Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.mft
File: G_FOjQs977AwQnATDRFHrg3ZLYs.mft (raw, json)
Hash identifier: iXZ2021DyaV8ZwALWl4Q6P8hOk9N51qj7OuLZkE6bmI=
Subject key identifier: 5B:FB:82:36:BC:A2:7B:6D:F4:BD:B8:16:1E:39:F4:8E:9E:A0:B3:57
Authority key identifier: 1B:F1:4E:8D:0B:3D:EF:B0:30:42:70:13:0D:11:47:AE:0D:D9:2D:8B
Certificate issuer: /CN=1bf14e8d0b3defb0304270130d1147ae0dd92d8b
Certificate serial: 01A0C5C52DE98C162745BAA3FC6C61C9C7E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_FOjQs977AwQnATDRFHrg3ZLYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.mft
Manifest number: 0D5F
Signing time: Mon 21 Sep 2026 21:00:28 +0000
Manifest this update: Mon 21 Sep 2026 21:00:28 +0000
Manifest next update: Tue 22 Sep 2026 21:00:28 +0000
Files and hashes: 1: G_FOjQs977AwQnATDRFHrg3ZLYs.crl (hash: HlbnenCiROlQDBAysPRUJsDZ4b9Ldolh3XCj7dXQKFg=)
2: HM3veogcFYi0WJB7lr909iQ8ZfQ.roa (hash: rEWeHfmczSgGJR8/ER5dg8E/KF7D8W9GBFoejJSi06I=)
3: eqG_Lu9K1qeyCezwmD8iSckpXF8.roa (hash: NNiUw+36eLooMz2fegl+jBJENlw1OVfq6vuvVM1umzI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/G_FOjQs977AwQnATDRFHrg3ZLYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:c5:2d:e9:8c:16:27:45:ba:a3:fc:6c:61:c9:c7:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bf14e8d0b3defb0304270130d1147ae0dd92d8b
Validity
Not Before: Sep 21 21:00:28 2026 GMT
Not After : Sep 22 21:00:28 2026 GMT
Subject: CN=5bfb8236bca27b6df4bdb8161e39f48e9ea0b357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:1c:34:bc:a8:42:01:c0:85:93:d2:64:eb:41:
a0:e0:1e:90:de:c7:53:f7:38:26:47:4e:a3:fb:b7:
cf:cb:db:79:84:87:8f:d8:9d:ae:ea:af:df:01:7b:
c2:cb:60:dd:a5:64:c5:d4:e2:e0:74:fc:a8:ca:e7:
0e:e3:84:52:38:31:cd:42:be:4b:e2:ff:3e:33:1e:
50:89:5e:fb:f3:b7:84:8e:df:09:bb:09:69:d5:5e:
5b:f0:ca:1b:af:84:d4:57:6b:a8:18:e8:25:07:92:
cc:86:96:ec:a1:e4:23:b8:dc:45:86:76:06:aa:73:
d5:aa:62:c4:de:5f:d7:a6:4e:20:20:e3:9c:ac:e2:
2d:50:2a:7a:2f:2b:ca:ed:39:0e:c6:dc:4a:3c:97:
15:ce:1e:a3:c5:7f:3c:68:d8:34:88:80:67:74:20:
29:4f:8f:bd:c7:30:67:3e:d1:45:d0:01:62:2b:93:
d7:c4:9a:38:a8:ad:e4:61:96:1c:f4:ce:83:c0:37:
77:1e:f8:98:24:d6:ee:2c:2c:35:f8:d5:29:9d:43:
be:c0:7e:a4:a9:cf:d7:f8:ba:0a:cb:a5:ff:f9:85:
82:5d:3d:eb:b7:0e:1e:09:c8:72:03:70:bf:19:14:
1a:d2:e6:0d:6d:01:18:b7:e4:8c:db:d8:84:d0:7d:
59:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:FB:82:36:BC:A2:7B:6D:F4:BD:B8:16:1E:39:F4:8E:9E:A0:B3:57
X509v3 Authority Key Identifier:
keyid:1B:F1:4E:8D:0B:3D:EF:B0:30:42:70:13:0D:11:47:AE:0D:D9:2D:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_FOjQs977AwQnATDRFHrg3ZLYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/eadafe-6c9d-4ae0-8733-819a253225cc/1/G_FOjQs977AwQnATDRFHrg3ZLYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:2b:e7:b5:13:f1:62:99:84:22:65:10:d7:31:90:90:e8:ba:
50:c5:c0:0c:2a:85:e7:8f:4c:ac:b4:a1:70:2f:42:2f:7c:7b:
4e:a7:ed:16:67:9d:ae:60:1f:e7:19:f9:02:56:e1:ae:c3:12:
60:47:fb:a4:fc:d5:02:49:a5:02:3e:95:6e:ae:7e:3e:09:39:
47:33:d9:83:31:16:83:99:b0:c7:01:1d:60:09:ba:b7:68:e5:
7c:17:d9:a6:18:b4:25:f6:e5:f3:86:7d:56:2b:5c:b8:37:22:
08:b1:ea:88:13:ca:5e:ce:e3:68:89:93:d1:fb:f5:be:ed:06:
ac:ba:15:55:d5:db:be:bd:a7:1c:ae:94:3e:79:bd:e1:79:cd:
b8:b3:c5:49:5f:a8:b7:47:06:1f:ed:38:4b:e6:52:87:f5:34:
e9:67:75:90:6b:c7:52:c4:1c:6a:2d:0e:ae:c4:91:bd:6e:b7:
9a:09:4e:80:de:b4:59:d1:f9:7a:6f:01:ce:e5:e4:46:ed:b3:
43:3c:8f:0f:2e:49:0d:dd:8c:0a:58:68:a6:1d:d0:48:68:d8:
c1:31:f1:dc:db:f7:4e:db:e1:01:5a:00:84:6c:3b:c3:e0:20:
a6:da:f0:54:d0:15:19:90:59:42:34:65:81:9a:83:c9:9d:0b:
e0:5d:8c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:14:06 2026 by rpki-client