Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/57cb04-58ce-433b-93ab-10bc59d8ff8d/1/g0hoQbT0rcViZMWWMIUYKiIORtQ.mft
File: g0hoQbT0rcViZMWWMIUYKiIORtQ.mft (raw, json)
Hash identifier: E2pOUZxRcgBX+wQ/SmMFcDbtQgHpfuHzR6XLa6ojVGw=
Subject key identifier: C7:43:D6:13:01:2B:49:9C:79:43:BC:19:E6:64:67:AF:01:F7:2C:76
Authority key identifier: 83:48:68:41:B4:F4:AD:C5:62:64:C5:96:30:85:18:2A:22:0E:46:D4
Certificate issuer: /CN=83486841b4f4adc56264c5963085182a220e46d4
Certificate serial: 019EFA26F4AF80B18FC2F9C73784AC24B9F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g0hoQbT0rcViZMWWMIUYKiIORtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/57cb04-58ce-433b-93ab-10bc59d8ff8d/1/g0hoQbT0rcViZMWWMIUYKiIORtQ.mft
Manifest number: 0876
Signing time: Wed 24 Jun 2026 15:01:57 +0000
Manifest this update: Wed 24 Jun 2026 15:01:57 +0000
Manifest next update: Thu 25 Jun 2026 15:01:57 +0000
Files and hashes: 1: OxO2e6IptwFyl3MF1m_wc096uog.roa (hash: XgxnYNxx97bw9TDM5PH16uspWk75sFzbBpJUQwxc1qc=)
2: g0hoQbT0rcViZMWWMIUYKiIORtQ.crl (hash: 8g/5V3XUYQclmrUDdlpx7lAN4E8u8+nzWUBCDZNrfZY=)
3: xxgRb_Aeml7x0uDoodDZg1nH4Oo.roa (hash: 6S9DSgZ3vZaVU4t1RjWG3PEBfRSUa7Tr9UeA4iHzVhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/57cb04-58ce-433b-93ab-10bc59d8ff8d/1/g0hoQbT0rcViZMWWMIUYKiIORtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/57cb04-58ce-433b-93ab-10bc59d8ff8d/1/g0hoQbT0rcViZMWWMIUYKiIORtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/g0hoQbT0rcViZMWWMIUYKiIORtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 14:31:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fa:26:f4:af:80:b1:8f:c2:f9:c7:37:84:ac:24:b9:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83486841b4f4adc56264c5963085182a220e46d4
Validity
Not Before: Jun 24 15:01:57 2026 GMT
Not After : Jun 25 15:01:57 2026 GMT
Subject: CN=c743d613012b499c7943bc19e66467af01f72c76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e2:93:3d:89:cd:da:f8:7b:0a:79:db:01:9c:
c0:94:c9:56:7d:ea:47:5e:f2:b3:4e:d8:8a:5d:e2:
37:7b:9c:88:24:21:1f:71:47:ca:0b:08:9f:fd:4b:
2f:21:a5:de:d6:c9:ac:e0:01:36:36:ba:54:fa:9a:
e6:f8:dd:2f:24:a0:44:00:d3:ff:a2:18:30:0a:80:
52:4d:74:e5:ba:c4:fc:c9:87:dd:0e:f1:49:22:fb:
0f:3a:7c:81:02:4c:da:b9:35:8d:09:94:49:09:d9:
d2:38:e5:cf:c2:a3:62:f9:79:92:0d:37:03:0a:89:
85:5d:85:ff:3a:70:da:b8:55:d3:9e:ad:16:4f:9b:
52:eb:8c:05:43:9c:ca:e4:39:39:23:29:eb:4b:8e:
31:2b:1e:93:0c:8b:63:75:16:50:8d:dc:0e:6e:18:
c9:de:f8:a4:59:99:49:da:15:a0:b8:b7:1f:26:ad:
ea:96:9b:82:d4:94:77:78:f9:c0:97:e4:0a:4f:c5:
9b:ba:f3:af:85:d7:df:3e:5f:6c:c9:fa:3d:12:8f:
52:16:58:3a:02:64:a9:72:d1:33:1d:48:85:ad:07:
16:c5:05:94:c2:b2:04:e5:3f:24:d7:53:da:9b:40:
7f:49:8b:35:ab:82:c0:4b:15:0a:68:2c:a6:09:e2:
91:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:43:D6:13:01:2B:49:9C:79:43:BC:19:E6:64:67:AF:01:F7:2C:76
X509v3 Authority Key Identifier:
keyid:83:48:68:41:B4:F4:AD:C5:62:64:C5:96:30:85:18:2A:22:0E:46:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0hoQbT0rcViZMWWMIUYKiIORtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/57cb04-58ce-433b-93ab-10bc59d8ff8d/1/g0hoQbT0rcViZMWWMIUYKiIORtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/57cb04-58ce-433b-93ab-10bc59d8ff8d/1/g0hoQbT0rcViZMWWMIUYKiIORtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:54:d0:49:90:44:d7:e0:05:18:21:a6:c4:c2:5b:83:6d:9e:
d9:57:c2:b4:b3:08:76:71:8d:26:73:9f:87:5f:91:5d:b6:d0:
72:b1:2e:4d:57:45:b6:40:cc:32:78:ff:a5:4c:02:9d:22:d2:
eb:ef:91:d6:7b:cc:40:f7:46:c2:cd:7e:85:33:42:69:6b:2a:
f5:93:58:de:dc:f9:81:9b:5f:77:90:8d:5a:6e:c4:6a:5b:48:
97:27:88:78:62:b1:93:46:a5:56:79:9b:60:96:71:54:e7:a5:
dd:36:64:88:b9:d3:f3:e6:15:8c:76:84:cb:1e:8a:4f:cd:cb:
70:65:75:41:58:28:21:d0:3b:6b:a1:2b:aa:9a:ad:04:e7:ae:
bd:36:52:77:fd:34:b1:1c:62:04:ff:cb:89:0e:e0:f3:c0:84:
f7:39:57:48:a8:4b:a5:de:53:58:74:de:76:36:1b:39:2a:67:
a8:f5:87:b0:bb:63:4b:20:72:be:51:51:c6:bc:a9:3c:1b:60:
39:6c:6c:a4:5f:04:c2:10:ef:71:54:c0:77:94:08:f3:42:4a:
d3:08:40:d8:c1:88:38:9c:99:71:25:bb:f6:70:50:14:45:9d:
42:db:3d:48:67:32:70:e4:0f:7d:8c:73:ad:8f:c8:f3:33:df:
5f:e8:5a:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 21:18:02 2026 by rpki-client