Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.mft
File: G95wrxU0lDVJRmSKzWQRY-KvGx0.mft (raw, json)
Hash identifier: Frvmqj53ojgg11MGxpTUK5thO8VMLCrk8Ih5RBqQ+G0=
Subject key identifier: FC:D9:45:0C:6C:4A:F9:52:FA:6A:21:DF:68:05:B1:35:06:25:60:05
Authority key identifier: 1B:DE:70:AF:15:34:94:35:49:46:64:8A:CD:64:11:63:E2:AF:1B:1D
Certificate issuer: /CN=1bde70af153494354946648acd641163e2af1b1d
Certificate serial: 01A13523329A78D01D83E25D7F14A1A3DDA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G95wrxU0lDVJRmSKzWQRY-KvGx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.mft
Manifest number: 0FAB
Signing time: Tue 13 Oct 2026 12:01:01 +0000
Manifest this update: Tue 13 Oct 2026 12:01:01 +0000
Manifest next update: Wed 14 Oct 2026 12:01:01 +0000
Files and hashes: 1: 1-G_9qaTlg9_9ZXzg69NS2bmEGWE.roa (hash: +lDVdHNQmmTIYvQZgxKxtZPdzwOYciN1IB8yFnfGP4A=)
2: G95wrxU0lDVJRmSKzWQRY-KvGx0.crl (hash: x+vHhJ9UJbE/4Lv9Gu6bbEJltDxyI+cbk3v4rhbRGeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/G95wrxU0lDVJRmSKzWQRY-KvGx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 12:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:35:23:32:9a:78:d0:1d:83:e2:5d:7f:14:a1:a3:dd:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bde70af153494354946648acd641163e2af1b1d
Validity
Not Before: Oct 13 12:01:01 2026 GMT
Not After : Oct 14 12:01:01 2026 GMT
Subject: CN=fcd9450c6c4af952fa6a21df6805b13506256005
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0a:8e:9d:ee:fa:71:b9:13:aa:59:e3:56:c4:
12:09:33:1e:70:ec:bc:81:b7:e8:b9:cb:49:ff:5c:
51:12:4a:95:1d:da:38:33:17:e9:8e:2b:b7:79:95:
89:b0:c9:5e:1c:be:92:1e:4e:79:b9:74:6f:25:ba:
a7:de:33:9f:a5:56:cf:71:54:2a:e5:f8:0e:b2:23:
09:3f:0c:be:c0:7a:26:97:57:ee:d1:24:bb:aa:df:
f5:68:78:12:96:59:c2:ce:23:59:9b:1f:d5:2e:cd:
03:f6:81:83:28:53:13:3a:cf:db:d0:12:8d:eb:18:
f6:0e:c3:96:ff:39:78:3a:90:0a:3d:d4:10:3d:9f:
5f:4e:02:18:bf:3f:1a:7e:b3:3f:4e:40:93:46:79:
80:32:8c:08:3b:f6:41:3a:9c:24:2e:01:88:a2:ea:
80:7a:41:67:6e:9c:41:23:70:78:05:46:6d:b2:03:
0d:8b:f5:6c:97:ee:40:98:eb:d9:34:56:bf:7b:96:
87:59:35:c8:5b:e7:4e:6d:09:2a:64:39:06:72:84:
6e:fc:74:6c:ad:e3:9a:7f:8e:73:2d:59:1d:c0:51:
81:14:15:2d:06:e1:40:7f:6a:43:4b:b6:31:35:0d:
46:56:67:9b:8d:32:8f:f9:19:0a:cf:a4:34:e6:3a:
fe:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:D9:45:0C:6C:4A:F9:52:FA:6A:21:DF:68:05:B1:35:06:25:60:05
X509v3 Authority Key Identifier:
keyid:1B:DE:70:AF:15:34:94:35:49:46:64:8A:CD:64:11:63:E2:AF:1B:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G95wrxU0lDVJRmSKzWQRY-KvGx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:c6:54:c0:ea:16:6d:54:d4:31:2f:e1:b7:0d:98:10:68:b8:
7c:da:27:c0:f7:6e:8a:b4:bf:5b:61:29:92:fb:33:65:93:14:
ff:06:29:dd:8e:ee:24:42:ad:5b:54:69:63:b3:8e:07:78:a9:
15:ec:c2:6b:f4:bb:9a:50:9d:66:00:a2:4b:9f:a4:5b:b9:c6:
98:bb:7e:36:68:34:12:bb:ae:17:a3:c1:45:ef:63:ec:76:dc:
c8:ad:bd:5a:73:6a:1d:6c:7a:c7:61:83:9d:16:88:e6:56:89:
ae:21:47:81:84:72:42:13:cb:f1:3b:98:a4:ac:7d:39:0e:1a:
1a:08:1d:a5:47:87:07:94:57:51:2c:42:29:9d:99:1b:e4:2f:
c3:30:63:63:1e:4d:87:84:2c:b3:8f:44:7c:c0:e2:2c:76:e1:
c6:bf:99:2b:8d:80:55:e5:a3:77:cf:08:e5:5c:6c:ad:1c:ed:
22:15:c1:1e:28:69:38:73:3e:04:f2:f6:1e:f4:81:c5:3c:67:
5b:d7:db:95:1e:c5:f5:41:05:64:79:dd:81:24:02:f7:9d:91:
b3:5d:55:50:37:5c:e3:96:0e:00:2e:74:62:e0:66:7e:24:c9:
2e:fb:06:d9:28:b3:3f:04:d7:62:2f:d2:8e:43:81:7a:b2:3a:
93:9d:79:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 21:55:17 2026 by rpki-client