:d2:48:61:7c:a9:31:
5e:98:95:77:d7:3b:7a:61:d1:08:a4:84:dc:f3:e7:
c4:0d:fc:80:3c:64:a9:cd:7d:9d:4f:f2:75:8d:4c:
be:3a:2c:42:2d:6f:f5:05:31:1f:3d:a7:20:b3:42:
dd:ef:83:39:70:e4:07:ac:56:b3:b1:ef:27:8b:7c:
08:be:76:bf:1f:1a:34:18:92:39:0a:1b:2f:32:f4:
1a:18:6c:fb:4f:0d:c8:ca:fe:bd:dc:51:4c:71:bd:
be:2a:8a:16:92:ad:04:12:2e:dc:4a:31:2b:46:4f:
0d:50:c4:5d:46:24:da:13:09:a2:ff:71:26:ac:8a:
79:d6:d3:aa:99:50:b4:ff:7b:58:4e:d7:c2:8e:0e:
c2:85:de:f2:20:61:a4:56:38:5a:04:04:3f:98:08:
49:52:59:33:ef:01:30:61:8f:fa:8a:81:20:58:a0:
e1:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:41:37:BB:B3:E9:5A:E8:38:97:94:37:47:C6:DA:72:41:A2:4C:EA
X509v3 Authority Key Identifier:
keyid:1B:FC:77:38:CD:0F:D0:E0:44:7F:9D:74:9C:E6:A3:90:47:FD:CB:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_x3OM0P0OBEf510nOajkEf9y6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:67:af:b4:9d:74:d8:e9:d0:27:73:e6:44:23:c3:f4:9b:fc:
55:9d:18:97:09:85:c9:0e:8b:fe:a8:9a:09:55:ca:b2:02:5e:
d1:39:b7:19:68:36:5e:49:c8:cb:b2:0e:61:60:6d:50:aa:b1:
94:1a:89:6c:38:1f:c5:cc:ab:18:02:b6:74:c5:89:f9:68:00:
a0:66:e5:dc:1f:c4:dd:1e:9d:96:71:d0:d6:e0:b4:57:7a:ba:
4c:bc:ec:9f:c4:7c:58:67:f4:3c:e5:5c:24:d3:1e:67:ed:f9:
13:ab:63:37:a8:d5:b2:e9:db:fa:f6:8b:5d:a2:e8:57:a7:62:
bd:6b:9f:78:65:2f:a2:29:d9:6a:b0:a6:db:ef:c2:e5:da:0d:
8d:53:ed:64:a0:1a:85:da:20:13:ef:6d:b4:b9:b2:f0:60:61:
15:c1:e3:06:5a:fe:4e:4c:e9:4d:86:a1:72:93:be:44:18:67:
22:c3:5c:d0:4a:8e:7e:89:bc:85:b1:06:01:db:72:7b:83:58:
1a:95:a3:d7:2e:13:1b:ea:53:01:22:90:51:72:7e:57:23:64:
95:01:fc:b2:a2:c2:f8:2a:dc:88:39:3c:90:a2:5b:84:06:68:
19:07:a8:f7:4b:cc:f1:0a:cc:70:89:ec:1c:fd:50:3b:27:62:
13:39:f5:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ63ati7bVWZcnY3hkYu4aNjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiZmM3NzM4Y2QwZmQwZTA0NDdmOWQ3NDljZTZhMzkwNDdm
ZGNiYWMwHhcNMjYwNjExMTYwMTMzWhcNMjYwNjEyMTYwMTMzWjAzMTEwLwYDVQQD
EyhmNjQxMzdiYmIzZTk1YWU4Mzg5Nzk0Mzc0N2M2ZGE3MjQxYTI0Y2VhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuptFjGGsyJid3QEKDGyVRqyfeYwy
hmNd9ijjhfIRG/X1PBeCTXB3i+NggyL3N5wp4dh5T3Zj7ocwiT3MDWyWThvQFBIY
5+q2MeSJZd+Xkx2jGZjSSGF8qTFemJV31zt6YdEIpITc8+fEDfyAPGSpzX2dT/J1
jUy+OixCLW/1BTEfPacgs0Ld74M5cOQHrFazse8ni3wIvna/Hxo0GJI5ChsvMvQa
GGz7Tw3Iyv693FFMcb2+KooWkq0EEi7cSjErRk8NUMRdRiTaEwmi/3EmrIp51tOq
mVC0/3tYTtfCjg7Chd7yIGGkVjhaBAQ/mAhJUlkz7wEwYY/6ioEgWKDh+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPZBN7uz6VroOJeUN0fG2nJBokzqMB8GA1UdIwQY
MBaAFBv8dzjND9DgRH+ddJzmo5BH/cusMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR194M09NMFAwT0JFZjUxMG5PYWprRWY5eTZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS83MDhiNGQtYTYzZi00MzlkLTljY2Ut
MTQ4YWJmZjkxOWFkLzEvR194M09NMFAwT0JFZjUxMG5PYWprRWY5eTZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS83MDhiNGQtYTYzZi00MzlkLTljY2UtMTQ4YWJmZjkxOWFk
LzEvR194M09NMFAwT0JFZjUxMG5PYWprRWY5eTZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQWevtJ10
2OnQJ3PmRCPD9Jv8VZ0YlwmFyQ6L/qiaCVXKsgJe0Tm3GWg2XknIy7IOYWBtUKqx
lBqJbDgfxcyrGAK2dMWJ+WgAoGbl3B/E3R6dlnHQ1uC0V3q6TLzsn8R8WGf0POVc
JNMeZ+35E6tjN6jVsunb+vaLXaLoV6divWufeGUvoinZarCm2+/C5doNjVPtZKAa
hdogE+9ttLmy8GBhFcHjBlr+TkzpTYahcpO+RBhnIsNc0EqOfom8hbEGAdtye4NY
GpWj1y4TG+pTASKQUXJ+VyNklQH8sqLC+CrciDk8kKJbhAZoGQeo90vM8QrMcIns
HP1QOydiEzn1Gg==
-----END CERTIFICATE-----
Generated at Thu Jun 11 23:15:41 2026 by rpki-client