Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/b2eaa8-898b-4f33-afb9-89267e528009/1/g0VE4aPiKMTTZH9iqdjJas6eLDE.mft
File: g0VE4aPiKMTTZH9iqdjJas6eLDE.mft (raw, json)
Hash identifier: lccNh1Le6urioRqGLAoXb3gOFVMxWK1F5Xvd6JPzyzA=
Subject key identifier: 39:0D:F9:0F:82:44:1B:1B:81:77:F7:CB:5A:57:91:5B:F1:3A:2D:94
Authority key identifier: 83:45:44:E1:A3:E2:28:C4:D3:64:7F:62:A9:D8:C9:6A:CE:9E:2C:31
Certificate issuer: /CN=834544e1a3e228c4d3647f62a9d8c96ace9e2c31
Certificate serial: 019DD019944931C17652565782153F92CA11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g0VE4aPiKMTTZH9iqdjJas6eLDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/b2eaa8-898b-4f33-afb9-89267e528009/1/g0VE4aPiKMTTZH9iqdjJas6eLDE.mft
Manifest number: 0279
Signing time: Mon 27 Apr 2026 18:00:30 +0000
Manifest this update: Mon 27 Apr 2026 18:00:30 +0000
Manifest next update: Tue 28 Apr 2026 18:00:30 +0000
Files and hashes: 1: g0VE4aPiKMTTZH9iqdjJas6eLDE.crl (hash: xRUJKpawgdl2GMK+yRfY8vVAMOpvqR9QF6JfOM9D53g=)
2: ibQR5d1f9YuNRleB1lEGG40hVjI.roa (hash: eJ7NUjjHSZG0K+6u15PytmHxHDBWRH5YWbs+72aktr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/b2eaa8-898b-4f33-afb9-89267e528009/1/g0VE4aPiKMTTZH9iqdjJas6eLDE.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/b2eaa8-898b-4f33-afb9-89267e528009/1/g0VE4aPiKMTTZH9iqdjJas6eLDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/g0VE4aPiKMTTZH9iqdjJas6eLDE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:19:94:49:31:c1:76:52:56:57:82:15:3f:92:ca:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=834544e1a3e228c4d3647f62a9d8c96ace9e2c31
Validity
Not Before: Apr 27 18:00:30 2026 GMT
Not After : Apr 28 18:00:30 2026 GMT
Subject: CN=390df90f82441b1b8177f7cb5a57915bf13a2d94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:37:d2:1d:ef:67:f0:cf:ed:cf:27:99:26:49:
05:76:91:ed:21:a6:ef:5e:e0:c0:7a:38:ba:60:37:
e5:af:60:3b:9b:13:ca:15:41:ea:ee:73:34:1d:ef:
ec:8d:6f:0e:07:fd:f6:ba:61:a3:6e:78:23:5e:6e:
06:72:f3:8d:b5:09:1c:90:da:c9:48:dc:1b:ef:e0:
11:5b:e4:93:d2:13:cc:67:67:0b:3f:0d:96:3b:b5:
e8:ac:42:68:b7:7c:13:4f:bd:f6:8c:77:92:fe:53:
a7:62:35:82:d2:43:26:cc:52:11:ab:fe:83:5a:d8:
da:ce:64:3f:8d:32:b7:2e:72:f5:3a:4e:d8:11:51:
60:ac:1d:37:8e:15:56:49:f0:73:8a:b6:8d:f8:da:
1a:24:9b:40:03:36:17:0c:65:a2:54:ec:38:d2:64:
dc:89:d9:e4:ff:8f:39:9d:e9:db:85:47:48:19:d0:
bd:93:2e:6c:3b:a4:a5:de:62:e1:d7:02:41:5e:9e:
e3:26:0d:96:3b:d2:32:90:a7:70:15:da:50:5a:ea:
c3:cb:a2:b9:c5:e2:75:07:68:21:50:2e:65:39:99:
b2:55:2d:46:23:c0:83:8e:f7:f8:a7:ad:66:75:a7:
0c:16:57:36:f1:be:ed:4d:f0:af:09:4b:7f:48:0b:
40:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:0D:F9:0F:82:44:1B:1B:81:77:F7:CB:5A:57:91:5B:F1:3A:2D:94
X509v3 Authority Key Identifier:
keyid:83:45:44:E1:A3:E2:28:C4:D3:64:7F:62:A9:D8:C9:6A:CE:9E:2C:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0VE4aPiKMTTZH9iqdjJas6eLDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b2eaa8-898b-4f33-afb9-89267e528009/1/g0VE4aPiKMTTZH9iqdjJas6eLDE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b2eaa8-898b-4f33-afb9-89267e528009/1/g0VE4aPiKMTTZH9iqdjJas6eLDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:23:60:5b:83:65:f9:3c:cb:77:fc:f8:1b:1b:bb:ed:72:3d:
78:a3:6b:6a:67:e4:b8:e0:99:29:37:67:28:3e:32:ad:4b:1c:
68:49:86:70:82:67:17:54:8a:cc:06:7b:d3:5d:a2:35:bd:4f:
3f:62:79:9a:c7:79:07:c8:e1:13:7d:b4:2a:6f:18:7b:e4:15:
c8:76:22:29:2e:a2:46:9e:84:8a:45:0a:81:30:0f:b1:98:a6:
ef:08:e3:aa:b7:67:71:07:4a:64:72:2d:15:89:db:e5:18:2a:
e5:cc:69:d5:9d:24:4a:f4:7b:a1:dc:eb:03:82:99:e2:e7:97:
0f:06:e4:d0:2c:dd:62:82:a3:07:b4:79:22:02:3a:8f:1d:cd:
fa:34:3d:d7:67:a3:dc:f5:63:2d:a8:f7:14:7d:c3:0b:81:d0:
f6:a0:39:8d:26:09:04:4b:fd:0b:e4:a4:a9:5b:5b:4d:36:9f:
c6:b5:45:da:de:8a:93:88:7a:07:80:1c:18:36:14:03:c4:dd:
8e:3b:7c:b2:b6:ac:4d:0f:be:c9:29:10:7c:7e:f9:33:a0:44:
8f:cc:84:67:48:f5:d2:20:14:ec:1b:17:e3:09:47:0f:74:ff:
16:3f:0c:89:19:be:d3:53:64:dc:81:a7:87:36:9d:a7:df:b1:
80:47:32:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 23:33:13 2026 by rpki-client