Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/g5gORnj87fIiN5FtOxFASJ5QStg.mft
File: g5gORnj87fIiN5FtOxFASJ5QStg.mft (raw, json)
Hash identifier: ygDfhWMoKYisATaBykEh2yUpYZxJgBYmN7df8v4JDMM=
Subject key identifier: BE:A3:69:25:D8:C9:8B:AA:66:8C:32:F2:9E:22:CF:D5:78:6C:64:BB
Authority key identifier: 83:98:0E:46:78:FC:ED:F2:22:37:91:6D:3B:11:40:48:9E:50:4A:D8
Certificate issuer: /CN=83980e4678fcedf22237916d3b1140489e504ad8
Certificate serial: 01A0DF8572DFF2AB348F3134931A7ECC4A4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g5gORnj87fIiN5FtOxFASJ5QStg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/g5gORnj87fIiN5FtOxFASJ5QStg.mft
Manifest number: ED
Signing time: Sat 26 Sep 2026 21:00:59 +0000
Manifest this update: Sat 26 Sep 2026 21:00:59 +0000
Manifest next update: Sun 27 Sep 2026 21:00:59 +0000
Files and hashes: 1: KES46lk8wU4dhFv89NhcKEmi-vM.roa (hash: sSJndlld1sP0Se7NuGKbaMt7Q9VWzKyrrn6CaglRzow=)
2: dxkbbmxX8WMKJH5WhnQ57-p4X90.roa (hash: i6/kNCYkfe+S16lTl6/WYXB9fGMN9TWf4ZsR+HsilEU=)
3: g5gORnj87fIiN5FtOxFASJ5QStg.crl (hash: TJaYRIvJyzPSjLSIgQIEU8FftytCNRQhSCdSfE2YWzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/g5gORnj87fIiN5FtOxFASJ5QStg.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/g5gORnj87fIiN5FtOxFASJ5QStg.mft
rsync://rpki.ripe.net/repository/DEFAULT/g5gORnj87fIiN5FtOxFASJ5QStg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:85:72:df:f2:ab:34:8f:31:34:93:1a:7e:cc:4a:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83980e4678fcedf22237916d3b1140489e504ad8
Validity
Not Before: Sep 26 21:00:59 2026 GMT
Not After : Sep 27 21:00:59 2026 GMT
Subject: CN=bea36925d8c98baa668c32f29e22cfd5786c64bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:62:f9:24:08:1c:f6:65:fa:73:0b:1b:70:aa:
ec:ff:37:64:63:87:f9:ec:11:e4:25:6f:ce:ca:59:
1b:0a:53:23:d7:63:91:a8:fc:7c:64:a9:7b:b5:89:
b9:e9:83:b1:9c:3e:da:d7:18:0f:01:13:b0:f1:90:
00:53:3d:b2:5b:e9:36:37:86:b0:a5:41:b0:0d:04:
80:de:7b:c1:7b:0f:eb:3a:93:ec:fa:20:dc:9f:54:
69:f9:f1:96:1d:47:ec:77:29:cb:8a:5a:b3:87:5b:
76:ec:46:60:72:45:05:03:74:79:81:66:2f:b3:29:
42:41:06:60:5c:2c:2a:25:72:a6:66:87:39:1a:9e:
3a:ef:63:c4:23:5b:dc:0b:93:a3:9d:fc:b0:82:a0:
ef:3e:d3:df:46:60:5b:64:e1:7f:fb:dd:78:e0:ad:
a7:80:41:6e:3d:dc:59:d5:4d:f1:6a:08:3e:dd:1f:
1f:4c:c4:b5:ad:42:ec:bd:d6:91:7f:25:51:bd:71:
d2:7d:42:6b:3d:06:65:d2:e8:93:68:6e:0b:10:9f:
07:1e:b1:c6:85:9b:bb:41:02:81:c8:99:99:43:7d:
9b:a0:d2:f5:05:ef:ea:81:73:a0:7c:85:68:e1:f9:
fe:73:f8:29:11:ba:f1:e5:d2:d1:43:e7:82:de:e1:
12:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:A3:69:25:D8:C9:8B:AA:66:8C:32:F2:9E:22:CF:D5:78:6C:64:BB
X509v3 Authority Key Identifier:
keyid:83:98:0E:46:78:FC:ED:F2:22:37:91:6D:3B:11:40:48:9E:50:4A:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5gORnj87fIiN5FtOxFASJ5QStg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/g5gORnj87fIiN5FtOxFASJ5QStg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/g5gORnj87fIiN5FtOxFASJ5QStg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:0a:d3:de:30:1b:90:01:fd:9d:e9:58:b0:3d:a5:da:6d:48:
7d:0e:b4:03:8a:7d:05:45:cb:7a:69:55:e2:09:32:64:fd:00:
e7:13:77:ae:55:27:f0:0f:c9:48:88:dd:24:a1:1f:6d:56:90:
37:7e:ce:69:da:ad:80:e8:9b:fa:52:ec:57:f5:4d:8f:21:ef:
8b:96:c3:b8:41:67:a9:31:c6:e8:ba:2b:b2:6a:fe:64:ee:8e:
0a:03:7c:c0:7a:ed:cf:04:7f:1f:d9:d8:32:99:97:99:f3:59:
6b:03:40:94:27:27:3c:5a:76:13:d9:b6:85:cf:60:3c:c4:b2:
26:77:37:0e:40:87:4b:47:69:58:64:3e:f0:65:a9:ae:98:0c:
38:bc:8c:25:48:e0:41:f7:de:d6:ab:a0:fc:60:f1:de:00:b2:
02:12:69:47:ac:24:ec:67:ff:48:cd:ca:2e:08:b8:31:28:83:
1f:7a:e0:67:26:8c:bc:26:be:5a:91:0a:1a:0e:c4:0a:ff:92:
40:56:7b:bb:48:bd:5d:00:21:24:ca:0a:ab:ad:64:ae:77:08:
a4:0e:c7:91:99:bb:d0:80:1a:9a:8a:e7:26:0b:65:e5:21:b7:
53:93:29:d9:e3:a8:b8:0c:c1:92:6f:ad:28:17:95:4b:ad:5e:
45:2a:2e:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 02:20:15 2026 by rpki-client