Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft
File: g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft (raw, json)
Hash identifier: 3aMJRKpRnvgjOTNqrU1rlh+8z1dZySDNcvGEwnXgFX4=
Subject key identifier: 4C:E0:0E:DC:72:24:C6:85:CC:D5:82:C4:EE:12:C2:BE:DB:20:3E:1A
Authority key identifier: 83:87:C2:19:C9:84:1E:BA:FA:A3:D4:08:06:C9:84:F9:F3:E4:E4:61
Certificate issuer: /CN=8387c219c9841ebafaa3d40806c984f9f3e4e461
Certificate serial: 019DCDBD6126C3DFF7D6B4D922C03C0670A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g4fCGcmEHrr6o9QIBsmE-fPk5GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft
Manifest number: 10EC
Signing time: Mon 27 Apr 2026 07:00:33 +0000
Manifest this update: Mon 27 Apr 2026 07:00:33 +0000
Manifest next update: Tue 28 Apr 2026 07:00:33 +0000
Files and hashes: 1: FiY50YnA9bU0VuqY_xB52WjpoQU.roa (hash: HLxKWl8h4/WN5MAo6nKsQwk0EYZk/ybbMsE7JxuTVx4=)
2: g4fCGcmEHrr6o9QIBsmE-fPk5GE.crl (hash: O8g5BfSE4QdwXz+yP/NC0ugWQ9sky4cbPea4OFVAx5Q=)
3: gp8VTUjNUe2SHA6Nw6jMCrBEmpI.roa (hash: KkGcwa9MsEC5A+egSiEpb4oola97UKCGunqwzbxcwVw=)
4: q6vOzN1DPBf1vx1ss5zgg7dDXIU.roa (hash: pJZycJNT80sKDVuDlXh5Ajg519IZ1fSYiagFEg9PFpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/g4fCGcmEHrr6o9QIBsmE-fPk5GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 07:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:bd:61:26:c3:df:f7:d6:b4:d9:22:c0:3c:06:70:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8387c219c9841ebafaa3d40806c984f9f3e4e461
Validity
Not Before: Apr 27 07:00:33 2026 GMT
Not After : Apr 28 07:00:33 2026 GMT
Subject: CN=4ce00edc7224c685ccd582c4ee12c2bedb203e1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c3:48:78:26:45:d2:a0:f5:d6:ba:63:5a:65:
4c:ca:80:fb:1d:73:60:b8:98:cf:f4:d4:e3:4a:07:
5a:21:18:a1:9e:e2:4c:eb:93:cf:63:d2:ab:2c:f4:
30:d0:42:70:f5:4b:55:a2:21:a2:bc:83:ee:a7:89:
c9:39:3f:73:95:cd:36:b6:57:43:6e:5a:c5:19:c6:
10:9f:48:0b:3f:81:f6:b7:8f:b9:c3:08:0a:29:14:
24:d0:00:c2:c8:7b:b3:79:0e:c6:a6:26:74:52:d5:
d7:4f:70:7a:8d:b8:83:5f:5d:00:63:de:de:a4:c9:
09:bf:f9:37:1b:d2:f1:3e:74:10:44:c7:51:e7:9b:
46:a4:8d:fa:91:b9:bf:6b:78:6f:fc:24:1d:3f:52:
93:bb:a1:89:8a:87:16:de:07:1d:06:7e:10:6f:98:
76:38:4e:b0:bf:fe:a7:14:08:11:22:61:ed:99:fe:
be:25:1b:e6:8a:f0:7a:03:b1:4b:87:c2:cf:b6:82:
3a:19:f6:da:fc:d2:c0:89:37:4d:41:e2:6b:1d:c8:
e0:28:94:c5:bd:59:9a:29:82:49:ac:38:14:7e:81:
84:9b:28:78:40:d8:e8:90:e7:14:7f:3b:f1:1c:24:
96:59:8a:5d:ad:4c:5e:ad:5f:6e:06:3e:fc:1a:14:
10:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:E0:0E:DC:72:24:C6:85:CC:D5:82:C4:EE:12:C2:BE:DB:20:3E:1A
X509v3 Authority Key Identifier:
keyid:83:87:C2:19:C9:84:1E:BA:FA:A3:D4:08:06:C9:84:F9:F3:E4:E4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g4fCGcmEHrr6o9QIBsmE-fPk5GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:eb:64:5f:1c:50:08:ba:96:39:92:26:82:02:fb:ef:1c:73:
1f:61:24:fe:38:c7:f3:a4:32:14:07:04:3d:94:09:48:d7:95:
77:b0:1e:54:42:9f:05:b7:5b:1a:45:92:04:fe:aa:e8:35:6f:
59:0e:15:79:de:81:dc:d4:80:fe:e4:df:08:f5:bb:6e:bc:eb:
55:30:9d:f1:75:e2:ac:1f:ce:90:40:29:31:d4:89:3e:78:0e:
3f:d2:51:4e:fd:3f:a2:3e:8a:12:1d:27:92:26:a1:4e:6a:6e:
6a:30:ee:e7:29:36:ad:47:0b:95:d2:c1:64:34:15:a9:24:15:
43:38:7a:d5:1f:da:93:f2:4e:6c:02:24:29:02:e6:17:a4:0b:
b4:a1:7c:21:90:15:53:95:ca:f9:f9:b6:5e:b2:db:f2:b0:4c:
2d:0f:ad:38:bf:aa:6b:20:1e:cd:17:3f:57:50:04:9c:ef:71:
d4:bd:12:eb:92:9e:33:32:80:13:ea:67:a9:ac:7c:b7:fd:73:
21:13:b5:ae:e4:5d:51:31:cd:0d:a4:20:19:56:bb:38:69:29:
33:df:01:46:31:d5:27:35:06:cd:58:be:32:16:2b:d9:ce:18:
75:63:84:c6:43:8f:80:de:c5:db:57:7a:d3:b7:0e:79:ca:41:
48:c0:ac:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 14:31:49 2026 by rpki-client