Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft
File: g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft (raw, json)
Hash identifier: IUgmkNNl7kAREYZplUg63tvbCJVs6mGADwwoovZhIpg=
Subject key identifier: 9F:AA:36:0A:F8:A9:9B:4B:5C:EF:40:09:FC:D3:C9:B0:98:1D:7A:83
Authority key identifier: 83:87:C2:19:C9:84:1E:BA:FA:A3:D4:08:06:C9:84:F9:F3:E4:E4:61
Certificate issuer: /CN=8387c219c9841ebafaa3d40806c984f9f3e4e461
Certificate serial: 01A0C6A0AB0F7F4E62121660DD223D19722A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g4fCGcmEHrr6o9QIBsmE-fPk5GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft
Manifest number: 1276
Signing time: Tue 22 Sep 2026 01:00:13 +0000
Manifest this update: Tue 22 Sep 2026 01:00:13 +0000
Manifest next update: Wed 23 Sep 2026 01:00:13 +0000
Files and hashes: 1: FiY50YnA9bU0VuqY_xB52WjpoQU.roa (hash: HLxKWl8h4/WN5MAo6nKsQwk0EYZk/ybbMsE7JxuTVx4=)
2: g4fCGcmEHrr6o9QIBsmE-fPk5GE.crl (hash: Ugr49th6SHleNi9p4psycYNogo1psTzq3f25KzEULn8=)
3: gp8VTUjNUe2SHA6Nw6jMCrBEmpI.roa (hash: KkGcwa9MsEC5A+egSiEpb4oola97UKCGunqwzbxcwVw=)
4: q6vOzN1DPBf1vx1ss5zgg7dDXIU.roa (hash: pJZycJNT80sKDVuDlXh5Ajg519IZ1fSYiagFEg9PFpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/g4fCGcmEHrr6o9QIBsmE-fPk5GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 01:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:a0:ab:0f:7f:4e:62:12:16:60:dd:22:3d:19:72:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8387c219c9841ebafaa3d40806c984f9f3e4e461
Validity
Not Before: Sep 22 01:00:13 2026 GMT
Not After : Sep 23 01:00:13 2026 GMT
Subject: CN=9faa360af8a99b4b5cef4009fcd3c9b0981d7a83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ec:37:41:60:0b:5b:9c:1a:15:a4:a7:36:3f:
6a:ce:4f:f7:84:1e:27:a6:82:2f:51:26:26:21:d3:
4b:a9:2d:0e:0d:96:95:61:bb:b6:8a:fa:4c:5b:77:
f8:f7:49:8d:03:eb:95:4b:66:73:ca:77:b2:b5:4c:
06:97:9c:d7:75:97:f0:1b:99:84:18:35:24:68:29:
a1:88:99:e7:ca:2c:ad:0f:8a:9c:a0:8b:14:d6:56:
b4:1c:bb:52:e5:12:37:03:48:ec:9b:a3:79:6f:e1:
e8:b3:19:38:bd:b8:fa:10:c2:33:3c:4f:08:fa:94:
5c:4a:c1:20:6d:09:5a:a3:ca:e4:0d:76:7e:e6:99:
79:c8:9a:16:8f:0f:54:1f:fc:ee:3b:7a:d1:80:64:
49:f7:35:5f:5d:0c:d0:3c:66:96:2b:49:e2:23:6c:
b5:23:5d:c6:29:0a:0e:85:8b:54:05:ec:0b:41:2d:
ac:a4:78:6e:84:1a:4e:f0:69:76:31:ed:5a:6a:05:
b6:5a:49:50:e0:b8:5c:50:9f:87:fc:bb:fc:30:75:
68:d2:a3:39:96:97:8d:b7:2c:aa:a8:e2:39:77:82:
06:94:1f:86:8d:c6:17:3c:9d:62:85:df:91:eb:b7:
ba:46:bc:3a:77:8a:b0:ed:65:95:6a:99:ea:0f:94:
c4:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:AA:36:0A:F8:A9:9B:4B:5C:EF:40:09:FC:D3:C9:B0:98:1D:7A:83
X509v3 Authority Key Identifier:
keyid:83:87:C2:19:C9:84:1E:BA:FA:A3:D4:08:06:C9:84:F9:F3:E4:E4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g4fCGcmEHrr6o9QIBsmE-fPk5GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:b1:b1:6d:cd:8d:de:ec:5b:fb:33:10:4d:88:6f:bb:5f:ab:
8d:6a:f2:a4:88:93:c5:c6:7a:2b:bd:91:a8:82:93:13:37:79:
ac:07:20:72:1f:47:7f:41:d6:c2:62:ff:8d:39:ed:7f:7c:1d:
c1:30:1c:2c:dd:e8:21:2b:1f:2a:ff:a5:5b:4a:86:d9:e8:ed:
cd:0d:97:03:b7:08:b4:db:09:4b:a5:99:33:9b:d0:21:f9:96:
32:45:81:fa:69:43:26:31:29:72:80:6f:14:72:68:d5:3f:c1:
5f:10:77:38:11:f5:fe:f3:c4:94:a2:46:08:71:25:db:b5:f0:
61:3a:cb:e9:5f:bb:c3:f5:32:d9:4d:47:7f:ab:33:43:af:43:
59:bd:cc:b0:86:36:2f:1f:bd:78:34:ea:25:fa:e6:c6:ae:a7:
3a:30:5d:ff:19:de:5f:1c:fa:2c:6a:70:b1:e3:f6:44:58:66:
0e:0c:89:0f:14:87:6f:69:58:39:28:48:14:95:2b:da:b2:8f:
7a:0c:c0:03:15:d4:8a:ce:da:e5:1b:f4:12:92:40:56:ba:81:
86:3b:0b:90:11:4c:1c:fa:5e:b0:94:12:2b:29:f2:39:a6:23:
9a:b0:5c:84:98:26:5d:05:c2:ae:e8:b9:c8:42:bf:77:e0:b2:
37:7a:96:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDGoKsPf05iEhZg3SI9GXIqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzODdjMjE5Yzk4NDFlYmFmYWEzZDQwODA2Yzk4NGY5ZjNl
NGU0NjEwHhcNMjYwOTIyMDEwMDEzWhcNMjYwOTIzMDEwMDEzWjAzMTEwLwYDVQQD
Eyg5ZmFhMzYwYWY4YTk5YjRiNWNlZjQwMDlmY2QzYzliMDk4MWQ3YTgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtew3QWALW5waFaSnNj9qzk/3hB4n
poIvUSYmIdNLqS0ODZaVYbu2ivpMW3f490mNA+uVS2ZzyneytUwGl5zXdZfwG5mE
GDUkaCmhiJnnyiytD4qcoIsU1la0HLtS5RI3A0jsm6N5b+Hosxk4vbj6EMIzPE8I
+pRcSsEgbQlao8rkDXZ+5pl5yJoWjw9UH/zuO3rRgGRJ9zVfXQzQPGaWK0niI2y1
I13GKQoOhYtUBewLQS2spHhuhBpO8Gl2Me1aagW2WklQ4LhcUJ+H/Lv8MHVo0qM5
lpeNtyyqqOI5d4IGlB+GjcYXPJ1ihd+R67e6Rrw6d4qw7WWVapnqD5TESQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ+qNgr4qZtLXO9ACfzTybCYHXqDMB8GA1UdIwQY
MBaAFIOHwhnJhB66+qPUCAbJhPnz5ORhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzRmQ0djbUVIcnI2bzlRSUJzbUUtZlBrNUdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9lZDMwNTQtMGE5Ny00OTdjLTk3MDMt
YmM5MWMwNjcwZDAzLzEvZzRmQ0djbUVIcnI2bzlRSUJzbUUtZlBrNUdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi9lZDMwNTQtMGE5Ny00OTdjLTk3MDMtYmM5MWMwNjcwZDAz
LzEvZzRmQ0djbUVIcnI2bzlRSUJzbUUtZlBrNUdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwrGxbc2N
3uxb+zMQTYhvu1+rjWrypIiTxcZ6K72RqIKTEzd5rAcgch9Hf0HWwmL/jTntf3wd
wTAcLN3oISsfKv+lW0qG2ejtzQ2XA7cItNsJS6WZM5vQIfmWMkWB+mlDJjEpcoBv
FHJo1T/BXxB3OBH1/vPElKJGCHEl27XwYTrL6V+7w/Uy2U1Hf6szQ69DWb3MsIY2
Lx+9eDTqJfrmxq6nOjBd/xneXxz6LGpwseP2RFhmDgyJDxSHb2lYOShIFJUr2rKP
egzAAxXUis7a5Rv0EpJAVrqBhjsLkBFMHPpesJQSKynyOaYjmrBchJgmXQXCrui5
yEK/d+CyN3qW0g==
-----END CERTIFICATE-----
Generated at Tue Sep 22 10:55:47 2026 by rpki-client