Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/0c4b16-6b94-4080-9165-b853567da0ea/1/g47DlCgT0_NTbBJ-GoIb--9tsqQ.mft
File: g47DlCgT0_NTbBJ-GoIb--9tsqQ.mft (raw, json)
Hash identifier: 0oHS9CPldqUlXKsDG/Ag77BJNg2OBtrmmbvxgug1myA=
Subject key identifier: 97:CB:D3:D8:18:9E:ED:2B:33:F7:6D:B9:A7:1C:99:C8:94:D8:AF:E5
Authority key identifier: 83:8E:C3:94:28:13:D3:F3:53:6C:12:7E:1A:82:1B:FB:EF:6D:B2:A4
Certificate issuer: /CN=838ec3942813d3f3536c127e1a821bfbef6db2a4
Certificate serial: 019D39AE560D04D4D6D81448DF3981F047DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g47DlCgT0_NTbBJ-GoIb--9tsqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/0c4b16-6b94-4080-9165-b853567da0ea/1/g47DlCgT0_NTbBJ-GoIb--9tsqQ.mft
Manifest number: 13A8
Signing time: Sun 29 Mar 2026 13:00:19 +0000
Manifest this update: Sun 29 Mar 2026 13:00:19 +0000
Manifest next update: Mon 30 Mar 2026 13:00:19 +0000
Files and hashes: 1: g47DlCgT0_NTbBJ-GoIb--9tsqQ.crl (hash: 8fXOmbOwoZHzHnYZXJc8iSrNK42Qex+97d0Vu3tYDpc=)
2: zJ9YO7uI6W1Gq5hqe_FdpaKHEOs.roa (hash: wHDNKsjqy6w/5WpMFtLcJHbUM6e7hIDnbt9VTy3GjT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/0c4b16-6b94-4080-9165-b853567da0ea/1/g47DlCgT0_NTbBJ-GoIb--9tsqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/0c4b16-6b94-4080-9165-b853567da0ea/1/g47DlCgT0_NTbBJ-GoIb--9tsqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/g47DlCgT0_NTbBJ-GoIb--9tsqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 13:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:56:0d:04:d4:d6:d8:14:48:df:39:81:f0:47:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=838ec3942813d3f3536c127e1a821bfbef6db2a4
Validity
Not Before: Mar 29 13:00:19 2026 GMT
Not After : Mar 30 13:00:19 2026 GMT
Subject: CN=97cbd3d8189eed2b33f76db9a71c99c894d8afe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:21:83:0f:c2:69:b2:60:8e:ce:59:de:52:0d:
31:b4:cf:2b:31:f7:20:b2:b2:6f:75:45:c7:e1:77:
7d:e4:b8:3c:ec:77:49:4c:d1:65:6f:7b:79:12:83:
29:21:83:d5:e0:9b:60:d7:35:eb:3c:81:15:77:b0:
db:81:46:55:19:fb:77:4a:bc:d5:05:b1:84:c1:43:
dd:db:0f:c9:24:70:02:44:00:f8:91:f2:61:8b:9e:
e4:08:8c:16:8f:bf:73:a9:cd:44:d3:96:79:53:6b:
d1:af:07:95:ca:bc:a3:a6:be:c9:bb:08:aa:1b:96:
67:42:91:33:8f:24:c8:94:e0:26:cd:42:d6:4c:3b:
33:db:6d:14:de:3f:f1:dd:e1:68:b4:39:db:cf:9a:
5c:86:4a:86:7f:92:99:19:38:99:ba:4d:5a:52:7d:
a3:1e:1a:75:ca:6a:2e:9c:54:18:9d:ee:d8:c7:cd:
5a:c2:8a:ad:18:8e:11:66:52:43:b1:2a:4f:37:f0:
62:bc:bb:59:75:2e:4d:02:9c:5e:dc:8d:60:5c:61:
d2:3e:7f:fb:c6:60:ed:ca:48:6c:ff:4a:84:16:63:
4e:99:2c:c7:95:67:17:28:f2:15:b9:18:d3:22:95:
d2:5d:6c:5f:aa:ac:86:d5:37:12:64:5e:d8:5a:95:
c3:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:CB:D3:D8:18:9E:ED:2B:33:F7:6D:B9:A7:1C:99:C8:94:D8:AF:E5
X509v3 Authority Key Identifier:
keyid:83:8E:C3:94:28:13:D3:F3:53:6C:12:7E:1A:82:1B:FB:EF:6D:B2:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g47DlCgT0_NTbBJ-GoIb--9tsqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/0c4b16-6b94-4080-9165-b853567da0ea/1/g47DlCgT0_NTbBJ-GoIb--9tsqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/0c4b16-6b94-4080-9165-b853567da0ea/1/g47DlCgT0_NTbBJ-GoIb--9tsqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:98:a6:8e:aa:b3:be:39:69:23:0b:71:eb:7b:80:fc:05:ec:
6f:89:34:07:4a:5e:fe:11:0b:7e:61:de:c8:d4:17:ec:77:70:
9b:9c:f8:a5:92:e5:dd:8e:73:ed:d9:be:b6:2b:bf:f6:90:2b:
d7:b9:16:b9:d8:17:73:3c:0b:a8:b0:f6:c3:fd:4e:c0:32:0b:
e6:16:cd:12:6c:83:b9:12:fa:9c:e4:cb:a8:94:a7:26:f1:52:
c5:e3:aa:4f:ab:40:20:a8:cc:d0:f4:31:43:f2:b5:96:d7:b6:
9b:b3:cf:e3:10:ce:b7:fa:b6:64:16:57:38:fb:1d:a7:0d:95:
2a:7f:aa:be:98:f6:bf:db:2e:e7:8f:60:b2:06:f1:94:db:9c:
4a:37:aa:22:75:f7:52:a4:b2:76:83:d6:b9:ef:a9:14:ca:43:
7b:5d:56:fa:30:be:1f:14:d9:e2:ab:fe:5c:f0:5c:2b:36:47:
36:c1:61:53:37:e4:b3:6d:f6:6f:4c:e0:da:d6:d2:9e:37:a3:
db:48:69:4a:a6:e0:1c:61:90:da:17:8d:2d:df:f3:32:b9:80:
30:87:86:5a:ba:74:8f:ec:30:44:50:39:8a:6f:a3:74:24:4a:
3d:c3:ae:b7:6a:14:df:30:2a:02:a1:2c:60:59:67:2d:1e:44:
97:06:a3:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05rlYNBNTW2BRI3zmB8EffMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzOGVjMzk0MjgxM2QzZjM1MzZjMTI3ZTFhODIxYmZiZWY2
ZGIyYTQwHhcNMjYwMzI5MTMwMDE5WhcNMjYwMzMwMTMwMDE5WjAzMTEwLwYDVQQD
Eyg5N2NiZDNkODE4OWVlZDJiMzNmNzZkYjlhNzFjOTljODk0ZDhhZmU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlCGDD8JpsmCOzlneUg0xtM8rMfcg
srJvdUXH4Xd95Lg87HdJTNFlb3t5EoMpIYPV4Jtg1zXrPIEVd7DbgUZVGft3SrzV
BbGEwUPd2w/JJHACRAD4kfJhi57kCIwWj79zqc1E05Z5U2vRrweVyryjpr7Juwiq
G5ZnQpEzjyTIlOAmzULWTDsz220U3j/x3eFotDnbz5pchkqGf5KZGTiZuk1aUn2j
Hhp1ymounFQYne7Yx81awoqtGI4RZlJDsSpPN/BivLtZdS5NApxe3I1gXGHSPn/7
xmDtykhs/0qEFmNOmSzHlWcXKPIVuRjTIpXSXWxfqqyG1TcSZF7YWpXD9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJfL09gYnu0rM/dtuaccmciU2K/lMB8GA1UdIwQY
MBaAFIOOw5QoE9PzU2wSfhqCG/vvbbKkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzQ3RGxDZ1QwX05UYkJKLUdvSWItLTl0c3FRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8wYzRiMTYtNmI5NC00MDgwLTkxNjUt
Yjg1MzU2N2RhMGVhLzEvZzQ3RGxDZ1QwX05UYkJKLUdvSWItLTl0c3FRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC8wYzRiMTYtNmI5NC00MDgwLTkxNjUtYjg1MzU2N2RhMGVh
LzEvZzQ3RGxDZ1QwX05UYkJKLUdvSWItLTl0c3FRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlpimjqqz
vjlpIwtx63uA/AXsb4k0B0pe/hELfmHeyNQX7Hdwm5z4pZLl3Y5z7dm+tiu/9pAr
17kWudgXczwLqLD2w/1OwDIL5hbNEmyDuRL6nOTLqJSnJvFSxeOqT6tAIKjM0PQx
Q/K1lte2m7PP4xDOt/q2ZBZXOPsdpw2VKn+qvpj2v9su549gsgbxlNucSjeqInX3
UqSydoPWue+pFMpDe11W+jC+HxTZ4qv+XPBcKzZHNsFhUzfks232b0zg2tbSnjej
20hpSqbgHGGQ2heNLd/zMrmAMIeGWrp0j+wwRFA5im+jdCRKPcOut2oU3zAqAqEs
YFlnLR5ElwajZQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 21:15:38 2026 by rpki-client