Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.mft
File: g-I0DvXEpJUutBPSiMKdk3g0IjI.mft (raw, json)
Hash identifier: K9VCjjLnp3LhpJaBtgkCCxKv3gdOtUl8SFfjPBPZkVc=
Subject key identifier: D4:57:09:55:EA:43:47:67:77:05:15:7E:7E:B5:83:0F:B1:0F:6C:24
Authority key identifier: 83:E2:34:0E:F5:C4:A4:95:2E:B4:13:D2:88:C2:9D:93:78:34:22:32
Certificate issuer: /CN=83e2340ef5c4a4952eb413d288c29d9378342232
Certificate serial: 019D37895957C8D0B5F8AB33E5EC3C8D5C4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-I0DvXEpJUutBPSiMKdk3g0IjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.mft
Manifest number: 1229
Signing time: Sun 29 Mar 2026 03:00:41 +0000
Manifest this update: Sun 29 Mar 2026 03:00:41 +0000
Manifest next update: Mon 30 Mar 2026 03:00:41 +0000
Files and hashes: 1: N4QCwmv8Sw5ybiIBKm-0kiR2k5M.roa (hash: jAlFMSYTvLNZZPUNEkcMr5EHaq268sFn92XHnKsQ7g4=)
2: QQ5S1kn00ChCgstLW3aRVKkKIS4.roa (hash: X5JipwgBz71sKHnS2t/k7iUruR1RHoHrGOPn5Rwy9nI=)
3: g-I0DvXEpJUutBPSiMKdk3g0IjI.crl (hash: H6AKNRM4yhWXmESsiraMRDrkRkTdPlPqQQgm7nQ6y1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/g-I0DvXEpJUutBPSiMKdk3g0IjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:59:57:c8:d0:b5:f8:ab:33:e5:ec:3c:8d:5c:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83e2340ef5c4a4952eb413d288c29d9378342232
Validity
Not Before: Mar 29 03:00:41 2026 GMT
Not After : Mar 30 03:00:41 2026 GMT
Subject: CN=d4570955ea4347677705157e7eb5830fb10f6c24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3d:dc:a7:d6:31:2c:e9:3c:08:01:77:9e:13:
22:7b:96:c3:ee:ee:7f:16:21:4a:21:f4:14:0a:16:
9a:c9:f7:dd:b1:be:5a:52:0e:4e:05:20:c1:c1:55:
da:af:39:8e:54:c3:a6:89:da:96:71:c9:88:d1:06:
6c:d8:97:ec:ca:65:b0:8b:49:95:32:ca:13:af:07:
f5:1f:01:1e:a8:b6:9b:c5:59:9e:79:83:ea:72:ab:
64:72:d3:67:31:17:ea:20:18:36:4d:d5:69:11:b8:
bf:43:8b:04:39:9b:b5:56:85:99:36:ce:5c:b3:3e:
a6:16:c9:4e:35:fa:37:3b:8e:61:79:cf:27:0e:4f:
43:05:2e:e4:15:9a:82:d6:cf:21:58:6e:40:5a:a2:
94:17:cf:98:45:11:e4:c8:9c:ca:b0:ae:0b:6d:8e:
8d:d2:99:94:25:af:a3:19:a9:e6:8a:41:af:28:0d:
23:88:68:0b:b6:df:c6:49:fb:e4:93:18:b8:6b:d0:
e0:a6:b8:f2:37:3b:20:16:e7:08:a6:6e:5d:fa:6f:
7f:d4:64:00:96:c7:f9:c9:ed:c1:a7:c1:1f:77:0c:
72:0a:66:1d:56:a9:1e:b9:40:ee:77:d0:04:cc:55:
66:b5:3e:fe:83:66:29:d9:4d:c3:6f:92:c1:73:1c:
b3:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:57:09:55:EA:43:47:67:77:05:15:7E:7E:B5:83:0F:B1:0F:6C:24
X509v3 Authority Key Identifier:
keyid:83:E2:34:0E:F5:C4:A4:95:2E:B4:13:D2:88:C2:9D:93:78:34:22:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-I0DvXEpJUutBPSiMKdk3g0IjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:02:92:b8:c5:b2:32:2d:3f:9e:04:9a:7e:b9:43:73:0b:44:
50:c8:f5:b6:e6:b1:95:b2:35:d5:06:c8:84:61:6e:f9:31:d6:
5a:c1:ea:1c:36:0a:fa:c9:43:60:47:79:a8:78:49:fb:8e:73:
98:85:fd:46:48:54:be:0a:44:e5:70:d6:85:de:4d:e8:1e:fd:
09:87:5d:4d:af:65:c3:72:a1:01:16:4d:34:c2:91:32:0e:c3:
c6:3e:97:de:0c:42:90:c3:9f:3a:01:56:32:e0:dc:0c:d6:d4:
4e:d5:28:00:7a:db:85:8c:70:68:aa:0e:5b:8f:8c:61:8f:8b:
35:a7:74:1d:90:89:03:85:c7:a0:04:ac:47:0a:84:5a:67:d1:
11:55:3a:b1:2a:c1:a6:4d:af:62:80:8b:7d:8d:ef:d1:4b:86:
b2:b5:a7:52:a6:b2:fa:25:45:5f:4b:46:aa:ca:e9:eb:e7:f8:
a1:c5:aa:46:8d:a2:6c:89:43:c5:04:ec:c7:ef:43:b0:b6:60:
24:69:e2:87:4f:15:b4:46:42:a7:e2:26:8c:1a:77:6d:64:af:
aa:c3:e2:45:7b:6b:d1:19:79:0d:cd:5b:f5:7c:02:e6:35:cb:
82:be:c6:b3:d3:da:58:8b:85:6f:ed:4f:d8:8a:7c:8a:6c:82:
05:bf:f3:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:44:09 2026 by rpki-client