Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/85/b2eaa8-898b-4f33-afb9-89267e528009/1/g0VE4aPiKMTTZH9iqdjJas6eLDE.mft
File: g0VE4aPiKMTTZH9iqdjJas6eLDE.mft (raw, json)
Hash identifier: gLAOcaDTaQRrG9oI5t5aQ7gE/ZH9/qY8pLip8Hcagqk=
Subject key identifier: 2E:42:45:80:43:4B:CB:EF:7F:5C:7C:44:22:AA:50:35:C9:0C:71:67
Authority key identifier: 83:45:44:E1:A3:E2:28:C4:D3:64:7F:62:A9:D8:C9:6A:CE:9E:2C:31
Certificate issuer: /CN=834544e1a3e228c4d3647f62a9d8c96ace9e2c31
Certificate serial: 01A197331FBDE66CC5C8148AF7A70EC12111
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g0VE4aPiKMTTZH9iqdjJas6eLDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/b2eaa8-898b-4f33-afb9-89267e528009/1/g0VE4aPiKMTTZH9iqdjJas6eLDE.mft
Manifest number: 046F
Signing time: Sun 01 Nov 2026 13:01:12 +0000
Manifest this update: Sun 01 Nov 2026 13:01:12 +0000
Manifest next update: Mon 02 Nov 2026 13:01:12 +0000
Files and hashes: 1: Zvz4ZZe8TirGDr5YK1DXs7yV6ko.roa (hash: IZffctFNRu2D4ovNLuJ8QUvA9BXb4VzlfLdGt6txidc=)
2: g0VE4aPiKMTTZH9iqdjJas6eLDE.crl (hash: wOnBlysuG8T6EUattMl09oq7YchWUfoxgmktGCK6Q14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/b2eaa8-898b-4f33-afb9-89267e528009/1/g0VE4aPiKMTTZH9iqdjJas6eLDE.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/b2eaa8-898b-4f33-afb9-89267e528009/1/g0VE4aPiKMTTZH9iqdjJas6eLDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/g0VE4aPiKMTTZH9iqdjJas6eLDE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 13:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:97:33:1f:bd:e6:6c:c5:c8:14:8a:f7:a7:0e:c1:21:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=834544e1a3e228c4d3647f62a9d8c96ace9e2c31
Validity
Not Before: Nov 1 13:01:12 2026 GMT
Not After : Nov 2 13:01:12 2026 GMT
Subject: CN=2e424580434bcbef7f5c7c4422aa5035c90c7167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f8:e2:78:e2:25:fb:9c:1f:24:0d:1e:c3:fc:
ba:26:5f:21:e7:af:90:5d:b8:e3:3d:0a:e8:90:f8:
90:85:9e:66:a5:5e:59:4a:11:91:13:41:c7:c3:ad:
9d:18:f3:e5:87:b4:ec:75:7b:14:1e:05:ce:89:94:
2b:84:97:67:11:49:6e:64:7e:fe:f1:f0:6a:4e:20:
eb:dc:e3:38:07:e7:ba:b2:ea:fd:01:3f:12:aa:94:
92:c8:ae:d7:03:3d:35:42:b1:03:c0:ee:27:b2:af:
d9:d6:83:cf:4a:a7:7b:4d:68:27:00:5f:d7:92:77:
0d:19:4a:df:1e:91:51:71:98:00:4d:c5:ef:b4:ae:
80:61:27:68:aa:81:b0:5c:21:e3:c1:5e:cf:4c:f7:
10:3b:6d:54:0f:7d:2b:2a:89:ab:40:5c:5d:7c:d8:
5f:74:64:ae:67:87:e6:11:19:b5:72:60:51:4f:f9:
d8:72:55:7c:b7:97:33:c9:f0:fb:0a:c7:fe:a5:a6:
6a:98:4c:f2:36:c6:f3:d0:51:f4:9c:44:ad:81:95:
b7:fc:1d:5c:3b:61:0f:10:86:fe:eb:1a:6d:b7:31:
47:51:d3:8f:71:3d:4d:c5:31:39:97:8d:c4:f9:88:
61:07:e4:53:8c:83:47:cb:8b:39:73:4f:b0:11:09:
f2:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:42:45:80:43:4B:CB:EF:7F:5C:7C:44:22:AA:50:35:C9:0C:71:67
X509v3 Authority Key Identifier:
keyid:83:45:44:E1:A3:E2:28:C4:D3:64:7F:62:A9:D8:C9:6A:CE:9E:2C:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0VE4aPiKMTTZH9iqdjJas6eLDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b2eaa8-898b-4f33-afb9-89267e528009/1/g0VE4aPiKMTTZH9iqdjJas6eLDE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b2eaa8-898b-4f33-afb9-89267e528009/1/g0VE4aPiKMTTZH9iqdjJas6eLDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:cb:bc:30:c3:16:7e:1b:11:81:ef:81:f0:b9:44:da:4d:2e:
a2:4d:a6:8b:d9:bb:6b:93:59:db:36:81:d2:35:40:47:fd:0d:
65:48:f0:9b:45:ec:6c:88:bd:1d:42:65:ae:fc:cd:85:f4:36:
19:81:e9:fe:87:7b:2e:07:31:29:52:76:7d:0f:cb:75:56:d5:
97:bc:00:83:cc:a4:f2:36:53:09:ba:43:9e:20:93:98:fc:76:
3f:a3:86:b9:3b:93:2f:c5:89:d2:9f:a3:dc:3a:cc:ba:4a:7b:
9b:6b:d7:c9:87:94:4e:cd:44:09:a3:09:9d:85:23:33:f3:c9:
16:51:b9:7c:82:d9:af:90:63:ec:ff:75:2b:7b:9d:c5:92:05:
c1:41:d3:a9:97:5b:2d:9c:c6:3a:75:09:99:15:bc:93:57:bf:
17:b1:b4:9b:0f:47:b0:a9:5c:3a:5d:00:94:e0:3a:bd:85:38:
67:dd:60:69:72:64:ef:a0:49:2c:fc:0c:ec:9d:69:1a:dd:1f:
48:ae:2c:80:f4:00:86:eb:98:3f:30:be:9b:e9:ea:69:e8:7a:
f9:98:af:c8:4f:ef:72:69:ec:5e:0f:46:49:3e:2f:b6:6b:10:
d9:0c:89:38:a6:3e:d1:22:db:e4:8d:67:fe:ce:18:99:67:41:
d4:96:c4:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 19:41:48 2026 by rpki-client