Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.mft
File: G-9aoU0xQMfHxJiPGdqUMesaQPE.mft (raw, json)
Hash identifier: xmgSwMx2+WvE754Tzi7+vLHZ9IGFc5SaezNMiLBjiY0=
Subject key identifier: DD:FB:A8:27:5E:DD:5B:4D:BE:02:3F:6F:9E:B9:1B:BB:98:33:B4:2B
Authority key identifier: 1B:EF:5A:A1:4D:31:40:C7:C7:C4:98:8F:19:DA:94:31:EB:1A:40:F1
Certificate issuer: /CN=1bef5aa14d3140c7c7c4988f19da9431eb1a40f1
Certificate serial: 01A180AAE5285640001F6E8103AED5A5D75D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-9aoU0xQMfHxJiPGdqUMesaQPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.mft
Manifest number: 1AC8
Signing time: Wed 28 Oct 2026 04:00:45 +0000
Manifest this update: Wed 28 Oct 2026 04:00:45 +0000
Manifest next update: Thu 29 Oct 2026 04:00:45 +0000
Files and hashes: 1: BFSdsbEkPuA-YZXMwRkjbFSBL_4.roa (hash: 7mDFMoZc4IARD+ubLVsfgMsnY5+CrMhB4pwA/xSdkv8=)
2: G-9aoU0xQMfHxJiPGdqUMesaQPE.crl (hash: gKgL3aIzPUtHJMJZT84Wv98RT5m/l2G1BoyoMUWQncc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-9aoU0xQMfHxJiPGdqUMesaQPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 04:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:aa:e5:28:56:40:00:1f:6e:81:03:ae:d5:a5:d7:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bef5aa14d3140c7c7c4988f19da9431eb1a40f1
Validity
Not Before: Oct 28 04:00:45 2026 GMT
Not After : Oct 29 04:00:45 2026 GMT
Subject: CN=ddfba8275edd5b4dbe023f6f9eb91bbb9833b42b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5b:14:09:71:f2:97:f4:e2:d2:ba:25:33:e9:
0e:25:44:a4:0d:c6:c0:36:f2:6e:10:ee:c2:72:f2:
0f:68:00:10:94:7c:94:4d:88:fe:49:cc:4a:e9:f6:
26:e1:0f:12:0f:be:f5:4b:6c:73:e1:6e:14:ee:33:
dc:8b:5e:3e:9e:3b:2b:e9:d4:09:6c:b4:dd:0b:3b:
30:95:14:47:70:45:7c:0e:cd:d9:26:74:d8:c7:f4:
dd:96:1c:9f:09:1e:e7:ec:ed:e5:6b:09:ab:d2:b9:
bf:43:bc:6e:e8:d8:46:5d:51:13:f5:6d:6c:d7:0c:
a9:e3:0e:8b:51:df:2f:71:60:8a:1d:f4:c1:06:7f:
85:bf:d8:82:de:a0:8f:99:3d:25:39:61:61:dd:24:
e9:42:8b:60:2a:e6:72:6e:02:8c:f2:00:2f:a0:b8:
c5:a0:73:c8:40:b8:20:0d:22:bf:06:3a:85:7c:28:
77:7f:30:e9:38:51:d6:cf:24:cb:75:eb:58:be:c5:
ce:a5:b6:68:53:03:a5:e1:c8:64:e6:27:b9:47:ef:
1a:43:fc:68:17:1e:3c:63:4b:b5:77:18:73:c3:b2:
6a:d5:a3:15:af:e5:3e:38:35:85:0a:5b:ff:be:59:
33:91:cc:ee:14:5f:ec:0d:19:06:4f:53:ae:c0:d2:
e0:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:FB:A8:27:5E:DD:5B:4D:BE:02:3F:6F:9E:B9:1B:BB:98:33:B4:2B
X509v3 Authority Key Identifier:
keyid:1B:EF:5A:A1:4D:31:40:C7:C7:C4:98:8F:19:DA:94:31:EB:1A:40:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-9aoU0xQMfHxJiPGdqUMesaQPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:44:66:e4:cc:8d:93:5c:b3:90:7f:d9:97:c8:30:17:23:08:
2d:63:9b:98:18:54:18:65:06:f5:33:bf:ac:61:52:24:72:ba:
95:e0:16:5e:7f:a1:bf:94:b5:1a:f0:d6:02:b3:5f:0b:00:0a:
3c:33:8f:a5:0d:f7:e7:db:e3:30:05:ef:83:c6:4f:63:31:a2:
4a:6c:85:f8:58:a8:fe:ee:35:40:0a:54:e7:b6:e8:43:19:cb:
51:70:5d:b0:97:37:f7:be:3e:e9:5b:18:d6:89:53:bd:d7:12:
78:fc:a2:6a:eb:53:f0:09:39:60:18:e7:94:15:9a:0a:70:35:
40:a6:bb:bc:c5:07:35:5d:8e:cb:69:1f:4f:81:1f:5f:6e:4c:
bf:71:89:62:b2:c2:92:0c:3e:42:fb:84:f5:f3:74:44:8f:61:
c1:52:4c:41:98:9a:ec:ca:78:f7:00:70:de:c7:b7:82:77:d0:
b5:a8:a3:25:c5:c7:49:f5:bc:91:80:a7:1e:26:1a:ed:dc:aa:
4d:ab:1f:88:00:50:c9:e7:49:28:fd:ca:77:f0:ab:88:fc:5e:
d3:5c:b9:4e:7f:1f:19:f3:e8:4b:71:14:96:57:2e:0e:e9:17:
48:b1:be:a8:ee:6c:06:2e:73:6d:af:9f:c5:15:41:8f:a3:3c:
ed:64:5f:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGAquUoVkAAH26BA67VpdddMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiZWY1YWExNGQzMTQwYzdjN2M0OTg4ZjE5ZGE5NDMxZWIx
YTQwZjEwHhcNMjYxMDI4MDQwMDQ1WhcNMjYxMDI5MDQwMDQ1WjAzMTEwLwYDVQQD
EyhkZGZiYTgyNzVlZGQ1YjRkYmUwMjNmNmY5ZWI5MWJiYjk4MzNiNDJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlsUCXHyl/Ti0rolM+kOJUSkDcbA
NvJuEO7CcvIPaAAQlHyUTYj+ScxK6fYm4Q8SD771S2xz4W4U7jPci14+njsr6dQJ
bLTdCzswlRRHcEV8Ds3ZJnTYx/TdlhyfCR7n7O3lawmr0rm/Q7xu6NhGXVET9W1s
1wyp4w6LUd8vcWCKHfTBBn+Fv9iC3qCPmT0lOWFh3STpQotgKuZybgKM8gAvoLjF
oHPIQLggDSK/BjqFfCh3fzDpOFHWzyTLdetYvsXOpbZoUwOl4chk5ie5R+8aQ/xo
Fx48Y0u1dxhzw7Jq1aMVr+U+ODWFClv/vlkzkczuFF/sDRkGT1OuwNLgZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN37qCde3VtNvgI/b565G7uYM7QrMB8GA1UdIwQY
MBaAFBvvWqFNMUDHx8SYjxnalDHrGkDxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRy05YW9VMHhRTWZIeEppUEdkcVVNZXNhUVBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC81ZDYxNjctZjAyYi00NGRiLWI1NjUt
MGU0MzgyMzEwY2E1LzEvRy05YW9VMHhRTWZIeEppUEdkcVVNZXNhUVBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC81ZDYxNjctZjAyYi00NGRiLWI1NjUtMGU0MzgyMzEwY2E1
LzEvRy05YW9VMHhRTWZIeEppUEdkcVVNZXNhUVBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQkRm5MyN
k1yzkH/Zl8gwFyMILWObmBhUGGUG9TO/rGFSJHK6leAWXn+hv5S1GvDWArNfCwAK
PDOPpQ3359vjMAXvg8ZPYzGiSmyF+Fio/u41QApU57boQxnLUXBdsJc3974+6VsY
1olTvdcSePyiautT8Ak5YBjnlBWaCnA1QKa7vMUHNV2Oy2kfT4EfX25Mv3GJYrLC
kgw+QvuE9fN0RI9hwVJMQZia7Mp49wBw3se3gnfQtaijJcXHSfW8kYCnHiYa7dyq
TasfiABQyedJKP3Kd/CriPxe01y5Tn8fGfPoS3EUllcuDukXSLG+qO5sBi5zba+f
xRVBj6M87WRfIw==
-----END CERTIFICATE-----
Generated at Wed Oct 28 11:52:30 2026 by rpki-client