Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.mft
File: g5DhBCut2I6W5jnqoK0CMofqUH8.mft (raw, json)
Hash identifier: HCqv+yyGmVgnvryTuY33DEq4wD6JAm90a71IVoFMcg8=
Subject key identifier: 2A:38:9D:54:79:29:10:FF:4B:31:80:C7:F9:C3:A0:35:5D:8F:13:A8
Authority key identifier: 83:90:E1:04:2B:AD:D8:8E:96:E6:39:EA:A0:AD:02:32:87:EA:50:7F
Certificate issuer: /CN=8390e1042badd88e96e639eaa0ad023287ea507f
Certificate serial: 01A13D80EC9E75AA3C90E0D17EE5AF503131
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g5DhBCut2I6W5jnqoK0CMofqUH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.mft
Manifest number: 1AA3
Signing time: Thu 15 Oct 2026 03:00:21 +0000
Manifest this update: Thu 15 Oct 2026 03:00:21 +0000
Manifest next update: Fri 16 Oct 2026 03:00:21 +0000
Files and hashes: 1: Cms4_2kxSzeRcRSIA9wB43-LvT4.roa (hash: NlxgHVdUZqUs6S+kYTnLVRbbSz1aQACOBdzclkEtqQE=)
2: g5DhBCut2I6W5jnqoK0CMofqUH8.crl (hash: ND4tmo3mU5bgyNZaDjPYJtrouys995iT0t3fFx4fzQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/g5DhBCut2I6W5jnqoK0CMofqUH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 03:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:80:ec:9e:75:aa:3c:90:e0:d1:7e:e5:af:50:31:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8390e1042badd88e96e639eaa0ad023287ea507f
Validity
Not Before: Oct 15 03:00:21 2026 GMT
Not After : Oct 16 03:00:21 2026 GMT
Subject: CN=2a389d54792910ff4b3180c7f9c3a0355d8f13a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c6:a1:77:30:8e:be:c5:c5:70:01:3c:d6:a3:
55:ba:75:7f:9e:45:65:7b:ee:1c:b3:06:59:e8:69:
c1:a6:7d:f7:5d:ac:4b:04:ed:a6:36:f2:c2:5f:d4:
c3:31:17:05:28:94:a0:c3:29:94:ca:bd:39:ab:32:
8a:21:3e:55:b6:31:8a:33:31:e1:58:fd:84:60:c1:
62:2d:39:90:6b:1d:e8:c9:1e:e2:6f:33:b0:b6:06:
38:3b:26:36:3a:ee:bc:ac:bc:97:8c:98:55:4f:aa:
be:8d:9a:f1:9d:22:38:7f:f9:aa:fb:e9:7f:e1:b0:
e5:18:ca:9e:27:29:4f:0b:70:97:ff:82:8b:c9:1c:
44:6f:91:7e:90:00:d8:f4:d8:3c:dd:e9:bf:24:aa:
7d:df:b6:e1:bc:2a:50:6f:aa:bc:8e:57:d7:d4:79:
89:68:65:77:88:b8:55:7c:54:d2:2b:81:a2:56:ac:
01:d5:34:5e:0c:02:e7:e8:87:39:88:06:6e:67:2b:
59:5e:a6:29:45:34:fd:ef:60:98:47:6d:ae:e9:f4:
fb:fa:e1:2a:db:44:12:6e:cb:5f:63:73:8d:00:43:
a9:cc:e6:02:53:7e:0e:8f:07:52:89:4c:04:68:06:
aa:ed:f1:bc:84:c5:74:55:72:48:d7:96:b0:99:6e:
00:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:38:9D:54:79:29:10:FF:4B:31:80:C7:F9:C3:A0:35:5D:8F:13:A8
X509v3 Authority Key Identifier:
keyid:83:90:E1:04:2B:AD:D8:8E:96:E6:39:EA:A0:AD:02:32:87:EA:50:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5DhBCut2I6W5jnqoK0CMofqUH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:a2:52:52:cc:2d:d3:cd:b1:5e:16:01:b8:48:34:74:22:54:
ed:f8:bf:2c:dd:d0:d4:25:71:7f:88:9c:0e:7b:bb:1d:4e:b0:
e9:ae:a1:44:a0:9d:21:ab:be:3d:2c:74:08:96:38:2e:4d:99:
ec:e7:a1:4c:6e:d3:17:de:6c:3d:5a:d5:c2:ba:4c:1d:2d:84:
0a:a5:1b:41:37:04:f1:d2:2e:c3:b3:f4:a1:fb:e4:98:a8:5d:
52:77:b9:94:40:8d:2e:81:7b:03:0d:f9:a4:04:a3:64:c5:66:
2c:42:91:35:20:83:b0:1b:91:a7:31:99:9a:37:2a:d1:18:6a:
46:d9:0e:3b:b6:13:ce:f6:04:fd:ca:73:4d:e6:a4:d6:90:da:
3b:87:d6:3a:cb:55:53:8f:de:ca:51:0d:0d:3e:e6:cb:e2:38:
3e:d5:1f:86:ad:40:6f:98:cb:1c:c9:67:8c:48:de:58:4a:ea:
a8:35:23:ed:72:63:5b:5a:ba:84:ca:23:7f:e8:66:2b:f4:d0:
79:69:ae:c0:2d:21:6c:a9:f1:cb:f4:97:63:18:c2:67:8a:d3:
9a:59:1f:70:06:13:b8:b0:31:ca:72:2e:65:d2:06:81:2d:a5:
91:99:86:3a:94:d0:cc:ff:8f:ac:8e:4e:5d:bf:11:c7:80:7c:
e8:ab:8f:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:34:21 2026 by rpki-client