Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/g5t-FhWgAaW8uW4VSnGvmgtFtdc.mft
File: g5t-FhWgAaW8uW4VSnGvmgtFtdc.mft (raw, json)
Hash identifier: cTCJf4sGuLTHrEHEx0uk8xz+mAyKLK5b+UNHxe7LEcw=
Subject key identifier: 71:BF:99:C1:B9:7E:EF:2C:E2:29:8B:81:7A:25:FC:E5:83:5D:CB:33
Authority key identifier: 83:9B:7E:16:15:A0:01:A5:BC:B9:6E:15:4A:71:AF:9A:0B:45:B5:D7
Certificate issuer: /CN=839b7e1615a001a5bcb96e154a71af9a0b45b5d7
Certificate serial: 019FAA889E8D5FD85EDF4ABE985E3A013BC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g5t-FhWgAaW8uW4VSnGvmgtFtdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/g5t-FhWgAaW8uW4VSnGvmgtFtdc.mft
Manifest number: 0A6F
Signing time: Tue 28 Jul 2026 21:01:47 +0000
Manifest this update: Tue 28 Jul 2026 21:01:47 +0000
Manifest next update: Wed 29 Jul 2026 21:01:47 +0000
Files and hashes: 1: b1KrSMtgQ3wtC7LRVXqRaRG-Kyo.roa (hash: 1Mhz+jZ0j26sgAjplNt7YLlv8U2oEM5WHSOMuFm4FJo=)
2: g5t-FhWgAaW8uW4VSnGvmgtFtdc.crl (hash: AUrIvQjFzsJTmfBVravkg8tL2Zw7uAYe0g46iE8FOnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/g5t-FhWgAaW8uW4VSnGvmgtFtdc.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/g5t-FhWgAaW8uW4VSnGvmgtFtdc.mft
rsync://rpki.ripe.net/repository/DEFAULT/g5t-FhWgAaW8uW4VSnGvmgtFtdc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:9e:8d:5f:d8:5e:df:4a:be:98:5e:3a:01:3b:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=839b7e1615a001a5bcb96e154a71af9a0b45b5d7
Validity
Not Before: Jul 28 21:01:47 2026 GMT
Not After : Jul 29 21:01:47 2026 GMT
Subject: CN=71bf99c1b97eef2ce2298b817a25fce5835dcb33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:90:be:a8:84:71:8b:1b:3e:9c:02:f6:79:fa:
4f:3b:79:77:d4:41:70:a4:4a:32:21:12:33:d0:db:
7d:f7:27:55:67:2d:24:8c:da:95:c7:c8:67:9c:41:
b0:72:90:f2:92:a8:16:ef:6d:7a:f4:ec:6a:0e:65:
3e:0c:48:38:2a:d9:f5:bd:38:34:bb:fc:cb:4f:1f:
62:6c:01:8b:4c:6a:5a:10:3c:e4:51:31:bc:64:72:
60:b7:34:c8:e6:94:8c:a3:16:81:f7:e6:a8:76:22:
a5:a1:b1:c9:38:f5:62:69:c9:74:45:5b:88:2f:ec:
1b:1b:d6:96:4f:e5:29:35:9b:16:11:18:6f:16:58:
fe:03:7c:9c:86:a2:64:b6:23:f6:df:48:62:d7:d5:
79:8a:ab:70:cf:3e:e3:31:e9:18:1b:b7:74:8a:ad:
fb:bf:f7:4d:f4:9c:32:ef:5c:ff:7e:0f:43:62:10:
12:3f:38:39:30:df:cb:b7:98:44:46:37:02:30:fb:
58:5e:d0:f9:b7:6c:8f:5f:8b:00:1b:13:ed:e4:15:
26:45:1e:47:b6:ff:09:64:4b:0f:16:b1:8b:9f:b7:
78:2f:f6:0e:bf:53:4d:e6:65:d7:a7:13:de:25:f7:
ed:44:b2:70:5d:53:22:be:29:eb:2b:98:ea:f1:bf:
90:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:BF:99:C1:B9:7E:EF:2C:E2:29:8B:81:7A:25:FC:E5:83:5D:CB:33
X509v3 Authority Key Identifier:
keyid:83:9B:7E:16:15:A0:01:A5:BC:B9:6E:15:4A:71:AF:9A:0B:45:B5:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5t-FhWgAaW8uW4VSnGvmgtFtdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/g5t-FhWgAaW8uW4VSnGvmgtFtdc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/g5t-FhWgAaW8uW4VSnGvmgtFtdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:eb:21:c8:04:e4:97:af:8f:7d:66:d8:cc:36:37:1c:79:16:
30:3a:22:3c:90:ea:b8:ce:c5:d3:59:81:d1:fa:fb:68:0c:c6:
71:5e:2e:c0:04:ce:66:9b:0f:15:28:9e:4a:7d:f7:f5:aa:2d:
42:e8:bc:1f:7d:74:37:5e:94:33:82:0f:fc:6b:cc:ef:8e:54:
dd:7b:8a:78:02:b5:27:dc:36:9d:a5:cf:9d:9f:f1:cd:dc:55:
68:6f:0a:c9:df:69:7c:5f:fb:39:be:a6:b5:62:72:fc:c7:e2:
89:f8:f9:90:e2:27:84:96:cf:c1:68:fe:f4:f9:40:5b:c1:fd:
80:ca:f6:88:e4:1b:c3:94:68:3f:13:5d:76:99:9d:f0:f7:94:
66:3f:12:85:55:66:20:c0:8c:e8:08:3c:c5:cd:18:45:9c:ec:
3b:c4:b6:b4:40:c5:1d:7e:17:32:62:ac:67:fc:5f:b2:82:6d:
d0:47:ff:0d:5b:25:6c:6d:95:2d:53:1a:49:40:67:e4:c6:63:
db:0a:1d:9d:fa:d8:11:3c:8c:eb:75:96:9f:03:a1:50:3c:ef:
5f:cd:a3:e4:e4:f8:42:58:d2:f2:5c:91:dd:14:46:49:2c:b5:
40:db:a9:fb:4e:b4:58:77:80:98:73:08:01:cb:72:d7:88:4c:
1c:06:e8:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:16:10 2026 by rpki-client