Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/g45PalvGxs45SfZa6_10vq4YBfc.mft
File: g45PalvGxs45SfZa6_10vq4YBfc.mft (raw, json)
Hash identifier: E6lU/4WsfwfvZBAbvH/X+37cOJrRsniFWjonBszqe8M=
Subject key identifier: AD:1F:86:10:C7:B4:53:49:0D:8B:D3:0A:02:45:4F:C3:C7:C8:28:BD
Authority key identifier: 83:8E:4F:6A:5B:C6:C6:CE:39:49:F6:5A:EB:FD:74:BE:AE:18:05:F7
Certificate issuer: /CN=838e4f6a5bc6c6ce3949f65aebfd74beae1805f7
Certificate serial: 01A06BA63626D1AD73663145AACC884CE536
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g45PalvGxs45SfZa6_10vq4YBfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/g45PalvGxs45SfZa6_10vq4YBfc.mft
Manifest number: B1
Signing time: Fri 04 Sep 2026 09:00:49 +0000
Manifest this update: Fri 04 Sep 2026 09:00:49 +0000
Manifest next update: Sat 05 Sep 2026 09:00:49 +0000
Files and hashes: 1: M9hHH-XkfEyrQ9Tgg0N_97kMBk8.roa (hash: ww0iqqt1Yfsck01DFxFXo8c6Y6NbnJ1UQGfZa6OrRsM=)
2: g45PalvGxs45SfZa6_10vq4YBfc.crl (hash: +2yo5xcJ9j3jDcfz75e+SgmdHxZtGK+LBg399WLwUY8=)
3: rwYJCpd9J4dX5QlLFB6y9XFZnjg.roa (hash: 3F/4Vc414MUT+81iTkj1XtSqLsoqK3OBVs9Vmtoasx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/g45PalvGxs45SfZa6_10vq4YBfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/g45PalvGxs45SfZa6_10vq4YBfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/g45PalvGxs45SfZa6_10vq4YBfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6b:a6:36:26:d1:ad:73:66:31:45:aa:cc:88:4c:e5:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=838e4f6a5bc6c6ce3949f65aebfd74beae1805f7
Validity
Not Before: Sep 4 09:00:49 2026 GMT
Not After : Sep 5 09:00:49 2026 GMT
Subject: CN=ad1f8610c7b453490d8bd30a02454fc3c7c828bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d2:7d:de:ae:c7:35:37:93:d7:b8:4f:a0:51:
e2:64:c8:06:5d:1b:f6:fe:2f:af:d9:34:b9:14:86:
b7:bb:c0:26:d7:c5:7c:f1:89:a5:b0:6c:27:55:a2:
2b:cc:33:34:f8:bb:51:c7:3d:b4:28:d2:dd:c8:41:
5c:0f:e9:c0:3b:e9:d7:cc:e9:88:e4:dc:77:74:ff:
2e:20:76:50:b5:b3:13:29:db:46:63:5f:bb:e4:be:
af:9d:40:e3:49:36:0a:27:37:23:bc:f7:1b:78:28:
82:e0:3f:35:2e:f0:99:29:e6:ae:fe:67:18:33:ab:
b8:eb:d1:3e:63:50:81:95:fa:4e:cd:85:ad:10:d9:
35:52:fd:5d:a2:98:27:4b:a9:f8:24:58:df:71:56:
64:53:bf:01:6c:8d:2e:33:db:14:69:ac:42:05:97:
72:af:b5:98:fb:4b:df:16:84:3d:80:b1:30:82:8b:
1f:30:ab:85:2b:67:b8:c9:45:4d:d5:db:d4:d7:3a:
b2:de:b8:6e:ee:e5:7a:40:70:f1:62:e0:7d:8d:41:
3d:61:a0:14:d4:ae:d3:cf:7c:f4:ed:93:a5:a2:5b:
53:88:2d:34:08:7b:42:fd:cf:02:91:01:6e:ee:21:
44:1b:d4:af:d4:2a:fb:cd:06:94:f3:c9:8a:06:79:
2c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:1F:86:10:C7:B4:53:49:0D:8B:D3:0A:02:45:4F:C3:C7:C8:28:BD
X509v3 Authority Key Identifier:
keyid:83:8E:4F:6A:5B:C6:C6:CE:39:49:F6:5A:EB:FD:74:BE:AE:18:05:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g45PalvGxs45SfZa6_10vq4YBfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/g45PalvGxs45SfZa6_10vq4YBfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/g45PalvGxs45SfZa6_10vq4YBfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:39:5a:bd:4f:a3:9c:d4:86:e2:7f:46:77:75:bc:1a:14:26:
ff:86:cb:53:de:8b:74:a0:3a:ae:a2:d4:30:37:4a:60:a2:db:
10:6a:d1:30:58:52:3c:fd:cb:90:67:be:5f:79:60:22:e8:57:
26:92:0e:29:43:08:a2:45:c2:52:25:e9:d8:76:b1:9f:1f:2d:
34:75:96:4e:6e:e3:ce:3a:c0:c8:d3:2a:62:74:2d:33:8d:56:
a7:ac:77:35:bc:a6:1e:2e:da:09:c9:1f:40:b4:47:85:09:ef:
cb:21:98:a7:d4:76:77:9e:38:69:a6:5d:00:c2:ac:2e:8f:5c:
c4:ac:2c:b3:6e:f7:3e:aa:9c:0a:50:98:2b:d2:cc:3a:f1:a5:
9f:3a:fe:32:3e:6f:c7:ec:24:11:3c:a1:ff:ad:1d:1f:c0:91:
98:e8:5e:86:d9:87:7a:c1:0d:00:6b:aa:3b:b5:5e:c2:43:ed:
7e:7a:be:64:48:2c:08:31:99:dd:1e:1c:78:8e:14:aa:52:4a:
49:6d:99:52:65:98:bf:e9:6a:50:4d:ba:24:e9:d7:01:d3:e1:
b9:c8:97:d6:9d:5f:d0:6a:77:01:3b:89:3d:9a:17:ea:95:e2:
ce:60:a1:b9:16:d9:f0:74:65:91:41:b9:c9:2f:61:b0:da:aa:
94:d8:8d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 16:21:41 2026 by rpki-client