Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.mft
File: g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.mft (raw, json)
Hash identifier: LO2UGu4Jk7nw7ZgMQcchdp5wnEtnFY+4dYzU4ltdfbE=
Subject key identifier: DE:6F:60:4F:FB:45:A8:E8:7A:92:39:B2:5A:DF:90:8E:1E:80:15:69
Authority key identifier: 83:B5:B4:91:3C:C7:8E:40:80:3C:00:BE:C6:B1:A9:DC:48:FF:36:84
Certificate issuer: /CN=83b5b4913cc78e40803c00bec6b1a9dc48ff3684
Certificate serial: 019D38664FB3EABC6858A14BD15B9170612C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.mft
Manifest number: 0797
Signing time: Sun 29 Mar 2026 07:02:02 +0000
Manifest this update: Sun 29 Mar 2026 07:02:02 +0000
Manifest next update: Mon 30 Mar 2026 07:02:02 +0000
Files and hashes: 1: HdtIM72Je6eID2UflpjXv9hX0Fg.roa (hash: c++PW514MuKO6i2Ca50xS+brdGSlfDfubR4SvsYDiXQ=)
2: g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.crl (hash: RniMr/yCHPx8LeRPiSRix0IeuRaDP6pdErMwEN2/Ofo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:4f:b3:ea:bc:68:58:a1:4b:d1:5b:91:70:61:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83b5b4913cc78e40803c00bec6b1a9dc48ff3684
Validity
Not Before: Mar 29 07:02:02 2026 GMT
Not After : Mar 30 07:02:02 2026 GMT
Subject: CN=de6f604ffb45a8e87a9239b25adf908e1e801569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d5:b6:2d:30:bb:ca:ec:25:f4:f2:a9:5f:22:
c4:a6:88:77:f4:aa:49:bc:5d:60:28:52:4c:37:f0:
12:0f:33:58:db:a6:df:00:33:2d:22:38:51:d7:dc:
86:6c:89:6b:15:43:49:af:3b:f0:57:7b:0c:11:5c:
b0:ac:c6:f6:8f:84:0a:8e:f6:b5:99:30:71:23:dc:
c1:49:07:da:35:be:db:84:d8:0e:e9:b7:e8:e1:f1:
67:0d:74:94:2e:43:48:ca:9d:5e:80:2d:21:b0:2e:
8a:ad:d6:63:6b:84:06:da:8e:14:7d:85:8e:9f:d7:
53:96:59:00:de:e1:61:92:57:b3:14:30:4c:38:5f:
10:29:82:17:b9:4b:cb:29:48:73:bd:0e:fe:d2:74:
25:d2:b6:db:1f:14:48:1f:33:00:54:d6:25:9f:68:
af:78:da:83:f7:4e:ac:97:dc:79:aa:18:f1:f2:ef:
6b:6c:a7:7b:13:3d:3f:89:2c:30:eb:3a:e2:72:91:
7f:b5:d4:32:f6:b9:af:ea:42:e1:e9:ee:62:a4:05:
6b:5f:0f:a3:1a:55:08:3e:ac:3b:45:f0:72:fb:39:
a8:c9:e5:84:ec:70:f3:a6:cb:1d:93:1a:a7:fc:c4:
cd:46:79:e9:65:e9:93:94:3e:d2:d9:83:3f:88:0c:
f5:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:6F:60:4F:FB:45:A8:E8:7A:92:39:B2:5A:DF:90:8E:1E:80:15:69
X509v3 Authority Key Identifier:
keyid:83:B5:B4:91:3C:C7:8E:40:80:3C:00:BE:C6:B1:A9:DC:48:FF:36:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:84:34:a1:ae:e9:6a:08:a1:9b:fe:15:2d:67:3f:de:f9:83:
d6:53:d0:1b:04:f0:f6:4a:74:ca:fa:b6:52:86:e3:2d:41:e5:
c9:bb:ed:c4:33:e6:8d:a5:ec:27:66:a4:f2:1f:e3:30:58:65:
05:ec:41:ad:a1:71:09:2a:86:08:4a:f4:18:91:c7:23:d0:a2:
61:7a:a5:1b:17:95:b5:ca:c0:71:db:21:62:69:50:b4:8f:43:
1a:a6:04:59:c4:3a:25:38:2d:99:04:61:5c:05:50:f6:15:b8:
10:d1:3b:1c:a6:c3:67:b0:95:b0:28:40:6b:d2:4a:06:66:fc:
80:03:61:1e:95:31:06:95:05:02:fa:0c:d9:92:98:07:e0:96:
2d:14:21:ee:2d:5f:76:11:82:62:07:dc:2c:d0:8c:9c:6a:06:
e4:2c:38:bf:a8:52:d0:da:ef:e2:77:94:68:52:3f:78:63:30:
72:c2:1f:2e:25:95:ef:b7:69:b9:98:f4:d0:a1:ee:9f:22:d0:
04:05:88:23:40:1d:02:45:7d:e1:d5:ca:42:7c:f3:d3:d1:f1:
1a:0d:13:b1:20:54:39:64:d9:b3:c7:59:34:47:50:fd:be:50:
1c:76:fc:1f:d2:77:97:99:f4:a5:3a:43:34:10:d4:a4:52:3f:
d3:a8:f7:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:07 2026 by rpki-client