Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/a8df58-eabc-45d4-9437-b57616136ab6/1/g_2WfGwZoxt-OOnlycqPoN49YUk.mft
File: g_2WfGwZoxt-OOnlycqPoN49YUk.mft (raw, json)
Hash identifier: 1KQW+iY2luABCv4Us/IgPETS+t42WKzX/hEU5QGohg8=
Subject key identifier: 0B:52:C1:EE:18:D9:30:41:03:B3:1F:93:BF:36:5C:E5:3A:27:AA:1E
Authority key identifier: 83:FD:96:7C:6C:19:A3:1B:7E:38:E9:E5:C9:CA:8F:A0:DE:3D:61:49
Certificate issuer: /CN=83fd967c6c19a31b7e38e9e5c9ca8fa0de3d6149
Certificate serial: 019D3940C3561356916B9DFA6EAFC0FF9DBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g_2WfGwZoxt-OOnlycqPoN49YUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/a8df58-eabc-45d4-9437-b57616136ab6/1/g_2WfGwZoxt-OOnlycqPoN49YUk.mft
Manifest number: 140B
Signing time: Sun 29 Mar 2026 11:00:38 +0000
Manifest this update: Sun 29 Mar 2026 11:00:38 +0000
Manifest next update: Mon 30 Mar 2026 11:00:38 +0000
Files and hashes: 1: c28eAYv0rrRe6_MausaY2by0884.roa (hash: Oxg9SozDO0QIj1rDPvskXO8gNt2LP5JL6/sMnFmtWaM=)
2: g_2WfGwZoxt-OOnlycqPoN49YUk.crl (hash: ZZhO46WOc+nhuBGYN1b8YbVhKkaAYLiZDtrElBOB6iI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/a8df58-eabc-45d4-9437-b57616136ab6/1/g_2WfGwZoxt-OOnlycqPoN49YUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/a8df58-eabc-45d4-9437-b57616136ab6/1/g_2WfGwZoxt-OOnlycqPoN49YUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/g_2WfGwZoxt-OOnlycqPoN49YUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:c3:56:13:56:91:6b:9d:fa:6e:af:c0:ff:9d:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83fd967c6c19a31b7e38e9e5c9ca8fa0de3d6149
Validity
Not Before: Mar 29 11:00:38 2026 GMT
Not After : Mar 30 11:00:38 2026 GMT
Subject: CN=0b52c1ee18d9304103b31f93bf365ce53a27aa1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:e3:c6:80:54:e3:a5:84:f1:d8:8a:ac:36:e1:
a8:6b:07:ba:23:43:ae:47:4b:e6:57:ef:5a:f7:44:
18:61:36:78:4d:6a:ae:9d:ed:8b:7d:41:07:15:e7:
ce:6c:36:b3:7e:c8:6e:34:ee:58:c1:59:56:74:8e:
47:07:94:04:27:c4:9f:9e:a8:ab:f7:26:75:da:b2:
92:72:10:4f:2c:a0:91:7d:00:e8:bb:48:87:4e:e1:
4f:5b:89:87:1a:dc:ea:29:7a:5a:54:0b:ba:8d:cd:
1d:53:77:08:dc:a8:83:75:0d:3f:fe:23:6c:e3:05:
55:f8:44:34:03:84:c3:52:49:a2:c5:95:51:c5:57:
5b:4e:f5:d7:6e:5d:0f:6e:99:aa:21:1a:c8:32:98:
2e:47:6b:25:b9:90:af:d3:82:08:f2:d4:3f:07:f7:
4f:d9:f3:c8:8a:b2:73:19:de:52:ee:b9:d2:09:b4:
29:a2:25:3a:51:c2:c8:be:07:8f:0d:78:d2:ab:f2:
53:0b:01:92:55:1d:49:9c:2a:b0:52:c7:7a:dc:dd:
aa:ff:d8:da:d3:c5:4f:cc:93:45:ed:7c:09:5c:ca:
18:41:2e:01:dd:b2:d5:39:32:3b:33:fd:b9:ce:98:
7d:72:e0:32:fe:ca:61:49:4e:3d:ab:fc:6a:db:72:
1b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:52:C1:EE:18:D9:30:41:03:B3:1F:93:BF:36:5C:E5:3A:27:AA:1E
X509v3 Authority Key Identifier:
keyid:83:FD:96:7C:6C:19:A3:1B:7E:38:E9:E5:C9:CA:8F:A0:DE:3D:61:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_2WfGwZoxt-OOnlycqPoN49YUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a8df58-eabc-45d4-9437-b57616136ab6/1/g_2WfGwZoxt-OOnlycqPoN49YUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a8df58-eabc-45d4-9437-b57616136ab6/1/g_2WfGwZoxt-OOnlycqPoN49YUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:79:bf:29:49:46:70:72:5f:29:aa:ac:54:63:0c:0c:d2:63:
ed:29:ac:af:4c:9a:9d:ff:ce:38:37:88:e9:af:b8:7c:d9:59:
2f:c2:eb:f5:cc:3c:9a:92:08:2d:71:37:68:f7:b0:60:50:50:
5a:9a:58:2f:24:06:72:3e:d3:33:b3:cc:30:6e:0d:20:fa:a0:
79:12:c3:a2:07:87:93:e7:6d:69:80:37:55:48:be:6a:60:92:
02:8b:6a:fe:79:88:4c:60:63:b8:2d:86:fa:73:9c:21:55:a7:
9d:dd:fd:c1:20:19:a6:b4:09:3a:3a:24:f3:99:4f:41:18:1e:
1a:a3:73:c7:cf:72:10:4f:20:63:22:89:45:b0:e6:7c:eb:e5:
6d:4f:68:a1:2c:62:38:ba:d7:f3:52:73:a6:9e:19:50:50:ce:
eb:bf:9a:14:62:d8:4d:89:e0:60:bd:ab:13:24:6b:f0:d8:ea:
44:ca:c8:d9:16:1f:37:41:2a:b5:41:4e:8c:16:32:ec:c4:6a:
77:ce:c2:c0:ed:69:91:50:b2:44:e0:14:1f:69:6d:aa:82:b5:
7d:54:0d:87:0a:e5:5a:2b:7e:b1:1e:e0:07:df:5a:3b:d0:f8:
fc:a2:29:d3:1d:97:ab:f2:82:96:61:e0:ab:d1:6a:7d:dd:96:
39:82:79:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:44:43 2026 by rpki-client