Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/85/b2eaa8-898b-4f33-afb9-89267e528009/1/g0VE4aPiKMTTZH9iqdjJas6eLDE.mft
File: g0VE4aPiKMTTZH9iqdjJas6eLDE.mft (raw, json)
Hash identifier: q2qjlvo1Ut4aREFpfqvuufCUz8WMi5BeIzT7SMkVlp8=
Subject key identifier: 60:86:C8:65:97:96:1B:43:23:7B:9D:D4:4F:22:C0:06:40:A3:C2:99
Authority key identifier: 83:45:44:E1:A3:E2:28:C4:D3:64:7F:62:A9:D8:C9:6A:CE:9E:2C:31
Certificate issuer: /CN=834544e1a3e228c4d3647f62a9d8c96ace9e2c31
Certificate serial: 01A08EA00B69E050B2014C6631717D10ECA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g0VE4aPiKMTTZH9iqdjJas6eLDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/b2eaa8-898b-4f33-afb9-89267e528009/1/g0VE4aPiKMTTZH9iqdjJas6eLDE.mft
Manifest number: 03E6
Signing time: Fri 11 Sep 2026 04:00:48 +0000
Manifest this update: Fri 11 Sep 2026 04:00:48 +0000
Manifest next update: Sat 12 Sep 2026 04:00:48 +0000
Files and hashes: 1: Zvz4ZZe8TirGDr5YK1DXs7yV6ko.roa (hash: IZffctFNRu2D4ovNLuJ8QUvA9BXb4VzlfLdGt6txidc=)
2: g0VE4aPiKMTTZH9iqdjJas6eLDE.crl (hash: CB5xHYrxKoGDbZ1yEvfEg0HETFxNEefg+qcrlhBiMrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/b2eaa8-898b-4f33-afb9-89267e528009/1/g0VE4aPiKMTTZH9iqdjJas6eLDE.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/b2eaa8-898b-4f33-afb9-89267e528009/1/g0VE4aPiKMTTZH9iqdjJas6eLDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/g0VE4aPiKMTTZH9iqdjJas6eLDE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8e:a0:0b:69:e0:50:b2:01:4c:66:31:71:7d:10:ec:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=834544e1a3e228c4d3647f62a9d8c96ace9e2c31
Validity
Not Before: Sep 11 04:00:48 2026 GMT
Not After : Sep 12 04:00:48 2026 GMT
Subject: CN=6086c86597961b43237b9dd44f22c00640a3c299
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:2f:5e:98:19:1e:9d:2c:a6:fe:32:fe:50:5b:
79:6c:2b:e2:3e:c7:15:a9:69:8a:49:31:99:66:f4:
bf:db:5f:db:50:54:6d:e7:4e:90:d8:f9:44:82:8b:
b8:62:eb:fc:62:74:f6:62:b9:4f:b6:92:4c:a8:50:
a3:c4:f1:f0:02:d3:65:ce:de:6f:ae:6d:bd:2d:42:
0e:c1:88:de:43:35:8a:98:f9:b1:ac:e3:50:26:01:
d5:3e:71:a4:d8:17:a9:e2:ee:e9:7d:a3:88:e6:1a:
36:22:5f:31:27:3f:71:fd:bf:d9:e3:98:a3:7d:37:
c2:21:6f:cc:24:c6:36:fa:a5:db:72:22:2c:7b:19:
c9:39:9c:91:7a:ce:95:c9:60:1a:71:cb:cf:52:5f:
77:13:16:07:33:db:ed:0f:e7:c3:0f:7f:ba:0f:fe:
2d:79:ed:c6:75:a3:61:08:2c:8e:5d:27:f2:b8:70:
23:a1:05:ba:42:1d:e1:f0:ee:ac:82:5e:be:89:cb:
b0:81:9d:6a:ac:1b:fe:21:a6:6c:2d:ed:cd:e8:b7:
88:f4:fd:71:12:47:b9:b2:8b:03:70:b7:f9:3d:86:
4b:66:e7:8d:ba:aa:78:c1:e4:87:67:ef:76:86:13:
74:05:d8:30:4f:8b:b5:6b:5a:84:cb:cc:8d:ad:8c:
16:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:86:C8:65:97:96:1B:43:23:7B:9D:D4:4F:22:C0:06:40:A3:C2:99
X509v3 Authority Key Identifier:
keyid:83:45:44:E1:A3:E2:28:C4:D3:64:7F:62:A9:D8:C9:6A:CE:9E:2C:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0VE4aPiKMTTZH9iqdjJas6eLDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b2eaa8-898b-4f33-afb9-89267e528009/1/g0VE4aPiKMTTZH9iqdjJas6eLDE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b2eaa8-898b-4f33-afb9-89267e528009/1/g0VE4aPiKMTTZH9iqdjJas6eLDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:9d:86:56:5b:51:a0:1c:1f:4d:61:4b:5c:29:50:55:3f:84:
05:4b:ff:48:f1:48:a1:e3:05:07:83:3f:da:37:65:c7:45:c7:
b1:71:89:10:03:39:00:00:23:b4:cf:49:45:42:74:89:53:7c:
7e:25:1d:ae:fc:49:ad:d5:2d:a4:1e:05:f2:c9:69:1c:57:44:
d1:48:d9:00:8a:94:dd:4e:8a:2f:a9:29:50:9d:9b:d5:b2:1d:
56:d5:ab:ea:05:54:d6:04:49:5c:4b:64:7a:3c:ef:c1:c2:02:
b2:1f:b8:e5:fa:27:2d:cd:8b:10:d8:ee:30:74:df:f1:43:4b:
a6:13:d8:e0:06:af:4b:a9:fd:e0:6e:32:69:ef:d7:79:d7:42:
4c:cc:19:22:01:a2:31:4f:e4:cd:b6:da:66:28:06:52:af:c0:
74:36:4c:8c:71:05:f7:3f:d1:6b:eb:61:fc:98:92:90:b6:e2:
d6:39:19:f9:73:2d:46:0a:df:d6:d5:89:82:f3:b8:62:ce:59:
6e:88:02:26:7f:9f:d3:be:8f:c3:20:0e:f2:53:79:d8:66:93:
f6:07:45:31:f3:20:3d:cf:b3:60:6e:d6:69:5d:50:8e:7a:b0:
fa:5a:2e:26:b9:c4:4f:07:62:36:a8:e5:f2:28:f0:07:73:f1:
29:c5:49:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 06:50:38 2026 by rpki-client