Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.mft
File: g0KhQTsMzjTj9_vw5_OOCjcKYmc.mft (raw, json)
Hash identifier: VMj2K+R7x5J5ogAV7GplwDAuVinP66gxLq09pLITK1k=
Subject key identifier: 6E:6C:8B:4A:98:53:C2:06:01:16:00:7F:77:ED:B2:0F:34:46:F3:47
Authority key identifier: 83:42:A1:41:3B:0C:CE:34:E3:F7:FB:F0:E7:F3:8E:0A:37:0A:62:67
Certificate issuer: /CN=8342a1413b0cce34e3f7fbf0e7f38e0a370a6267
Certificate serial: 019D37F6EDA65B0B41854CDFA80CB7850E73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g0KhQTsMzjTj9_vw5_OOCjcKYmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.mft
Manifest number: 1228
Signing time: Sun 29 Mar 2026 05:00:22 +0000
Manifest this update: Sun 29 Mar 2026 05:00:22 +0000
Manifest next update: Mon 30 Mar 2026 05:00:22 +0000
Files and hashes: 1: bwRA1i-n189vPT-iJPMMcXm_fOU.roa (hash: /aZD95cwPbBEC+pYbods3hnay36mkiDzCXiuSjLwkjo=)
2: g0KhQTsMzjTj9_vw5_OOCjcKYmc.crl (hash: COPdUcDsdfineFiXYO2FJq7yU5mjpooOvsVu91cbnlQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/g0KhQTsMzjTj9_vw5_OOCjcKYmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f6:ed:a6:5b:0b:41:85:4c:df:a8:0c:b7:85:0e:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8342a1413b0cce34e3f7fbf0e7f38e0a370a6267
Validity
Not Before: Mar 29 05:00:22 2026 GMT
Not After : Mar 30 05:00:22 2026 GMT
Subject: CN=6e6c8b4a9853c2060116007f77edb20f3446f347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:78:21:cb:fe:41:20:65:4d:52:63:b0:13:12:
60:82:11:a6:b5:d5:62:06:e1:40:36:84:9a:15:e5:
7d:20:b8:82:6d:4c:26:ff:de:24:6d:c0:5f:2d:71:
28:96:ed:d0:c6:32:e5:aa:ca:97:8e:f9:86:aa:04:
94:4a:7c:8d:fc:97:ac:b6:eb:bf:92:67:34:b9:2a:
c5:a1:d0:45:03:75:0b:39:04:0e:1f:35:b9:52:8f:
72:b2:46:47:f0:50:98:da:7e:07:cc:99:7a:d1:47:
26:55:4b:67:a5:ba:62:99:cb:2d:10:55:d6:8c:bc:
e0:8c:ec:73:5c:cc:f0:ed:8c:39:98:25:43:03:cd:
2b:d5:a1:bf:d2:24:a8:c4:17:39:f4:e1:e2:38:18:
36:5c:6f:28:52:a1:05:a0:22:1c:c5:d1:1f:12:e4:
f2:f4:5d:05:2b:38:4f:80:c7:aa:07:e7:d4:a2:d9:
c5:ff:fa:6f:ea:ae:09:a8:78:af:6a:04:01:5f:6c:
e5:d5:16:59:f6:97:51:ee:c5:df:70:17:40:88:a7:
ff:74:9a:e3:53:33:49:d2:bb:2f:67:69:ba:a4:1e:
fe:92:f0:2a:71:e9:8f:16:49:52:01:11:d5:20:21:
0e:3e:a1:4d:06:0f:a6:f0:8f:76:2a:d1:a8:cc:86:
b3:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:6C:8B:4A:98:53:C2:06:01:16:00:7F:77:ED:B2:0F:34:46:F3:47
X509v3 Authority Key Identifier:
keyid:83:42:A1:41:3B:0C:CE:34:E3:F7:FB:F0:E7:F3:8E:0A:37:0A:62:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0KhQTsMzjTj9_vw5_OOCjcKYmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:6c:89:7a:6a:51:6a:5f:d1:7f:04:d5:25:7a:48:ac:5f:72:
7a:d0:58:98:88:50:56:15:04:c6:c7:e6:43:7c:47:91:1b:74:
bb:19:2e:c8:f0:60:95:0c:81:cd:8c:e7:b8:33:09:19:9e:93:
98:0f:d7:87:a9:61:b5:09:c6:27:12:55:76:39:97:d0:a2:f1:
8c:a3:ee:8b:79:87:b5:7c:d9:a4:c7:d0:25:49:b5:cb:4c:76:
d4:74:9b:b5:6f:4f:7e:2a:4a:a0:c0:ec:7f:1d:7e:33:0c:fc:
9f:8f:7f:fc:21:71:7e:b7:ea:5b:b8:c1:9f:6a:b3:25:3f:83:
f0:02:03:0f:08:10:89:c2:19:3e:d1:cb:c0:06:29:0b:6c:42:
86:52:62:ec:16:8c:b6:1b:ba:2d:3e:eb:50:b0:82:18:b9:09:
8a:e1:c1:49:8f:69:6f:c7:e5:c9:a4:d3:31:28:0d:4a:5b:33:
85:74:94:62:36:d6:e9:df:21:53:6c:0d:23:ef:01:0a:22:6f:
b0:84:52:05:98:11:da:2d:78:2f:d9:78:97:19:b8:06:35:e1:
dd:8e:78:ac:49:58:7a:ea:7d:21:71:3e:8d:4c:1d:54:5f:aa:
90:27:c5:11:43:fd:85:02:b2:49:65:84:06:1b:79:df:57:30:
4e:e4:8b:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:10:33 2026 by rpki-client