Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/ed3edb-d275-47c9-be7f-c4367592ae8a/1/g2RqtwYhSO24-ptgqDHIJA3KuAQ.mft
File: g2RqtwYhSO24-ptgqDHIJA3KuAQ.mft (raw, json)
Hash identifier: c+UIIumeZUQ3iCHDXu/kT6GfGB8s9BDrsmoSPEmLl4s=
Subject key identifier: 21:D2:79:61:24:14:01:E0:D4:FE:2A:D5:40:81:A5:4C:97:4D:5C:10
Authority key identifier: 83:64:6A:B7:06:21:48:ED:B8:FA:9B:60:A8:31:C8:24:0D:CA:B8:04
Certificate issuer: /CN=83646ab7062148edb8fa9b60a831c8240dcab804
Certificate serial: 019D3977CC49EA5BF1FFD0CD5BBB5D8AF25B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2RqtwYhSO24-ptgqDHIJA3KuAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/ed3edb-d275-47c9-be7f-c4367592ae8a/1/g2RqtwYhSO24-ptgqDHIJA3KuAQ.mft
Manifest number: 0F66
Signing time: Sun 29 Mar 2026 12:00:45 +0000
Manifest this update: Sun 29 Mar 2026 12:00:45 +0000
Manifest next update: Mon 30 Mar 2026 12:00:45 +0000
Files and hashes: 1: 77kfN6wOfaolUHGNqDj3LGpTo5w.roa (hash: UKDV0ljQgSgXrQFAq0g5SC1urVlROAhWOWoTZWtshBw=)
2: g2RqtwYhSO24-ptgqDHIJA3KuAQ.crl (hash: dtnxwwYE6DzxbOnMsZI1x6/hZNxattcGifJ0B4WrljQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/ed3edb-d275-47c9-be7f-c4367592ae8a/1/g2RqtwYhSO24-ptgqDHIJA3KuAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/ed3edb-d275-47c9-be7f-c4367592ae8a/1/g2RqtwYhSO24-ptgqDHIJA3KuAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/g2RqtwYhSO24-ptgqDHIJA3KuAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:cc:49:ea:5b:f1:ff:d0:cd:5b:bb:5d:8a:f2:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83646ab7062148edb8fa9b60a831c8240dcab804
Validity
Not Before: Mar 29 12:00:45 2026 GMT
Not After : Mar 30 12:00:45 2026 GMT
Subject: CN=21d27961241401e0d4fe2ad54081a54c974d5c10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f6:f0:8b:9b:4e:49:d3:6c:1f:cb:e7:72:54:
37:bd:5b:27:55:01:20:e6:cc:ae:aa:21:51:28:e6:
22:32:92:49:50:a8:87:3f:9e:c4:7a:90:6e:e9:c6:
e2:2f:47:53:52:e1:63:0f:8a:87:0c:65:33:be:ce:
3d:0a:2b:48:a0:32:12:31:e2:c6:07:1a:c0:83:a6:
72:e0:0b:39:73:43:73:b3:96:24:20:e7:18:1b:8e:
43:6f:2c:7c:4d:b4:25:7a:e3:54:64:c6:a1:12:5f:
aa:eb:63:30:30:20:b0:d7:55:dc:6f:13:fd:c3:90:
32:1c:cc:fa:60:cb:0f:ff:e4:9b:f3:58:3b:17:9c:
3a:82:73:2d:83:0a:9f:9a:f9:ea:de:2a:9a:2d:b0:
75:08:a4:6d:28:26:24:59:20:11:ed:fc:f1:06:ed:
69:2c:98:b2:c7:a1:ed:21:c7:12:3f:f3:d1:07:fe:
12:b2:d4:48:3e:81:df:e1:0a:73:d6:75:03:bf:41:
c7:ef:5d:ff:d4:25:b3:46:47:0d:23:ca:0d:83:7a:
be:63:ac:dd:6b:43:53:c6:9f:8e:9e:1c:d1:71:a2:
1e:c6:b2:cd:91:cf:2d:34:e2:de:4b:7f:c3:e8:bb:
31:7e:47:ad:d5:5d:69:ff:b1:84:13:f2:41:0b:37:
82:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:D2:79:61:24:14:01:E0:D4:FE:2A:D5:40:81:A5:4C:97:4D:5C:10
X509v3 Authority Key Identifier:
keyid:83:64:6A:B7:06:21:48:ED:B8:FA:9B:60:A8:31:C8:24:0D:CA:B8:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2RqtwYhSO24-ptgqDHIJA3KuAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/ed3edb-d275-47c9-be7f-c4367592ae8a/1/g2RqtwYhSO24-ptgqDHIJA3KuAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/ed3edb-d275-47c9-be7f-c4367592ae8a/1/g2RqtwYhSO24-ptgqDHIJA3KuAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:7f:3b:da:2b:ae:26:e3:82:c9:c8:10:4a:0a:e3:0f:55:25:
ab:f0:21:17:8c:88:10:17:23:c9:0c:43:86:6e:f0:af:16:2d:
40:83:26:0a:e0:57:fa:71:54:aa:eb:d5:bd:39:46:90:9c:82:
d5:66:b9:21:ce:a7:77:12:61:a8:1c:78:13:2d:24:80:be:74:
eb:a7:42:7a:b5:2d:61:9d:e1:38:3e:f0:d9:ee:17:e6:6a:5d:
4d:fd:e1:73:26:5d:a4:b7:fb:1f:51:62:22:3d:e0:a9:88:8d:
c5:31:a3:7a:12:6f:46:44:79:e8:f6:75:6f:3a:f5:7f:0f:fd:
7e:d5:01:ba:74:6b:cb:ea:3b:c2:09:66:46:87:5c:66:48:d8:
1e:06:19:3a:67:75:32:f0:80:82:3e:3d:bc:02:5c:2b:80:c3:
9a:7d:a0:d7:b1:5a:a7:6c:5d:05:c6:d2:b3:01:21:b3:c2:16:
89:b6:16:18:5e:fa:16:e2:e3:aa:fe:5b:fe:e1:a6:bf:a7:6a:
e1:ad:4f:6d:79:cd:3a:87:bb:8d:0e:6e:4c:1d:e0:01:f8:4e:
3f:a6:01:a4:8b:32:46:1b:88:c7:f7:c9:e9:3a:09:db:42:9e:
2d:d2:8f:fa:20:79:fe:28:e6:a4:cc:51:35:40:80:34:bc:f9:
78:8c:09:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:26:06 2026 by rpki-client