Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.mft
File: g-I0DvXEpJUutBPSiMKdk3g0IjI.mft (raw, json)
Hash identifier: u1Mbkytfx5apDscEle+WIG1VZ2umDURPFaS2CXw49jg=
Subject key identifier: 2A:E3:E6:5B:53:69:84:CE:BA:F5:1C:F4:C4:27:B8:B2:F9:9E:1A:4A
Authority key identifier: 83:E2:34:0E:F5:C4:A4:95:2E:B4:13:D2:88:C2:9D:93:78:34:22:32
Certificate issuer: /CN=83e2340ef5c4a4952eb413d288c29d9378342232
Certificate serial: 019E74408632076A05544556211C7C415D4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-I0DvXEpJUutBPSiMKdk3g0IjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.mft
Manifest number: 12CD
Signing time: Fri 29 May 2026 15:00:45 +0000
Manifest this update: Fri 29 May 2026 15:00:45 +0000
Manifest next update: Sat 30 May 2026 15:00:45 +0000
Files and hashes: 1: N4QCwmv8Sw5ybiIBKm-0kiR2k5M.roa (hash: jAlFMSYTvLNZZPUNEkcMr5EHaq268sFn92XHnKsQ7g4=)
2: QQ5S1kn00ChCgstLW3aRVKkKIS4.roa (hash: X5JipwgBz71sKHnS2t/k7iUruR1RHoHrGOPn5Rwy9nI=)
3: g-I0DvXEpJUutBPSiMKdk3g0IjI.crl (hash: w0jEESBNVsLoZ5M/plD4/WeCHq4X+FoFMRtXAst/D2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/g-I0DvXEpJUutBPSiMKdk3g0IjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 30 May 2026 15:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:74:40:86:32:07:6a:05:54:45:56:21:1c:7c:41:5d:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83e2340ef5c4a4952eb413d288c29d9378342232
Validity
Not Before: May 29 15:00:45 2026 GMT
Not After : May 30 15:00:45 2026 GMT
Subject: CN=2ae3e65b536984cebaf51cf4c427b8b2f99e1a4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:26:38:09:b4:85:b6:f3:ba:82:c4:47:34:f6:
45:71:33:0e:d6:f7:3f:0e:d7:b1:11:ac:16:76:2e:
27:b7:31:e6:75:a8:b1:df:48:88:35:05:94:35:73:
0c:db:6f:e0:9b:af:11:5f:05:5a:33:3c:49:39:35:
e6:4a:c7:f2:2e:c5:b6:88:cf:1e:91:b2:be:12:9b:
5e:73:9d:d0:41:18:7f:6b:79:87:bb:ec:42:94:ee:
c5:7a:97:63:a9:79:19:ca:67:94:f6:e7:9a:b5:71:
cd:c2:b3:b6:ee:3c:02:08:86:2c:62:31:f8:c8:9e:
e3:71:9f:19:50:20:28:fb:c1:9b:25:e7:a7:20:12:
d1:e0:4b:92:91:7d:a6:76:fa:f6:4d:72:a3:ab:8a:
ed:f5:0b:2b:55:1f:5d:35:ba:54:a7:98:36:1c:47:
6f:2c:ca:25:2d:ae:ef:bc:7e:51:bf:98:38:2d:54:
14:fb:ab:0d:ac:0d:7f:98:f4:75:b8:69:27:67:92:
4a:93:c7:9f:b0:bf:10:81:3c:15:a9:17:e7:43:48:
ec:e1:d6:73:92:d9:44:17:ed:fb:c9:b9:51:9e:89:
63:82:d8:ec:58:30:7b:e9:57:1a:07:d7:df:2a:39:
7e:80:10:8f:62:1d:90:e3:16:fb:a5:4c:c6:ac:cd:
00:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:E3:E6:5B:53:69:84:CE:BA:F5:1C:F4:C4:27:B8:B2:F9:9E:1A:4A
X509v3 Authority Key Identifier:
keyid:83:E2:34:0E:F5:C4:A4:95:2E:B4:13:D2:88:C2:9D:93:78:34:22:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-I0DvXEpJUutBPSiMKdk3g0IjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:77:85:da:85:7f:93:79:66:f2:92:24:07:19:54:2d:b5:08:
8e:8d:0f:96:ac:ea:1c:00:4a:94:2b:dd:67:40:a5:c6:c7:34:
c2:68:0c:1c:d0:43:da:24:b8:39:eb:52:ef:8d:63:01:2b:b7:
b8:f9:e4:ab:88:f8:a4:25:2c:5f:f3:ca:0e:88:9c:42:7e:4d:
62:c2:51:94:69:0d:49:2f:68:82:3d:be:ad:c9:6c:09:44:09:
53:35:84:81:0b:6c:50:cc:ac:83:0d:51:26:5b:f2:44:f3:e6:
0e:5a:0a:8b:93:15:9a:4b:a6:65:9b:d6:19:49:9d:d9:8d:d8:
3b:dd:36:6f:e2:d5:2d:29:6a:3f:8a:b8:54:5b:93:d8:b3:0b:
85:0b:63:b3:4b:c9:95:07:cb:d3:fa:72:44:d9:22:81:fd:47:
e4:8e:98:d3:21:b3:bc:5d:44:05:64:20:d6:77:b4:0d:b8:a8:
a0:bf:c4:b7:b3:e8:92:50:94:b4:41:5f:c2:eb:ff:62:11:98:
35:e6:f7:c8:a0:62:cb:ba:8f:1f:e4:3b:42:35:14:ec:b5:e7:
d2:7d:28:bb:80:7f:ba:e2:d0:69:9a:29:b1:ea:24:8a:15:3f:
af:9e:61:12:9b:cb:9a:17:a4:68:2e:ee:28:02:08:ca:9b:26:
9e:59:c9:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 23:01:55 2026 by rpki-client