Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.mft
File: G_x3OM0P0OBEf510nOajkEf9y6w.mft (raw, json)
Hash identifier: GEHDcq0IjHw8IO2otkUoD8KBVRvtGCWkxYiDQOCttmc=
Subject key identifier: 1F:84:56:99:C0:0B:61:2F:C4:45:C5:54:81:CC:11:29:C9:C9:CA:0A
Authority key identifier: 1B:FC:77:38:CD:0F:D0:E0:44:7F:9D:74:9C:E6:A3:90:47:FD:CB:AC
Certificate issuer: /CN=1bfc7738cd0fd0e0447f9d749ce6a39047fdcbac
Certificate serial: 01A08AC3812871DB63756B7F17C6A1D2E4BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_x3OM0P0OBEf510nOajkEf9y6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.mft
Manifest number: 1A48
Signing time: Thu 10 Sep 2026 10:01:03 +0000
Manifest this update: Thu 10 Sep 2026 10:01:03 +0000
Manifest next update: Fri 11 Sep 2026 10:01:03 +0000
Files and hashes: 1: 2VcsFpRmgA_Z1BeWY4uxeTXBUVc.roa (hash: mUnxfErIPYDX4fuBIeMZdyj/2aTN4t69gc8x5SXXjwg=)
2: G_x3OM0P0OBEf510nOajkEf9y6w.crl (hash: k9P87YkDCLysdcKML4kWuOJiNjwTbs8Bxai7eTKKIVE=)
3: bU_6jYeoULQ5cmwXMFiWLFBuBqw.roa (hash: RO8BXt2ZgZKfrDL72bFJWFqlC3jg76pa5ceJ9+7Pztg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/G_x3OM0P0OBEf510nOajkEf9y6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:c3:81:28:71:db:63:75:6b:7f:17:c6:a1:d2:e4:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bfc7738cd0fd0e0447f9d749ce6a39047fdcbac
Validity
Not Before: Sep 10 10:01:03 2026 GMT
Not After : Sep 11 10:01:03 2026 GMT
Subject: CN=1f845699c00b612fc445c55481cc1129c9c9ca0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:58:70:e9:19:c0:a3:29:bc:bf:8a:cc:83:ee:
48:29:17:ec:a5:fe:1b:fb:26:2f:d9:cd:45:69:24:
5a:83:94:92:dc:ae:5f:45:c0:2d:4d:6a:4d:6e:70:
5f:f4:20:48:f4:0c:3b:62:a3:4d:67:51:c5:de:67:
9b:f1:a1:bc:a7:7f:b4:6b:cd:2f:7f:25:3c:b4:0a:
3f:8f:dc:e6:58:f4:15:bc:cc:4d:c6:03:c8:5a:85:
0a:68:48:53:4e:39:19:6f:02:32:90:bf:62:88:6b:
5c:26:29:b1:00:f0:91:5b:6c:08:28:5e:39:8b:e8:
dd:1c:08:cf:b3:3c:7a:6b:83:ce:1b:f1:5d:fc:7e:
14:31:a7:20:8a:ee:26:34:bd:a9:15:28:13:02:cf:
c2:a2:80:37:d3:02:35:8d:b8:fd:b6:ee:d6:af:33:
3a:9a:36:12:c8:c7:4b:25:be:16:20:12:f8:30:d9:
5e:4e:de:71:cb:14:a6:ee:d3:94:ca:6e:97:e8:f6:
46:ba:95:3f:fa:df:0d:de:3a:0d:f5:a7:b7:1e:91:
21:9f:e6:61:40:3a:3b:82:d8:d2:47:47:a9:bf:e3:
13:81:cb:81:d1:62:70:f5:bb:65:72:fa:68:60:df:
5f:88:85:63:82:86:e3:ac:2e:13:ac:5e:ed:28:a0:
9d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:84:56:99:C0:0B:61:2F:C4:45:C5:54:81:CC:11:29:C9:C9:CA:0A
X509v3 Authority Key Identifier:
keyid:1B:FC:77:38:CD:0F:D0:E0:44:7F:9D:74:9C:E6:A3:90:47:FD:CB:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_x3OM0P0OBEf510nOajkEf9y6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:7d:29:65:8e:94:56:8d:6b:41:4a:0b:e3:30:30:52:72:ec:
cc:ba:0c:a9:4c:de:2d:22:e5:88:81:48:5f:3d:82:48:05:f5:
7f:3e:00:e6:c5:d4:f4:68:58:9a:55:89:e5:16:01:23:45:08:
33:bc:ce:b7:03:c6:e9:24:86:a0:04:a6:86:52:96:44:67:1e:
cb:dc:37:b7:81:6b:be:ed:c2:cb:87:34:4f:07:99:c4:3e:71:
ae:f9:21:80:35:ad:73:ad:83:b0:57:80:87:8d:d1:0d:2b:66:
0d:2b:32:cc:e6:c0:82:c9:ea:76:da:f5:2e:bc:b7:09:95:54:
de:0c:43:84:f1:63:82:9d:aa:28:5c:3b:3a:01:48:70:bb:1b:
68:77:89:98:81:16:9a:2a:ec:c3:11:a0:7b:ee:85:48:61:7e:
b6:e7:b4:5c:ca:8e:da:83:ad:85:b0:70:06:3d:79:35:61:9e:
86:88:69:4b:af:f9:61:fb:2f:4f:00:f8:30:e2:11:1d:ca:61:
e7:ff:29:30:f7:73:c0:01:da:64:73:fd:a3:bf:aa:07:fa:c4:
7d:c4:d2:73:28:a3:8f:cf:a1:c6:0c:06:2e:9e:f3:be:b8:e4:
f3:88:c3:ec:f9:91:4a:f8:6b:65:de:74:a5:37:38:90:69:6f:
ae:cb:b8:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 13:15:49 2026 by rpki-client