Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/g45PalvGxs45SfZa6_10vq4YBfc.mft
File: g45PalvGxs45SfZa6_10vq4YBfc.mft (raw, json)
Hash identifier: r1B4W7o/0ze+KvAfDqTD8a7VhR1elCAmczjaGIEfywo=
Subject key identifier: 5C:B2:40:9C:9E:B0:49:33:FF:BB:D2:7F:AF:F8:15:87:0C:EA:F8:2D
Authority key identifier: 83:8E:4F:6A:5B:C6:C6:CE:39:49:F6:5A:EB:FD:74:BE:AE:18:05:F7
Certificate issuer: /CN=838e4f6a5bc6c6ce3949f65aebfd74beae1805f7
Certificate serial: 019F6126F18B00F8B46A6909BFDD0C1D211E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g45PalvGxs45SfZa6_10vq4YBfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/g45PalvGxs45SfZa6_10vq4YBfc.mft
Manifest number: 27
Signing time: Tue 14 Jul 2026 15:02:49 +0000
Manifest this update: Tue 14 Jul 2026 15:02:49 +0000
Manifest next update: Wed 15 Jul 2026 15:02:49 +0000
Files and hashes: 1: M9hHH-XkfEyrQ9Tgg0N_97kMBk8.roa (hash: ww0iqqt1Yfsck01DFxFXo8c6Y6NbnJ1UQGfZa6OrRsM=)
2: g45PalvGxs45SfZa6_10vq4YBfc.crl (hash: W5BqpBwkFfoh/WmC8HtoJQrNI33Yyi+uJvQP0tog8YU=)
3: rwYJCpd9J4dX5QlLFB6y9XFZnjg.roa (hash: 3F/4Vc414MUT+81iTkj1XtSqLsoqK3OBVs9Vmtoasx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/g45PalvGxs45SfZa6_10vq4YBfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/g45PalvGxs45SfZa6_10vq4YBfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/g45PalvGxs45SfZa6_10vq4YBfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 15 Jul 2026 14:15:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:61:26:f1:8b:00:f8:b4:6a:69:09:bf:dd:0c:1d:21:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=838e4f6a5bc6c6ce3949f65aebfd74beae1805f7
Validity
Not Before: Jul 14 15:02:49 2026 GMT
Not After : Jul 15 15:02:49 2026 GMT
Subject: CN=5cb2409c9eb04933ffbbd27faff815870ceaf82d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:74:2a:9e:b4:f7:7c:1b:38:03:2a:25:54:07:
5c:63:13:4e:dd:a7:74:d3:6f:a1:b6:fb:4e:1c:90:
7a:fc:62:9f:7f:03:34:d1:81:b3:30:d9:03:1a:ac:
db:f6:b2:2e:0a:16:65:a1:86:53:42:04:31:ca:86:
0c:5f:bc:1a:4c:49:fa:9e:84:13:74:80:ec:ed:fc:
be:2e:a2:41:20:97:41:49:73:e8:da:8e:15:9e:a0:
46:04:3b:58:d0:a4:89:63:9a:c3:67:c3:8d:5a:17:
01:7f:b7:c0:df:80:25:58:a2:81:a9:71:93:5e:52:
a8:d1:78:a4:02:df:ef:0d:fa:a0:05:73:6a:ad:9d:
b7:2a:10:99:2f:df:ba:bc:56:53:ed:b9:d9:89:6d:
f8:03:7f:05:01:51:14:fb:68:ba:99:3d:45:b4:87:
24:0a:4f:d2:49:64:99:d4:c4:1f:24:9c:11:9c:e5:
48:ae:5d:0c:71:72:9f:ad:73:e3:b2:5a:38:e0:57:
05:9c:e0:3f:51:0f:5d:44:00:22:5e:27:00:bd:85:
2b:11:b1:1b:7e:6a:e5:67:52:f4:26:8a:5d:ae:f3:
d3:4f:9c:90:61:cb:51:04:04:5a:98:ee:2e:2f:ff:
c5:5d:1f:3d:9a:24:6a:e6:4c:ad:b0:35:cc:b6:2a:
e1:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:B2:40:9C:9E:B0:49:33:FF:BB:D2:7F:AF:F8:15:87:0C:EA:F8:2D
X509v3 Authority Key Identifier:
keyid:83:8E:4F:6A:5B:C6:C6:CE:39:49:F6:5A:EB:FD:74:BE:AE:18:05:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g45PalvGxs45SfZa6_10vq4YBfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/g45PalvGxs45SfZa6_10vq4YBfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/g45PalvGxs45SfZa6_10vq4YBfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:c3:e3:84:8b:e7:a7:52:23:b6:72:a7:62:01:89:e5:1a:b5:
ac:27:bf:4b:98:9c:27:01:55:49:a1:f3:fc:45:d3:e2:fe:1d:
07:35:8a:27:ce:8b:7a:b1:6d:fc:ef:f0:7a:4f:3f:00:ab:e4:
49:1c:6f:de:2a:99:da:82:eb:98:3f:f8:db:08:a3:1f:f0:96:
7f:bc:3f:27:bf:61:df:80:13:89:6f:68:c1:17:c5:69:dc:04:
13:92:93:af:98:04:4b:fe:30:da:e0:f2:ed:1e:33:9b:b2:90:
34:da:d6:c3:d7:db:d7:ae:a5:2a:f1:dd:57:6b:33:86:35:37:
d4:b7:b0:f6:4c:4b:41:7b:8d:e1:5e:ae:75:a6:11:36:a5:69:
24:7b:78:e7:20:24:e4:1d:23:71:2f:dc:7e:0f:62:e8:85:cf:
4b:30:a2:0e:c0:df:50:59:1e:9b:2f:3e:81:b4:b0:4e:c4:50:
9e:7e:76:b3:c0:e6:3c:13:72:c9:aa:e6:d1:ac:2d:37:5c:74:
58:2f:91:5d:69:4a:08:e2:8a:5c:24:f6:8b:77:0d:b8:07:39:
e5:a2:c5:39:a1:31:14:0b:df:3d:d4:76:b1:2b:b9:7e:f4:be:
16:de:71:66:91:81:71:94:c4:13:87:03:90:5f:71:d9:40:5a:
58:9a:f0:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 18:33:57 2026 by rpki-client