Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/8961d3-11ce-4916-8478-13a0346762f0/1/G0p0-DX7ePRqdSJYKnAkw-ladQE.mft
File: G0p0-DX7ePRqdSJYKnAkw-ladQE.mft (raw, json)
Hash identifier: hnSMidiWSJG8v3viOLXA5lLX6FBX+hzhAp2XxraMOCM=
Subject key identifier: B8:E3:00:93:64:A1:FA:57:2E:7F:45:13:AB:A9:1B:7D:1D:45:81:F5
Authority key identifier: 1B:4A:74:F8:35:FB:78:F4:6A:75:22:58:2A:70:24:C3:E9:5A:75:01
Certificate issuer: /CN=1b4a74f835fb78f46a7522582a7024c3e95a7501
Certificate serial: 01A0E99BC488CE427757354E3116EBF1E3F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G0p0-DX7ePRqdSJYKnAkw-ladQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/8961d3-11ce-4916-8478-13a0346762f0/1/G0p0-DX7ePRqdSJYKnAkw-ladQE.mft
Manifest number: 59
Signing time: Mon 28 Sep 2026 20:01:34 +0000
Manifest this update: Mon 28 Sep 2026 20:01:34 +0000
Manifest next update: Tue 29 Sep 2026 20:01:34 +0000
Files and hashes: 1: 0qUdSlK1egMK84cFUL2xD9vza_I.roa (hash: +RRA24eEQxCoeLXCIa32FRmyRiqw4gZq4NFf5EgQysk=)
2: G0p0-DX7ePRqdSJYKnAkw-ladQE.crl (hash: XODI8XFFrUtAjDlCCbjdVcvEh/lv2qSLrSjCNnj4lQw=)
3: Xm2UGEkdiKhG1oMWDxl5AaWM7Sg.asa (hash: quX3s05TDBTsl7FDpEE0QIqSfiJxqhXmhPqfuYs2tQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/8961d3-11ce-4916-8478-13a0346762f0/1/G0p0-DX7ePRqdSJYKnAkw-ladQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/8961d3-11ce-4916-8478-13a0346762f0/1/G0p0-DX7ePRqdSJYKnAkw-ladQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/G0p0-DX7ePRqdSJYKnAkw-ladQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 19:32:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:9b:c4:88:ce:42:77:57:35:4e:31:16:eb:f1:e3:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b4a74f835fb78f46a7522582a7024c3e95a7501
Validity
Not Before: Sep 28 20:01:34 2026 GMT
Not After : Sep 29 20:01:34 2026 GMT
Subject: CN=b8e3009364a1fa572e7f4513aba91b7d1d4581f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1f:7e:37:20:fb:e4:ff:dd:5a:8d:5e:70:e4:
3d:43:d8:f3:b8:55:99:c7:61:65:36:00:8e:ac:1b:
1c:18:c0:3e:6c:c4:2b:2f:f1:5e:5c:c0:e7:6c:fd:
b6:98:bb:bc:4c:80:99:a7:02:17:3c:75:e6:98:65:
9f:5a:f2:bb:6e:d6:7d:96:ee:3f:5d:10:8d:cc:ac:
0e:ae:80:46:f0:24:20:c4:b9:64:45:e3:6f:4e:7f:
7d:e3:2f:53:24:fd:df:32:b7:58:ce:b8:35:b9:63:
4f:32:ca:bb:0c:e1:3b:c1:35:44:a2:39:f9:c5:4f:
6f:09:25:52:e4:86:ea:6c:d6:a1:a7:68:2d:b6:79:
5a:d3:6f:19:c9:e8:57:40:bc:f3:0e:3b:e3:4b:8a:
07:05:f0:90:a8:00:a5:5b:ab:0d:72:a4:8d:1a:f1:
f2:8f:f4:c0:49:21:24:51:5f:b9:9e:7b:92:1f:94:
17:41:65:da:b9:a0:97:69:f4:b5:2b:0e:1a:c8:db:
4b:7d:19:c1:49:9b:db:31:17:96:85:2e:6c:33:f1:
8e:d6:3d:53:ff:f0:19:19:58:75:6f:40:68:4a:a0:
bf:bd:9e:60:59:69:12:3c:5e:aa:04:1f:16:8d:1e:
8d:0d:31:7c:db:25:75:fd:cd:b4:31:6c:34:92:19:
53:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:E3:00:93:64:A1:FA:57:2E:7F:45:13:AB:A9:1B:7D:1D:45:81:F5
X509v3 Authority Key Identifier:
keyid:1B:4A:74:F8:35:FB:78:F4:6A:75:22:58:2A:70:24:C3:E9:5A:75:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G0p0-DX7ePRqdSJYKnAkw-ladQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8961d3-11ce-4916-8478-13a0346762f0/1/G0p0-DX7ePRqdSJYKnAkw-ladQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8961d3-11ce-4916-8478-13a0346762f0/1/G0p0-DX7ePRqdSJYKnAkw-ladQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:99:cf:f5:b2:16:fc:3a:5c:9b:08:78:75:1b:1e:06:9a:36:
5e:90:4a:14:75:c1:96:4b:e0:a6:5b:f8:22:2e:1b:4e:d9:9b:
dd:ab:13:2d:f6:51:62:39:87:12:bf:a7:25:9d:2d:95:c1:0a:
bb:40:78:d0:2d:c0:7c:38:e8:f2:c7:73:40:6b:83:f9:7c:b4:
d9:ba:50:e5:a1:ba:65:8a:95:a2:67:c2:86:49:5f:cc:8f:9c:
ea:95:8c:fe:af:f1:b6:e6:c1:c1:18:b9:f9:90:6f:e2:9e:7b:
2c:69:16:62:4b:89:1b:fa:6f:13:e3:d8:53:85:7f:1a:82:9b:
46:d8:18:c9:48:87:ca:1d:03:54:73:92:08:15:01:84:0e:0f:
73:47:ce:99:98:19:aa:92:55:8e:36:1b:c9:1a:9e:75:d9:ab:
2c:bf:f0:1d:db:49:1c:48:f7:44:b4:74:32:40:e9:de:6c:63:
77:a8:60:2c:d6:12:5e:9f:46:ff:aa:59:cf:69:e1:0a:ef:77:
5d:87:68:24:c5:60:e9:dd:01:8d:bb:a5:f0:c8:40:f0:4a:d8:
19:13:af:43:bd:c8:e5:27:fa:52:8e:50:53:35:c9:1d:25:24:
0b:c3:27:2a:73:af:5b:92:17:48:33:64:68:c2:1b:a6:fb:21:
92:d9:ed:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDpm8SIzkJ3VzVOMRbr8ePxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiNGE3NGY4MzVmYjc4ZjQ2YTc1MjI1ODJhNzAyNGMzZTk1
YTc1MDEwHhcNMjYwOTI4MjAwMTM0WhcNMjYwOTI5MjAwMTM0WjAzMTEwLwYDVQQD
EyhiOGUzMDA5MzY0YTFmYTU3MmU3ZjQ1MTNhYmE5MWI3ZDFkNDU4MWY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsB9+NyD75P/dWo1ecOQ9Q9jzuFWZ
x2FlNgCOrBscGMA+bMQrL/FeXMDnbP22mLu8TICZpwIXPHXmmGWfWvK7btZ9lu4/
XRCNzKwOroBG8CQgxLlkReNvTn994y9TJP3fMrdYzrg1uWNPMsq7DOE7wTVEojn5
xU9vCSVS5IbqbNahp2gttnla028ZyehXQLzzDjvjS4oHBfCQqAClW6sNcqSNGvHy
j/TASSEkUV+5nnuSH5QXQWXauaCXafS1Kw4ayNtLfRnBSZvbMReWhS5sM/GO1j1T
//AZGVh1b0BoSqC/vZ5gWWkSPF6qBB8WjR6NDTF82yV1/c20MWw0khlTtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLjjAJNkofpXLn9FE6upG30dRYH1MB8GA1UdIwQY
MBaAFBtKdPg1+3j0anUiWCpwJMPpWnUBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzBwMC1EWDdlUFJxZFNKWUtuQWt3LWxhZFFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni84OTYxZDMtMTFjZS00OTE2LTg0Nzgt
MTNhMDM0Njc2MmYwLzEvRzBwMC1EWDdlUFJxZFNKWUtuQWt3LWxhZFFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni84OTYxZDMtMTFjZS00OTE2LTg0NzgtMTNhMDM0Njc2MmYw
LzEvRzBwMC1EWDdlUFJxZFNKWUtuQWt3LWxhZFFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlZnP9bIW
/Dpcmwh4dRseBpo2XpBKFHXBlkvgplv4Ii4bTtmb3asTLfZRYjmHEr+nJZ0tlcEK
u0B40C3AfDjo8sdzQGuD+Xy02bpQ5aG6ZYqVomfChklfzI+c6pWM/q/xtubBwRi5
+ZBv4p57LGkWYkuJG/pvE+PYU4V/GoKbRtgYyUiHyh0DVHOSCBUBhA4Pc0fOmZgZ
qpJVjjYbyRqeddmrLL/wHdtJHEj3RLR0MkDp3mxjd6hgLNYSXp9G/6pZz2nhCu93
XYdoJMVg6d0Bjbul8MhA8ErYGROvQ73I5Sf6Uo5QUzXJHSUkC8MnKnOvW5IXSDNk
aMIbpvshktntXg==
-----END CERTIFICATE-----
Generated at Tue Sep 29 01:12:56 2026 by rpki-client