Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.mft
File: G_x3OM0P0OBEf510nOajkEf9y6w.mft (raw, json)
Hash identifier: XfPvea0htKLD7HdWUXl5jMYKErW9a85DZCMwe5a/1UI=
Subject key identifier: 67:83:AA:EC:C2:02:47:EB:59:7F:15:3E:A5:B9:54:63:80:F4:AE:0C
Authority key identifier: 1B:FC:77:38:CD:0F:D0:E0:44:7F:9D:74:9C:E6:A3:90:47:FD:CB:AC
Certificate issuer: /CN=1bfc7738cd0fd0e0447f9d749ce6a39047fdcbac
Certificate serial: 01A0DFBCDB0058DBA2ED45579112B2CD8716
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_x3OM0P0OBEf510nOajkEf9y6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.mft
Manifest number: 1A74
Signing time: Sat 26 Sep 2026 22:01:30 +0000
Manifest this update: Sat 26 Sep 2026 22:01:30 +0000
Manifest next update: Sun 27 Sep 2026 22:01:30 +0000
Files and hashes: 1: 2VcsFpRmgA_Z1BeWY4uxeTXBUVc.roa (hash: mUnxfErIPYDX4fuBIeMZdyj/2aTN4t69gc8x5SXXjwg=)
2: G_x3OM0P0OBEf510nOajkEf9y6w.crl (hash: gi6XitCZ4uurZVt1BV0FBCTvsjLjWmso/xd0WSCq87w=)
3: bU_6jYeoULQ5cmwXMFiWLFBuBqw.roa (hash: RO8BXt2ZgZKfrDL72bFJWFqlC3jg76pa5ceJ9+7Pztg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/G_x3OM0P0OBEf510nOajkEf9y6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:bc:db:00:58:db:a2:ed:45:57:91:12:b2:cd:87:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bfc7738cd0fd0e0447f9d749ce6a39047fdcbac
Validity
Not Before: Sep 26 22:01:30 2026 GMT
Not After : Sep 27 22:01:30 2026 GMT
Subject: CN=6783aaecc20247eb597f153ea5b9546380f4ae0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:5e:ef:30:f3:e4:2d:11:06:97:da:a0:26:2c:
69:59:24:9b:8c:7c:74:df:c2:f5:f0:4a:e8:de:ef:
c3:ff:fe:b7:30:58:cb:33:d9:4f:26:7c:5f:6b:d8:
8f:29:42:49:f9:63:5f:cc:9b:4f:5e:0b:1f:b6:e7:
87:c5:f4:6d:03:38:4f:1a:c2:3e:61:72:0a:93:61:
9a:fd:d2:38:6e:c5:67:c3:8b:13:37:4c:f1:e5:2a:
c6:d2:72:cb:f6:69:70:0c:94:fc:b8:b1:2e:e9:46:
0b:be:4a:df:87:ac:6a:7c:34:e7:f5:97:ed:97:b1:
61:f7:bf:fb:78:59:0a:7f:f8:77:8d:43:26:01:56:
a9:71:b3:55:06:50:d0:a3:ec:8c:df:d6:88:ca:51:
dd:f8:ba:f5:53:a5:c0:8e:4a:a5:87:58:14:49:f3:
b1:32:3d:24:72:f2:91:ea:df:a7:fd:55:73:49:a4:
7c:33:73:5b:a9:46:2a:95:ab:c5:76:4a:95:44:a8:
0c:98:54:fd:bf:c6:de:bd:4d:a7:0e:ef:94:53:96:
4c:e3:20:05:d0:c6:00:ae:f1:63:fc:3f:08:77:e5:
c7:42:12:ec:a0:fa:a8:50:f5:06:03:ce:76:e4:2e:
3d:a8:6f:17:27:3e:dd:03:3b:21:9f:37:6d:b6:b6:
24:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:83:AA:EC:C2:02:47:EB:59:7F:15:3E:A5:B9:54:63:80:F4:AE:0C
X509v3 Authority Key Identifier:
keyid:1B:FC:77:38:CD:0F:D0:E0:44:7F:9D:74:9C:E6:A3:90:47:FD:CB:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_x3OM0P0OBEf510nOajkEf9y6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/708b4d-a63f-439d-9cce-148abff919ad/1/G_x3OM0P0OBEf510nOajkEf9y6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:ee:f9:5c:d5:16:4e:5c:5d:5c:76:87:c5:d8:da:4d:3d:5a:
d8:bb:e8:16:fd:ac:8a:3e:55:1f:a5:09:a5:62:d3:94:17:32:
ca:04:9a:25:a9:08:26:b9:43:05:28:e0:21:65:21:88:00:36:
dc:ab:5e:a8:32:8f:b7:8a:a4:0b:e5:42:e7:d9:1e:2b:af:b4:
28:54:6f:95:c9:52:f2:5f:25:a1:5d:ed:78:62:74:b6:3e:72:
19:2a:22:3a:c8:ce:fd:a6:60:22:f7:45:04:97:19:b9:62:21:
f3:fd:ec:98:a0:29:cb:58:25:79:9d:53:3e:89:95:78:0d:3d:
36:f5:9c:8b:37:f4:6c:fd:37:49:21:37:68:b4:fe:0a:e2:15:
1e:8e:d0:3d:ef:2e:91:ab:53:3c:da:61:9c:43:9e:47:eb:1a:
fc:11:88:3a:db:c1:92:3b:de:74:7c:eb:7b:35:6d:00:6a:42:
85:03:81:7a:3c:3c:3e:13:6a:26:fa:8f:37:80:2b:8e:38:97:
42:0c:f1:df:55:42:93:1f:6a:ed:b5:af:fc:db:e5:01:cd:49:
ce:5d:af:61:78:05:08:2c:e7:a2:bc:63:95:31:86:43:64:f9:
1a:14:d6:2e:28:ef:f0:cb:bb:1d:9d:83:01:92:8b:5f:7c:15:
bc:bc:dd:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 04:34:24 2026 by rpki-client