Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.mft
File: G-9aoU0xQMfHxJiPGdqUMesaQPE.mft (raw, json)
Hash identifier: B3P9jRwbNIzbVe727fapAl8r59KaWSmLevRkI8Hu2d0=
Subject key identifier: 13:2C:82:7C:04:1F:44:09:5B:DB:62:1F:F8:18:82:CE:2B:52:8B:92
Authority key identifier: 1B:EF:5A:A1:4D:31:40:C7:C7:C4:98:8F:19:DA:94:31:EB:1A:40:F1
Certificate issuer: /CN=1bef5aa14d3140c7c7c4988f19da9431eb1a40f1
Certificate serial: 01A08B680075AE8B88E8B702C3AE66510776
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-9aoU0xQMfHxJiPGdqUMesaQPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.mft
Manifest number: 1A49
Signing time: Thu 10 Sep 2026 13:00:43 +0000
Manifest this update: Thu 10 Sep 2026 13:00:43 +0000
Manifest next update: Fri 11 Sep 2026 13:00:43 +0000
Files and hashes: 1: BFSdsbEkPuA-YZXMwRkjbFSBL_4.roa (hash: 7mDFMoZc4IARD+ubLVsfgMsnY5+CrMhB4pwA/xSdkv8=)
2: G-9aoU0xQMfHxJiPGdqUMesaQPE.crl (hash: oCa/wxO1TWWe/2QF4ac5d0sozzCeRx5IjA/t6aT6VaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-9aoU0xQMfHxJiPGdqUMesaQPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 13:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:68:00:75:ae:8b:88:e8:b7:02:c3:ae:66:51:07:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bef5aa14d3140c7c7c4988f19da9431eb1a40f1
Validity
Not Before: Sep 10 13:00:43 2026 GMT
Not After : Sep 11 13:00:43 2026 GMT
Subject: CN=132c827c041f44095bdb621ff81882ce2b528b92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3f:85:39:df:98:35:50:87:c6:17:cf:86:97:
4d:e6:fb:4f:01:a1:1d:35:44:78:1e:b2:ee:bb:2a:
ad:c3:5e:be:60:7e:74:07:6b:74:68:b9:19:17:21:
77:b4:35:0a:96:12:fe:da:73:83:a6:9d:fb:e6:c0:
cb:7a:e2:46:62:6b:f7:3d:98:d3:a1:26:d2:14:3e:
a8:5a:09:44:77:85:01:3f:a7:18:4d:3c:f0:c8:2e:
ef:09:02:b5:b6:b9:e6:c2:7c:16:4f:ac:df:07:22:
8d:49:12:e5:a9:0d:ea:52:02:54:2a:65:3c:cd:22:
78:80:6f:66:d6:ab:45:fa:eb:94:53:ac:be:8e:c2:
19:50:7b:6a:54:64:35:cc:05:20:13:50:de:6d:9e:
72:1a:45:a6:d0:60:dd:3c:30:46:bf:78:c4:dd:ed:
99:19:3a:1b:56:60:36:5f:45:9c:4a:8b:a2:c2:15:
e4:78:2d:6d:5a:20:31:8c:87:94:88:8f:61:b8:bc:
52:aa:9d:ff:da:05:88:01:68:27:6c:0f:f4:49:fe:
41:0c:02:0f:7f:35:99:4e:88:98:ab:2b:63:6d:77:
05:66:a9:17:cd:04:4b:58:0f:25:e1:da:68:69:92:
0b:e8:5b:d9:41:c9:ea:db:03:c1:0c:dd:7b:ad:b1:
ca:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:2C:82:7C:04:1F:44:09:5B:DB:62:1F:F8:18:82:CE:2B:52:8B:92
X509v3 Authority Key Identifier:
keyid:1B:EF:5A:A1:4D:31:40:C7:C7:C4:98:8F:19:DA:94:31:EB:1A:40:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-9aoU0xQMfHxJiPGdqUMesaQPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:d0:ba:6a:09:76:bc:4c:a3:fb:11:0f:19:ea:bb:63:33:48:
db:41:38:3b:8c:32:72:d9:49:d7:1f:fd:6c:a5:46:ed:d4:2b:
21:59:27:ea:a2:59:e4:a1:31:32:da:f5:cd:3d:f2:7f:6a:5f:
ff:3f:1f:2f:dc:b9:f2:8e:be:82:cf:40:12:bc:32:20:bf:dd:
56:ec:be:17:7f:e5:6c:89:c1:2f:a0:95:d0:81:3f:f9:99:e5:
57:4b:0d:49:26:3d:8d:51:34:69:c7:32:d8:9f:a2:33:f3:34:
86:a5:a1:2a:19:d2:8d:fc:ba:b0:e9:01:b7:c5:9c:7b:e3:ab:
0e:cf:9f:73:f4:90:2d:c0:31:2a:12:68:60:fc:87:21:a1:08:
26:87:95:16:1c:ec:d5:07:13:a6:07:f2:87:12:d4:47:74:84:
54:0c:f9:58:f5:c8:43:e9:3a:36:7e:b8:a0:e0:e2:c0:74:4a:
f3:38:06:d9:6f:c3:bb:83:b1:ca:78:55:14:e6:37:9f:a4:45:
42:2f:0f:9b:92:98:39:a3:f0:16:98:84:53:20:76:21:d7:44:
68:05:ed:80:f9:e1:15:0e:03:25:e1:4f:da:e1:9f:68:ac:fe:
ec:3f:07:6f:cf:e9:23:37:52:09:45:53:ac:9b:77:d9:f3:d5:
b1:5c:12:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 23:39:55 2026 by rpki-client