Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.mft
File: G_x3OM0P0OBEf510nOajkEf9y6w.mft (raw, json)
Hash identifier: dcptwCYFIL07Go+cLJKFTWac79xM66ARYotwtMXsgwY=
Subject key identifier: FE:ED:01:9F:79:A0:A6:3E:20:F2:47:69:C8:AD:B9:0F:58:53:45:75
Authority key identifier: 1B:FC:77:38:CD:0F:D0:E0:44:7F:9D:74:9C:E6:A3:90:47:FD:CB:AC
Certificate issuer: /CN=1bfc7738cd0fd0e0447f9d749ce6a39047fdcbac
Certificate serial: 01A19355C24622D7C3FBF57657E61480185B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_x3OM0P0OBEf510nOajkEf9y6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.mft
Manifest number: 1AD1
Signing time: Sat 31 Oct 2026 19:00:33 +0000
Manifest this update: Sat 31 Oct 2026 19:00:33 +0000
Manifest next update: Sun 01 Nov 2026 19:00:33 +0000
Files and hashes: 1: 2VcsFpRmgA_Z1BeWY4uxeTXBUVc.roa (hash: mUnxfErIPYDX4fuBIeMZdyj/2aTN4t69gc8x5SXXjwg=)
2: G_x3OM0P0OBEf510nOajkEf9y6w.crl (hash: 6P1l7kZei8Z+zjk0K5lXfwYyQLSWS9Zj4fqy1yGXeGY=)
3: bU_6jYeoULQ5cmwXMFiWLFBuBqw.roa (hash: RO8BXt2ZgZKfrDL72bFJWFqlC3jg76pa5ceJ9+7Pztg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/G_x3OM0P0OBEf510nOajkEf9y6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 19:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:93:55:c2:46:22:d7:c3:fb:f5:76:57:e6:14:80:18:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bfc7738cd0fd0e0447f9d749ce6a39047fdcbac
Validity
Not Before: Oct 31 19:00:33 2026 GMT
Not After : Nov 1 19:00:33 2026 GMT
Subject: CN=feed019f79a0a63e20f24769c8adb90f58534575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:41:1c:63:f7:59:73:47:a0:a0:97:23:d7:ac:
e8:6b:d4:41:31:2e:42:64:49:5a:4a:f0:06:29:2b:
68:a2:ed:6a:cf:1d:55:96:7f:c7:5c:3b:24:9c:89:
00:cc:69:0a:b1:2c:c1:61:6c:66:e5:bc:3b:bb:5e:
e2:09:84:80:f6:f7:70:cb:e0:5f:82:96:3a:6d:0b:
14:ac:2a:a1:72:5f:93:43:bc:47:a8:bc:a1:94:da:
b3:8f:ac:a6:30:50:e0:4d:1d:c2:cb:bc:1f:b4:46:
33:1c:2f:fb:cc:e0:ce:8f:d5:6f:73:50:f6:d4:c5:
5f:6e:df:b8:e3:a5:1b:ac:c0:1c:c7:29:b3:47:53:
c2:c1:a7:fe:39:fe:a4:5d:8c:ec:16:da:38:58:16:
2c:85:a6:7c:61:c7:45:ad:13:fe:df:9e:5c:bb:3c:
88:2f:26:12:0f:3d:8b:08:ef:d2:1f:66:6a:46:74:
4e:be:b5:44:1f:20:a3:e1:22:6c:0e:6a:12:ae:fe:
36:b5:80:2f:d1:5d:44:2f:c5:1c:9e:2b:59:10:ba:
40:3e:03:09:00:b7:c0:ec:54:46:66:cc:6e:94:04:
fd:60:8f:90:aa:b6:ce:34:f1:e0:6f:5f:e1:21:8b:
e4:81:71:d5:02:26:3f:dd:17:47:c6:3f:04:67:00:
8a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:ED:01:9F:79:A0:A6:3E:20:F2:47:69:C8:AD:B9:0F:58:53:45:75
X509v3 Authority Key Identifier:
keyid:1B:FC:77:38:CD:0F:D0:E0:44:7F:9D:74:9C:E6:A3:90:47:FD:CB:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_x3OM0P0OBEf510nOajkEf9y6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:80:f4:c2:02:4d:be:ba:19:6d:e7:d9:1f:be:d3:65:da:df:
2a:fe:60:33:9f:70:00:78:8b:38:b0:de:07:ec:00:52:88:77:
95:e0:1f:88:60:0f:08:71:e9:5b:1d:e0:b0:9a:2f:e3:b6:d6:
54:f4:13:81:47:af:1b:8f:d5:12:99:c1:f3:0b:05:d8:91:fa:
ad:8d:ed:8d:7a:d5:7d:29:70:ce:56:81:a4:32:63:af:dc:9a:
fa:ef:39:05:fd:c2:91:f4:c5:55:43:d2:9d:6f:27:3e:df:79:
c4:fb:fb:57:2b:00:cd:c5:04:74:79:8d:ed:df:5a:5d:2e:b3:
bc:8d:e5:6b:c7:c9:b7:ab:35:87:fb:de:57:37:b1:e3:ba:08:
26:28:af:3f:93:1b:7d:4f:ae:3b:84:55:68:d2:06:38:4a:08:
f4:6b:ec:f3:30:f1:29:e7:58:86:bb:ed:df:c3:2e:7e:32:71:
60:23:f7:61:3c:58:47:95:39:27:02:fc:3f:85:74:03:db:b5:
6f:58:13:0f:83:71:a9:81:bf:51:0b:c2:11:e0:4d:cb:82:6d:
97:db:65:4e:9c:6c:fe:7c:74:5c:65:c0:bc:57:71:bc:66:cf:
d0:66:81:ca:05:4f:70:fa:92:83:75:4f:f9:b2:90:2f:a3:13:
e1:67:c9:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 01:52:27 2026 by rpki-client