Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/97/774e26-d08f-46d3-ad06-347b566ddbd1/1/G5gPIqWVKk75pOxKng0MNR_slFQ.mft
File: G5gPIqWVKk75pOxKng0MNR_slFQ.mft (raw, json)
Hash identifier: fDG9xGiiwO5//9oNQkDJi59NDwv31LzeL42wClH2w5w=
Subject key identifier: 8F:F2:B9:DE:E2:BD:98:8A:0A:6E:FC:E7:23:07:FC:81:E1:BB:03:A8
Authority key identifier: 1B:98:0F:22:A5:95:2A:4E:F9:A4:EC:4A:9E:0D:0C:35:1F:EC:94:54
Certificate issuer: /CN=1b980f22a5952a4ef9a4ec4a9e0d0c351fec9454
Certificate serial: 01A1807453B23FE152620CC93C5AABDF2397
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G5gPIqWVKk75pOxKng0MNR_slFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/774e26-d08f-46d3-ad06-347b566ddbd1/1/G5gPIqWVKk75pOxKng0MNR_slFQ.mft
Manifest number: 1AC6
Signing time: Wed 28 Oct 2026 03:01:09 +0000
Manifest this update: Wed 28 Oct 2026 03:01:09 +0000
Manifest next update: Thu 29 Oct 2026 03:01:09 +0000
Files and hashes: 1: G5gPIqWVKk75pOxKng0MNR_slFQ.crl (hash: wj7HOIubYOLxDdFKbFRgEqdzS6JAQwDRKx8AYaIlq9I=)
2: dKV0T8IeH_spYDt_UVR5tMQ6_PE.roa (hash: FiQzj2IJBDAdsIUNZqGewdZB+7P9vXYxqwfhvf0ZCJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/774e26-d08f-46d3-ad06-347b566ddbd1/1/G5gPIqWVKk75pOxKng0MNR_slFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/774e26-d08f-46d3-ad06-347b566ddbd1/1/G5gPIqWVKk75pOxKng0MNR_slFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/G5gPIqWVKk75pOxKng0MNR_slFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:74:53:b2:3f:e1:52:62:0c:c9:3c:5a:ab:df:23:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b980f22a5952a4ef9a4ec4a9e0d0c351fec9454
Validity
Not Before: Oct 28 03:01:09 2026 GMT
Not After : Oct 29 03:01:09 2026 GMT
Subject: CN=8ff2b9dee2bd988a0a6efce72307fc81e1bb03a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c6:ca:ea:45:3b:f2:a5:e0:5e:6a:ea:3c:69:
2d:c6:cb:d4:e2:a1:e5:b3:31:10:fa:d6:f8:6c:cd:
7b:5c:0c:1a:3f:c7:ac:48:13:aa:a7:9f:31:51:09:
9c:ed:86:24:14:6d:db:5a:f7:d0:1d:ab:0b:7d:77:
92:54:54:63:e0:f1:c9:59:dd:a1:ec:70:95:01:25:
c3:73:6b:bc:d1:a1:f0:bc:d1:c3:34:1f:3d:b4:2e:
16:69:64:47:8f:a1:99:a8:05:60:82:f3:a3:cb:af:
49:d4:27:03:81:1f:90:b1:f8:4e:de:e9:b0:5a:2c:
4d:4c:6e:09:2f:a2:dd:d6:14:b4:fc:66:6d:0e:82:
97:5d:5d:4f:3d:ba:91:78:31:ae:1c:06:34:82:5b:
18:1c:2c:45:e0:cf:1d:9c:5b:a6:b7:a1:a6:cc:2a:
ce:f4:4b:39:d0:47:f0:0f:1b:48:95:ca:a9:4a:68:
09:f0:d4:b0:3e:69:b9:4e:3f:4e:1c:d9:69:0e:9a:
93:a9:b5:61:1f:3e:06:f8:eb:78:b1:87:8f:98:1d:
33:7d:7c:c1:76:cb:54:3f:af:d7:06:c2:25:e4:97:
c6:0b:4f:66:3f:e7:eb:01:7e:3c:b0:ee:ea:68:9d:
1f:cd:f5:32:65:c3:12:cf:23:20:1e:ea:44:7d:74:
da:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:F2:B9:DE:E2:BD:98:8A:0A:6E:FC:E7:23:07:FC:81:E1:BB:03:A8
X509v3 Authority Key Identifier:
keyid:1B:98:0F:22:A5:95:2A:4E:F9:A4:EC:4A:9E:0D:0C:35:1F:EC:94:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G5gPIqWVKk75pOxKng0MNR_slFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/774e26-d08f-46d3-ad06-347b566ddbd1/1/G5gPIqWVKk75pOxKng0MNR_slFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/774e26-d08f-46d3-ad06-347b566ddbd1/1/G5gPIqWVKk75pOxKng0MNR_slFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:52:8d:c6:8b:10:ab:09:58:16:fb:ed:da:cc:89:0b:0a:9c:
19:7f:b1:da:50:c9:cc:80:27:a9:35:dc:a6:02:3b:7f:04:56:
1d:73:3f:ae:e9:17:a2:0d:e8:cf:d3:79:95:84:f6:96:37:7b:
22:7f:6b:f5:40:fc:8a:68:a0:fd:a4:48:7b:02:e4:d4:9c:bd:
9f:5f:1b:02:47:20:d0:1e:21:6f:d8:21:1d:9e:33:32:e8:9a:
c1:38:69:98:56:8d:1b:7f:66:29:e0:18:8a:ba:b9:c0:e6:82:
1c:04:67:0b:d7:69:a2:b8:94:f1:8b:c9:a3:94:a7:04:c0:40:
3b:1c:93:4e:c6:8c:cc:5e:80:33:8d:27:84:02:c3:c2:a2:74:
b0:d5:26:f3:e7:bc:57:be:48:04:1c:c1:30:64:83:04:79:0f:
ed:f1:f6:22:3a:3b:e3:77:68:2a:b4:b8:67:f6:05:58:b6:83:
60:5f:35:fb:a4:a4:f9:ac:8e:97:bc:a1:78:03:95:e3:ad:98:
66:d7:5d:3a:ae:9d:a6:b5:b8:78:51:8b:6a:90:55:6f:ec:d3:
98:8d:44:47:72:ea:47:f9:73:cb:6e:2c:62:96:1f:78:3e:b2:
66:53:2e:33:60:77:d4:e3:10:70:a2:14:49:fb:33:21:19:9d:
eb:bf:37:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGAdFOyP+FSYgzJPFqr3yOXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiOTgwZjIyYTU5NTJhNGVmOWE0ZWM0YTllMGQwYzM1MWZl
Yzk0NTQwHhcNMjYxMDI4MDMwMTA5WhcNMjYxMDI5MDMwMTA5WjAzMTEwLwYDVQQD
Eyg4ZmYyYjlkZWUyYmQ5ODhhMGE2ZWZjZTcyMzA3ZmM4MWUxYmIwM2E4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMbK6kU78qXgXmrqPGktxsvU4qHl
szEQ+tb4bM17XAwaP8esSBOqp58xUQmc7YYkFG3bWvfQHasLfXeSVFRj4PHJWd2h
7HCVASXDc2u80aHwvNHDNB89tC4WaWRHj6GZqAVggvOjy69J1CcDgR+QsfhO3umw
WixNTG4JL6Ld1hS0/GZtDoKXXV1PPbqReDGuHAY0glsYHCxF4M8dnFumt6GmzCrO
9Es50EfwDxtIlcqpSmgJ8NSwPmm5Tj9OHNlpDpqTqbVhHz4G+Ot4sYePmB0zfXzB
dstUP6/XBsIl5JfGC09mP+frAX48sO7qaJ0fzfUyZcMSzyMgHupEfXTa2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI/yud7ivZiKCm785yMH/IHhuwOoMB8GA1UdIwQY
MBaAFBuYDyKllSpO+aTsSp4NDDUf7JRUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzVnUElxV1ZLazc1cE94S25nME1OUl9zbEZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny83NzRlMjYtZDA4Zi00NmQzLWFkMDYt
MzQ3YjU2NmRkYmQxLzEvRzVnUElxV1ZLazc1cE94S25nME1OUl9zbEZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny83NzRlMjYtZDA4Zi00NmQzLWFkMDYtMzQ3YjU2NmRkYmQx
LzEvRzVnUElxV1ZLazc1cE94S25nME1OUl9zbEZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL1KNxosQ
qwlYFvvt2syJCwqcGX+x2lDJzIAnqTXcpgI7fwRWHXM/rukXog3oz9N5lYT2ljd7
In9r9UD8imig/aRIewLk1Jy9n18bAkcg0B4hb9ghHZ4zMuiawThpmFaNG39mKeAY
irq5wOaCHARnC9dporiU8YvJo5SnBMBAOxyTTsaMzF6AM40nhALDwqJ0sNUm8+e8
V75IBBzBMGSDBHkP7fH2Ijo743doKrS4Z/YFWLaDYF81+6Sk+ayOl7yheAOV462Y
ZtddOq6dprW4eFGLapBVb+zTmI1ER3LqR/lzy24sYpYfeD6yZlMuM2B31OMQcKIU
SfszIRmd6783eQ==
-----END CERTIFICATE-----
Generated at Wed Oct 28 07:23:53 2026 by rpki-client