Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.mft
File: g6yI8BcMv-RGz9MaWCPN4OCTGZo.mft (raw, json)
Hash identifier: a5csOnI4HIa30bCVK5EB+u/pE4WnHqtCbnnWgWOt4KM=
Subject key identifier: AA:83:BC:A4:6D:D7:13:D8:38:C7:D4:82:CA:8A:F7:A1:C1:B7:B1:F4
Authority key identifier: 83:AC:88:F0:17:0C:BF:E4:46:CF:D3:1A:58:23:CD:E0:E0:93:19:9A
Certificate issuer: /CN=83ac88f0170cbfe446cfd31a5823cde0e093199a
Certificate serial: 019CE5FF2885B2A334FF39C6148BDFADFA34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g6yI8BcMv-RGz9MaWCPN4OCTGZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.mft
Manifest number: 17F9
Signing time: Fri 13 Mar 2026 07:00:30 +0000
Manifest this update: Fri 13 Mar 2026 07:00:30 +0000
Manifest next update: Sat 14 Mar 2026 07:00:30 +0000
Files and hashes: 1: 4otQnggN5_uQC9wKi00qa0eySrY.roa (hash: mMnLCC58FrEpo9AcseP6Ttc1YSWB7rt8x7N2xaBJU6E=)
2: g6yI8BcMv-RGz9MaWCPN4OCTGZo.crl (hash: QBK1M+RNtrsQraZTEFMmvoZwGsAjGF8IIPilGvgsgEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/g6yI8BcMv-RGz9MaWCPN4OCTGZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:ff:28:85:b2:a3:34:ff:39:c6:14:8b:df:ad:fa:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83ac88f0170cbfe446cfd31a5823cde0e093199a
Validity
Not Before: Mar 13 07:00:30 2026 GMT
Not After : Mar 14 07:00:30 2026 GMT
Subject: CN=aa83bca46dd713d838c7d482ca8af7a1c1b7b1f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:88:53:ea:cc:94:b2:04:07:ea:e5:5b:d9:cf:
cb:4a:12:9f:c5:42:b7:e4:a9:fd:13:ac:55:0e:15:
7b:69:f0:51:d0:27:9c:e2:d0:cd:68:7c:82:bf:d8:
e0:83:66:1f:6b:94:79:51:79:60:d5:bc:54:94:91:
e8:03:a6:58:33:56:07:95:ac:bf:86:2a:2d:c9:9e:
00:04:49:6e:1b:f5:a1:b2:66:92:fb:d0:33:ff:a2:
97:02:95:75:35:88:2c:cc:6e:ba:7b:15:ee:6a:e9:
94:d9:e7:0e:db:e9:33:c7:1c:50:e2:c3:08:98:cd:
38:44:f5:4b:cd:d1:dc:e6:c2:16:fb:80:f5:31:cf:
3c:ed:99:e4:3d:15:08:0a:13:a5:56:11:c4:82:60:
88:19:21:cf:da:c0:a9:95:6f:cc:98:3a:14:74:26:
4b:61:ad:98:75:22:53:83:db:f0:b8:4a:94:4d:66:
ae:5d:9a:7a:c0:63:69:f0:bc:24:73:e9:22:50:2d:
2e:b1:0a:4b:d2:fe:70:3e:72:51:98:32:65:f6:1c:
97:7e:ba:de:73:cc:c1:59:89:80:b1:54:c5:36:d5:
65:4f:e9:86:44:dd:0f:af:fa:1c:d0:af:ee:32:f6:
12:dc:4e:ff:1b:03:04:ce:a5:aa:2f:69:c6:b2:80:
3a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:83:BC:A4:6D:D7:13:D8:38:C7:D4:82:CA:8A:F7:A1:C1:B7:B1:F4
X509v3 Authority Key Identifier:
keyid:83:AC:88:F0:17:0C:BF:E4:46:CF:D3:1A:58:23:CD:E0:E0:93:19:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g6yI8BcMv-RGz9MaWCPN4OCTGZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:84:97:e0:8f:2b:03:16:38:06:3a:cb:5f:04:d4:33:99:3e:
37:a3:b6:5c:bc:46:53:21:e9:bf:48:f4:45:53:5b:ab:69:2f:
ab:a7:7e:5d:22:b4:b8:0f:34:15:45:e3:05:e1:08:14:b0:13:
7f:0d:c8:aa:a8:02:a0:f7:a4:dd:7c:f4:9e:99:d1:fe:f0:9f:
6b:e2:18:8b:af:cc:82:6d:76:6c:7b:c6:2c:24:97:86:d5:47:
9e:e4:e8:cb:8d:5e:c3:d0:99:cd:49:fc:ad:db:58:95:b2:4f:
13:7f:ba:3d:f3:bf:b4:de:13:1f:55:f1:e5:11:26:20:e1:ae:
71:7f:48:7f:7b:2f:2a:13:cb:20:54:6f:53:b6:b7:e3:29:bb:
89:dd:9c:99:4c:05:64:e8:3d:3c:f3:61:9e:6e:46:80:bf:8e:
58:5d:62:45:bd:90:5b:ee:33:40:cc:1d:b4:7d:ae:17:fe:d3:
54:32:33:c9:31:91:0f:f3:66:58:5d:6a:7e:d7:c7:94:72:3a:
18:4a:90:51:82:46:a2:2d:f3:95:3e:d3:2c:94:01:80:52:a2:
e4:79:d5:4f:89:ec:f9:67:cb:10:ba:f9:82:17:5b:f7:05:94:
da:4a:8b:dd:e4:05:77:32:9e:57:b0:56:5f:ca:15:90:32:3b:
37:e9:3b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 11:37:27 2026 by rpki-client