Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.mft
File: G_x3OM0P0OBEf510nOajkEf9y6w.mft (raw, json)
Hash identifier: g7KygpwMLfoEo9LMW1EWkdGx1LgFlye2VkMCgfMB25Q=
Subject key identifier: 44:82:F3:39:DA:AF:75:3B:AC:A6:28:63:B3:71:1A:F7:82:EC:D4:F4
Authority key identifier: 1B:FC:77:38:CD:0F:D0:E0:44:7F:9D:74:9C:E6:A3:90:47:FD:CB:AC
Certificate issuer: /CN=1bfc7738cd0fd0e0447f9d749ce6a39047fdcbac
Certificate serial: 019CAC0FFF8D42BC6E66049256335AC9810E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_x3OM0P0OBEf510nOajkEf9y6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 01:00:55 +0000
Manifest this update: Mon 02 Mar 2026 01:00:55 +0000
Manifest next update: Tue 03 Mar 2026 01:00:55 +0000
Files and hashes: 1: 2VcsFpRmgA_Z1BeWY4uxeTXBUVc.roa (hash: mUnxfErIPYDX4fuBIeMZdyj/2aTN4t69gc8x5SXXjwg=)
2: G_x3OM0P0OBEf510nOajkEf9y6w.crl (hash: AQhWYLqNRpb9B99ymeNGXgSbOtoLNe2Ezc4ocOPNm74=)
3: bU_6jYeoULQ5cmwXMFiWLFBuBqw.roa (hash: RO8BXt2ZgZKfrDL72bFJWFqlC3jg76pa5ceJ9+7Pztg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/G_x3OM0P0OBEf510nOajkEf9y6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:ff:8d:42:bc:6e:66:04:92:56:33:5a:c9:81:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bfc7738cd0fd0e0447f9d749ce6a39047fdcbac
Validity
Not Before: Mar 2 01:00:55 2026 GMT
Not After : Mar 3 01:00:55 2026 GMT
Subject: CN=4482f339daaf753baca62863b3711af782ecd4f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2c:61:03:c9:b6:a7:60:78:f1:ce:87:59:d1:
ce:07:18:58:71:c2:e1:4e:58:88:68:83:7c:6c:1e:
df:41:ea:fa:b2:21:2c:5f:d3:39:40:63:31:34:34:
b7:79:89:59:14:f8:db:2a:ce:7d:ef:74:b3:97:ee:
6e:58:22:e5:40:59:3d:95:68:15:e6:e8:27:4f:18:
5b:b8:d1:73:a1:ce:39:f3:11:c3:95:2e:46:99:9d:
0d:37:ba:3e:44:d5:e5:6a:4f:6e:04:8b:4f:4d:5f:
a5:34:c9:8d:6f:a6:34:7f:20:9c:93:e0:1e:b2:08:
f4:3d:bc:ac:0e:49:bf:a4:65:ac:a0:6d:3e:b8:2c:
47:c6:2c:8b:c7:57:de:36:02:96:90:8f:73:16:44:
1f:c0:c4:19:e4:d4:fd:50:41:a4:17:97:f8:f6:ae:
24:e6:e6:4c:03:fb:b3:7a:14:0d:7c:12:1e:e6:98:
50:48:5f:36:85:fd:f4:57:67:e8:cc:a6:27:a3:a3:
8a:96:71:05:a0:83:75:33:bc:aa:93:d9:2b:03:96:
87:ae:41:6e:32:4f:37:8f:76:c8:0f:9b:64:21:9a:
d2:a7:00:97:89:90:66:04:df:30:a9:e0:57:d1:3b:
f0:26:fd:9e:7d:cd:76:e0:52:ed:0e:7f:81:53:3b:
b8:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:82:F3:39:DA:AF:75:3B:AC:A6:28:63:B3:71:1A:F7:82:EC:D4:F4
X509v3 Authority Key Identifier:
keyid:1B:FC:77:38:CD:0F:D0:E0:44:7F:9D:74:9C:E6:A3:90:47:FD:CB:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_x3OM0P0OBEf510nOajkEf9y6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:94:ba:4d:45:51:42:7e:85:df:54:ee:3c:46:44:b0:53:48:
5d:89:a8:f3:a6:82:74:21:24:38:cf:45:fb:7f:74:c6:2f:7c:
a8:79:c9:91:4c:c4:6c:22:71:95:8f:fe:59:1e:62:ca:dd:f4:
4b:27:f0:50:a8:7e:c8:ab:c2:29:31:26:69:05:88:4c:bf:ef:
e7:90:36:6b:48:fe:0d:69:cc:ac:fe:d3:ef:d3:9c:28:8e:6d:
8d:2b:d3:ed:ce:45:33:98:76:a3:2d:7e:64:54:4b:84:41:32:
20:7f:e6:34:b8:1e:c0:8d:97:82:a3:1a:15:ca:ca:ea:d0:23:
94:0c:fe:e4:e2:2e:ec:13:d5:61:4d:e7:14:bf:40:62:03:88:
ea:a5:6c:4f:5d:11:ec:95:c3:18:41:dc:33:eb:35:b8:4d:13:
95:9d:b1:92:36:1c:ed:d4:93:ab:a2:76:7c:c1:11:d4:f5:41:
b5:10:94:41:7c:59:32:fe:92:43:69:eb:55:8c:42:46:0a:2e:
d6:bf:fd:1d:b3:bd:b6:c9:88:b6:02:1e:ff:10:3d:75:93:2e:
7d:4c:f2:2d:63:66:22:00:5c:3e:35:f7:64:c4:58:23:25:d1:
40:53:26:80:24:d6:95:79:6a:58:8c:db:c5:d0:b1:01:e3:8d:
8f:26:39:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:38:44 2026 by rpki-client