Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/99b535-c42b-4e01-8793-722294783e9e/1/G3jb8-hZWC_R7aLy3N5UIilRRvE.mft
File: G3jb8-hZWC_R7aLy3N5UIilRRvE.mft (raw, json)
Hash identifier: Vx+/9alRXPCqFbCk4GPdM8oVWDF12+z1o/lLdeO5fsE=
Subject key identifier: 2E:49:D7:0A:39:EA:E8:C8:1A:64:A6:32:7D:0C:38:DB:DD:78:63:93
Authority key identifier: 1B:78:DB:F3:E8:59:58:2F:D1:ED:A2:F2:DC:DE:54:22:29:51:46:F1
Certificate issuer: /CN=1b78dbf3e859582fd1eda2f2dcde5422295146f1
Certificate serial: 01A11861FF3EBDA282EB2C1CDF883770C4C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G3jb8-hZWC_R7aLy3N5UIilRRvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/99b535-c42b-4e01-8793-722294783e9e/1/G3jb8-hZWC_R7aLy3N5UIilRRvE.mft
Manifest number: 1A92
Signing time: Wed 07 Oct 2026 22:00:37 +0000
Manifest this update: Wed 07 Oct 2026 22:00:37 +0000
Manifest next update: Thu 08 Oct 2026 22:00:37 +0000
Files and hashes: 1: G3jb8-hZWC_R7aLy3N5UIilRRvE.crl (hash: THsPOnS7Xn3o0sA9DU+sjAxrnRg7nHOfO1RNHZS+HNQ=)
2: a_j0083lOlqZLjjJqW5npMU2K1c.roa (hash: faxoEGXKDneOWfMQo/aCLuHRodBLAUIu/JQekys4GcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/99b535-c42b-4e01-8793-722294783e9e/1/G3jb8-hZWC_R7aLy3N5UIilRRvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/99b535-c42b-4e01-8793-722294783e9e/1/G3jb8-hZWC_R7aLy3N5UIilRRvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/G3jb8-hZWC_R7aLy3N5UIilRRvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 18:47:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:18:61:ff:3e:bd:a2:82:eb:2c:1c:df:88:37:70:c4:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b78dbf3e859582fd1eda2f2dcde5422295146f1
Validity
Not Before: Oct 7 22:00:37 2026 GMT
Not After : Oct 8 22:00:37 2026 GMT
Subject: CN=2e49d70a39eae8c81a64a6327d0c38dbdd786393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c3:1b:65:91:61:b5:9d:9f:b1:01:d0:0d:61:
fa:75:0d:b8:49:88:3d:bb:17:fb:30:17:ef:20:1a:
8b:b3:61:81:ff:05:91:8b:80:de:5b:de:69:e4:d8:
04:14:a5:8f:60:73:40:af:c8:dd:45:4b:71:cc:cb:
70:d9:bf:0e:df:b1:34:d1:11:b5:6b:89:de:7b:95:
5d:92:5e:4b:bb:4a:0e:a5:ab:f8:00:7f:b5:06:7c:
55:2d:ec:3d:18:45:d8:19:88:ac:33:67:1a:3e:c4:
19:bd:f9:f7:d0:c6:0f:9c:ed:e1:80:1e:db:c0:3d:
28:0f:0e:17:46:00:92:35:e9:a0:fd:63:9e:27:87:
fb:45:f1:d1:e7:53:93:93:f1:52:da:9e:82:28:e3:
f2:0b:c3:2d:0b:b5:87:84:74:6a:6e:d7:30:43:da:
28:a5:43:1a:8e:ba:e2:5c:6b:7d:9e:cd:ff:23:58:
0d:46:9b:ed:9d:5a:d9:eb:a3:85:99:95:15:59:78:
1f:e7:a3:eb:6c:81:b9:5f:10:42:be:b0:aa:5f:35:
71:54:1e:c8:09:82:ff:41:1a:e5:f2:57:d6:80:2f:
19:67:a4:92:e7:fc:de:0c:71:88:31:dd:70:0f:4d:
93:96:39:d2:b6:2c:e1:d3:c7:f7:76:f9:cf:04:aa:
5e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:49:D7:0A:39:EA:E8:C8:1A:64:A6:32:7D:0C:38:DB:DD:78:63:93
X509v3 Authority Key Identifier:
keyid:1B:78:DB:F3:E8:59:58:2F:D1:ED:A2:F2:DC:DE:54:22:29:51:46:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G3jb8-hZWC_R7aLy3N5UIilRRvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/99b535-c42b-4e01-8793-722294783e9e/1/G3jb8-hZWC_R7aLy3N5UIilRRvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/99b535-c42b-4e01-8793-722294783e9e/1/G3jb8-hZWC_R7aLy3N5UIilRRvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:18:7a:6e:2e:13:3c:12:6a:c6:51:e7:47:93:2a:24:cf:10:
1d:26:4c:40:8f:a5:2f:42:0b:cc:25:37:41:07:55:fc:94:79:
02:a2:9e:b1:7d:91:95:c5:9c:8d:7f:53:6a:77:66:7f:10:0e:
ae:21:98:3f:b6:66:d1:3e:7c:1a:15:d9:e3:51:94:c5:b3:19:
eb:45:95:72:93:b0:79:58:ce:17:84:86:f0:e6:e6:8b:de:b4:
1b:64:4d:71:d0:b5:39:d7:dc:fb:03:0f:88:44:f2:e7:f3:28:
e1:52:0e:4d:06:da:eb:e0:0a:57:b2:09:b3:27:90:4a:ca:2f:
20:20:a5:82:6d:85:8d:eb:b9:a0:08:d0:3b:e9:75:11:6b:d5:
f5:cd:65:db:37:f9:13:53:28:e3:34:6e:fc:93:7f:10:c0:ea:
22:6b:cc:17:3b:25:2a:06:bb:93:0f:d8:89:91:f3:9e:ed:f5:
b7:f5:b4:a8:b0:cd:bc:58:04:6f:a9:86:f1:f2:4e:c7:1b:97:
f3:87:5c:a5:8c:8b:89:2f:bb:e8:03:ec:6c:93:66:27:4a:9f:
13:9e:51:5b:76:02:f5:95:fd:12:23:e6:77:dc:6d:e0:a5:9e:
37:d0:90:ef:58:e0:48:aa:23:01:14:c7:e2:46:e8:f7:05:e2:
45:7a:a7:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 03:50:16 2026 by rpki-client