Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/b2397c-b36d-46a3-a240-1d9a19f1295b/1/g_W9I77F0GOYM6kUGYXMV1OIbhY.mft
File: g_W9I77F0GOYM6kUGYXMV1OIbhY.mft (raw, json)
Hash identifier: nwsEXMoPZZPzH6NQjfmPw8zhdqYR/r6ZeARmKy6joZU=
Subject key identifier: C8:0A:43:FF:8A:03:50:B3:3F:18:85:8B:28:DC:F5:D7:B7:14:59:E2
Authority key identifier: 83:F5:BD:23:BE:C5:D0:63:98:33:A9:14:19:85:CC:57:53:88:6E:16
Certificate issuer: /CN=83f5bd23bec5d0639833a9141985cc5753886e16
Certificate serial: 019D38D33E28B4947CAD5A268073CD684FEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g_W9I77F0GOYM6kUGYXMV1OIbhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/b2397c-b36d-46a3-a240-1d9a19f1295b/1/g_W9I77F0GOYM6kUGYXMV1OIbhY.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 09:01:01 +0000
Manifest this update: Sun 29 Mar 2026 09:01:01 +0000
Manifest next update: Mon 30 Mar 2026 09:01:01 +0000
Files and hashes: 1: g_W9I77F0GOYM6kUGYXMV1OIbhY.crl (hash: 1ckzd88GPmBuoDqD22n2B+ry0ZyNwTn8OjkoB81Ekcc=)
2: z2shUf2aqRLmVJq8eVLYTJ_YFbI.roa (hash: Edkz13QcBJuRKSQNfHEA5UGNYVjpEOKlRl0wbxqZyxQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/b2397c-b36d-46a3-a240-1d9a19f1295b/1/g_W9I77F0GOYM6kUGYXMV1OIbhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/b2397c-b36d-46a3-a240-1d9a19f1295b/1/g_W9I77F0GOYM6kUGYXMV1OIbhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/g_W9I77F0GOYM6kUGYXMV1OIbhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:3e:28:b4:94:7c:ad:5a:26:80:73:cd:68:4f:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83f5bd23bec5d0639833a9141985cc5753886e16
Validity
Not Before: Mar 29 09:01:01 2026 GMT
Not After : Mar 30 09:01:01 2026 GMT
Subject: CN=c80a43ff8a0350b33f18858b28dcf5d7b71459e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:92:02:23:15:fb:7c:cd:62:6d:32:5c:4f:ea:
3b:a9:42:ad:de:40:2c:ee:59:fc:e0:e9:f1:de:f0:
ad:f6:62:b2:b4:ed:66:df:33:fd:bd:ca:56:be:8f:
6a:86:d1:44:4a:de:99:0c:39:41:8b:ec:e3:39:0d:
ad:82:43:4a:5a:2b:0c:72:7a:4d:59:5c:81:61:a0:
5a:d3:89:75:e8:ed:56:3c:fa:81:53:d0:08:cf:f2:
a2:b6:f1:d1:08:ad:6f:66:88:b2:bd:02:c6:2d:45:
35:85:de:20:b4:13:83:1e:58:c6:8a:f9:fa:a9:ef:
8b:49:c2:5d:bb:5e:1d:e6:26:37:1a:c4:4f:7a:01:
a3:1b:ec:21:12:fe:43:c6:79:d2:8d:37:6d:f0:27:
18:ff:d8:1a:6e:85:d1:59:eb:fd:5e:cf:d9:18:7e:
ce:7c:ba:bf:27:f9:c7:9c:63:40:fe:06:78:85:26:
18:e4:56:2b:7f:22:f5:95:cf:a8:d2:d3:9c:c9:42:
9a:05:17:ef:e1:7e:c7:97:a2:fc:a2:8f:02:12:40:
27:69:5a:b2:a8:89:90:a0:67:c0:37:78:be:b2:89:
ed:ff:1b:81:5e:c1:34:70:af:68:d6:c3:6c:e6:93:
bb:25:27:53:6c:51:9a:5a:06:7e:c7:7a:da:45:e0:
01:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:0A:43:FF:8A:03:50:B3:3F:18:85:8B:28:DC:F5:D7:B7:14:59:E2
X509v3 Authority Key Identifier:
keyid:83:F5:BD:23:BE:C5:D0:63:98:33:A9:14:19:85:CC:57:53:88:6E:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_W9I77F0GOYM6kUGYXMV1OIbhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b2397c-b36d-46a3-a240-1d9a19f1295b/1/g_W9I77F0GOYM6kUGYXMV1OIbhY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b2397c-b36d-46a3-a240-1d9a19f1295b/1/g_W9I77F0GOYM6kUGYXMV1OIbhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:66:b1:07:16:2e:9b:b2:97:ad:f6:e5:b6:bc:4c:e3:bf:26:
63:44:b9:e9:00:60:e0:ae:02:7a:b0:61:7d:71:4f:99:6f:a5:
03:f5:5d:ab:0b:b3:d2:b1:f7:b8:64:57:0f:75:32:66:1d:15:
c7:bf:37:96:06:b5:a2:25:a1:8c:66:4d:ca:92:b0:69:6f:bc:
94:0d:89:9c:c4:d1:1a:31:1d:f2:58:e7:68:9a:fa:49:c2:17:
91:96:d1:be:47:42:b4:71:1c:56:c7:5c:1b:99:90:b3:28:f3:
9f:86:19:53:b4:fd:53:b2:40:cd:60:64:26:82:36:1c:89:6a:
b2:d0:77:95:a2:33:d0:b3:ef:35:2d:d6:e4:f4:73:e2:86:ab:
b6:64:94:81:c7:6e:25:a7:46:65:ce:ce:02:fc:32:0d:4d:2d:
d7:ac:ad:b2:fc:99:ee:36:e5:51:51:74:8d:05:f4:ab:62:d0:
1d:99:43:7e:be:9f:0a:b6:83:b7:14:fe:45:d9:27:d1:56:e4:
02:da:33:8f:a8:b4:fa:dd:8b:8c:e4:91:2e:97:db:f2:1b:c9:
3a:a9:c9:60:84:c2:62:84:45:03:21:7c:1c:fc:d2:4a:07:bf:
1d:b4:b5:26:6f:3e:44:93:ff:24:c6:ba:10:84:b0:cf:2d:cd:
d7:73:9d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:30 2026 by rpki-client