Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/G0ILeZxSBqGe93F-48cxL9iDMK4.mft
File: G0ILeZxSBqGe93F-48cxL9iDMK4.mft (raw, json)
Hash identifier: 4vRZYhkIbSoetvCKilbeKQIjzGXwlFkkeAQtMjuwP0U=
Subject key identifier: C3:A6:D5:57:84:78:A3:AC:2C:55:F1:8A:A2:1C:96:3E:73:8E:B6:8B
Authority key identifier: 1B:42:0B:79:9C:52:06:A1:9E:F7:71:7E:E3:C7:31:2F:D8:83:30:AE
Certificate issuer: /CN=1b420b799c5206a19ef7717ee3c7312fd88330ae
Certificate serial: 019E28EFCD19389E2A1AFBF0A11CB4356597
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G0ILeZxSBqGe93F-48cxL9iDMK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/G0ILeZxSBqGe93F-48cxL9iDMK4.mft
Manifest number: 0B0F
Signing time: Fri 15 May 2026 00:01:04 +0000
Manifest this update: Fri 15 May 2026 00:01:04 +0000
Manifest next update: Sat 16 May 2026 00:01:04 +0000
Files and hashes: 1: 6HQUO6STMbW7BVm3pNinweHOQTY.roa (hash: 2bOuMAF3TgRjyY2xveVCaA/5uJyPdOr15OyOQ9K3vns=)
2: 72AO_uZr1ZlnSoUNX8Iuehbu71c.asa (hash: f1Ct3IEiol+T1+n4aR9eM5dXAUSe/92OdYarA8CZAlg=)
3: G0ILeZxSBqGe93F-48cxL9iDMK4.crl (hash: HEJ8v4Yxaceix/4zZzxnSJ8YDWkxVkRFGC4sQJwsq6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/G0ILeZxSBqGe93F-48cxL9iDMK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/G0ILeZxSBqGe93F-48cxL9iDMK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/G0ILeZxSBqGe93F-48cxL9iDMK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 00:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:28:ef:cd:19:38:9e:2a:1a:fb:f0:a1:1c:b4:35:65:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b420b799c5206a19ef7717ee3c7312fd88330ae
Validity
Not Before: May 15 00:01:04 2026 GMT
Not After : May 16 00:01:04 2026 GMT
Subject: CN=c3a6d5578478a3ac2c55f18aa21c963e738eb68b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c5:6c:9e:0e:94:8a:8a:80:db:1e:19:40:e0:
54:0d:df:82:fb:4b:18:8a:f5:0b:cf:4f:ce:7f:2a:
e7:bb:2b:46:d8:47:08:0a:7b:37:ac:fd:bd:8d:3d:
a1:60:d2:58:80:5c:b0:0d:de:16:09:a0:2d:b9:1c:
78:a7:bf:1b:04:09:84:55:81:44:71:6b:be:cf:18:
52:a1:f1:cb:2a:47:90:2a:0c:c9:c1:5d:59:25:b8:
42:de:7f:9b:06:aa:b9:fc:ed:f9:5f:10:c6:4e:38:
36:05:15:dd:5c:0e:7d:d3:52:fd:bf:6b:d9:24:42:
85:7b:37:c1:be:d7:17:fa:a5:12:eb:2c:9f:a5:0f:
16:69:16:a7:a4:71:32:15:cd:b6:2a:2a:a8:dd:5f:
22:97:65:ff:13:9c:c4:a3:53:1b:1a:3e:12:fc:40:
80:48:28:39:0e:1a:60:5a:ca:33:13:77:08:53:e9:
8a:be:c9:30:d9:d1:75:ce:04:60:37:2a:21:ee:c2:
dc:3d:2e:07:a9:fc:65:92:93:92:ba:17:94:3f:2a:
ae:00:2a:fe:8e:fa:b8:52:39:36:3d:92:80:be:7f:
7e:d3:0b:8b:de:95:c5:8f:ee:22:93:e3:e0:52:c8:
22:32:00:d1:92:15:e8:bd:f5:60:ca:cf:4e:5e:f2:
9d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:A6:D5:57:84:78:A3:AC:2C:55:F1:8A:A2:1C:96:3E:73:8E:B6:8B
X509v3 Authority Key Identifier:
keyid:1B:42:0B:79:9C:52:06:A1:9E:F7:71:7E:E3:C7:31:2F:D8:83:30:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G0ILeZxSBqGe93F-48cxL9iDMK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/G0ILeZxSBqGe93F-48cxL9iDMK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/417d77-0e9e-4091-b510-946018241c51/1/G0ILeZxSBqGe93F-48cxL9iDMK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:2a:9b:b2:36:62:c5:0e:62:df:21:db:2b:fe:e4:c7:fa:8b:
70:cc:4e:b9:cb:dc:d2:c4:81:ce:cb:a8:45:1d:39:08:75:a0:
1d:8c:b2:7b:b7:9f:29:ef:fc:aa:33:20:31:88:50:90:8d:47:
7d:c9:8e:55:c9:fa:34:39:8f:5f:5d:08:33:ef:d4:05:fe:73:
9d:f4:ab:e1:eb:06:70:6b:31:0f:09:55:54:fc:88:13:a4:e1:
8b:22:2b:49:91:23:a7:39:57:9a:73:8b:d4:b8:2c:5e:a4:f2:
ef:5d:4d:d1:99:43:5e:58:88:e4:09:59:4e:57:74:07:66:e7:
2a:62:01:c6:96:84:fe:0c:0b:83:c8:d8:56:95:31:42:53:90:
d9:97:9b:f4:37:a2:19:8f:8b:cf:b8:b6:ea:1b:46:fc:f4:79:
9b:dd:24:d0:7a:53:d9:dd:c9:27:87:c2:f8:91:a4:5f:82:23:
78:19:b0:57:63:ff:e1:55:54:fa:d6:fd:b3:93:5e:25:63:62:
b8:17:f4:44:0d:b5:6f:62:a0:69:4c:41:ab:a1:03:8e:e9:3d:
fa:3a:f8:45:f5:77:91:fa:24:e3:0a:d1:5f:fa:0c:cc:9e:67:
0a:76:ca:c6:ab:36:7a:10:c6:1a:c0:4e:7d:02:22:71:e8:e3:
ec:02:1d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:59:01 2026 by rpki-client