Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.mft
File: G_x3OM0P0OBEf510nOajkEf9y6w.mft (raw, json)
Hash identifier: 4jxgYEjg+1lk0Q+Q2ep6FQJLPTFYySaIcExyQN1tLNk=
Subject key identifier: 10:8E:EB:F4:BE:A2:33:A1:F1:7D:67:C1:A6:3B:9E:19:D4:B6:F5:56
Authority key identifier: 1B:FC:77:38:CD:0F:D0:E0:44:7F:9D:74:9C:E6:A3:90:47:FD:CB:AC
Certificate issuer: /CN=1bfc7738cd0fd0e0447f9d749ce6a39047fdcbac
Certificate serial: 019FA116E63EA61268070EE2FDFFEB0BAC61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_x3OM0P0OBEf510nOajkEf9y6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.mft
Manifest number: 19CF
Signing time: Mon 27 Jul 2026 01:01:00 +0000
Manifest this update: Mon 27 Jul 2026 01:01:00 +0000
Manifest next update: Tue 28 Jul 2026 01:01:00 +0000
Files and hashes: 1: 2VcsFpRmgA_Z1BeWY4uxeTXBUVc.roa (hash: mUnxfErIPYDX4fuBIeMZdyj/2aTN4t69gc8x5SXXjwg=)
2: G_x3OM0P0OBEf510nOajkEf9y6w.crl (hash: Sr2/6lsTPE9iZBuitS4TMHesMo/oUjxnTw26cbBqQSQ=)
3: bU_6jYeoULQ5cmwXMFiWLFBuBqw.roa (hash: RO8BXt2ZgZKfrDL72bFJWFqlC3jg76pa5ceJ9+7Pztg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/G_x3OM0P0OBEf510nOajkEf9y6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:16:e6:3e:a6:12:68:07:0e:e2:fd:ff:eb:0b:ac:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bfc7738cd0fd0e0447f9d749ce6a39047fdcbac
Validity
Not Before: Jul 27 01:01:00 2026 GMT
Not After : Jul 28 01:01:00 2026 GMT
Subject: CN=108eebf4bea233a1f17d67c1a63b9e19d4b6f556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b2:a8:75:2f:7c:07:58:66:8b:0f:0c:fe:6f:
47:97:1e:e8:09:81:40:55:9a:74:09:b2:14:39:e1:
c5:03:cf:9f:99:91:2e:47:98:29:c6:a4:8e:ad:76:
f4:1f:c2:42:f6:85:5a:44:ca:1c:5b:fc:a9:48:44:
42:79:c8:4a:b8:3f:73:93:f4:ec:68:2a:27:52:78:
01:f9:ab:21:ac:18:03:ca:99:d4:65:f7:b2:3b:95:
07:a9:e3:78:bb:f8:af:12:8c:89:b3:83:6a:2a:2d:
67:4d:98:82:e4:f8:bd:1a:a2:cf:c0:b1:33:0f:75:
ed:88:ba:ae:59:0f:f1:1e:38:c4:49:87:4f:d1:75:
9a:b8:98:56:54:3a:bf:d6:8d:03:38:65:c5:cf:d8:
52:7d:6b:2a:9b:58:83:9e:cb:64:57:d8:d6:9f:93:
4d:c6:5c:80:9e:39:8c:0a:5e:f5:42:01:ae:1f:e5:
10:db:9e:9f:72:cd:33:1f:20:0d:7a:37:6e:b3:eb:
89:db:24:61:3f:04:bf:13:f8:7d:f1:af:7c:73:41:
82:11:fa:86:f5:68:1c:86:42:e0:3b:ac:e8:fe:b0:
77:5e:81:82:66:e2:7e:0e:99:56:35:5d:7e:14:97:
13:f2:27:e6:a3:8c:6f:55:09:17:95:97:09:00:09:
41:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:8E:EB:F4:BE:A2:33:A1:F1:7D:67:C1:A6:3B:9E:19:D4:B6:F5:56
X509v3 Authority Key Identifier:
keyid:1B:FC:77:38:CD:0F:D0:E0:44:7F:9D:74:9C:E6:A3:90:47:FD:CB:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_x3OM0P0OBEf510nOajkEf9y6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:82:6f:0c:4f:63:13:de:06:2f:8c:f7:df:7f:7b:70:7c:55:
8e:f1:56:12:cb:9d:cd:b4:ac:41:88:84:00:e7:65:28:e7:46:
89:0f:0e:92:8b:dc:fe:49:db:8a:0f:89:5f:8c:bd:f0:d2:00:
3d:f8:60:1f:bf:65:5a:bf:58:1b:2b:8b:6e:cf:08:b9:af:46:
cb:f2:a4:78:19:5c:90:ec:8c:fb:4f:3e:ea:25:dd:e2:7a:da:
81:47:a8:94:64:3b:09:7d:4f:d9:ae:af:f8:ee:59:b0:21:bc:
6d:40:e7:3f:80:ff:bf:36:b1:6b:13:0c:1b:3f:3b:75:1f:6b:
a5:3f:0f:48:4d:51:bd:e1:d6:37:29:ba:8b:4c:50:28:11:74:
bb:23:55:b7:3d:8b:60:b5:d7:73:e5:1b:cf:41:91:cb:48:f5:
a3:57:5b:6b:3d:38:4f:a4:78:0a:1d:2c:52:55:e8:88:16:2f:
df:de:3b:af:5c:7b:0b:73:bd:24:29:01:f3:83:51:60:ec:4d:
3b:e9:78:10:88:7a:06:f4:d8:24:b7:8f:ff:6f:50:bc:e4:d9:
03:4b:4c:ca:cd:66:8c:c1:07:b9:d3:a1:16:01:ac:a2:fb:52:
bc:33:f9:ab:c0:14:76:d2:20:af:4a:4f:d8:df:94:c2:27:9a:
29:73:ce:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 07:19:42 2026 by rpki-client