Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/250423-fa91-4a22-b83a-83e47580b3ec/1/g4xPgQ16IKeDpPqxwDRGe4JQUbk.mft
File: g4xPgQ16IKeDpPqxwDRGe4JQUbk.mft (raw, json)
Hash identifier: 3ZPM/u5ss5fwQtbdKD4FEXdloKDzXZyM2WTSE6/ATtE=
Subject key identifier: 1D:56:C0:92:6E:9F:86:92:30:DE:0E:AB:B5:B8:2B:90:F7:F3:65:D9
Authority key identifier: 83:8C:4F:81:0D:7A:20:A7:83:A4:FA:B1:C0:34:46:7B:82:50:51:B9
Certificate issuer: /CN=838c4f810d7a20a783a4fab1c034467b825051b9
Certificate serial: 01A180AB1C542F016A3F285E6DED148BEE8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g4xPgQ16IKeDpPqxwDRGe4JQUbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/250423-fa91-4a22-b83a-83e47580b3ec/1/g4xPgQ16IKeDpPqxwDRGe4JQUbk.mft
Manifest number: 1AC6
Signing time: Wed 28 Oct 2026 04:00:59 +0000
Manifest this update: Wed 28 Oct 2026 04:00:59 +0000
Manifest next update: Thu 29 Oct 2026 04:00:59 +0000
Files and hashes: 1: g4xPgQ16IKeDpPqxwDRGe4JQUbk.crl (hash: xO69mVZhJKiNsW7INT7/UrwIj2DyLgTkJV+k1yNy0hY=)
2: jUh5kPqCBDpArkt6K7K31qvOD8c.roa (hash: qUwUoHmjfXhrPLn74zGv7aYCTKLavD/2JI0PvwjIvp4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/250423-fa91-4a22-b83a-83e47580b3ec/1/g4xPgQ16IKeDpPqxwDRGe4JQUbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/250423-fa91-4a22-b83a-83e47580b3ec/1/g4xPgQ16IKeDpPqxwDRGe4JQUbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/g4xPgQ16IKeDpPqxwDRGe4JQUbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 04:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:ab:1c:54:2f:01:6a:3f:28:5e:6d:ed:14:8b:ee:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=838c4f810d7a20a783a4fab1c034467b825051b9
Validity
Not Before: Oct 28 04:00:59 2026 GMT
Not After : Oct 29 04:00:59 2026 GMT
Subject: CN=1d56c0926e9f869230de0eabb5b82b90f7f365d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c8:80:0a:54:10:7e:19:1f:57:4a:30:89:69:
e2:af:60:27:1d:83:d0:1c:69:0e:e7:11:af:bd:58:
7c:0f:b5:72:1c:8a:3d:26:c3:52:98:99:fe:84:00:
05:8c:b9:1c:5a:b5:4c:f3:33:99:06:e1:22:31:3c:
d1:0c:91:1b:d7:f1:17:eb:40:46:20:77:f0:4b:39:
64:aa:4d:fc:36:e7:36:3f:f0:a2:d8:30:a9:9d:34:
e8:ca:54:e9:b4:cd:fa:ea:ff:bf:61:20:4d:0d:39:
7c:db:14:4e:40:de:d8:b0:3d:eb:46:6f:af:4a:70:
3d:49:b5:1c:81:17:52:24:fd:c0:89:0b:f9:f8:bc:
8d:95:8c:f9:ad:09:ae:13:b3:f2:be:7b:df:c4:16:
90:9e:f0:de:ac:d1:66:07:ad:ec:84:7e:c8:6c:5f:
26:7e:50:bb:97:a5:57:e4:c4:fa:02:be:eb:6f:63:
01:c5:d6:01:9f:4b:23:0d:b6:73:1e:8a:ba:63:5f:
68:4a:47:4f:2a:01:1a:c9:38:3b:00:82:27:15:5d:
b5:71:b6:db:80:5c:8d:d3:49:55:de:97:5b:9d:89:
58:5e:ce:92:63:c4:51:f6:ff:3a:9a:25:30:96:30:
47:2f:aa:c2:eb:2a:aa:1d:65:36:0a:9f:70:4f:17:
5a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:56:C0:92:6E:9F:86:92:30:DE:0E:AB:B5:B8:2B:90:F7:F3:65:D9
X509v3 Authority Key Identifier:
keyid:83:8C:4F:81:0D:7A:20:A7:83:A4:FA:B1:C0:34:46:7B:82:50:51:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g4xPgQ16IKeDpPqxwDRGe4JQUbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/250423-fa91-4a22-b83a-83e47580b3ec/1/g4xPgQ16IKeDpPqxwDRGe4JQUbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/250423-fa91-4a22-b83a-83e47580b3ec/1/g4xPgQ16IKeDpPqxwDRGe4JQUbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:97:a5:3e:7d:ec:ab:0e:04:a1:77:be:3d:0f:72:16:9e:d4:
1b:c6:de:3c:a7:04:fa:a8:a0:b4:ba:f6:65:bc:88:e3:1f:ce:
3c:e5:e3:b4:90:b8:70:32:a5:61:d1:ec:53:ec:7f:6e:be:69:
b8:25:c7:64:b7:8e:a3:51:3d:90:2b:e0:b6:9d:ac:34:74:c2:
29:34:cd:44:6f:48:f8:5d:48:b0:29:45:85:98:8c:2f:15:86:
17:46:10:d4:28:ac:f6:84:91:3b:ca:02:93:65:d3:c5:e2:b9:
14:e0:f5:1a:be:24:24:c4:6d:bc:d5:21:bf:8c:96:9f:98:5b:
56:4c:9b:73:80:07:69:b8:0f:83:d6:b1:2c:66:cf:b7:b3:8d:
4b:90:66:fb:7d:4d:ce:b0:02:7d:b6:a4:76:2e:e4:f3:c7:a7:
e7:ae:8d:85:6d:69:1c:b5:a2:b0:ce:02:07:ce:8b:59:bd:ef:
01:c0:56:dc:9b:09:5d:a1:67:10:16:a9:72:c5:df:5a:fc:ab:
00:bd:dc:1b:68:94:8c:70:7c:33:54:af:53:60:bb:80:85:68:
1a:cf:a4:9d:66:61:1f:3d:55:81:50:eb:6e:45:54:a8:1c:a9:
81:ff:c9:c4:7d:99:84:89:0a:5d:8f:cc:5b:0f:a4:03:9b:c1:
98:d8:9f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 11:38:06 2026 by rpki-client