Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.mft
File: G_x3OM0P0OBEf510nOajkEf9y6w.mft (raw, json)
Hash identifier: KnmNFOIv2fxPkIzveqz/rkj9kcCW/vVHnO/tHV/QplI=
Subject key identifier: 66:BF:5A:38:E8:5D:E4:08:B8:96:9C:CE:F2:6C:1A:C6:F4:B3:9F:1C
Authority key identifier: 1B:FC:77:38:CD:0F:D0:E0:44:7F:9D:74:9C:E6:A3:90:47:FD:CB:AC
Certificate issuer: /CN=1bfc7738cd0fd0e0447f9d749ce6a39047fdcbac
Certificate serial: 019D371B9BD85AE3840265A2CE6D4BBF4E94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_x3OM0P0OBEf510nOajkEf9y6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 01:00:48 +0000
Manifest this update: Sun 29 Mar 2026 01:00:48 +0000
Manifest next update: Mon 30 Mar 2026 01:00:48 +0000
Files and hashes: 1: 2VcsFpRmgA_Z1BeWY4uxeTXBUVc.roa (hash: mUnxfErIPYDX4fuBIeMZdyj/2aTN4t69gc8x5SXXjwg=)
2: G_x3OM0P0OBEf510nOajkEf9y6w.crl (hash: p+Hi8z+pyzYWbtuvYctcf1sBH0RGaiwQmjG8FoTjKx4=)
3: bU_6jYeoULQ5cmwXMFiWLFBuBqw.roa (hash: RO8BXt2ZgZKfrDL72bFJWFqlC3jg76pa5ceJ9+7Pztg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/G_x3OM0P0OBEf510nOajkEf9y6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:9b:d8:5a:e3:84:02:65:a2:ce:6d:4b:bf:4e:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bfc7738cd0fd0e0447f9d749ce6a39047fdcbac
Validity
Not Before: Mar 29 01:00:48 2026 GMT
Not After : Mar 30 01:00:48 2026 GMT
Subject: CN=66bf5a38e85de408b8969ccef26c1ac6f4b39f1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ec:2e:02:04:31:b7:6d:13:38:6e:ff:8c:6c:
b7:e9:56:65:11:85:65:3b:8b:52:86:56:51:46:71:
8e:53:a6:49:c4:aa:06:3f:5c:15:f6:e4:e5:c4:6a:
9b:78:e9:32:bd:55:ed:cf:d9:80:b3:39:6d:16:15:
1c:44:b6:11:ec:14:6e:d8:96:df:bd:ca:f2:6d:d2:
18:27:5c:4a:9b:11:fc:3a:34:61:f5:90:80:e9:e4:
5c:f8:4c:7e:77:ce:f4:cb:13:a5:9c:17:65:4d:61:
f1:26:d6:78:29:60:cf:c4:1d:d1:7c:85:12:49:6c:
ad:bb:28:63:dc:49:a5:5f:6f:0c:9a:26:54:95:af:
0e:b1:5f:24:d8:05:7d:47:7f:9c:a4:62:b0:77:40:
5a:26:fe:db:63:99:76:5a:be:28:c3:48:16:26:24:
6d:4a:8d:14:54:a3:de:e6:ff:0c:e8:38:03:1d:01:
ad:93:2a:bb:f5:49:6f:90:9f:11:6a:9e:6a:0a:c2:
b2:ba:71:03:37:d2:cc:f6:82:cc:fd:e9:ac:be:7b:
d0:93:9d:c7:42:f7:30:7f:96:d5:c3:13:96:4d:96:
4c:c8:14:00:5c:c5:39:0d:00:1e:a7:19:1b:93:91:
8a:7a:aa:2d:67:a7:b9:6b:6f:75:6e:1d:1e:7c:09:
3b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:BF:5A:38:E8:5D:E4:08:B8:96:9C:CE:F2:6C:1A:C6:F4:B3:9F:1C
X509v3 Authority Key Identifier:
keyid:1B:FC:77:38:CD:0F:D0:E0:44:7F:9D:74:9C:E6:A3:90:47:FD:CB:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_x3OM0P0OBEf510nOajkEf9y6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:0a:b6:2f:1b:aa:ba:1c:df:5c:b9:f4:96:9c:d6:86:ab:fd:
b3:c7:06:e8:30:81:19:13:df:71:5f:79:cb:62:ad:03:de:51:
85:ce:95:af:a1:52:bc:1e:72:10:b6:49:68:91:52:1f:41:d3:
1b:bf:68:9e:a7:9f:ad:74:f8:80:f5:21:9e:1c:34:05:6b:b0:
f3:57:58:36:86:5a:00:7a:55:69:ff:1b:b7:3d:31:5b:b1:09:
09:60:d4:59:28:29:77:46:f0:e4:bc:23:14:6f:b8:48:79:9e:
92:e9:36:a9:0a:b5:ea:83:2a:51:34:d1:6a:6b:dd:c5:21:26:
76:3d:8d:f8:d2:70:b8:67:21:d2:34:28:0c:b9:90:eb:93:bc:
7e:14:ed:97:25:08:76:ef:4a:90:09:e2:8f:31:fd:64:22:00:
6a:ed:41:17:93:45:5b:d3:dd:c2:b1:4d:51:de:e3:fc:23:e5:
f4:45:8e:25:74:00:66:67:07:8d:5f:07:89:c0:d3:01:43:a9:
1d:93:da:8b:e2:70:40:16:ed:ee:71:0c:16:23:38:f9:63:09:
24:99:18:9f:bb:3f:19:73:16:b0:cc:74:c8:c0:53:d2:44:f8:
75:ef:46:ae:45:ca:74:d3:0a:41:d2:c2:00:53:56:0a:8b:c1:
fc:d3:b4:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:42 2026 by rpki-client