Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/250423-fa91-4a22-b83a-83e47580b3ec/1/g4xPgQ16IKeDpPqxwDRGe4JQUbk.mft
File: g4xPgQ16IKeDpPqxwDRGe4JQUbk.mft (raw, json)
Hash identifier: nkI3xC1tArAaWk66DUjskAG6A8BWg/mGPSeWLSgI1Mg=
Subject key identifier: AE:D2:C0:98:80:BB:C6:4B:EC:7A:6A:0B:3F:39:32:78:DB:CF:4A:98
Authority key identifier: 83:8C:4F:81:0D:7A:20:A7:83:A4:FA:B1:C0:34:46:7B:82:50:51:B9
Certificate issuer: /CN=838c4f810d7a20a783a4fab1c034467b825051b9
Certificate serial: 01A06E70F261338E27E337B8DF7C06D2F87F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g4xPgQ16IKeDpPqxwDRGe4JQUbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/250423-fa91-4a22-b83a-83e47580b3ec/1/g4xPgQ16IKeDpPqxwDRGe4JQUbk.mft
Manifest number: 1A38
Signing time: Fri 04 Sep 2026 22:01:30 +0000
Manifest this update: Fri 04 Sep 2026 22:01:30 +0000
Manifest next update: Sat 05 Sep 2026 22:01:30 +0000
Files and hashes: 1: g4xPgQ16IKeDpPqxwDRGe4JQUbk.crl (hash: uZH2rGW8ttueFVTJsT/+wrhBdiEFcKowyhrGymYp0Uc=)
2: jUh5kPqCBDpArkt6K7K31qvOD8c.roa (hash: qUwUoHmjfXhrPLn74zGv7aYCTKLavD/2JI0PvwjIvp4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/250423-fa91-4a22-b83a-83e47580b3ec/1/g4xPgQ16IKeDpPqxwDRGe4JQUbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/250423-fa91-4a22-b83a-83e47580b3ec/1/g4xPgQ16IKeDpPqxwDRGe4JQUbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/g4xPgQ16IKeDpPqxwDRGe4JQUbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 22:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:70:f2:61:33:8e:27:e3:37:b8:df:7c:06:d2:f8:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=838c4f810d7a20a783a4fab1c034467b825051b9
Validity
Not Before: Sep 4 22:01:30 2026 GMT
Not After : Sep 5 22:01:30 2026 GMT
Subject: CN=aed2c09880bbc64bec7a6a0b3f393278dbcf4a98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:75:be:6c:2b:30:a0:9f:01:cb:cf:66:8e:10:
22:1e:32:29:23:d7:aa:81:6b:e3:87:4e:ac:73:0d:
b0:67:b1:8a:28:c2:da:e3:9c:cc:44:15:f0:61:10:
8a:54:95:1b:74:7b:02:44:55:e6:1a:8a:7d:a5:01:
1d:23:a2:87:56:17:b4:71:91:44:5b:08:8c:9b:6a:
b5:45:e8:f6:be:53:e1:c7:49:1c:f6:4f:26:58:f4:
0d:2c:c9:36:0b:d4:92:88:d6:f3:f8:84:e3:4a:1e:
52:5e:c6:92:c9:38:7b:79:0b:01:46:d1:de:56:89:
22:8a:00:0d:62:96:82:5e:9e:f2:a7:46:b3:9d:95:
bd:c1:64:72:9e:0c:62:f9:84:aa:5a:63:e8:fe:e2:
1b:a8:6d:ef:f0:f3:25:17:d8:31:bf:e9:5f:6d:f1:
3b:a3:8f:14:9d:aa:d4:b6:23:1b:7b:f0:db:0e:7d:
c4:e6:73:4b:84:7b:05:a4:7c:f8:d8:08:65:f3:93:
84:cc:42:7f:a0:8e:d2:83:05:dd:ae:ec:f3:22:10:
50:e7:7c:de:44:8f:48:48:6c:70:09:5e:25:92:2d:
81:59:e5:2c:e5:cc:5a:0b:9b:a8:b0:83:5c:9d:2c:
ba:43:ce:da:86:4e:d0:f7:3c:4f:6d:80:b7:64:d0:
53:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:D2:C0:98:80:BB:C6:4B:EC:7A:6A:0B:3F:39:32:78:DB:CF:4A:98
X509v3 Authority Key Identifier:
keyid:83:8C:4F:81:0D:7A:20:A7:83:A4:FA:B1:C0:34:46:7B:82:50:51:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g4xPgQ16IKeDpPqxwDRGe4JQUbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/250423-fa91-4a22-b83a-83e47580b3ec/1/g4xPgQ16IKeDpPqxwDRGe4JQUbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/250423-fa91-4a22-b83a-83e47580b3ec/1/g4xPgQ16IKeDpPqxwDRGe4JQUbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:96:d4:f4:74:16:20:35:93:b7:f3:7b:31:fa:ea:de:5b:27:
c1:bd:4a:ea:fa:77:75:8c:59:24:cb:02:37:e8:b8:0b:5d:7b:
f0:54:9e:ae:54:b9:e0:01:7a:fe:88:0b:85:86:c0:e1:9b:25:
8b:c7:da:7e:3d:7b:74:1e:ac:91:a5:e7:23:4e:2a:b5:ea:c0:
fe:3c:b2:91:d7:5c:a3:0e:85:2c:f0:b1:f4:71:65:53:cb:22:
a8:c9:3e:5b:47:21:af:ae:cf:90:5c:0c:17:25:1e:2d:cb:9b:
4a:47:d9:e0:e5:6b:28:79:2b:7d:30:f9:5f:b6:06:81:bb:c9:
a8:8c:fd:34:2b:06:60:d0:16:17:2a:64:87:77:52:38:55:1f:
14:11:da:5c:e4:7a:29:6f:ae:af:f7:66:11:d2:cb:53:bb:7a:
b0:22:61:ab:5d:1b:27:dd:cd:b3:ee:d8:2d:4a:6e:58:a9:a8:
6e:03:1c:8e:9a:3c:d6:ae:30:45:83:31:37:47:25:ff:6c:b0:
38:75:59:b7:8f:fd:32:96:be:a5:47:d6:6b:49:57:32:0d:e8:
21:04:64:89:e2:f5:e9:87:2a:27:21:88:f8:e2:38:ab:e6:13:
0d:2b:27:c4:e4:98:5b:eb:18:15:ea:34:f6:cf:91:92:ef:d2:
49:7a:00:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBucPJhM44n4ze433wG0vh/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzOGM0ZjgxMGQ3YTIwYTc4M2E0ZmFiMWMwMzQ0NjdiODI1
MDUxYjkwHhcNMjYwOTA0MjIwMTMwWhcNMjYwOTA1MjIwMTMwWjAzMTEwLwYDVQQD
EyhhZWQyYzA5ODgwYmJjNjRiZWM3YTZhMGIzZjM5MzI3OGRiY2Y0YTk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnW+bCswoJ8By89mjhAiHjIpI9eq
gWvjh06scw2wZ7GKKMLa45zMRBXwYRCKVJUbdHsCRFXmGop9pQEdI6KHVhe0cZFE
WwiMm2q1Rej2vlPhx0kc9k8mWPQNLMk2C9SSiNbz+ITjSh5SXsaSyTh7eQsBRtHe
VokiigANYpaCXp7yp0aznZW9wWRyngxi+YSqWmPo/uIbqG3v8PMlF9gxv+lfbfE7
o48UnarUtiMbe/DbDn3E5nNLhHsFpHz42Ahl85OEzEJ/oI7SgwXdruzzIhBQ53ze
RI9ISGxwCV4lki2BWeUs5cxaC5uosINcnSy6Q87ahk7Q9zxPbYC3ZNBTFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK7SwJiAu8ZL7HpqCz85Mnjbz0qYMB8GA1UdIwQY
MBaAFIOMT4ENeiCng6T6scA0RnuCUFG5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzR4UGdRMTZJS2VEcFBxeHdEUkdlNEpRVWJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8yNTA0MjMtZmE5MS00YTIyLWI4M2Et
ODNlNDc1ODBiM2VjLzEvZzR4UGdRMTZJS2VEcFBxeHdEUkdlNEpRVWJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy8yNTA0MjMtZmE5MS00YTIyLWI4M2EtODNlNDc1ODBiM2Vj
LzEvZzR4UGdRMTZJS2VEcFBxeHdEUkdlNEpRVWJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWZbU9HQW
IDWTt/N7Mfrq3lsnwb1K6vp3dYxZJMsCN+i4C1178FSerlS54AF6/ogLhYbA4Zsl
i8fafj17dB6skaXnI04qterA/jyykddcow6FLPCx9HFlU8siqMk+W0chr67PkFwM
FyUeLcubSkfZ4OVrKHkrfTD5X7YGgbvJqIz9NCsGYNAWFypkh3dSOFUfFBHaXOR6
KW+ur/dmEdLLU7t6sCJhq10bJ93Ns+7YLUpuWKmobgMcjpo81q4wRYMxN0cl/2yw
OHVZt4/9Mpa+pUfWa0lXMg3oIQRkieL16YcqJyGI+OI4q+YTDSsnxOSYW+sYFeo0
9s+Rku/SSXoAlg==
-----END CERTIFICATE-----
Generated at Sat Sep 5 08:19:52 2026 by rpki-client