Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/4b99b8-0657-4162-ab04-f572a0fce0ee/1/g8lm2l7q1QkFCRw7WZyaRAdHOdA.mft
File: g8lm2l7q1QkFCRw7WZyaRAdHOdA.mft (raw, json)
Hash identifier: ueGG/PpXczI1ah72Q8fsEHoy9bi9lcjWLpupiD+cdgo=
Subject key identifier: 1D:BE:64:AE:9E:C3:3B:F8:8A:94:1E:D7:86:F6:CD:00:27:DA:AD:73
Authority key identifier: 83:C9:66:DA:5E:EA:D5:09:05:09:1C:3B:59:9C:9A:44:07:47:39:D0
Certificate issuer: /CN=83c966da5eead50905091c3b599c9a44074739d0
Certificate serial: 019D3866848300B78222974F39D6F0D5595B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g8lm2l7q1QkFCRw7WZyaRAdHOdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/4b99b8-0657-4162-ab04-f572a0fce0ee/1/g8lm2l7q1QkFCRw7WZyaRAdHOdA.mft
Manifest number: 0E5B
Signing time: Sun 29 Mar 2026 07:02:15 +0000
Manifest this update: Sun 29 Mar 2026 07:02:15 +0000
Manifest next update: Mon 30 Mar 2026 07:02:15 +0000
Files and hashes: 1: g8lm2l7q1QkFCRw7WZyaRAdHOdA.crl (hash: 0mMIJ69qBwZzKFgdJMjOw/9ycwR8Y251LJfAFU1lVg4=)
2: tmAf1azkcGtUOtTbKWTp-7eeT4g.roa (hash: KoPapYw4h0I1GJjh8TmzzNsgwe+AZxyvTgeQhB0hejE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/4b99b8-0657-4162-ab04-f572a0fce0ee/1/g8lm2l7q1QkFCRw7WZyaRAdHOdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/4b99b8-0657-4162-ab04-f572a0fce0ee/1/g8lm2l7q1QkFCRw7WZyaRAdHOdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/g8lm2l7q1QkFCRw7WZyaRAdHOdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:84:83:00:b7:82:22:97:4f:39:d6:f0:d5:59:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83c966da5eead50905091c3b599c9a44074739d0
Validity
Not Before: Mar 29 07:02:15 2026 GMT
Not After : Mar 30 07:02:15 2026 GMT
Subject: CN=1dbe64ae9ec33bf88a941ed786f6cd0027daad73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:28:c2:af:d5:fc:2d:7f:ab:8e:a5:ae:da:e2:
20:5f:f5:82:91:c9:63:2c:87:7a:be:fa:b0:7b:b6:
83:a2:00:1f:c2:dc:e1:19:e4:e2:08:ba:d9:22:25:
3f:e9:62:9f:02:01:4d:79:7f:64:cc:a9:64:0a:fa:
f4:a8:b8:09:c1:27:22:48:9f:e4:41:82:ce:bd:82:
fd:aa:ad:c7:93:10:8c:ff:56:8f:a5:f9:ca:a9:ea:
8f:91:01:9e:2f:0d:bc:38:15:f5:7c:48:e3:8f:5a:
a4:3c:28:c4:dc:96:fc:d2:bb:80:9a:7b:a6:8b:7a:
0e:83:f6:7e:ae:d5:f7:cd:ce:c2:0d:26:26:1f:5c:
f8:5a:23:22:b6:c5:54:38:9a:cd:57:03:84:92:7f:
6a:12:5f:e4:1f:81:87:9c:68:16:7d:9c:81:40:28:
5a:e7:ef:cd:5c:86:72:e1:f8:64:ba:99:83:32:e8:
58:82:a7:38:de:db:8f:a9:ba:75:6e:63:17:44:c3:
ed:e8:78:fe:1b:44:1c:da:66:16:16:d3:36:44:63:
83:e9:5e:cb:fd:5d:3a:a4:ca:82:e8:40:78:c3:31:
33:d9:ee:30:13:40:25:76:3e:ef:fe:ca:b6:f6:e3:
60:b2:24:6c:fb:3e:0b:6c:ac:d4:e9:05:aa:41:6f:
ac:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:BE:64:AE:9E:C3:3B:F8:8A:94:1E:D7:86:F6:CD:00:27:DA:AD:73
X509v3 Authority Key Identifier:
keyid:83:C9:66:DA:5E:EA:D5:09:05:09:1C:3B:59:9C:9A:44:07:47:39:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g8lm2l7q1QkFCRw7WZyaRAdHOdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4b99b8-0657-4162-ab04-f572a0fce0ee/1/g8lm2l7q1QkFCRw7WZyaRAdHOdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4b99b8-0657-4162-ab04-f572a0fce0ee/1/g8lm2l7q1QkFCRw7WZyaRAdHOdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:3d:d4:ca:01:77:8a:1c:d7:e4:09:11:9f:9f:0c:db:93:03:
03:ef:8a:b6:54:f9:37:56:56:78:63:8b:02:1d:05:b8:cc:b6:
3a:66:68:15:c7:cf:cb:c7:83:79:b7:e3:a5:ba:2a:e3:00:38:
0f:49:c7:96:c7:5a:e3:1c:89:21:bd:66:54:df:48:1c:16:79:
ed:fa:dc:f1:f4:4f:6e:c4:60:11:d2:c3:a2:5f:58:8d:54:fe:
68:cb:b0:b5:1a:d9:49:dc:6e:94:5b:86:76:cf:8d:11:61:21:
a7:6d:32:63:1f:03:41:d0:5d:15:a4:ee:83:45:d2:b6:61:24:
27:b9:5c:d3:1a:64:d1:0c:2e:65:68:65:b9:89:7e:ef:c7:0b:
b1:a0:15:ab:ef:40:4e:71:93:51:89:94:1f:d1:57:10:34:52:
0d:7b:4a:d7:7a:56:e6:08:3c:30:2e:cb:d2:56:13:c3:fc:8d:
5e:8f:33:34:ba:1f:a8:36:0f:d7:e7:17:a7:ed:eb:cf:2a:4b:
d6:aa:f9:17:60:1c:15:c0:ad:9d:eb:ec:b7:b9:6f:af:44:4a:
cc:93:83:9a:ae:e6:ac:f8:91:3a:9c:5e:28:cf:9c:f4:75:3a:
92:27:85:6a:8b:48:04:b8:ea:87:95:7d:99:37:77:fc:d4:fa:
93:dc:a6:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:04:02 2026 by rpki-client