Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.mft
File: g6BiUlKSop6X_moFW5vWCEp3GXc.mft (raw, json)
Hash identifier: JhREpFsbdiK9EXL+8P7fSSQLjErQRM7zRUS66Fn1NXc=
Subject key identifier: 3D:5B:70:5F:7A:E0:52:EC:44:D4:9D:AD:FA:D5:2C:24:66:01:CA:BD
Authority key identifier: 83:A0:62:52:52:92:A2:9E:97:FE:6A:05:5B:9B:D6:08:4A:77:19:77
Certificate issuer: /CN=83a062525292a29e97fe6a055b9bd6084a771977
Certificate serial: 01A0BCF93500C0D01B2528FBC2E098916338
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g6BiUlKSop6X_moFW5vWCEp3GXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.mft
Manifest number: 1A62
Signing time: Sun 20 Sep 2026 04:00:43 +0000
Manifest this update: Sun 20 Sep 2026 04:00:43 +0000
Manifest next update: Mon 21 Sep 2026 04:00:43 +0000
Files and hashes: 1: MFlCR2JXbFM0gvBh_dWTVgoL37E.roa (hash: yQHl3h+BIb30RJsHlvxFsia7sgue1T2fPrdJ6ihTuRE=)
2: g6BiUlKSop6X_moFW5vWCEp3GXc.crl (hash: CjpDwJsW2ziDO58nBV7cJqPHkdbmoppg3xhZyNVmQBg=)
3: ovEHIgoLlT5gFEr99b8QyIfy0Hw.roa (hash: iBbHmTmPmE2txWf3AwnVIHjDVj/1ExRukaV5Q59K53k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/g6BiUlKSop6X_moFW5vWCEp3GXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 04:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bc:f9:35:00:c0:d0:1b:25:28:fb:c2:e0:98:91:63:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83a062525292a29e97fe6a055b9bd6084a771977
Validity
Not Before: Sep 20 04:00:43 2026 GMT
Not After : Sep 21 04:00:43 2026 GMT
Subject: CN=3d5b705f7ae052ec44d49dadfad52c246601cabd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e2:12:e0:52:f7:03:d8:92:e3:e1:d1:1a:f4:
47:cf:fd:93:28:9f:7a:a3:98:f6:af:14:3f:de:9a:
b3:4e:f2:90:9f:d1:42:eb:0f:28:2a:c2:fe:50:65:
c5:d0:82:1b:62:0d:55:05:12:5d:58:b0:b4:40:4e:
65:91:70:7f:6a:5b:d0:80:5b:e2:b8:83:b3:40:9e:
51:8b:a7:39:5b:c4:2d:f0:69:a0:e9:08:a6:45:76:
9e:5f:6d:b2:ba:a6:af:6d:20:ad:98:d4:bb:fc:31:
2c:e4:52:ac:c1:f9:d8:36:9b:d1:02:21:7c:d0:d4:
7f:c9:31:61:51:d3:0d:fd:94:88:b2:ba:4f:1b:68:
57:2f:c9:f9:e0:a0:95:10:57:3c:04:13:ef:57:f7:
4b:8f:17:5b:57:ae:07:85:d6:ca:b8:bf:a1:4f:e6:
e2:f2:35:6f:60:f6:f2:e8:cf:cb:64:6d:24:27:7d:
cf:90:ea:57:aa:df:48:2f:82:63:e8:be:5a:43:6a:
ed:7a:0c:54:b1:fe:ab:6a:0d:20:ad:c4:cd:fc:0a:
a5:f1:c7:a2:28:40:3b:b4:ca:d0:55:c6:41:9f:1c:
c7:44:ae:8b:37:30:bb:3a:94:da:dc:b7:05:21:a7:
91:a2:6f:4d:78:3f:a5:ee:4c:57:35:3d:b7:37:c8:
b4:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:5B:70:5F:7A:E0:52:EC:44:D4:9D:AD:FA:D5:2C:24:66:01:CA:BD
X509v3 Authority Key Identifier:
keyid:83:A0:62:52:52:92:A2:9E:97:FE:6A:05:5B:9B:D6:08:4A:77:19:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g6BiUlKSop6X_moFW5vWCEp3GXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:2f:40:6c:5c:9a:fc:d3:1d:8d:e1:de:61:22:b9:2b:61:05:
f4:c8:20:71:e5:14:64:2e:ba:71:0a:3f:48:f1:25:00:b7:4b:
dd:e1:ee:ea:ff:9d:19:18:95:e0:02:27:57:c0:ab:4f:c8:6e:
4f:12:a4:b5:5e:d1:9f:1f:06:66:a4:01:8e:36:a3:a4:45:67:
03:2c:45:1e:06:d9:dc:b3:a6:89:ab:6c:c3:9f:cc:6a:81:db:
e6:38:dd:7f:0d:de:0c:47:fa:b1:15:39:34:f7:36:58:48:e5:
5f:24:21:30:03:ee:5e:86:87:5e:82:ff:a6:c6:ae:50:c2:5f:
ec:f1:9d:4d:0d:92:3e:46:19:a5:6d:88:70:e9:eb:50:d9:8d:
1f:ba:28:37:d1:d8:f6:79:d4:dd:57:02:c8:2f:58:f9:2b:64:
6e:c3:15:8d:89:d1:aa:ca:9e:e3:52:ff:47:11:4c:4d:7d:be:
6c:34:d1:b8:18:d7:17:a4:56:46:d3:e2:ec:9a:b8:13:38:f8:
7e:d9:4a:83:58:45:41:40:06:b7:01:3a:68:a6:14:40:24:99:
94:63:40:25:75:9f:2e:72:10:74:6d:13:5d:79:e3:fd:41:49:
eb:dc:74:75:f3:d9:47:4f:a1:59:0d:2f:0f:04:c3:d7:a4:48:
6c:73:3e:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC8+TUAwNAbJSj7wuCYkWM4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzYTA2MjUyNTI5MmEyOWU5N2ZlNmEwNTViOWJkNjA4NGE3
NzE5NzcwHhcNMjYwOTIwMDQwMDQzWhcNMjYwOTIxMDQwMDQzWjAzMTEwLwYDVQQD
EygzZDViNzA1ZjdhZTA1MmVjNDRkNDlkYWRmYWQ1MmMyNDY2MDFjYWJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+IS4FL3A9iS4+HRGvRHz/2TKJ96
o5j2rxQ/3pqzTvKQn9FC6w8oKsL+UGXF0IIbYg1VBRJdWLC0QE5lkXB/alvQgFvi
uIOzQJ5Ri6c5W8Qt8Gmg6QimRXaeX22yuqavbSCtmNS7/DEs5FKswfnYNpvRAiF8
0NR/yTFhUdMN/ZSIsrpPG2hXL8n54KCVEFc8BBPvV/dLjxdbV64HhdbKuL+hT+bi
8jVvYPby6M/LZG0kJ33PkOpXqt9IL4Jj6L5aQ2rtegxUsf6rag0grcTN/Aql8cei
KEA7tMrQVcZBnxzHRK6LNzC7OpTa3LcFIaeRom9NeD+l7kxXNT23N8i0vQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD1bcF964FLsRNSdrfrVLCRmAcq9MB8GA1UdIwQY
MBaAFIOgYlJSkqKel/5qBVub1ghKdxl3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzZCaVVsS1NvcDZYX21vRlc1dldDRXAzR1hjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS85NThhMmMtY2VmMC00YmNjLTk5YzIt
MzIxYzlkNjZjODQ3LzEvZzZCaVVsS1NvcDZYX21vRlc1dldDRXAzR1hjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS85NThhMmMtY2VmMC00YmNjLTk5YzItMzIxYzlkNjZjODQ3
LzEvZzZCaVVsS1NvcDZYX21vRlc1dldDRXAzR1hjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApi9AbFya
/NMdjeHeYSK5K2EF9MggceUUZC66cQo/SPElALdL3eHu6v+dGRiV4AInV8CrT8hu
TxKktV7Rnx8GZqQBjjajpEVnAyxFHgbZ3LOmiatsw5/MaoHb5jjdfw3eDEf6sRU5
NPc2WEjlXyQhMAPuXoaHXoL/psauUMJf7PGdTQ2SPkYZpW2IcOnrUNmNH7ooN9HY
9nnU3VcCyC9Y+StkbsMVjYnRqsqe41L/RxFMTX2+bDTRuBjXF6RWRtPi7Jq4Ezj4
ftlKg1hFQUAGtwE6aKYUQCSZlGNAJXWfLnIQdG0TXXnj/UFJ69x0dfPZR0+hWQ0v
DwTD16RIbHM+tg==
-----END CERTIFICATE-----
Generated at Sun Sep 20 13:44:53 2026 by rpki-client