Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/77c34c-e460-405f-954e-f641422121d2/1/G1ODFvaFKl08opH096J6zyr3ibg.mft
File: G1ODFvaFKl08opH096J6zyr3ibg.mft (raw, json)
Hash identifier: h5M8HSkHvdTG8oA2cWvIuB7COy0kykhw9trtZekvGXA=
Subject key identifier: CC:2C:01:BB:D8:38:63:D4:9B:25:9E:C9:07:C2:AE:0C:1C:0D:8F:DC
Authority key identifier: 1B:53:83:16:F6:85:2A:5D:3C:A2:91:F4:F7:A2:7A:CF:2A:F7:89:B8
Certificate issuer: /CN=1b538316f6852a5d3ca291f4f7a27acf2af789b8
Certificate serial: 01A0BC5500B37E483B06D1BF5387EF85BFCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G1ODFvaFKl08opH096J6zyr3ibg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/77c34c-e460-405f-954e-f641422121d2/1/G1ODFvaFKl08opH096J6zyr3ibg.mft
Manifest number: 0235
Signing time: Sun 20 Sep 2026 01:01:22 +0000
Manifest this update: Sun 20 Sep 2026 01:01:22 +0000
Manifest next update: Mon 21 Sep 2026 01:01:22 +0000
Files and hashes: 1: 3Vfs46JpS4OIv6juqlsavP8vJjY.asa (hash: sB2s+Xl9S1p4i5AWfMPlsofSMh8d6xFVYKGmtBeEpqw=)
2: G1ODFvaFKl08opH096J6zyr3ibg.crl (hash: cSfT8MFZExJq5esM3CmlcFEE5xVU1YsM5wxZ6a2LC04=)
3: pO4-6JRTb_iUQ3eGXntbc3yEu38.roa (hash: 1+fcU0cN2SSHn14oJqXDeRbJ3y0/io2Qni1kI8nGGxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/77c34c-e460-405f-954e-f641422121d2/1/G1ODFvaFKl08opH096J6zyr3ibg.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/77c34c-e460-405f-954e-f641422121d2/1/G1ODFvaFKl08opH096J6zyr3ibg.mft
rsync://rpki.ripe.net/repository/DEFAULT/G1ODFvaFKl08opH096J6zyr3ibg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 01:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bc:55:00:b3:7e:48:3b:06:d1:bf:53:87:ef:85:bf:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b538316f6852a5d3ca291f4f7a27acf2af789b8
Validity
Not Before: Sep 20 01:01:22 2026 GMT
Not After : Sep 21 01:01:22 2026 GMT
Subject: CN=cc2c01bbd83863d49b259ec907c2ae0c1c0d8fdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d4:f8:e1:d6:38:4e:d2:57:59:45:2f:29:88:
34:c0:26:40:86:67:54:26:63:51:80:d9:42:ea:de:
b9:a4:9b:b3:ea:35:80:4e:9f:84:1c:99:c8:14:d1:
04:72:e2:12:09:32:d0:f3:e7:6f:28:8b:16:99:7c:
49:d3:c7:c2:20:67:5c:c9:4c:01:96:55:e7:b8:a5:
2a:f3:05:ce:4b:e6:4d:90:7d:d8:9c:ab:60:ba:f5:
35:ec:d2:b3:4d:c6:4b:71:d0:16:ae:3e:df:87:a0:
43:0f:de:aa:2e:44:4c:d6:70:5a:2d:24:fd:6d:04:
8e:f5:24:33:46:ae:4f:c9:47:b4:da:81:01:aa:db:
c9:14:fe:e1:dc:6a:3e:81:69:23:d9:ac:70:e1:32:
dc:98:ff:3c:8f:2f:14:13:f1:b3:23:36:dc:88:a2:
38:97:56:98:56:0f:c3:ab:c2:e5:ea:5e:da:00:d8:
34:15:e8:34:71:37:1f:75:73:0c:1b:33:a2:2f:74:
7a:b5:c6:7f:46:83:75:d3:2d:ac:af:ab:cf:b4:45:
82:08:d6:1b:86:cd:7b:49:23:a0:1d:27:fd:17:0d:
15:af:cd:17:02:2e:3c:12:c6:64:9e:30:44:44:e7:
f5:8e:64:91:e1:5c:94:89:90:b3:39:b5:1b:2b:30:
63:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:2C:01:BB:D8:38:63:D4:9B:25:9E:C9:07:C2:AE:0C:1C:0D:8F:DC
X509v3 Authority Key Identifier:
keyid:1B:53:83:16:F6:85:2A:5D:3C:A2:91:F4:F7:A2:7A:CF:2A:F7:89:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G1ODFvaFKl08opH096J6zyr3ibg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/77c34c-e460-405f-954e-f641422121d2/1/G1ODFvaFKl08opH096J6zyr3ibg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/77c34c-e460-405f-954e-f641422121d2/1/G1ODFvaFKl08opH096J6zyr3ibg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:c5:5c:ce:33:87:28:8c:bc:d2:32:3b:9f:34:b6:fb:26:01:
5e:e8:13:7e:d9:91:27:37:db:ba:08:dc:d6:17:16:1f:57:33:
03:79:c8:08:92:12:81:f4:ce:75:08:59:f4:e2:65:61:6f:da:
be:01:7a:c8:20:28:88:65:b0:0a:3d:56:79:54:c5:1f:f3:5d:
43:b5:4d:40:d1:4a:43:eb:f0:9b:3c:b4:cd:51:a4:51:c1:c4:
f5:ca:be:2d:06:df:94:63:61:a1:cf:d4:41:6d:7e:86:67:b8:
9e:6c:42:bd:73:5d:fa:e6:72:71:0d:27:c4:9e:fc:f7:fd:11:
ed:db:e7:6e:ab:c6:7a:85:a7:a3:5b:ea:9f:95:51:0b:0b:45:
db:eb:5b:63:7d:b4:5e:6c:f9:c5:8c:87:b2:b3:b6:49:1d:ec:
76:e6:da:19:f7:ec:23:4e:a1:00:d7:89:06:d2:e0:16:e4:a1:
d7:70:ab:e0:da:52:e5:86:c1:c2:06:40:f9:4a:79:84:c8:59:
c2:90:63:ec:79:b8:85:c3:ca:48:6f:c2:3f:84:37:b0:cc:ad:
4e:15:57:56:4d:6a:7b:f4:d8:77:40:a0:38:d8:d0:3b:83:b0:
53:52:54:24:26:b4:85:6c:e0:4a:6c:01:0c:69:ad:ac:4b:93:
10:fb:eb:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 09:28:52 2026 by rpki-client