Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/250423-fa91-4a22-b83a-83e47580b3ec/1/g4xPgQ16IKeDpPqxwDRGe4JQUbk.mft
File: g4xPgQ16IKeDpPqxwDRGe4JQUbk.mft (raw, json)
Hash identifier: LNVdelvmcYGWgvc0AWm/Ql3WfQzK7YkphbW55UI3s+A=
Subject key identifier: B3:38:C0:1A:85:E7:B0:2D:96:BF:3B:41:FB:F9:5E:3F:9E:9E:26:32
Authority key identifier: 83:8C:4F:81:0D:7A:20:A7:83:A4:FA:B1:C0:34:46:7B:82:50:51:B9
Certificate issuer: /CN=838c4f810d7a20a783a4fab1c034467b825051b9
Certificate serial: 019F86B1B9540950559D85416F1D064B6715
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g4xPgQ16IKeDpPqxwDRGe4JQUbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/250423-fa91-4a22-b83a-83e47580b3ec/1/g4xPgQ16IKeDpPqxwDRGe4JQUbk.mft
Manifest number: 19C0
Signing time: Tue 21 Jul 2026 22:00:21 +0000
Manifest this update: Tue 21 Jul 2026 22:00:21 +0000
Manifest next update: Wed 22 Jul 2026 22:00:21 +0000
Files and hashes: 1: g4xPgQ16IKeDpPqxwDRGe4JQUbk.crl (hash: lHqNejk8qC8C8UHazYWiKdIj9dEiZ3KkNcOnuHMMxck=)
2: jUh5kPqCBDpArkt6K7K31qvOD8c.roa (hash: qUwUoHmjfXhrPLn74zGv7aYCTKLavD/2JI0PvwjIvp4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/250423-fa91-4a22-b83a-83e47580b3ec/1/g4xPgQ16IKeDpPqxwDRGe4JQUbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/250423-fa91-4a22-b83a-83e47580b3ec/1/g4xPgQ16IKeDpPqxwDRGe4JQUbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/g4xPgQ16IKeDpPqxwDRGe4JQUbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:b1:b9:54:09:50:55:9d:85:41:6f:1d:06:4b:67:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=838c4f810d7a20a783a4fab1c034467b825051b9
Validity
Not Before: Jul 21 22:00:21 2026 GMT
Not After : Jul 22 22:00:21 2026 GMT
Subject: CN=b338c01a85e7b02d96bf3b41fbf95e3f9e9e2632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b2:ef:11:bf:c6:62:03:ef:19:e7:95:d8:d0:
db:fa:9e:37:74:a3:d0:b2:14:10:7d:d4:d2:cb:b8:
32:f6:68:89:58:dd:3a:3c:88:0b:00:5b:f6:1b:d2:
4f:6d:81:11:7b:38:05:90:0c:72:b7:fe:3f:18:9c:
2c:90:ca:1e:59:65:42:ec:5b:0d:2d:f1:23:09:8c:
46:73:60:dc:71:71:85:35:52:8d:b6:c4:8b:21:48:
c1:47:a5:2f:e8:26:de:08:e9:c5:a4:5e:88:3c:db:
2c:94:f2:66:87:b3:7c:bf:45:91:7b:77:3f:a9:7c:
77:d7:17:45:6f:28:2f:b3:2f:92:64:c1:20:a5:f0:
fe:74:d0:5e:f2:30:13:8b:06:81:8b:e3:f7:4e:11:
77:4e:62:1a:34:e6:52:5b:4c:9d:4c:99:ca:5f:54:
86:6a:77:75:ff:8f:e4:61:38:fa:36:ae:69:44:bb:
85:c6:a0:4f:df:a4:fa:dd:fc:23:f3:fa:68:14:c2:
cd:96:13:f6:35:83:cb:83:d2:a2:f3:59:37:d1:15:
67:4f:18:6c:0d:8c:2d:ff:58:e3:eb:3c:82:40:3e:
84:3a:f3:d3:a6:62:b2:13:75:fe:28:94:58:b4:3a:
1e:c0:53:8b:97:1b:25:30:9c:1a:29:60:ba:70:ef:
5c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:38:C0:1A:85:E7:B0:2D:96:BF:3B:41:FB:F9:5E:3F:9E:9E:26:32
X509v3 Authority Key Identifier:
keyid:83:8C:4F:81:0D:7A:20:A7:83:A4:FA:B1:C0:34:46:7B:82:50:51:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g4xPgQ16IKeDpPqxwDRGe4JQUbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/250423-fa91-4a22-b83a-83e47580b3ec/1/g4xPgQ16IKeDpPqxwDRGe4JQUbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/250423-fa91-4a22-b83a-83e47580b3ec/1/g4xPgQ16IKeDpPqxwDRGe4JQUbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:57:3d:5a:c8:bf:37:69:f8:a2:06:cd:35:bd:a6:e8:3d:48:
b4:eb:90:c4:8e:ea:52:f9:91:1f:a9:cb:5a:dd:62:52:94:40:
76:b6:a3:62:3b:b7:56:93:f6:5f:19:fa:d0:ba:df:dd:6e:a6:
b1:99:64:64:71:54:fd:5e:f9:75:96:85:b4:76:40:ad:06:7c:
66:d4:e0:e7:b7:33:69:9d:e0:21:1c:b6:c5:e2:d0:89:47:a5:
eb:ea:29:7e:8f:d2:13:e5:5e:69:11:4d:78:2d:a0:3e:5d:44:
86:35:3c:67:6d:9d:66:8f:f7:d5:5b:a1:24:ec:45:0d:95:26:
5f:d5:25:9c:f3:23:d1:55:a7:a5:93:6d:a5:aa:f0:d6:84:bb:
35:c6:b4:c5:41:9a:cb:4d:e4:56:90:26:b5:9f:ea:60:5c:5e:
60:a9:43:32:ac:23:27:92:e8:a7:15:5e:bd:fb:55:2a:de:b3:
3c:9f:c7:ab:dd:00:f1:91:61:2a:57:25:60:7d:fd:5e:ad:32:
81:a1:10:3a:ba:db:21:ee:60:b5:09:32:81:9e:34:15:f6:d7:
27:ad:de:2f:6d:b3:e7:d3:9c:9d:30:ac:38:e9:91:d0:39:91:
cd:ad:76:f9:ea:12:87:71:4f:8d:c4:89:c0:6f:b0:24:38:3d:
f7:64:27:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:23:37 2026 by rpki-client