Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/b2eaa8-898b-4f33-afb9-89267e528009/1/g0VE4aPiKMTTZH9iqdjJas6eLDE.mft
File: g0VE4aPiKMTTZH9iqdjJas6eLDE.mft (raw, json)
Hash identifier: U1moaY4i2aoYUdAvOp6aih55IoZ7JOWhvfrOLrC+NuQ=
Subject key identifier: C5:B3:3B:C9:3F:C6:C6:57:82:50:DF:93:A0:80:66:0C:3E:8A:52:50
Authority key identifier: 83:45:44:E1:A3:E2:28:C4:D3:64:7F:62:A9:D8:C9:6A:CE:9E:2C:31
Certificate issuer: /CN=834544e1a3e228c4d3647f62a9d8c96ace9e2c31
Certificate serial: 019FA3058B71C8E2B3250B3E7DAF2F107FB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g0VE4aPiKMTTZH9iqdjJas6eLDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/b2eaa8-898b-4f33-afb9-89267e528009/1/g0VE4aPiKMTTZH9iqdjJas6eLDE.mft
Manifest number: 036C
Signing time: Mon 27 Jul 2026 10:01:17 +0000
Manifest this update: Mon 27 Jul 2026 10:01:17 +0000
Manifest next update: Tue 28 Jul 2026 10:01:17 +0000
Files and hashes: 1: Zvz4ZZe8TirGDr5YK1DXs7yV6ko.roa (hash: IZffctFNRu2D4ovNLuJ8QUvA9BXb4VzlfLdGt6txidc=)
2: g0VE4aPiKMTTZH9iqdjJas6eLDE.crl (hash: /7FnkAHFodxjg9JNeihkeyii7qvDVBW4J/Cl+cFs/Wk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/b2eaa8-898b-4f33-afb9-89267e528009/1/g0VE4aPiKMTTZH9iqdjJas6eLDE.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/b2eaa8-898b-4f33-afb9-89267e528009/1/g0VE4aPiKMTTZH9iqdjJas6eLDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/g0VE4aPiKMTTZH9iqdjJas6eLDE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 10:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:05:8b:71:c8:e2:b3:25:0b:3e:7d:af:2f:10:7f:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=834544e1a3e228c4d3647f62a9d8c96ace9e2c31
Validity
Not Before: Jul 27 10:01:17 2026 GMT
Not After : Jul 28 10:01:17 2026 GMT
Subject: CN=c5b33bc93fc6c6578250df93a080660c3e8a5250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:53:aa:2b:25:ed:75:34:a7:53:b8:3f:a9:f3:
6f:eb:6c:e4:8a:32:ec:b3:19:a7:54:87:97:76:5d:
7d:0a:ed:c1:92:b4:55:74:a6:2e:58:15:f9:f0:1b:
4b:23:16:14:1b:9d:ce:40:af:19:3e:59:b7:f2:d0:
a1:49:7a:69:f4:f4:1d:0d:7a:55:d3:26:0c:24:e3:
8b:15:52:7c:ee:59:f9:c9:8b:fb:7f:7d:26:be:c3:
aa:f6:f8:b6:ce:70:17:dd:08:35:1a:59:93:71:7d:
69:a7:5e:53:ee:16:81:22:9b:db:58:f8:29:bf:59:
74:60:f7:d4:ec:0f:2f:f9:5f:28:b7:b7:c5:df:43:
97:9e:80:18:37:1a:70:c3:3e:ea:f1:8a:31:1b:59:
c0:c3:65:41:1d:51:9e:55:76:e9:27:17:8e:6f:65:
76:23:e1:a4:e5:6e:92:41:4b:6a:c6:0c:71:36:36:
78:c9:4e:7b:43:2a:d3:0e:1e:b7:47:af:50:2e:2e:
f9:21:ea:71:ae:2d:a2:c9:77:40:17:9d:12:f4:63:
51:40:9a:bc:f8:f5:c2:0d:ad:f3:f7:9f:b0:fe:b5:
07:3d:b1:be:b7:c4:01:04:b0:7a:cf:f7:7b:2c:28:
01:83:50:f4:9e:2e:bd:2f:2d:aa:1f:78:e7:26:1e:
8c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:B3:3B:C9:3F:C6:C6:57:82:50:DF:93:A0:80:66:0C:3E:8A:52:50
X509v3 Authority Key Identifier:
keyid:83:45:44:E1:A3:E2:28:C4:D3:64:7F:62:A9:D8:C9:6A:CE:9E:2C:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0VE4aPiKMTTZH9iqdjJas6eLDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b2eaa8-898b-4f33-afb9-89267e528009/1/g0VE4aPiKMTTZH9iqdjJas6eLDE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b2eaa8-898b-4f33-afb9-89267e528009/1/g0VE4aPiKMTTZH9iqdjJas6eLDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:67:28:63:aa:ec:2b:73:bd:a3:a7:dd:c8:da:23:79:bd:31:
f0:bc:24:00:ed:6e:7d:7b:3b:8d:ee:26:75:93:62:79:86:ea:
04:99:a5:be:84:d0:cb:33:4e:28:80:af:9f:a7:d2:e9:2c:29:
b5:74:18:ac:c6:dd:28:1f:90:8e:de:9d:89:f7:9e:51:f7:3d:
5f:04:b2:16:be:47:7d:18:5d:71:20:2f:31:3c:9a:c1:3c:2c:
dd:50:61:37:c5:38:13:d2:df:31:c1:c2:14:3c:15:6c:30:ce:
f0:5f:9b:3f:06:67:da:ba:f4:7c:57:38:c0:69:7c:1c:bc:0d:
a5:8e:83:aa:94:59:5e:25:ef:97:04:67:27:23:e8:53:56:c2:
72:c8:ea:2a:93:58:13:4d:f8:f3:11:8d:ab:6e:8d:e7:dd:12:
91:55:46:67:1f:30:3e:e2:f8:0c:bd:ca:0c:1b:6d:e2:4f:49:
bc:e4:79:21:a6:37:00:09:b9:35:84:67:bd:91:ac:b3:ae:af:
71:2a:05:3b:f0:e4:93:c0:5b:23:b5:79:54:5f:c6:3b:77:64:
b0:68:dd:47:f8:7f:77:9a:2f:17:5f:cd:00:78:a3:2e:9e:89:
51:b1:00:0c:0b:55:90:12:7a:bc:bf:37:e8:30:09:13:12:e0:
39:ec:67:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+jBYtxyOKzJQs+fa8vEH+wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzNDU0NGUxYTNlMjI4YzRkMzY0N2Y2MmE5ZDhjOTZhY2U5
ZTJjMzEwHhcNMjYwNzI3MTAwMTE3WhcNMjYwNzI4MTAwMTE3WjAzMTEwLwYDVQQD
EyhjNWIzM2JjOTNmYzZjNjU3ODI1MGRmOTNhMDgwNjYwYzNlOGE1MjUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFOqKyXtdTSnU7g/qfNv62zkijLs
sxmnVIeXdl19Cu3BkrRVdKYuWBX58BtLIxYUG53OQK8ZPlm38tChSXpp9PQdDXpV
0yYMJOOLFVJ87ln5yYv7f30mvsOq9vi2znAX3Qg1GlmTcX1pp15T7haBIpvbWPgp
v1l0YPfU7A8v+V8ot7fF30OXnoAYNxpwwz7q8YoxG1nAw2VBHVGeVXbpJxeOb2V2
I+Gk5W6SQUtqxgxxNjZ4yU57QyrTDh63R69QLi75Iepxri2iyXdAF50S9GNRQJq8
+PXCDa3z95+w/rUHPbG+t8QBBLB6z/d7LCgBg1D0ni69Ly2qH3jnJh6MWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMWzO8k/xsZXglDfk6CAZgw+ilJQMB8GA1UdIwQY
MBaAFINFROGj4ijE02R/YqnYyWrOniwxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzBWRTRhUGlLTVRUWkg5aXFkakphczZlTERFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9iMmVhYTgtODk4Yi00ZjMzLWFmYjkt
ODkyNjdlNTI4MDA5LzEvZzBWRTRhUGlLTVRUWkg5aXFkakphczZlTERFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS9iMmVhYTgtODk4Yi00ZjMzLWFmYjktODkyNjdlNTI4MDA5
LzEvZzBWRTRhUGlLTVRUWkg5aXFkakphczZlTERFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsGcoY6rs
K3O9o6fdyNojeb0x8LwkAO1ufXs7je4mdZNieYbqBJmlvoTQyzNOKICvn6fS6Swp
tXQYrMbdKB+Qjt6difeeUfc9XwSyFr5HfRhdcSAvMTyawTws3VBhN8U4E9LfMcHC
FDwVbDDO8F+bPwZn2rr0fFc4wGl8HLwNpY6DqpRZXiXvlwRnJyPoU1bCcsjqKpNY
E0348xGNq26N590SkVVGZx8wPuL4DL3KDBtt4k9JvOR5IaY3AAm5NYRnvZGss66v
cSoFO/Dkk8BbI7V5VF/GO3dksGjdR/h/d5ovF1/NAHijLp6JUbEADAtVkBJ6vL83
6DAJExLgOexnRg==
-----END CERTIFICATE-----
Generated at Mon Jul 27 15:07:20 2026 by rpki-client