Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/35064b-7a5a-4c74-8743-fd8660c4fd6e/1/g7zjVWH1Qb2pfnd-aHmh1wTntC8.mft
File: g7zjVWH1Qb2pfnd-aHmh1wTntC8.mft (raw, json)
Hash identifier: vOVkJbbLV13RWjG6C3nN140/yWfm1PcdgVrBcswKC6I=
Subject key identifier: 4E:3E:36:75:EA:44:4E:1A:E9:5A:A7:11:A4:6E:17:54:20:E9:8F:A8
Authority key identifier: 83:BC:E3:55:61:F5:41:BD:A9:7E:77:7E:68:79:A1:D7:04:E7:B4:2F
Certificate issuer: /CN=83bce35561f541bda97e777e6879a1d704e7b42f
Certificate serial: 019D39AF20FC85EDFFD30058CA2645A0A399
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g7zjVWH1Qb2pfnd-aHmh1wTntC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/35064b-7a5a-4c74-8743-fd8660c4fd6e/1/g7zjVWH1Qb2pfnd-aHmh1wTntC8.mft
Manifest number: 152A
Signing time: Sun 29 Mar 2026 13:01:11 +0000
Manifest this update: Sun 29 Mar 2026 13:01:11 +0000
Manifest next update: Mon 30 Mar 2026 13:01:11 +0000
Files and hashes: 1: 1-4qxd5VbzfmdNK4R27R_jJ9_1qQ.roa (hash: LhFU85+HkE34Z66acYVRTu9YoEypcaFTomtfzQ5Jcjc=)
2: g7zjVWH1Qb2pfnd-aHmh1wTntC8.crl (hash: RJLqU1iHFogsTpxG3lDxClVCQozuH5NddXEkGvxjA+0=)
3: pf67aXCsTeM7_4TjxXUetdfZrpQ.roa (hash: mLhUEmXDDwujvnZ5FywWYPBQNtDMI33ozAwZ5PxzgJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/35064b-7a5a-4c74-8743-fd8660c4fd6e/1/g7zjVWH1Qb2pfnd-aHmh1wTntC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/35064b-7a5a-4c74-8743-fd8660c4fd6e/1/g7zjVWH1Qb2pfnd-aHmh1wTntC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/g7zjVWH1Qb2pfnd-aHmh1wTntC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 13:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:20:fc:85:ed:ff:d3:00:58:ca:26:45:a0:a3:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83bce35561f541bda97e777e6879a1d704e7b42f
Validity
Not Before: Mar 29 13:01:11 2026 GMT
Not After : Mar 30 13:01:11 2026 GMT
Subject: CN=4e3e3675ea444e1ae95aa711a46e175420e98fa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:24:2b:25:2c:c0:af:04:5d:4c:84:36:1e:6e:
27:8f:bc:4e:0a:52:18:a0:49:80:d1:2e:de:cb:f5:
1b:56:5b:24:68:eb:d5:57:f0:f4:23:42:06:58:a7:
29:df:51:35:98:30:53:2f:75:aa:5c:d6:0a:bf:ce:
77:12:ac:6f:8a:77:1b:b5:57:1c:11:56:a0:42:97:
5a:b9:8b:96:c2:88:aa:c3:9b:91:e3:90:bc:c8:96:
9c:47:83:b1:fe:8a:e1:b6:6b:29:15:2d:79:56:c1:
68:07:4d:5d:54:05:26:30:17:22:3e:d4:76:a7:6f:
11:cf:7c:90:a9:5b:fc:e1:23:b1:63:9f:a2:07:02:
0d:e2:31:19:83:a9:b8:64:cd:27:51:1d:64:40:1f:
78:ce:c1:53:7a:38:71:e4:52:e8:1f:67:40:4e:11:
83:e9:f9:ec:9c:5d:ef:6b:c5:c9:88:13:b2:3c:28:
5a:8b:ed:f7:d8:3b:83:84:4f:4f:56:da:e6:4b:d9:
3e:98:aa:e8:0e:2a:43:37:71:8f:8d:39:0a:7a:a8:
37:56:10:80:28:05:5a:d1:16:b7:be:a5:96:46:2e:
72:96:d7:ad:3e:76:10:94:36:b2:87:0e:1e:13:1c:
f1:f2:5d:85:b5:a5:77:26:d8:b1:46:25:8d:a4:18:
67:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:3E:36:75:EA:44:4E:1A:E9:5A:A7:11:A4:6E:17:54:20:E9:8F:A8
X509v3 Authority Key Identifier:
keyid:83:BC:E3:55:61:F5:41:BD:A9:7E:77:7E:68:79:A1:D7:04:E7:B4:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g7zjVWH1Qb2pfnd-aHmh1wTntC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/35064b-7a5a-4c74-8743-fd8660c4fd6e/1/g7zjVWH1Qb2pfnd-aHmh1wTntC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/35064b-7a5a-4c74-8743-fd8660c4fd6e/1/g7zjVWH1Qb2pfnd-aHmh1wTntC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:8b:11:af:8e:ec:a3:87:0b:0b:df:c4:06:a3:e5:58:4a:66:
72:bb:16:a4:5e:aa:99:f2:60:35:00:86:c4:d2:66:ae:71:b6:
92:30:48:71:8b:88:8b:ee:d1:c7:e9:97:9e:40:9d:c5:ad:4f:
85:a0:58:4d:0b:8a:45:1f:a0:59:ff:ea:d7:d8:c9:3f:4b:0b:
a7:e2:e4:72:d7:80:4f:04:fb:57:77:a8:5f:2e:66:54:04:f6:
f8:e1:b3:8e:de:5d:26:36:5a:40:4d:22:30:fb:2c:a6:be:20:
a3:13:b1:6c:d2:c9:f1:3e:a8:17:43:fd:6e:87:2c:3b:f5:85:
4e:51:a5:80:d8:a2:1f:af:2a:e7:93:20:35:0e:5e:e0:ce:70:
e0:62:8c:5a:57:13:54:9a:95:af:c8:58:9b:61:d3:d1:45:c7:
c6:30:cd:9b:7e:4c:12:a0:6e:46:33:89:5b:2c:cf:5a:51:69:
56:6e:2f:96:b8:81:f0:e3:48:7e:42:1f:5e:3a:27:47:18:0d:
31:69:c0:05:84:7e:dd:69:93:dd:e7:46:f8:be:dd:4f:f8:25:
d3:a9:b6:37:bb:20:96:c2:99:7b:44:8a:6a:9f:7d:f2:e2:ac:
82:c2:8d:24:6a:ff:f5:1b:d4:7d:84:65:6e:a0:e1:c7:b3:6f:
ad:03:10:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05ryD8he3/0wBYyiZFoKOZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzYmNlMzU1NjFmNTQxYmRhOTdlNzc3ZTY4NzlhMWQ3MDRl
N2I0MmYwHhcNMjYwMzI5MTMwMTExWhcNMjYwMzMwMTMwMTExWjAzMTEwLwYDVQQD
Eyg0ZTNlMzY3NWVhNDQ0ZTFhZTk1YWE3MTFhNDZlMTc1NDIwZTk4ZmE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5yQrJSzArwRdTIQ2Hm4nj7xOClIY
oEmA0S7ey/UbVlskaOvVV/D0I0IGWKcp31E1mDBTL3WqXNYKv853EqxvincbtVcc
EVagQpdauYuWwoiqw5uR45C8yJacR4Ox/orhtmspFS15VsFoB01dVAUmMBciPtR2
p28Rz3yQqVv84SOxY5+iBwIN4jEZg6m4ZM0nUR1kQB94zsFTejhx5FLoH2dAThGD
6fnsnF3va8XJiBOyPChai+332DuDhE9PVtrmS9k+mKroDipDN3GPjTkKeqg3VhCA
KAVa0Ra3vqWWRi5yltetPnYQlDayhw4eExzx8l2FtaV3JtixRiWNpBhn/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE4+NnXqRE4a6VqnEaRuF1Qg6Y+oMB8GA1UdIwQY
MBaAFIO841Vh9UG9qX53fmh5odcE57QvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzd6alZXSDFRYjJwZm5kLWFIbWgxd1RudEM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8zNTA2NGItN2E1YS00Yzc0LTg3NDMt
ZmQ4NjYwYzRmZDZlLzEvZzd6alZXSDFRYjJwZm5kLWFIbWgxd1RudEM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS8zNTA2NGItN2E1YS00Yzc0LTg3NDMtZmQ4NjYwYzRmZDZl
LzEvZzd6alZXSDFRYjJwZm5kLWFIbWgxd1RudEM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKIsRr47s
o4cLC9/EBqPlWEpmcrsWpF6qmfJgNQCGxNJmrnG2kjBIcYuIi+7Rx+mXnkCdxa1P
haBYTQuKRR+gWf/q19jJP0sLp+LkcteATwT7V3eoXy5mVAT2+OGzjt5dJjZaQE0i
MPsspr4goxOxbNLJ8T6oF0P9bocsO/WFTlGlgNiiH68q55MgNQ5e4M5w4GKMWlcT
VJqVr8hYm2HT0UXHxjDNm35MEqBuRjOJWyzPWlFpVm4vlriB8ONIfkIfXjonRxgN
MWnABYR+3WmT3edG+L7dT/gl06m2N7sglsKZe0SKap998uKsgsKNJGr/9RvUfYRl
bqDhx7NvrQMQEw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 21:10:40 2026 by rpki-client