Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/031463-58e6-4fcb-8ca1-1fcfd0c8bdf5/1/g-z7ZL2lITcI_2e61Mg5ULH_3Dg.mft
File: g-z7ZL2lITcI_2e61Mg5ULH_3Dg.mft (raw, json)
Hash identifier: A8uS01w1ZvCsNl6w9s5IuBwwQZx9+STh7ns7etlJbB8=
Subject key identifier: B2:DA:90:33:6D:42:BA:8E:DE:30:9A:87:E3:36:14:14:21:71:DA:D3
Authority key identifier: 83:EC:FB:64:BD:A5:21:37:08:FF:67:BA:D4:C8:39:50:B1:FF:DC:38
Certificate issuer: /CN=83ecfb64bda5213708ff67bad4c83950b1ffdc38
Certificate serial: 019E295DBEAEF8683C78A9DDBE39850E4331
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-z7ZL2lITcI_2e61Mg5ULH_3Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/031463-58e6-4fcb-8ca1-1fcfd0c8bdf5/1/g-z7ZL2lITcI_2e61Mg5ULH_3Dg.mft
Manifest number: 0531
Signing time: Fri 15 May 2026 02:01:09 +0000
Manifest this update: Fri 15 May 2026 02:01:09 +0000
Manifest next update: Sat 16 May 2026 02:01:09 +0000
Files and hashes: 1: g-z7ZL2lITcI_2e61Mg5ULH_3Dg.crl (hash: TIqqeK1esMvtYtobW6bgyQ8/dfBw9DKlisttI86+s/E=)
2: iDnpWnswoM1c9lvGYirm24qcRro.asa (hash: zdcKCrx8wMEOfgyXCemzzVDahKVL6pAaJICxA3cnaTI=)
3: uX9RFldD_ZI14WBF0_J3zmXVSmY.roa (hash: 5VQ5HAdHZFYwUc79OmQg0PEjho46iWIuaIrNO9hQGtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/031463-58e6-4fcb-8ca1-1fcfd0c8bdf5/1/g-z7ZL2lITcI_2e61Mg5ULH_3Dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/031463-58e6-4fcb-8ca1-1fcfd0c8bdf5/1/g-z7ZL2lITcI_2e61Mg5ULH_3Dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/g-z7ZL2lITcI_2e61Mg5ULH_3Dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:29:5d:be:ae:f8:68:3c:78:a9:dd:be:39:85:0e:43:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83ecfb64bda5213708ff67bad4c83950b1ffdc38
Validity
Not Before: May 15 02:01:09 2026 GMT
Not After : May 16 02:01:09 2026 GMT
Subject: CN=b2da90336d42ba8ede309a87e33614142171dad3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ef:ed:4d:41:8e:af:c2:96:8f:b3:94:a5:93:
f2:bb:4a:45:3c:9a:85:ac:3e:20:36:70:19:22:35:
6c:b4:6c:31:5a:e6:09:98:ee:5b:dd:93:26:06:b9:
08:fd:9c:44:71:a6:14:10:9c:8f:f6:c6:04:99:3a:
4c:a1:68:7b:5b:83:42:1c:8c:41:65:92:2f:09:b0:
d4:4c:58:36:ed:1e:aa:10:7f:c7:8a:91:99:5d:63:
03:f1:87:e1:85:dc:22:02:8c:87:06:86:ae:a6:1c:
ef:ef:9f:eb:7d:ab:76:e3:ac:bc:45:fb:62:04:37:
04:48:51:fc:6a:9b:59:10:75:46:5f:a4:f3:2c:bd:
a8:3a:d1:a6:63:c9:ae:ca:69:bb:e2:2b:be:53:b8:
70:7f:af:34:2e:4a:e6:79:27:9e:f5:7f:58:23:d9:
ee:73:b3:63:5f:f6:84:34:03:e2:9b:f9:be:a7:5c:
66:71:40:c2:1d:83:fb:2d:21:c8:83:f6:f1:c1:ae:
c2:29:e0:ff:0e:93:34:c8:06:fc:9e:93:29:54:8b:
ed:62:19:a6:58:51:44:33:a1:0e:da:0e:c3:91:8a:
21:f8:d2:36:9e:7f:ad:67:6d:6c:00:1e:21:15:5e:
24:de:51:fe:9f:ed:61:a9:47:05:31:18:68:eb:9b:
c8:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:DA:90:33:6D:42:BA:8E:DE:30:9A:87:E3:36:14:14:21:71:DA:D3
X509v3 Authority Key Identifier:
keyid:83:EC:FB:64:BD:A5:21:37:08:FF:67:BA:D4:C8:39:50:B1:FF:DC:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-z7ZL2lITcI_2e61Mg5ULH_3Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/031463-58e6-4fcb-8ca1-1fcfd0c8bdf5/1/g-z7ZL2lITcI_2e61Mg5ULH_3Dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/031463-58e6-4fcb-8ca1-1fcfd0c8bdf5/1/g-z7ZL2lITcI_2e61Mg5ULH_3Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:2b:d9:a1:c2:92:a9:40:c1:97:62:6a:63:98:38:1d:b5:03:
15:25:61:91:a4:bf:64:04:f0:2a:57:14:f7:e4:4f:79:08:f3:
26:e9:82:db:cf:20:e4:93:94:b9:a4:f2:07:b1:2f:1b:57:aa:
85:03:76:0b:66:67:a5:b0:7f:5b:58:6f:53:f0:0e:4b:32:bb:
d3:ca:88:d5:fc:d4:4d:c7:3a:f8:ba:e6:4a:30:95:4c:1a:af:
76:f6:bd:ad:21:22:4b:8d:f4:9e:a4:04:d9:6a:4e:95:4d:85:
34:5a:b5:67:72:c3:35:13:64:8d:50:5c:90:6b:bf:f5:02:2c:
13:5f:0b:e8:26:08:67:f4:77:31:9b:a5:fa:62:e4:f1:a6:5e:
a2:97:84:d1:21:0e:51:98:6e:82:2a:87:df:15:ac:5b:d8:45:
ca:4e:6e:92:87:73:24:48:52:2b:92:34:ca:e9:29:49:92:ce:
24:ec:94:ee:ff:d8:2b:ed:64:3c:16:f6:0c:ff:54:ad:47:b7:
e7:ed:63:26:98:f2:f6:2a:7c:18:c4:c5:85:74:0f:8a:ac:e5:
14:b9:55:ab:4b:a1:3c:46:d4:09:96:28:ba:0e:f9:fe:87:42:
ab:1f:88:bc:59:b3:77:c5:d0:5b:8d:29:80:fa:66:dd:0b:e6:
f8:41:03:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:58:29 2026 by rpki-client