Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.mft
File: G-9aoU0xQMfHxJiPGdqUMesaQPE.mft (raw, json)
Hash identifier: HIO9QoTG17DpY1LNwOGZVuvcOQ3+Km+qPJnxDd+AWXI=
Subject key identifier: 68:B8:AD:C9:5B:F5:37:32:FD:4A:41:C7:C3:CB:3D:31:BD:F1:2D:FF
Authority key identifier: 1B:EF:5A:A1:4D:31:40:C7:C7:C4:98:8F:19:DA:94:31:EB:1A:40:F1
Certificate issuer: /CN=1bef5aa14d3140c7c7c4988f19da9431eb1a40f1
Certificate serial: 019EB9FDBC1464F1F8711037C39E86193221
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-9aoU0xQMfHxJiPGdqUMesaQPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.mft
Manifest number: 1958
Signing time: Fri 12 Jun 2026 04:01:14 +0000
Manifest this update: Fri 12 Jun 2026 04:01:14 +0000
Manifest next update: Sat 13 Jun 2026 04:01:14 +0000
Files and hashes: 1: BFSdsbEkPuA-YZXMwRkjbFSBL_4.roa (hash: 7mDFMoZc4IARD+ubLVsfgMsnY5+CrMhB4pwA/xSdkv8=)
2: G-9aoU0xQMfHxJiPGdqUMesaQPE.crl (hash: XthM6UnPpwJl2dRAHsuTgKHGClrbLyRYCBikK3Hs0j8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-9aoU0xQMfHxJiPGdqUMesaQPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:fd:bc:14:64:f1:f8:71:10:37:c3:9e:86:19:32:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bef5aa14d3140c7c7c4988f19da9431eb1a40f1
Validity
Not Before: Jun 12 04:01:14 2026 GMT
Not After : Jun 13 04:01:14 2026 GMT
Subject: CN=68b8adc95bf53732fd4a41c7c3cb3d31bdf12dff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b7:4e:ce:37:be:17:9d:73:da:ff:e1:d2:4f:
dc:75:7a:0d:20:1f:38:09:90:aa:14:80:ee:40:4d:
7b:0c:f1:bd:62:8c:63:36:cc:d3:63:26:f9:cd:a8:
29:5f:37:ca:fd:d0:03:13:6e:5a:e0:39:12:79:e5:
95:16:98:4d:06:b1:f1:a9:35:eb:e6:8e:3f:b3:2a:
9c:9c:00:5f:4b:2c:e5:f1:33:e2:4d:af:f9:6c:40:
24:5f:22:06:e8:30:c0:00:c3:5f:33:76:25:4e:41:
dd:4f:47:45:db:89:82:6a:f9:13:a3:d6:cd:81:db:
b7:8a:01:ba:43:bc:89:4c:ee:05:6e:73:37:99:de:
40:92:cb:65:ff:c8:5a:40:af:5e:de:34:c4:99:02:
74:ac:5c:96:82:fc:f3:1c:7f:16:25:76:38:1a:b7:
d4:74:e3:75:8e:ac:6e:bd:54:16:75:5a:ab:f5:e2:
1a:52:5e:ef:84:74:25:9e:c8:d5:04:8d:1a:c3:63:
67:41:cb:db:e6:8d:ec:9f:20:3f:d9:c0:0c:31:95:
e5:09:67:eb:d8:1d:97:5a:e2:ba:d5:8c:77:9e:c7:
45:f4:9e:1d:a6:dc:c4:99:5f:8e:27:c4:8a:bb:25:
9e:bb:a8:cb:51:a7:d4:f3:2d:56:a0:ce:e0:1b:10:
c4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:B8:AD:C9:5B:F5:37:32:FD:4A:41:C7:C3:CB:3D:31:BD:F1:2D:FF
X509v3 Authority Key Identifier:
keyid:1B:EF:5A:A1:4D:31:40:C7:C7:C4:98:8F:19:DA:94:31:EB:1A:40:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-9aoU0xQMfHxJiPGdqUMesaQPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:5e:35:69:b6:5a:2d:2a:8a:ee:78:08:d1:bc:8a:de:c1:13:
99:68:3e:0a:e5:4a:2e:83:f1:bd:80:d7:2d:be:17:fa:81:84:
17:58:b8:6c:e5:52:25:3e:7d:ab:c6:10:e2:45:ea:9f:f6:7c:
9d:4a:ce:0f:65:0c:fc:0a:5d:74:88:30:9f:85:f6:a8:14:1b:
ae:35:9b:8e:c1:e6:24:26:bb:81:a3:15:a5:b2:96:c5:af:b5:
2b:62:67:20:48:c8:47:f7:ac:06:59:a9:94:b7:08:5d:2e:9f:
31:e2:a6:76:a3:d9:35:50:5a:64:a3:77:c2:07:3d:82:56:cf:
d2:28:46:b0:da:5b:94:3d:92:5d:ce:27:e2:ec:db:4f:88:14:
d9:0f:80:8f:f8:4c:5e:2f:3c:0c:20:b4:71:21:a0:b1:01:c6:
11:62:31:ab:c9:3d:c7:99:83:78:68:17:02:69:a4:6a:bc:a7:
15:73:ff:39:87:ae:d9:4e:e2:bd:68:ee:ac:a3:4e:2c:f4:d2:
73:e9:43:75:1d:5a:0f:e8:08:93:85:1c:aa:9b:39:6b:b6:b2:
e3:90:01:02:5c:64:bb:bc:73:4d:c6:48:34:dd:18:d1:68:e9:
64:f3:9a:09:37:8d:2f:78:e0:07:da:28:1d:d7:f2:87:b5:68:
3f:cf:e1:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ65/bwUZPH4cRA3w56GGTIhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiZWY1YWExNGQzMTQwYzdjN2M0OTg4ZjE5ZGE5NDMxZWIx
YTQwZjEwHhcNMjYwNjEyMDQwMTE0WhcNMjYwNjEzMDQwMTE0WjAzMTEwLwYDVQQD
Eyg2OGI4YWRjOTViZjUzNzMyZmQ0YTQxYzdjM2NiM2QzMWJkZjEyZGZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7dOzje+F51z2v/h0k/cdXoNIB84
CZCqFIDuQE17DPG9YoxjNszTYyb5zagpXzfK/dADE25a4DkSeeWVFphNBrHxqTXr
5o4/syqcnABfSyzl8TPiTa/5bEAkXyIG6DDAAMNfM3YlTkHdT0dF24mCavkTo9bN
gdu3igG6Q7yJTO4FbnM3md5Akstl/8haQK9e3jTEmQJ0rFyWgvzzHH8WJXY4GrfU
dON1jqxuvVQWdVqr9eIaUl7vhHQlnsjVBI0aw2NnQcvb5o3snyA/2cAMMZXlCWfr
2B2XWuK61Yx3nsdF9J4dptzEmV+OJ8SKuyWeu6jLUafU8y1WoM7gGxDEZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGi4rclb9Tcy/UpBx8PLPTG98S3/MB8GA1UdIwQY
MBaAFBvvWqFNMUDHx8SYjxnalDHrGkDxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRy05YW9VMHhRTWZIeEppUEdkcVVNZXNhUVBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC81ZDYxNjctZjAyYi00NGRiLWI1NjUt
MGU0MzgyMzEwY2E1LzEvRy05YW9VMHhRTWZIeEppUEdkcVVNZXNhUVBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC81ZDYxNjctZjAyYi00NGRiLWI1NjUtMGU0MzgyMzEwY2E1
LzEvRy05YW9VMHhRTWZIeEppUEdkcVVNZXNhUVBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArF41abZa
LSqK7ngI0byK3sETmWg+CuVKLoPxvYDXLb4X+oGEF1i4bOVSJT59q8YQ4kXqn/Z8
nUrOD2UM/ApddIgwn4X2qBQbrjWbjsHmJCa7gaMVpbKWxa+1K2JnIEjIR/esBlmp
lLcIXS6fMeKmdqPZNVBaZKN3wgc9glbP0ihGsNpblD2SXc4n4uzbT4gU2Q+Aj/hM
Xi88DCC0cSGgsQHGEWIxq8k9x5mDeGgXAmmkarynFXP/OYeu2U7ivWjurKNOLPTS
c+lDdR1aD+gIk4Ucqps5a7ay45ABAlxku7xzTcZINN0Y0WjpZPOaCTeNL3jgB9oo
Hdfyh7VoP8/hWg==
-----END CERTIFICATE-----
Generated at Fri Jun 12 06:13:02 2026 by rpki-client