Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.mft
File: G_x3OM0P0OBEf510nOajkEf9y6w.mft (raw, json)
Hash identifier: EJi1bwXFwp8jnZ61DM6KKyJ04XkGh2NxiUVQoXMTZfU=
Subject key identifier: B9:79:7F:27:37:41:51:A6:17:5E:07:30:12:AA:82:B0:19:02:5F:94
Authority key identifier: 1B:FC:77:38:CD:0F:D0:E0:44:7F:9D:74:9C:E6:A3:90:47:FD:CB:AC
Certificate issuer: /CN=1bfc7738cd0fd0e0447f9d749ce6a39047fdcbac
Certificate serial: 019EC112771DE640522D5B8A297C86D63265
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_x3OM0P0OBEf510nOajkEf9y6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.mft
Manifest number: 195B
Signing time: Sat 13 Jun 2026 13:01:13 +0000
Manifest this update: Sat 13 Jun 2026 13:01:13 +0000
Manifest next update: Sun 14 Jun 2026 13:01:13 +0000
Files and hashes: 1: 2VcsFpRmgA_Z1BeWY4uxeTXBUVc.roa (hash: mUnxfErIPYDX4fuBIeMZdyj/2aTN4t69gc8x5SXXjwg=)
2: G_x3OM0P0OBEf510nOajkEf9y6w.crl (hash: EKD+S1ZAZMYkyJybCK+9b2DO5Kiaz+rIkBK2q9x2R6o=)
3: bU_6jYeoULQ5cmwXMFiWLFBuBqw.roa (hash: RO8BXt2ZgZKfrDL72bFJWFqlC3jg76pa5ceJ9+7Pztg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/G_x3OM0P0OBEf510nOajkEf9y6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:12:77:1d:e6:40:52:2d:5b:8a:29:7c:86:d6:32:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bfc7738cd0fd0e0447f9d749ce6a39047fdcbac
Validity
Not Before: Jun 13 13:01:13 2026 GMT
Not After : Jun 14 13:01:13 2026 GMT
Subject: CN=b9797f27374151a6175e073012aa82b019025f94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:49:b8:a3:3a:8f:89:b9:d3:f3:68:f2:cd:bd:
99:22:e3:be:1b:f3:e1:ab:88:53:2e:55:7c:23:88:
c5:b7:f2:f7:1d:ce:a2:35:9a:1a:62:d9:55:31:9a:
89:c4:e4:0c:8d:a9:4a:c4:07:e0:bf:23:76:ec:50:
08:39:91:89:da:b5:35:88:3e:33:62:bf:ca:27:e5:
0b:92:73:95:35:43:eb:26:36:db:b2:ee:e0:a5:f0:
bf:9d:18:85:7c:d0:a3:94:f6:22:b8:8a:5c:69:0c:
7b:16:f7:27:ac:11:2b:ca:07:aa:aa:c4:1d:a1:2a:
09:49:60:f4:ec:2e:5b:e8:83:fe:dd:11:47:6f:67:
1f:bc:c7:75:45:86:58:cb:05:bf:2a:3d:e7:31:4d:
89:5d:53:8e:d4:2e:f0:85:c6:63:ac:55:59:89:ba:
76:92:e4:60:6c:fc:cc:34:28:fe:88:af:b8:35:2a:
ab:48:f7:a7:04:24:f9:69:a2:de:67:4a:8e:4b:d3:
42:8c:f2:86:59:15:91:17:7c:bd:95:63:84:aa:3f:
e6:fb:3c:43:c5:2f:c6:a2:39:77:7c:5d:47:94:8b:
23:8a:89:90:df:06:35:20:e8:46:84:3f:0a:87:f3:
78:ed:1b:e9:8d:2c:5c:61:22:6f:b7:38:c3:df:b5:
99:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:79:7F:27:37:41:51:A6:17:5E:07:30:12:AA:82:B0:19:02:5F:94
X509v3 Authority Key Identifier:
keyid:1B:FC:77:38:CD:0F:D0:E0:44:7F:9D:74:9C:E6:A3:90:47:FD:CB:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_x3OM0P0OBEf510nOajkEf9y6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:99:8b:dc:bb:9e:c5:56:0d:cd:58:f5:02:c8:f0:df:1e:9d:
62:8e:8f:b7:47:d3:2c:96:5d:76:f4:71:c2:57:b3:1a:04:36:
84:bb:b2:85:da:e3:bb:08:cb:35:cf:99:2f:95:58:31:b1:c0:
e2:10:da:cb:87:f3:47:35:6f:88:17:0c:da:76:16:d5:b3:c0:
eb:97:f1:c1:67:fc:9d:a6:26:9b:e9:d5:c8:8d:42:b3:0b:49:
b5:12:48:44:10:1f:79:61:47:59:cf:9c:2a:15:55:2b:56:1a:
68:1f:f2:29:b3:60:9d:cc:f6:82:bc:54:09:d4:57:e7:0c:8a:
0b:b6:4c:df:38:0d:9d:3d:a1:77:c6:93:b3:39:2a:bf:dc:df:
20:0d:c5:c8:4f:95:f6:7e:cb:2f:01:51:e0:84:33:cb:74:c4:
81:ff:b5:6e:4b:93:83:fe:fe:85:7a:9e:47:1d:58:32:1f:48:
3d:53:91:60:fd:3f:7a:71:b7:18:ff:66:53:40:70:1d:7b:53:
a2:09:3e:48:e1:00:3b:86:24:62:93:30:6a:41:4a:d3:fe:f2:
da:08:bd:ea:e9:af:66:e2:c0:5a:b3:5d:94:7e:20:fe:43:75:
d6:79:b3:42:df:02:f4:38:77:5b:28:03:f1:4d:68:d3:0c:6c:
37:1d:f0:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:06:48 2026 by rpki-client