Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/a56723-d37c-417b-a8a1-6e22bf436304/1/G_5rmg5omKei6dhNPb9jJ7RT5mI.mft
File: G_5rmg5omKei6dhNPb9jJ7RT5mI.mft (raw, json)
Hash identifier: dKygN44zwZ8F8flMbvEcc0a+GMmpsKLETUwC1fwCT5o=
Subject key identifier: DE:35:1E:C7:1B:61:1C:02:16:E9:CB:E1:00:C9:D3:2A:2E:6E:32:8F
Authority key identifier: 1B:FE:6B:9A:0E:68:98:A7:A2:E9:D8:4D:3D:BF:63:27:B4:53:E6:62
Certificate issuer: /CN=1bfe6b9a0e6898a7a2e9d84d3dbf6327b453e662
Certificate serial: 01A109CB11F6AEA8FCBC0B5DD309DD096351
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_5rmg5omKei6dhNPb9jJ7RT5mI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/a56723-d37c-417b-a8a1-6e22bf436304/1/G_5rmg5omKei6dhNPb9jJ7RT5mI.mft
Manifest number: 1A8B
Signing time: Mon 05 Oct 2026 02:01:05 +0000
Manifest this update: Mon 05 Oct 2026 02:01:05 +0000
Manifest next update: Tue 06 Oct 2026 02:01:05 +0000
Files and hashes: 1: G_5rmg5omKei6dhNPb9jJ7RT5mI.crl (hash: nYLpeLPIOVGpTaTdJQXBj2AowYA23xPntFbey0Pmico=)
2: a3hPdOwSId_u28xBd8rkOIlv6uQ.roa (hash: Ap2RCwOQSh9WDaQFvJ/mvW1z9+S2Nlt5BkUs4q9QkBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/a56723-d37c-417b-a8a1-6e22bf436304/1/G_5rmg5omKei6dhNPb9jJ7RT5mI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/a56723-d37c-417b-a8a1-6e22bf436304/1/G_5rmg5omKei6dhNPb9jJ7RT5mI.mft
rsync://rpki.ripe.net/repository/DEFAULT/G_5rmg5omKei6dhNPb9jJ7RT5mI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 23:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:09:cb:11:f6:ae:a8:fc:bc:0b:5d:d3:09:dd:09:63:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bfe6b9a0e6898a7a2e9d84d3dbf6327b453e662
Validity
Not Before: Oct 5 02:01:05 2026 GMT
Not After : Oct 6 02:01:05 2026 GMT
Subject: CN=de351ec71b611c0216e9cbe100c9d32a2e6e328f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:fe:58:89:76:d6:17:bf:bb:64:c7:ed:4e:c9:
dd:bd:68:2e:6d:f5:0b:f2:1b:a7:04:a4:55:af:d2:
be:52:84:e9:42:09:ef:fd:cd:06:c3:82:ef:fb:d4:
62:b3:ce:3c:50:9c:01:27:12:c1:92:4e:e8:56:b4:
12:f6:37:33:3f:5e:23:81:d7:d7:4e:8d:f3:02:3c:
0a:46:a1:6f:ec:59:68:4a:35:dc:c3:8e:cf:d7:96:
b0:40:43:81:8e:74:ce:ac:56:cd:2b:b5:15:01:aa:
1e:a7:1a:b8:8f:60:88:f4:1e:f3:0b:e6:96:98:18:
45:cf:e4:59:b9:4b:7a:50:14:d3:eb:11:a7:87:0f:
e0:45:fc:37:d9:0e:ab:81:24:64:d5:81:2c:94:be:
2d:18:f3:1e:bc:87:dc:01:d4:ab:cf:fa:6c:d5:79:
ee:20:62:e3:d4:36:5a:c8:b2:9f:bc:46:0c:93:8e:
2b:8b:91:11:bd:83:82:96:c4:7a:57:5a:15:ca:b3:
7c:78:5e:cb:94:4c:64:60:16:a2:fb:f4:7c:bf:8c:
da:5e:a3:cb:66:65:31:73:d5:84:0f:f8:02:0b:f8:
10:b6:d9:8e:64:a8:cb:e7:a4:a0:22:61:c1:3f:62:
03:98:71:5e:ad:6b:cb:21:6b:08:9c:57:d3:24:ce:
9e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:35:1E:C7:1B:61:1C:02:16:E9:CB:E1:00:C9:D3:2A:2E:6E:32:8F
X509v3 Authority Key Identifier:
keyid:1B:FE:6B:9A:0E:68:98:A7:A2:E9:D8:4D:3D:BF:63:27:B4:53:E6:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_5rmg5omKei6dhNPb9jJ7RT5mI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/a56723-d37c-417b-a8a1-6e22bf436304/1/G_5rmg5omKei6dhNPb9jJ7RT5mI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/a56723-d37c-417b-a8a1-6e22bf436304/1/G_5rmg5omKei6dhNPb9jJ7RT5mI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:e1:8b:e0:aa:53:05:6f:fb:b6:73:1f:6b:8f:99:98:3a:dc:
74:b3:99:db:a2:be:d9:d3:ee:42:7b:e7:d8:4d:1d:2b:3a:e2:
bd:b8:c4:e1:04:46:81:f2:5c:f9:b9:43:ca:0a:a7:e6:0f:da:
ad:14:20:a4:e1:f5:e8:e5:a8:35:90:2d:53:41:00:1a:93:7d:
32:b6:dd:8f:61:18:c6:44:e7:2d:25:e7:e5:ba:8b:23:b5:31:
04:e0:31:5c:8d:26:ec:73:c0:6a:95:98:08:49:82:20:f8:63:
ff:db:bb:f7:3a:90:bc:9d:44:00:4a:a1:59:ef:12:d9:da:0e:
60:64:32:d9:da:a9:33:01:82:bb:9a:fd:67:02:b2:43:c9:38:
52:4e:f6:9a:ca:05:50:50:8e:f7:61:e1:4c:a3:7a:6f:87:34:
0f:07:e1:3b:09:ef:05:63:98:6c:2c:37:14:14:e9:d7:0c:b9:
72:2c:4b:3d:f5:e4:0b:96:b4:be:3a:90:23:f4:ab:55:81:1f:
a8:32:0c:f1:38:0a:74:8d:b2:c3:de:57:5b:9a:ba:27:8c:7c:
84:77:d7:b7:f5:7c:5b:ea:e3:b3:9e:b8:f1:b1:43:d7:8d:23:
5f:a4:7f:c5:2b:dd:90:b8:e1:a7:1f:a2:cc:a6:93:b7:1e:52:
39:a2:dc:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEJyxH2rqj8vAtd0wndCWNRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiZmU2YjlhMGU2ODk4YTdhMmU5ZDg0ZDNkYmY2MzI3YjQ1
M2U2NjIwHhcNMjYxMDA1MDIwMTA1WhcNMjYxMDA2MDIwMTA1WjAzMTEwLwYDVQQD
EyhkZTM1MWVjNzFiNjExYzAyMTZlOWNiZTEwMGM5ZDMyYTJlNmUzMjhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyP5YiXbWF7+7ZMftTsndvWgubfUL
8hunBKRVr9K+UoTpQgnv/c0Gw4Lv+9Ris848UJwBJxLBkk7oVrQS9jczP14jgdfX
To3zAjwKRqFv7FloSjXcw47P15awQEOBjnTOrFbNK7UVAaoepxq4j2CI9B7zC+aW
mBhFz+RZuUt6UBTT6xGnhw/gRfw32Q6rgSRk1YEslL4tGPMevIfcAdSrz/ps1Xnu
IGLj1DZayLKfvEYMk44ri5ERvYOClsR6V1oVyrN8eF7LlExkYBai+/R8v4zaXqPL
ZmUxc9WED/gCC/gQttmOZKjL56SgImHBP2IDmHFerWvLIWsInFfTJM6eHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN41HscbYRwCFunL4QDJ0youbjKPMB8GA1UdIwQY
MBaAFBv+a5oOaJinounYTT2/Yye0U+ZiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR181cm1nNW9tS2VpNmRoTlBiOWpKN1JUNW1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hNTY3MjMtZDM3Yy00MTdiLWE4YTEt
NmUyMmJmNDM2MzA0LzEvR181cm1nNW9tS2VpNmRoTlBiOWpKN1JUNW1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9hNTY3MjMtZDM3Yy00MTdiLWE4YTEtNmUyMmJmNDM2MzA0
LzEvR181cm1nNW9tS2VpNmRoTlBiOWpKN1JUNW1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC+GL4KpT
BW/7tnMfa4+ZmDrcdLOZ26K+2dPuQnvn2E0dKzrivbjE4QRGgfJc+blDygqn5g/a
rRQgpOH16OWoNZAtU0EAGpN9Mrbdj2EYxkTnLSXn5bqLI7UxBOAxXI0m7HPAapWY
CEmCIPhj/9u79zqQvJ1EAEqhWe8S2doOYGQy2dqpMwGCu5r9ZwKyQ8k4Uk72msoF
UFCO92HhTKN6b4c0DwfhOwnvBWOYbCw3FBTp1wy5cixLPfXkC5a0vjqQI/SrVYEf
qDIM8TgKdI2yw95XW5q6J4x8hHfXt/V8W+rjs5648bFD140jX6R/xSvdkLjhpx+i
zKaTtx5SOaLcJQ==
-----END CERTIFICATE-----
Generated at Mon Oct 5 10:47:07 2026 by rpki-client