Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/g7d8noEHbPS0zv7V7vIQf3UsNjA.mft
File: g7d8noEHbPS0zv7V7vIQf3UsNjA.mft (raw, json)
Hash identifier: nXVRYMRrOSDYcBEICoM3xee0HzmlnznyF13flK7uHxE=
Subject key identifier: A7:E8:FE:FF:F7:D4:3E:70:7D:B3:83:5E:22:7F:7B:1D:DC:FD:A2:9F
Authority key identifier: 83:B7:7C:9E:81:07:6C:F4:B4:CE:FE:D5:EE:F2:10:7F:75:2C:36:30
Certificate issuer: /CN=83b77c9e81076cf4b4cefed5eef2107f752c3630
Certificate serial: 019D382E9004C55DC06F14CB6E12A63F135C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g7d8noEHbPS0zv7V7vIQf3UsNjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/g7d8noEHbPS0zv7V7vIQf3UsNjA.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 06:01:08 +0000
Manifest this update: Sun 29 Mar 2026 06:01:08 +0000
Manifest next update: Mon 30 Mar 2026 06:01:08 +0000
Files and hashes: 1: GHGkwEVylqYxr15hWfLzxHp9MA0.roa (hash: 6MgKNZ/wr6UP8/R75FjFSF75c2qdb4J/GZr8B0Cgj+s=)
2: g7d8noEHbPS0zv7V7vIQf3UsNjA.crl (hash: aTXR5l/OB5rNLI8Hd8+ALhslZjIxhO1ovCj/Nirxvjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/g7d8noEHbPS0zv7V7vIQf3UsNjA.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/g7d8noEHbPS0zv7V7vIQf3UsNjA.mft
rsync://rpki.ripe.net/repository/DEFAULT/g7d8noEHbPS0zv7V7vIQf3UsNjA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:90:04:c5:5d:c0:6f:14:cb:6e:12:a6:3f:13:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83b77c9e81076cf4b4cefed5eef2107f752c3630
Validity
Not Before: Mar 29 06:01:08 2026 GMT
Not After : Mar 30 06:01:08 2026 GMT
Subject: CN=a7e8fefff7d43e707db3835e227f7b1ddcfda29f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:eb:83:d2:82:aa:ba:71:4c:0d:b3:fa:e8:2a:
be:b2:50:ac:ad:4d:84:a1:2f:b7:37:09:80:2f:06:
c9:a8:f8:7a:13:ac:d2:21:52:c5:c4:cd:27:36:d8:
6d:7f:4b:3c:10:c5:76:c3:34:2e:ad:b6:a0:aa:46:
1b:6c:6a:d0:0e:66:ce:44:67:74:b2:c2:4f:36:96:
c6:23:2f:30:e6:78:d9:15:d4:e4:80:bc:2e:cc:f3:
39:67:fb:fc:13:fb:50:c7:0c:75:21:cc:6d:d6:ad:
43:3f:90:0b:c7:c9:fd:8e:4d:f7:ef:24:c7:6b:c2:
d1:c3:1e:12:7c:49:74:c1:da:73:88:f9:fa:35:c4:
57:25:36:86:76:38:10:af:bd:de:e4:f4:52:c9:ec:
28:b1:c7:e9:71:61:a9:ab:34:23:65:eb:d4:3a:45:
bc:05:43:7e:fd:9f:43:05:ec:e0:80:a7:21:36:25:
03:a9:60:64:a1:fa:7e:b2:37:8a:9d:38:d7:5f:1e:
6f:9c:b4:49:66:d7:1d:0d:4c:d0:86:32:1f:01:02:
1e:9c:af:76:b9:b2:52:82:1a:14:64:38:e8:1d:0a:
ec:92:12:b8:db:8b:3a:12:d5:77:92:9e:e7:df:90:
96:47:11:b2:f3:d3:11:b5:22:26:73:1f:bd:0c:26:
24:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:E8:FE:FF:F7:D4:3E:70:7D:B3:83:5E:22:7F:7B:1D:DC:FD:A2:9F
X509v3 Authority Key Identifier:
keyid:83:B7:7C:9E:81:07:6C:F4:B4:CE:FE:D5:EE:F2:10:7F:75:2C:36:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g7d8noEHbPS0zv7V7vIQf3UsNjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/g7d8noEHbPS0zv7V7vIQf3UsNjA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/3dc4dd-80bb-4df5-af58-b7adf04e423d/1/g7d8noEHbPS0zv7V7vIQf3UsNjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:70:c5:b3:70:e8:f0:47:b1:97:ce:11:62:bf:2f:03:1c:5f:
26:ea:de:d4:be:01:6c:51:e2:89:b2:d9:7d:ed:dd:2e:95:0b:
13:02:b4:03:ea:5a:96:ca:78:03:2f:b2:d5:df:ae:41:3d:db:
b2:99:57:23:e5:92:b1:c6:ca:80:00:46:42:42:b0:7c:e9:d9:
03:47:84:be:ec:a1:83:23:42:a8:e9:e0:74:1a:12:27:49:bb:
a8:79:ef:46:17:44:48:e2:f3:ea:bd:ea:b9:24:53:2c:05:71:
6e:4e:ae:00:38:21:e9:fc:da:65:6c:d8:7f:13:6a:4b:5a:bf:
89:73:17:25:2b:80:b8:0a:6a:e7:82:25:a4:8f:66:11:65:63:
e4:4f:ee:69:34:e9:1c:bb:e7:43:6f:75:b6:65:52:a2:e4:6b:
87:6a:8f:e8:75:68:44:7c:8f:ac:c2:3c:65:2a:22:40:bb:1c:
75:b8:8b:92:9c:21:b1:22:87:bd:45:28:4f:67:d2:ef:be:af:
9e:94:81:e4:3e:02:90:2b:e5:d3:c8:f1:d8:3e:de:4d:a4:a8:
c3:4e:0a:5e:1a:a8:da:d7:b7:ab:8b:cb:4d:a3:8a:fe:fa:78:
5e:ec:ad:3b:dc:ae:1c:4b:a6:a5:7e:40:12:dc:02:18:c5:e1:
92:12:d5:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04LpAExV3AbxTLbhKmPxNcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzYjc3YzllODEwNzZjZjRiNGNlZmVkNWVlZjIxMDdmNzUy
YzM2MzAwHhcNMjYwMzI5MDYwMTA4WhcNMjYwMzMwMDYwMTA4WjAzMTEwLwYDVQQD
EyhhN2U4ZmVmZmY3ZDQzZTcwN2RiMzgzNWUyMjdmN2IxZGRjZmRhMjlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1OuD0oKqunFMDbP66Cq+slCsrU2E
oS+3NwmALwbJqPh6E6zSIVLFxM0nNthtf0s8EMV2wzQurbagqkYbbGrQDmbORGd0
ssJPNpbGIy8w5njZFdTkgLwuzPM5Z/v8E/tQxwx1Icxt1q1DP5ALx8n9jk337yTH
a8LRwx4SfEl0wdpziPn6NcRXJTaGdjgQr73e5PRSyewoscfpcWGpqzQjZevUOkW8
BUN+/Z9DBezggKchNiUDqWBkofp+sjeKnTjXXx5vnLRJZtcdDUzQhjIfAQIenK92
ubJSghoUZDjoHQrskhK424s6EtV3kp7n35CWRxGy89MRtSImcx+9DCYkDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKfo/v/31D5wfbODXiJ/ex3c/aKfMB8GA1UdIwQY
MBaAFIO3fJ6BB2z0tM7+1e7yEH91LDYwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzdkOG5vRUhiUFMwenY3Vjd2SVFmM1VzTmpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC8zZGM0ZGQtODBiYi00ZGY1LWFmNTgt
YjdhZGYwNGU0MjNkLzEvZzdkOG5vRUhiUFMwenY3Vjd2SVFmM1VzTmpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC8zZGM0ZGQtODBiYi00ZGY1LWFmNTgtYjdhZGYwNGU0MjNk
LzEvZzdkOG5vRUhiUFMwenY3Vjd2SVFmM1VzTmpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAXDFs3Do
8Eexl84RYr8vAxxfJure1L4BbFHiibLZfe3dLpULEwK0A+palsp4Ay+y1d+uQT3b
splXI+WSscbKgABGQkKwfOnZA0eEvuyhgyNCqOngdBoSJ0m7qHnvRhdESOLz6r3q
uSRTLAVxbk6uADgh6fzaZWzYfxNqS1q/iXMXJSuAuApq54IlpI9mEWVj5E/uaTTp
HLvnQ291tmVSouRrh2qP6HVoRHyPrMI8ZSoiQLscdbiLkpwhsSKHvUUoT2fS776v
npSB5D4CkCvl08jx2D7eTaSow04KXhqo2te3q4vLTaOK/vp4XuytO9yuHEumpX5A
EtwCGMXhkhLV9Q==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:01:01 2026 by rpki-client