Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/57cb04-58ce-433b-93ab-10bc59d8ff8d/1/g0hoQbT0rcViZMWWMIUYKiIORtQ.mft
File: g0hoQbT0rcViZMWWMIUYKiIORtQ.mft (raw, json)
Hash identifier: cwWKKmWW4m0DsYz5HBe67Qs84T1UQ2jzCTQSwPpwC+I=
Subject key identifier: C1:2C:59:EB:04:F7:8F:DD:0A:65:99:78:C4:91:A1:0D:38:30:E8:DF
Authority key identifier: 83:48:68:41:B4:F4:AD:C5:62:64:C5:96:30:85:18:2A:22:0E:46:D4
Certificate issuer: /CN=83486841b4f4adc56264c5963085182a220e46d4
Certificate serial: 019DEDB6EFE1263B637A45735DE15156EE98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g0hoQbT0rcViZMWWMIUYKiIORtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/57cb04-58ce-433b-93ab-10bc59d8ff8d/1/g0hoQbT0rcViZMWWMIUYKiIORtQ.mft
Manifest number: 07EB
Signing time: Sun 03 May 2026 12:01:22 +0000
Manifest this update: Sun 03 May 2026 12:01:22 +0000
Manifest next update: Mon 04 May 2026 12:01:22 +0000
Files and hashes: 1: OxO2e6IptwFyl3MF1m_wc096uog.roa (hash: XgxnYNxx97bw9TDM5PH16uspWk75sFzbBpJUQwxc1qc=)
2: g0hoQbT0rcViZMWWMIUYKiIORtQ.crl (hash: uYEtyXXRo4xI3sEVWiC9dx3eDht1DG41bD/v3NhRyJQ=)
3: xxgRb_Aeml7x0uDoodDZg1nH4Oo.roa (hash: 6S9DSgZ3vZaVU4t1RjWG3PEBfRSUa7Tr9UeA4iHzVhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/57cb04-58ce-433b-93ab-10bc59d8ff8d/1/g0hoQbT0rcViZMWWMIUYKiIORtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/57cb04-58ce-433b-93ab-10bc59d8ff8d/1/g0hoQbT0rcViZMWWMIUYKiIORtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/g0hoQbT0rcViZMWWMIUYKiIORtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 May 2026 11:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ed:b6:ef:e1:26:3b:63:7a:45:73:5d:e1:51:56:ee:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83486841b4f4adc56264c5963085182a220e46d4
Validity
Not Before: May 3 12:01:22 2026 GMT
Not After : May 4 12:01:22 2026 GMT
Subject: CN=c12c59eb04f78fdd0a659978c491a10d3830e8df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2d:60:44:99:b1:e6:c2:0b:3d:ff:2d:bd:51:
e1:b6:3a:4f:f1:81:d9:d8:23:e4:a8:94:fd:ba:3d:
49:f0:06:34:28:62:0a:fc:ba:6c:da:7d:84:bf:b3:
fe:ab:98:9f:45:8f:c2:29:d4:32:21:da:ce:c3:d9:
ab:50:21:bf:da:5f:86:0f:b5:a7:ea:d0:87:a0:d4:
66:ff:7d:e8:4c:8a:d1:17:82:4e:9b:1f:f8:8d:e0:
55:2f:91:16:b0:5b:93:a7:70:47:0f:8e:13:8f:67:
aa:98:11:24:5b:1c:cc:ba:f5:e7:f4:02:34:18:a9:
03:92:80:92:aa:10:61:58:57:e9:43:85:e1:8e:1e:
83:28:86:c5:26:df:5a:38:75:df:11:b5:3d:2e:65:
eb:48:32:69:c4:47:48:d1:40:1a:14:cf:72:a8:7f:
6c:ce:d7:46:20:6f:3f:03:44:93:96:fa:51:e3:2c:
74:4c:33:84:1e:42:52:23:58:7d:90:4b:76:43:a4:
34:ef:ef:20:c7:c5:4a:82:f7:5c:53:78:a8:f5:c4:
20:ab:12:ad:21:8e:83:a6:81:ff:84:e3:b6:f0:ec:
3d:ea:2f:ba:66:1d:ce:12:3c:00:e6:4a:b6:9d:18:
46:9f:9c:4f:46:d9:19:ae:2c:5b:ab:65:af:25:f8:
01:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:2C:59:EB:04:F7:8F:DD:0A:65:99:78:C4:91:A1:0D:38:30:E8:DF
X509v3 Authority Key Identifier:
keyid:83:48:68:41:B4:F4:AD:C5:62:64:C5:96:30:85:18:2A:22:0E:46:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0hoQbT0rcViZMWWMIUYKiIORtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/57cb04-58ce-433b-93ab-10bc59d8ff8d/1/g0hoQbT0rcViZMWWMIUYKiIORtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/57cb04-58ce-433b-93ab-10bc59d8ff8d/1/g0hoQbT0rcViZMWWMIUYKiIORtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:c3:5a:7c:a7:4c:e1:e8:f3:aa:1b:ff:87:17:81:e8:ec:4d:
22:d9:f8:6b:75:17:9f:eb:05:27:02:cd:5a:10:1e:83:a4:60:
af:67:7d:0d:22:8b:2f:ef:55:41:9f:70:25:b6:b4:56:3c:51:
6f:de:57:14:a6:d0:24:7c:e7:50:f3:f6:06:34:c4:94:3a:b0:
73:28:2c:2b:64:31:4e:72:da:bb:01:35:d0:00:85:05:39:13:
d8:5a:b7:3a:75:e8:ea:71:9a:fe:df:44:d3:18:78:0c:55:e1:
fc:5b:ac:eb:df:10:69:4c:4a:04:5c:15:ef:e7:05:8e:5b:ae:
38:d0:dd:45:a1:db:20:2a:34:ce:fc:5d:02:77:0b:4e:ff:07:
b5:c7:24:1e:62:d3:cd:04:af:cc:14:ba:7c:44:ce:b1:22:d8:
59:19:3a:be:f2:d8:a0:98:fe:d1:68:c1:c7:df:4e:7f:ad:16:
05:95:95:c0:6c:d8:bb:c0:71:98:cf:c5:ce:39:fb:a0:2a:1c:
b3:29:7a:49:7b:59:3d:e6:ad:0c:3e:90:fc:4e:24:97:af:32:
78:ae:bb:a5:fb:7a:bf:01:8c:cb:59:86:37:1e:45:6c:9c:1a:
1b:61:0d:1f:a1:93:30:ac:24:89:dc:d1:db:62:71:f8:34:5e:
51:a7:18:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3ttu/hJjtjekVzXeFRVu6YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzNDg2ODQxYjRmNGFkYzU2MjY0YzU5NjMwODUxODJhMjIw
ZTQ2ZDQwHhcNMjYwNTAzMTIwMTIyWhcNMjYwNTA0MTIwMTIyWjAzMTEwLwYDVQQD
EyhjMTJjNTllYjA0Zjc4ZmRkMGE2NTk5NzhjNDkxYTEwZDM4MzBlOGRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsy1gRJmx5sILPf8tvVHhtjpP8YHZ
2CPkqJT9uj1J8AY0KGIK/Lps2n2Ev7P+q5ifRY/CKdQyIdrOw9mrUCG/2l+GD7Wn
6tCHoNRm/33oTIrRF4JOmx/4jeBVL5EWsFuTp3BHD44Tj2eqmBEkWxzMuvXn9AI0
GKkDkoCSqhBhWFfpQ4Xhjh6DKIbFJt9aOHXfEbU9LmXrSDJpxEdI0UAaFM9yqH9s
ztdGIG8/A0STlvpR4yx0TDOEHkJSI1h9kEt2Q6Q07+8gx8VKgvdcU3io9cQgqxKt
IY6DpoH/hOO28Ow96i+6Zh3OEjwA5kq2nRhGn5xPRtkZrixbq2WvJfgBOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMEsWesE94/dCmWZeMSRoQ04MOjfMB8GA1UdIwQY
MBaAFINIaEG09K3FYmTFljCFGCoiDkbUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzBob1FiVDByY1ZpWk1XV01JVVlLaUlPUnRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi81N2NiMDQtNThjZS00MzNiLTkzYWIt
MTBiYzU5ZDhmZjhkLzEvZzBob1FiVDByY1ZpWk1XV01JVVlLaUlPUnRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi81N2NiMDQtNThjZS00MzNiLTkzYWItMTBiYzU5ZDhmZjhk
LzEvZzBob1FiVDByY1ZpWk1XV01JVVlLaUlPUnRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAosNafKdM
4ejzqhv/hxeB6OxNItn4a3UXn+sFJwLNWhAeg6Rgr2d9DSKLL+9VQZ9wJba0VjxR
b95XFKbQJHznUPP2BjTElDqwcygsK2QxTnLauwE10ACFBTkT2Fq3OnXo6nGa/t9E
0xh4DFXh/Fus698QaUxKBFwV7+cFjluuONDdRaHbICo0zvxdAncLTv8HtcckHmLT
zQSvzBS6fETOsSLYWRk6vvLYoJj+0WjBx99Of60WBZWVwGzYu8BxmM/Fzjn7oCoc
syl6SXtZPeatDD6Q/E4kl68yeK67pft6vwGMy1mGNx5FbJwaG2ENH6GTMKwkidzR
22Jx+DReUacYlg==
-----END CERTIFICATE-----
Generated at Sun May 3 17:07:15 2026 by rpki-client