Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/g45PalvGxs45SfZa6_10vq4YBfc.mft
File: g45PalvGxs45SfZa6_10vq4YBfc.mft (raw, json)
Hash identifier: q7IEsgGW5l4tRnBwZqTOZzFzz2Tx2uR9CUiphj8GKl4=
Subject key identifier: 52:C2:5C:16:E5:19:59:A2:15:19:B3:58:27:86:1D:89:51:C7:8A:85
Authority key identifier: 83:8E:4F:6A:5B:C6:C6:CE:39:49:F6:5A:EB:FD:74:BE:AE:18:05:F7
Certificate issuer: /CN=838e4f6a5bc6c6ce3949f65aebfd74beae1805f7
Certificate serial: 01A176283BE59F14E381242E6DB2AAF05CE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g45PalvGxs45SfZa6_10vq4YBfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/g45PalvGxs45SfZa6_10vq4YBfc.mft
Manifest number: 013B
Signing time: Mon 26 Oct 2026 03:01:50 +0000
Manifest this update: Mon 26 Oct 2026 03:01:50 +0000
Manifest next update: Tue 27 Oct 2026 03:01:50 +0000
Files and hashes: 1: M9hHH-XkfEyrQ9Tgg0N_97kMBk8.roa (hash: ww0iqqt1Yfsck01DFxFXo8c6Y6NbnJ1UQGfZa6OrRsM=)
2: g45PalvGxs45SfZa6_10vq4YBfc.crl (hash: X6wZad3PQp/jtZlLiUo0S4e+hq4S1xNBysGn0RPpdqA=)
3: rwYJCpd9J4dX5QlLFB6y9XFZnjg.roa (hash: 3F/4Vc414MUT+81iTkj1XtSqLsoqK3OBVs9Vmtoasx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/g45PalvGxs45SfZa6_10vq4YBfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/g45PalvGxs45SfZa6_10vq4YBfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/g45PalvGxs45SfZa6_10vq4YBfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:76:28:3b:e5:9f:14:e3:81:24:2e:6d:b2:aa:f0:5c:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=838e4f6a5bc6c6ce3949f65aebfd74beae1805f7
Validity
Not Before: Oct 26 03:01:50 2026 GMT
Not After : Oct 27 03:01:50 2026 GMT
Subject: CN=52c25c16e51959a21519b35827861d8951c78a85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:63:05:c5:08:cd:53:1f:e6:8a:68:8d:53:b1:
1e:66:a0:ca:2a:93:d9:28:f3:81:09:5f:be:a9:ac:
16:44:e0:e0:78:8f:72:82:19:82:bf:9c:cc:98:a0:
b6:05:32:45:21:47:51:73:44:98:85:a5:ab:eb:b5:
4d:ef:8e:9e:aa:b1:8e:a4:43:9e:38:79:4d:15:8a:
3b:e2:34:a6:fe:d2:84:b7:5a:3c:a5:44:22:dc:e9:
de:cc:7a:f7:40:32:82:00:d6:26:ea:91:fd:55:01:
db:a1:fd:ca:84:7d:20:ec:ff:5f:76:40:ae:21:73:
c6:f9:ba:45:78:c2:ae:4f:84:49:b6:8a:58:0c:be:
ec:db:5d:4e:6e:1b:fb:41:47:4a:08:98:77:8c:14:
97:f4:44:c3:ea:99:f9:cf:ec:ba:a0:65:70:1c:c9:
1b:45:de:e0:60:f3:63:e1:db:94:5c:85:dd:b4:5c:
1d:ef:5c:45:4a:3d:4b:e4:dc:4c:76:d5:77:09:cc:
4d:71:c1:c2:39:10:fe:79:11:87:f5:a8:77:a8:66:
8a:e6:23:69:34:e2:4f:81:69:41:f2:25:ec:6a:7d:
c1:0f:b3:1b:81:05:93:2a:61:93:a1:d9:f1:3d:dc:
ef:6d:4b:20:35:9e:96:39:15:8e:8b:1b:5c:79:02:
45:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:C2:5C:16:E5:19:59:A2:15:19:B3:58:27:86:1D:89:51:C7:8A:85
X509v3 Authority Key Identifier:
keyid:83:8E:4F:6A:5B:C6:C6:CE:39:49:F6:5A:EB:FD:74:BE:AE:18:05:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g45PalvGxs45SfZa6_10vq4YBfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/g45PalvGxs45SfZa6_10vq4YBfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/g45PalvGxs45SfZa6_10vq4YBfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:fb:3c:5b:be:f8:43:e8:94:b9:f6:cb:4d:eb:84:e4:55:7f:
12:ee:97:fe:ce:12:80:61:51:dd:c5:aa:1d:84:26:f5:04:05:
cd:b3:f9:f3:ee:bd:61:a2:8e:ad:60:bc:a5:1f:1c:75:f4:69:
0d:3d:e1:8b:ac:68:7a:f9:48:2f:89:d2:16:e7:58:76:eb:e1:
d8:f8:dc:9b:3a:33:69:ec:6d:79:e4:83:7e:93:d0:41:e0:40:
89:2b:aa:30:ab:ae:b8:30:6b:9e:a2:58:44:8c:2c:15:db:51:
54:d1:af:9e:13:18:72:aa:4e:e3:f6:74:ee:9e:45:b9:39:91:
54:53:03:f7:d0:05:8e:e1:2e:10:ed:c0:27:c5:a7:33:71:08:
77:72:cd:56:ae:8e:b1:7d:38:d9:69:bc:d3:21:c9:7c:10:a1:
52:00:b5:31:05:17:eb:b2:12:7f:c7:e6:2e:9f:04:0b:9a:22:
0e:df:ca:9e:b0:08:95:39:22:60:93:01:28:f1:59:5e:98:42:
08:c3:d6:47:8f:58:c3:86:9f:9b:4a:9a:1d:01:61:46:a2:42:
13:91:ed:70:40:ca:28:5b:01:83:a1:a9:a3:61:ca:1b:26:fb:
26:e6:cd:a9:e5:e5:e3:4e:8b:51:03:b0:82:ec:78:10:8b:33:
05:ba:eb:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:39:28 2026 by rpki-client