Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/463686-ce48-487c-bc3d-a2f59eae86d0/1/g4heOKx3ysBEgptTyzslq-Yen2Q.mft
File: g4heOKx3ysBEgptTyzslq-Yen2Q.mft (raw, json)
Hash identifier: JJqsG5bZjI0u6mbcltqiUqcj3XpaSWKHnWrrYan4/SY=
Subject key identifier: 12:BE:98:F3:DB:A5:0E:6D:75:84:25:77:07:80:61:A0:9C:22:15:D0
Authority key identifier: 83:88:5E:38:AC:77:CA:C0:44:82:9B:53:CB:3B:25:AB:E6:1E:9F:64
Certificate issuer: /CN=83885e38ac77cac044829b53cb3b25abe61e9f64
Certificate serial: 019D37522A8FE4B0C8D94B2ABEBC4F2BE675
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g4heOKx3ysBEgptTyzslq-Yen2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/463686-ce48-487c-bc3d-a2f59eae86d0/1/g4heOKx3ysBEgptTyzslq-Yen2Q.mft
Manifest number: 08A1
Signing time: Sun 29 Mar 2026 02:00:24 +0000
Manifest this update: Sun 29 Mar 2026 02:00:24 +0000
Manifest next update: Mon 30 Mar 2026 02:00:24 +0000
Files and hashes: 1: g4heOKx3ysBEgptTyzslq-Yen2Q.crl (hash: PGCQMNlqbUeAm0t+PjbfMpKpjQL2l+reP8HkFPRh64g=)
2: uEbtYSs7oUq_8j5NRnUv73UK0pM.roa (hash: Poyt01XokZPztwUN5koWpemxrQ6OZRRxyOTp253pBsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/463686-ce48-487c-bc3d-a2f59eae86d0/1/g4heOKx3ysBEgptTyzslq-Yen2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/463686-ce48-487c-bc3d-a2f59eae86d0/1/g4heOKx3ysBEgptTyzslq-Yen2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/g4heOKx3ysBEgptTyzslq-Yen2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:2a:8f:e4:b0:c8:d9:4b:2a:be:bc:4f:2b:e6:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83885e38ac77cac044829b53cb3b25abe61e9f64
Validity
Not Before: Mar 29 02:00:24 2026 GMT
Not After : Mar 30 02:00:24 2026 GMT
Subject: CN=12be98f3dba50e6d75842577078061a09c2215d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:54:ee:52:c4:da:83:fd:f8:1d:0b:17:cd:f9:
91:de:1d:20:5b:36:0a:96:e8:e9:ee:81:ba:05:52:
27:df:56:b5:92:40:1e:94:ee:84:e6:89:c3:83:23:
32:39:bf:73:57:f0:70:c7:fb:2c:38:8e:a6:f7:0c:
a4:d7:08:a9:c5:17:3e:b7:0e:c2:13:bd:f3:bc:34:
f6:e2:7b:71:c0:b7:9c:55:c4:e8:6d:11:7a:e4:5b:
32:71:89:d7:ab:68:40:31:01:fe:e4:f1:f9:ec:72:
0e:69:7c:34:25:dd:6e:03:3b:bf:82:79:8d:72:51:
23:f5:ac:94:c5:50:e0:92:f8:e5:32:7d:4d:7d:16:
12:32:ba:fd:60:58:11:71:42:3a:ec:2d:fa:9a:d1:
8c:0d:fd:b3:ec:50:93:4e:f4:f0:84:e5:17:a9:92:
1a:64:bd:8c:e2:0b:08:5b:22:b9:43:de:f7:32:b4:
b0:0a:b5:a8:6d:44:a4:19:f6:1f:ca:65:ca:d2:c1:
74:01:9a:68:6d:dd:65:53:a8:bd:2a:6f:5e:39:a0:
62:47:79:93:67:be:de:bf:ee:ee:2d:9d:20:c8:0d:
a8:95:e6:1e:82:c2:e9:92:94:41:b2:30:3f:d8:ac:
24:50:f2:08:34:fa:2b:bb:45:14:56:dd:d7:9a:72:
41:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:BE:98:F3:DB:A5:0E:6D:75:84:25:77:07:80:61:A0:9C:22:15:D0
X509v3 Authority Key Identifier:
keyid:83:88:5E:38:AC:77:CA:C0:44:82:9B:53:CB:3B:25:AB:E6:1E:9F:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g4heOKx3ysBEgptTyzslq-Yen2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/463686-ce48-487c-bc3d-a2f59eae86d0/1/g4heOKx3ysBEgptTyzslq-Yen2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/463686-ce48-487c-bc3d-a2f59eae86d0/1/g4heOKx3ysBEgptTyzslq-Yen2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:43:07:ef:ad:2f:b5:46:a7:0a:8e:61:d8:05:69:71:a4:a9:
a1:8d:81:ec:d2:5a:87:af:a9:c0:53:64:77:83:ea:4c:92:e1:
7f:94:84:5b:cf:af:c8:63:54:a1:13:f7:52:8c:1b:ec:aa:be:
0a:44:c5:71:44:9e:a5:69:dc:f7:55:5a:63:4d:98:f4:08:5a:
80:3b:8f:46:1d:c0:09:f3:f6:d1:b6:62:fc:46:38:ec:98:84:
00:41:a6:c9:28:3f:34:8d:6d:dd:5c:db:1d:ff:56:03:e7:b2:
2b:35:8a:21:36:39:69:2a:c8:d1:9d:95:f4:7a:2e:2e:69:af:
43:84:e3:fd:6d:3f:53:e8:42:f5:6a:76:75:10:73:64:61:0a:
50:4d:2f:d0:85:89:b1:e6:98:e8:d2:5a:ff:3d:8d:23:76:74:
b2:eb:8d:17:c7:93:d7:33:d8:9f:b4:c7:43:45:bd:57:64:97:
fe:32:e3:6c:2c:8c:4b:7c:9f:f7:ce:3c:c1:fa:c4:5c:e5:12:
f8:69:c6:cd:b1:e0:bc:07:d0:04:67:7c:c7:35:6b:cf:9e:c9:
5d:0c:50:db:b4:04:bb:14:66:34:df:82:74:af:06:69:b2:d2:
fa:f7:14:b4:93:0a:ea:15:b3:41:e1:b4:a5:bd:fe:7a:98:38:
72:83:ca:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:44 2026 by rpki-client