Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/8961d3-11ce-4916-8478-13a0346762f0/1/G0p0-DX7ePRqdSJYKnAkw-ladQE.mft
File: G0p0-DX7ePRqdSJYKnAkw-ladQE.mft (raw, json)
Hash identifier: WuVPwfN3VLwKkHgFZ9kFB0MW5UFuY/nkCH1Ww7va1Do=
Subject key identifier: 44:5B:0D:E4:15:89:E3:75:93:0D:38:0F:01:74:81:23:E0:95:F7:35
Authority key identifier: 1B:4A:74:F8:35:FB:78:F4:6A:75:22:58:2A:70:24:C3:E9:5A:75:01
Certificate issuer: /CN=1b4a74f835fb78f46a7522582a7024c3e95a7501
Certificate serial: 01A0BD2FC59484CFC90A789E0BFFA0A3CFC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G0p0-DX7ePRqdSJYKnAkw-ladQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/8961d3-11ce-4916-8478-13a0346762f0/1/G0p0-DX7ePRqdSJYKnAkw-ladQE.mft
Manifest number: 42
Signing time: Sun 20 Sep 2026 05:00:19 +0000
Manifest this update: Sun 20 Sep 2026 05:00:19 +0000
Manifest next update: Mon 21 Sep 2026 05:00:19 +0000
Files and hashes: 1: 0qUdSlK1egMK84cFUL2xD9vza_I.roa (hash: +RRA24eEQxCoeLXCIa32FRmyRiqw4gZq4NFf5EgQysk=)
2: G0p0-DX7ePRqdSJYKnAkw-ladQE.crl (hash: Vpq5iLO/9ceC+iSZhtKGd3oFwkkj22Rl0zibCpy99SI=)
3: Xm2UGEkdiKhG1oMWDxl5AaWM7Sg.asa (hash: quX3s05TDBTsl7FDpEE0QIqSfiJxqhXmhPqfuYs2tQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/8961d3-11ce-4916-8478-13a0346762f0/1/G0p0-DX7ePRqdSJYKnAkw-ladQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/8961d3-11ce-4916-8478-13a0346762f0/1/G0p0-DX7ePRqdSJYKnAkw-ladQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/G0p0-DX7ePRqdSJYKnAkw-ladQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bd:2f:c5:94:84:cf:c9:0a:78:9e:0b:ff:a0:a3:cf:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b4a74f835fb78f46a7522582a7024c3e95a7501
Validity
Not Before: Sep 20 05:00:19 2026 GMT
Not After : Sep 21 05:00:19 2026 GMT
Subject: CN=445b0de41589e375930d380f01748123e095f735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4f:6c:08:26:ac:b6:a8:fd:1d:d9:ca:ab:23:
bb:be:29:78:f0:95:eb:5b:1a:a0:fe:97:2e:4f:58:
a1:d1:03:23:b4:06:9c:4b:89:36:23:e8:e1:a9:e5:
c9:ba:cc:ae:de:ba:14:c2:25:5f:ae:c1:17:49:1e:
6b:cd:de:41:a2:a0:c4:4d:f8:42:cf:5d:63:c0:43:
7d:c5:a0:c0:55:b5:55:43:39:23:2f:b3:ed:4c:b5:
f5:b5:ef:ed:64:67:3d:ee:ac:b0:d5:24:58:47:ef:
73:62:1e:3a:6c:a6:83:47:ba:56:39:b0:9c:f1:05:
dd:a7:99:a2:19:43:7a:ed:6d:4b:90:5c:d7:a2:c1:
80:2e:cb:f8:a3:88:18:fa:d0:b8:e6:45:ac:46:40:
6d:73:0f:c0:20:e2:de:0c:db:ba:2e:e0:66:14:ff:
07:81:81:c8:23:61:cd:bd:74:32:56:7a:cc:85:ec:
2f:c3:d8:08:92:26:12:e1:b2:71:66:33:f2:66:e4:
df:a7:37:cb:74:e5:78:97:4b:4d:d7:44:a7:69:ba:
d7:ed:f7:45:b0:26:31:79:15:95:7a:6d:3c:59:cc:
23:88:a2:f8:12:d2:63:22:41:d2:a3:a4:b2:c6:5c:
89:b9:e4:6d:91:cd:92:31:1f:77:88:90:b7:59:af:
6b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:5B:0D:E4:15:89:E3:75:93:0D:38:0F:01:74:81:23:E0:95:F7:35
X509v3 Authority Key Identifier:
keyid:1B:4A:74:F8:35:FB:78:F4:6A:75:22:58:2A:70:24:C3:E9:5A:75:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G0p0-DX7ePRqdSJYKnAkw-ladQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8961d3-11ce-4916-8478-13a0346762f0/1/G0p0-DX7ePRqdSJYKnAkw-ladQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8961d3-11ce-4916-8478-13a0346762f0/1/G0p0-DX7ePRqdSJYKnAkw-ladQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:8b:d3:7c:9c:ea:30:49:d4:05:00:2c:fe:dd:7a:b2:d5:a4:
49:b6:06:09:c1:66:c0:a1:a4:1c:ae:29:a4:ab:11:fb:e7:ff:
98:0b:b9:46:cb:13:27:ff:17:d7:37:7b:52:73:70:80:ad:a0:
c2:6a:64:a8:13:06:67:98:ef:40:76:3c:6d:c3:9e:13:73:13:
41:5f:81:6b:04:f4:6a:35:0a:4c:2a:68:69:98:ff:da:c1:e9:
cb:89:b5:b2:ed:bf:d2:f0:1c:21:f0:2c:fe:85:33:b3:94:5e:
0f:19:6f:2d:bf:e9:be:6e:60:2c:df:90:3a:86:d1:b1:bd:7e:
a7:d8:68:d4:4f:30:cd:ee:bf:90:0a:d3:83:5b:54:55:89:49:
13:4b:92:23:25:35:24:9c:89:6a:20:dc:58:fa:dc:04:ff:c9:
15:ac:69:d3:1a:6d:30:82:55:e8:04:35:5f:67:c8:3b:80:c6:
86:44:4d:ab:5b:4c:bc:c3:8a:46:c0:38:39:e6:aa:13:a4:01:
a3:7d:eb:b4:a1:81:69:5a:cd:7d:eb:ae:c6:03:69:98:91:3f:
2b:29:65:3c:55:02:56:b7:1c:17:b9:14:8a:2a:0b:94:94:6d:
48:1e:d7:44:ef:f3:43:7b:05:ef:8e:b0:51:47:90:54:fa:01:
6e:7a:13:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 10:54:36 2026 by rpki-client