Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.mft
File: g5DhBCut2I6W5jnqoK0CMofqUH8.mft (raw, json)
Hash identifier: +40iW5nbuYTWeR8FXUYRprv2wk1npubaNBK60C4wVIg=
Subject key identifier: 4D:9B:5A:DC:80:7F:0B:D3:B3:BE:0C:A1:44:B6:76:2E:80:B5:AA:82
Authority key identifier: 83:90:E1:04:2B:AD:D8:8E:96:E6:39:EA:A0:AD:02:32:87:EA:50:7F
Certificate issuer: /CN=8390e1042badd88e96e639eaa0ad023287ea507f
Certificate serial: 019F190CD7559D9062B51C73E0B04A8C332C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g5DhBCut2I6W5jnqoK0CMofqUH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.mft
Manifest number: 1987
Signing time: Tue 30 Jun 2026 15:01:39 +0000
Manifest this update: Tue 30 Jun 2026 15:01:39 +0000
Manifest next update: Wed 01 Jul 2026 15:01:39 +0000
Files and hashes: 1: Cms4_2kxSzeRcRSIA9wB43-LvT4.roa (hash: NlxgHVdUZqUs6S+kYTnLVRbbSz1aQACOBdzclkEtqQE=)
2: g5DhBCut2I6W5jnqoK0CMofqUH8.crl (hash: z7flKeb2pp4pnGZQhi+f8oRVy7Jt7IVw9mqqAcqdsn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/g5DhBCut2I6W5jnqoK0CMofqUH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:0c:d7:55:9d:90:62:b5:1c:73:e0:b0:4a:8c:33:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8390e1042badd88e96e639eaa0ad023287ea507f
Validity
Not Before: Jun 30 15:01:39 2026 GMT
Not After : Jul 1 15:01:39 2026 GMT
Subject: CN=4d9b5adc807f0bd3b3be0ca144b6762e80b5aa82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7f:dc:10:a4:9f:58:84:cd:3e:4b:07:90:53:
de:43:c3:11:05:13:ae:fb:6e:b1:4e:f9:82:79:90:
eb:9d:bd:d6:9f:98:de:36:0b:5d:fc:d5:0b:83:1c:
ad:04:30:db:12:fd:50:1c:b8:14:c0:5a:20:4b:6a:
3c:f6:79:3f:5d:1b:c0:78:4c:e2:02:6e:5f:d0:ce:
16:a9:32:b3:d4:5c:3b:42:9c:0a:3e:91:48:72:70:
14:7c:35:28:f2:17:db:07:10:bd:90:df:aa:24:68:
26:7d:3a:66:58:4d:35:50:12:70:ad:88:52:9f:9c:
41:21:44:e8:a7:75:37:7f:28:30:4e:4e:49:59:3a:
18:fd:53:67:b7:86:86:13:98:4e:0a:00:a0:00:4a:
51:f4:61:5d:98:d7:52:73:c6:0f:aa:b5:f4:5f:aa:
ee:cf:05:f5:2b:29:47:1a:db:6d:67:80:34:fe:e9:
3b:c2:0c:84:88:29:4c:5c:ac:16:d5:8a:ad:d6:ff:
98:b2:bd:97:27:3c:56:d1:c2:a6:39:9b:9c:27:35:
bc:fd:2a:1e:34:de:eb:95:26:0d:f6:b6:17:c3:c4:
1b:ca:c6:a4:0c:c2:36:a7:42:33:c3:07:e6:b3:0e:
83:b3:be:c3:0e:3f:9d:2b:2c:b9:5c:a7:3b:ce:14:
9e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:9B:5A:DC:80:7F:0B:D3:B3:BE:0C:A1:44:B6:76:2E:80:B5:AA:82
X509v3 Authority Key Identifier:
keyid:83:90:E1:04:2B:AD:D8:8E:96:E6:39:EA:A0:AD:02:32:87:EA:50:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5DhBCut2I6W5jnqoK0CMofqUH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:a0:38:46:bd:ca:55:1f:e0:7a:59:f7:eb:d0:c4:2b:85:2a:
5c:91:9b:2a:64:5f:14:94:b1:c8:e9:ed:85:e2:bc:58:85:ca:
3a:19:75:31:79:97:0b:c9:e3:b5:96:70:75:e2:73:65:56:77:
73:96:64:e0:60:a5:84:d2:af:6f:c4:f8:c4:6e:9a:ca:8d:c0:
2b:ad:fa:47:7c:9e:47:8d:3a:b6:4c:7f:25:3f:45:99:d1:f7:
c7:9b:5a:57:f6:a9:35:25:49:13:5f:59:a4:82:0d:ae:d3:f5:
fd:b2:62:a2:ef:29:6a:4b:b7:d3:47:2b:d1:c2:9f:f9:16:2e:
c1:75:a4:80:55:74:6e:c7:76:01:2e:fc:2f:73:8f:7c:be:57:
2e:41:62:5e:aa:8f:f3:0a:89:74:e8:45:6e:e7:a6:4c:89:da:
78:2c:74:54:92:f6:09:c5:f3:7e:95:5c:b2:ec:b3:f2:68:71:
f3:02:f3:3c:23:c6:3b:8a:6c:44:c1:cd:64:ce:d9:69:4a:a6:
83:60:51:c9:99:6d:23:ee:74:e2:3a:25:8b:1a:b1:39:81:8d:
f3:98:d0:b0:8f:f5:24:3c:1c:0a:1f:3d:c9:d4:3e:26:0d:3b:
4d:25:56:2d:ef:d6:1c:4d:ca:0b:f8:77:2a:46:b8:3e:d6:54:
55:74:d1:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:42:32 2026 by rpki-client