Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.mft
File: G-9aoU0xQMfHxJiPGdqUMesaQPE.mft (raw, json)
Hash identifier: LB4shceL9D26RUhBp/kBO9KTvZUcVJR7qRC1GkPpjow=
Subject key identifier: 53:1C:B5:1D:8E:36:C2:4F:8B:48:AC:51:8F:5D:D7:BB:69:5F:F2:9B
Authority key identifier: 1B:EF:5A:A1:4D:31:40:C7:C7:C4:98:8F:19:DA:94:31:EB:1A:40:F1
Certificate issuer: /CN=1bef5aa14d3140c7c7c4988f19da9431eb1a40f1
Certificate serial: 01A1829A0C425D5F6D88127CFEAFF4DF27D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-9aoU0xQMfHxJiPGdqUMesaQPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.mft
Manifest number: 1AC9
Signing time: Wed 28 Oct 2026 13:01:36 +0000
Manifest this update: Wed 28 Oct 2026 13:01:36 +0000
Manifest next update: Thu 29 Oct 2026 13:01:36 +0000
Files and hashes: 1: BFSdsbEkPuA-YZXMwRkjbFSBL_4.roa (hash: 7mDFMoZc4IARD+ubLVsfgMsnY5+CrMhB4pwA/xSdkv8=)
2: G-9aoU0xQMfHxJiPGdqUMesaQPE.crl (hash: vV311oah8DNVgqVVh6a2fscqFiXB9FvpGn6cbgpGsKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-9aoU0xQMfHxJiPGdqUMesaQPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 13:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:9a:0c:42:5d:5f:6d:88:12:7c:fe:af:f4:df:27:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bef5aa14d3140c7c7c4988f19da9431eb1a40f1
Validity
Not Before: Oct 28 13:01:36 2026 GMT
Not After : Oct 29 13:01:36 2026 GMT
Subject: CN=531cb51d8e36c24f8b48ac518f5dd7bb695ff29b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e6:89:72:ae:28:18:b8:bd:93:8d:37:9f:7b:
85:88:3e:f0:14:62:e8:40:1f:1a:26:c0:5e:26:16:
1a:c0:bf:32:eb:cb:68:9e:f9:74:3d:6b:2b:7b:dd:
7d:61:b2:48:db:b9:ec:d6:cb:4b:d0:ec:fa:6a:cc:
79:b9:6d:d5:a9:16:50:a4:d2:37:48:c8:9d:32:c8:
0c:f5:46:05:af:cb:19:cc:93:f5:c9:0b:02:7d:bb:
d2:d4:30:d0:e7:18:15:18:26:9f:52:ab:1f:46:2c:
0b:1f:25:9d:57:93:25:dc:a5:26:49:22:a7:4a:ce:
a6:43:46:73:ef:93:06:66:f2:67:27:71:0d:2a:dd:
96:ae:53:1d:83:c2:a6:6c:5e:86:fe:a1:d3:d5:5c:
2b:0b:a9:eb:23:f2:df:6e:fe:11:df:ac:22:09:82:
26:8e:20:97:fe:66:42:48:06:c9:37:75:7e:2f:e8:
e2:04:75:6d:47:f5:aa:8f:f1:98:6e:29:a1:ae:6d:
2d:77:2a:42:87:01:9d:1c:67:69:56:06:34:be:6e:
58:52:2c:81:32:d6:d9:37:cd:1a:ea:2e:94:06:16:
e9:72:48:b7:38:0d:32:39:fe:84:85:23:e1:f3:1f:
b0:cb:2b:5f:e8:f6:41:a0:c5:e4:b6:e2:2a:08:04:
ae:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:1C:B5:1D:8E:36:C2:4F:8B:48:AC:51:8F:5D:D7:BB:69:5F:F2:9B
X509v3 Authority Key Identifier:
keyid:1B:EF:5A:A1:4D:31:40:C7:C7:C4:98:8F:19:DA:94:31:EB:1A:40:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-9aoU0xQMfHxJiPGdqUMesaQPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:5c:27:c0:96:77:31:ec:fb:4d:20:0d:ac:ad:66:91:25:f8:
56:c5:57:62:de:cd:94:f7:e3:02:66:cc:6c:07:b6:f8:ae:d2:
5b:dd:04:bd:0a:46:48:47:db:d7:3a:da:1e:eb:4a:2e:57:30:
45:e7:b4:81:13:08:09:c3:68:d0:d5:4e:5c:77:12:c7:4c:94:
29:c4:fd:d9:ab:75:f6:c8:b8:c4:df:33:af:9a:52:e3:d4:3a:
d2:09:60:72:5d:ec:f0:a4:b6:8f:58:b8:03:a2:8c:01:cc:39:
54:b8:5e:7f:f0:97:37:ad:d5:2f:8e:51:85:94:3f:c0:11:8b:
ab:a1:6e:e0:0e:91:ca:3b:23:69:28:4a:de:f0:4a:15:e2:da:
35:52:0c:37:8b:e4:e6:98:aa:31:8f:f7:8c:15:c7:43:41:da:
f8:c9:f7:b1:3d:3a:3d:e5:25:87:b1:fd:64:10:60:5b:5b:d2:
3f:27:22:5f:4d:c4:a8:b5:f8:b5:a2:ae:ae:24:ee:bc:13:e3:
b5:21:7c:4e:a5:a6:3e:fb:b7:9a:2a:09:60:bf:34:0c:e9:63:
67:4e:d7:36:28:09:5c:86:2d:e0:d7:27:92:7d:a5:f8:76:1f:
6b:04:5a:91:72:6d:4e:25:2f:7b:59:a9:76:b4:3d:2c:e6:10:
fe:a3:ac:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 19:41:33 2026 by rpki-client