Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/afae7c-6ebf-4543-bc2f-b8c3dd76613e/1/g0jM5PttNhQOt9Vv7SibOHH8TXQ.mft
File: g0jM5PttNhQOt9Vv7SibOHH8TXQ.mft (raw, json)
Hash identifier: 0YY3uGjGLgqZBQOD27uZOFO3NaI9P1AOwAneyu7wDtY=
Subject key identifier: 25:9C:5C:44:D6:06:68:B2:74:39:42:24:53:2C:0A:74:F8:C2:22:EC
Authority key identifier: 83:48:CC:E4:FB:6D:36:14:0E:B7:D5:6F:ED:28:9B:38:71:FC:4D:74
Certificate issuer: /CN=8348cce4fb6d36140eb7d56fed289b3871fc4d74
Certificate serial: 019D390A577A73221EFE38DBBA783524865A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g0jM5PttNhQOt9Vv7SibOHH8TXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/afae7c-6ebf-4543-bc2f-b8c3dd76613e/1/g0jM5PttNhQOt9Vv7SibOHH8TXQ.mft
Manifest number: 07A0
Signing time: Sun 29 Mar 2026 10:01:12 +0000
Manifest this update: Sun 29 Mar 2026 10:01:12 +0000
Manifest next update: Mon 30 Mar 2026 10:01:12 +0000
Files and hashes: 1: 6lpK862MjF7SxKwBug7SDaIDhBI.roa (hash: 9PT+ip5WLMpeUVZjhYTWufmbO06R+9SyidouC6/apXQ=)
2: g0jM5PttNhQOt9Vv7SibOHH8TXQ.crl (hash: F/jvb4SkPdK/JW2+LjtkJwpViY1Ci1BQP6+RLBYGCiU=)
3: orUhVB_XCV_MPBCSEn7UxkecBb8.roa (hash: lgc2MPJFtdFX5G6JHnnUGIp1FVNshA+U7laURM3UjQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/afae7c-6ebf-4543-bc2f-b8c3dd76613e/1/g0jM5PttNhQOt9Vv7SibOHH8TXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/afae7c-6ebf-4543-bc2f-b8c3dd76613e/1/g0jM5PttNhQOt9Vv7SibOHH8TXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/g0jM5PttNhQOt9Vv7SibOHH8TXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:57:7a:73:22:1e:fe:38:db:ba:78:35:24:86:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8348cce4fb6d36140eb7d56fed289b3871fc4d74
Validity
Not Before: Mar 29 10:01:12 2026 GMT
Not After : Mar 30 10:01:12 2026 GMT
Subject: CN=259c5c44d60668b274394224532c0a74f8c222ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8f:9c:30:94:f3:0f:23:60:92:86:3e:1d:fa:
35:64:c4:24:41:6a:09:7b:24:67:32:a2:29:44:1d:
66:34:44:d2:49:46:7f:bd:03:51:1f:25:76:b5:db:
ab:9b:b7:25:08:a8:c2:89:6a:82:c1:f7:10:c3:23:
e2:be:d3:22:00:d6:5d:54:cf:f8:bf:5c:2c:ab:dd:
de:09:4a:3e:7c:bc:0a:b3:d7:69:22:54:84:61:98:
2b:0d:c5:89:df:82:99:c0:9b:89:14:25:da:29:dd:
36:05:43:6c:f5:0b:75:7d:34:db:4c:47:ce:8a:9a:
c6:07:33:46:a9:94:c6:52:c0:d0:a8:2b:ac:46:a7:
eb:41:6c:37:6e:bf:c8:8f:15:51:50:7f:6e:94:8c:
4b:92:48:6f:c8:2e:a7:32:9d:e3:81:0b:20:32:e0:
22:7c:d3:7c:9d:ee:c3:2e:53:b3:97:76:c2:d9:5a:
49:01:0f:ca:e9:b0:3d:ff:26:18:99:f6:0e:2e:a1:
37:b9:a9:ae:91:a3:b7:1e:88:3b:69:0f:0b:4a:48:
65:81:d0:f8:95:23:2a:91:f6:f7:cc:ed:5c:7e:40:
af:d2:70:97:5e:8d:bc:d5:a9:57:fc:5c:5c:fe:82:
f4:a2:df:4e:c3:63:41:f8:43:7f:40:82:4b:22:8f:
2d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:9C:5C:44:D6:06:68:B2:74:39:42:24:53:2C:0A:74:F8:C2:22:EC
X509v3 Authority Key Identifier:
keyid:83:48:CC:E4:FB:6D:36:14:0E:B7:D5:6F:ED:28:9B:38:71:FC:4D:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0jM5PttNhQOt9Vv7SibOHH8TXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/afae7c-6ebf-4543-bc2f-b8c3dd76613e/1/g0jM5PttNhQOt9Vv7SibOHH8TXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/afae7c-6ebf-4543-bc2f-b8c3dd76613e/1/g0jM5PttNhQOt9Vv7SibOHH8TXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:26:20:e9:17:e5:c4:d3:5e:fd:80:90:cb:4d:2e:2c:02:08:
08:fa:98:37:24:a6:6a:df:0d:9e:4e:77:f5:91:02:61:ca:ee:
21:1c:79:e3:ad:64:a2:f7:56:10:a8:bb:63:9c:b7:06:24:56:
c8:90:d5:cd:a7:92:65:4c:2c:ce:a8:b8:99:ec:30:e9:e9:3f:
98:69:cf:4b:22:ce:c6:e5:9f:32:2c:0d:b5:4a:91:ad:68:4e:
9e:04:fb:8a:d1:bb:a7:99:62:d2:b3:8e:5b:40:76:1a:18:a5:
a3:0d:50:1c:38:33:8e:46:bd:c6:48:8c:08:5a:cc:a3:86:92:
a8:a5:5a:8b:c3:d9:58:19:57:ce:a2:47:51:28:0e:65:89:bf:
d6:75:d8:60:e2:68:c3:de:bf:d6:20:a8:48:91:80:1b:d5:66:
85:43:c4:ed:66:18:86:ab:6e:b0:ec:b4:5e:2e:ee:ea:7b:20:
50:9f:ab:05:16:93:f1:ce:f9:91:cd:c3:b5:c5:17:3f:d8:d0:
9f:21:0e:41:1e:95:68:1c:47:dc:f7:cd:37:ee:59:a0:fc:ff:
e3:11:b0:84:5c:99:07:5c:66:0e:38:9e:48:5d:3f:d4:b3:57:
bc:d6:fa:d2:4e:93:ec:71:c9:1b:f5:b1:8e:33:df:b1:3d:1d:
c9:82:38:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:08:38 2026 by rpki-client