Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.mft
File: G-9aoU0xQMfHxJiPGdqUMesaQPE.mft (raw, json)
Hash identifier: NIt/eXYPLQPSogKyOAyBEgNEOE6GhLWF+Ac1sOz4FFo=
Subject key identifier: A1:D3:B1:88:1E:9B:85:63:85:20:65:E5:3E:9B:FE:A4:7C:31:E1:E2
Authority key identifier: 1B:EF:5A:A1:4D:31:40:C7:C7:C4:98:8F:19:DA:94:31:EB:1A:40:F1
Certificate issuer: /CN=1bef5aa14d3140c7c7c4988f19da9431eb1a40f1
Certificate serial: 019EC3A5B435B6C953D84C09E4CA5768182E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-9aoU0xQMfHxJiPGdqUMesaQPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.mft
Manifest number: 195D
Signing time: Sun 14 Jun 2026 01:01:17 +0000
Manifest this update: Sun 14 Jun 2026 01:01:17 +0000
Manifest next update: Mon 15 Jun 2026 01:01:17 +0000
Files and hashes: 1: BFSdsbEkPuA-YZXMwRkjbFSBL_4.roa (hash: 7mDFMoZc4IARD+ubLVsfgMsnY5+CrMhB4pwA/xSdkv8=)
2: G-9aoU0xQMfHxJiPGdqUMesaQPE.crl (hash: PxjsCuk12W6FVORZbSDrvwCWGiwLlpIysW8frD3j+gU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-9aoU0xQMfHxJiPGdqUMesaQPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:a5:b4:35:b6:c9:53:d8:4c:09:e4:ca:57:68:18:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bef5aa14d3140c7c7c4988f19da9431eb1a40f1
Validity
Not Before: Jun 14 01:01:17 2026 GMT
Not After : Jun 15 01:01:17 2026 GMT
Subject: CN=a1d3b1881e9b8563852065e53e9bfea47c31e1e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:80:54:b6:94:96:b4:ee:73:97:8f:86:e8:58:
a5:5e:77:39:84:ce:ae:f6:7b:2b:ad:19:62:80:f3:
a3:6b:1c:9c:0a:74:e4:00:c1:04:6e:63:3c:63:cc:
8d:76:b6:06:34:97:99:9c:ba:fc:e1:9a:ca:fc:79:
f0:93:2d:97:dd:77:d1:31:bd:fe:27:5d:9a:3a:d0:
43:74:0e:dc:62:d7:a5:13:98:10:ac:51:aa:82:88:
06:1d:70:05:c5:5e:d3:8f:86:a4:c2:a5:35:6f:d4:
ca:f0:61:a1:6c:bd:1f:11:6f:04:67:4f:a8:fc:25:
bc:ad:71:09:b7:6d:d5:8d:0b:73:4b:1d:17:19:61:
aa:fb:dc:e2:0a:77:bd:77:58:8f:eb:fa:3b:e2:6c:
43:d4:b7:e2:23:c6:d5:26:b8:18:8e:97:71:2a:8c:
fb:9e:11:2f:63:87:a7:ab:06:8b:63:ef:de:e6:4a:
e1:f2:ed:b4:c9:e1:b2:42:62:05:c0:71:27:40:eb:
c2:09:e8:8b:90:24:50:b2:e2:e2:71:b0:70:75:53:
c7:93:e7:ad:61:38:8b:49:f8:6e:bd:19:d5:b9:d2:
40:3b:09:95:80:7f:c6:33:a5:3b:a0:24:43:ae:03:
c3:8c:a4:09:af:f8:ec:84:89:60:8f:3e:f8:8d:47:
49:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:D3:B1:88:1E:9B:85:63:85:20:65:E5:3E:9B:FE:A4:7C:31:E1:E2
X509v3 Authority Key Identifier:
keyid:1B:EF:5A:A1:4D:31:40:C7:C7:C4:98:8F:19:DA:94:31:EB:1A:40:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-9aoU0xQMfHxJiPGdqUMesaQPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5d6167-f02b-44db-b565-0e4382310ca5/1/G-9aoU0xQMfHxJiPGdqUMesaQPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:23:d3:16:37:02:ad:80:68:28:b2:1b:25:ae:71:78:54:f7:
14:ef:c7:64:f5:93:42:a4:4b:dd:14:76:7f:da:75:8d:00:6a:
3c:21:66:9f:21:0d:5b:54:ae:df:5b:67:4b:e1:1f:b0:ce:01:
aa:5b:8f:a6:e4:63:60:4a:cd:e9:41:20:cb:11:d7:b0:44:09:
c1:e6:46:9a:ef:72:01:12:dd:2d:0c:f4:9b:e2:61:a0:60:7c:
4d:c7:3c:72:21:37:8b:d2:93:02:4c:3a:ab:26:83:6f:82:2a:
8c:e0:53:2a:02:07:90:a5:b9:b5:87:16:a6:7b:55:9f:ae:ba:
a3:7f:6d:3f:8b:1a:8b:24:c8:dd:2f:09:f9:9a:5b:76:65:f3:
59:39:1c:2b:78:26:f0:45:54:65:96:ce:e6:28:54:30:29:5d:
76:4c:69:ab:d2:30:50:60:34:14:6a:09:02:fd:53:2f:f4:91:
f3:f7:c7:42:e3:6e:8e:1d:c9:5c:4c:66:3d:8e:57:69:c6:bb:
66:a5:77:c3:89:23:18:70:3f:49:c4:bf:3b:6d:da:4b:0a:01:
96:5c:7f:fe:21:67:3c:7c:5e:5b:70:5f:d4:8e:68:09:71:db:
55:c6:78:56:83:ef:a2:e3:43:c0:5b:67:31:91:49:01:46:3c:
e6:d2:66:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:45:42 2026 by rpki-client