Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/e376af-2641-4aeb-b89f-c11de3925043/1/g2p3PWMyRWGcjs3t1MlLQY_j120.mft
File: g2p3PWMyRWGcjs3t1MlLQY_j120.mft (raw, json)
Hash identifier: 5PXmwdCwaADA9WS0+rPEJU/uId3+37eOJS0buLpWO1E=
Subject key identifier: 91:30:57:5F:06:01:2A:1C:61:93:5B:62:F8:42:11:3D:C1:29:03:48
Authority key identifier: 83:6A:77:3D:63:32:45:61:9C:8E:CD:ED:D4:C9:4B:41:8F:E3:D7:6D
Certificate issuer: /CN=836a773d633245619c8ecdedd4c94b418fe3d76d
Certificate serial: 019D3A543422C0265CC9699C4282D2180122
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2p3PWMyRWGcjs3t1MlLQY_j120.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/e376af-2641-4aeb-b89f-c11de3925043/1/g2p3PWMyRWGcjs3t1MlLQY_j120.mft
Manifest number: 2D
Signing time: Sun 29 Mar 2026 16:01:29 +0000
Manifest this update: Sun 29 Mar 2026 16:01:29 +0000
Manifest next update: Mon 30 Mar 2026 16:01:29 +0000
Files and hashes: 1: 2lSIdgx3Qs-YZF0wAAumY43frjg.roa (hash: HAwBeX3iybs+ecUh2CgT9lHQ03ODLUy9p/NbMRpq8Z4=)
2: g2p3PWMyRWGcjs3t1MlLQY_j120.crl (hash: uG8G6HGDJN3RF1ht6yornaVMCAhZ3SzQmIKnoZ64PrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/e376af-2641-4aeb-b89f-c11de3925043/1/g2p3PWMyRWGcjs3t1MlLQY_j120.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/e376af-2641-4aeb-b89f-c11de3925043/1/g2p3PWMyRWGcjs3t1MlLQY_j120.mft
rsync://rpki.ripe.net/repository/DEFAULT/g2p3PWMyRWGcjs3t1MlLQY_j120.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:54:34:22:c0:26:5c:c9:69:9c:42:82:d2:18:01:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=836a773d633245619c8ecdedd4c94b418fe3d76d
Validity
Not Before: Mar 29 16:01:29 2026 GMT
Not After : Mar 30 16:01:29 2026 GMT
Subject: CN=9130575f06012a1c61935b62f842113dc1290348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d4:54:25:ce:75:59:76:7d:5b:b0:b8:d9:33:
2a:18:35:e6:c0:4b:70:df:89:a4:6e:0b:4e:80:8b:
42:7d:56:3f:39:43:10:ca:a1:db:ec:00:fc:60:78:
6c:98:d6:c4:30:e4:34:ce:87:83:da:38:95:42:c0:
45:e4:3b:4b:83:b6:9d:52:64:11:03:74:1a:ea:e4:
60:18:7a:11:0b:ba:c3:00:f3:7d:eb:ac:4a:b6:b5:
89:57:61:b9:57:d9:75:4a:b3:c7:48:36:e5:40:8d:
05:31:b6:fb:ff:be:80:30:59:f8:eb:cf:b4:ab:c2:
85:4c:91:86:7c:b5:9c:f3:80:d1:ff:c3:dc:52:84:
2f:5c:34:f4:52:2d:69:16:93:e9:08:28:b6:99:f4:
ca:1a:8f:09:7e:f7:57:1a:83:08:3a:b6:af:c1:c6:
52:42:83:b0:de:44:f7:37:22:f9:0f:3b:1e:97:dc:
51:6a:df:35:54:6b:c3:2c:01:64:a6:1b:ef:08:2b:
7c:49:7b:8e:fb:2b:56:51:a3:61:35:ff:4d:2c:c8:
2d:ba:59:56:3e:23:4e:90:44:d9:27:6a:ec:ef:e3:
b3:e7:87:d8:53:b1:7d:2a:8e:8b:61:ac:7d:89:f9:
0b:10:b3:97:29:a0:8a:44:c5:c3:82:fb:68:c8:23:
df:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:30:57:5F:06:01:2A:1C:61:93:5B:62:F8:42:11:3D:C1:29:03:48
X509v3 Authority Key Identifier:
keyid:83:6A:77:3D:63:32:45:61:9C:8E:CD:ED:D4:C9:4B:41:8F:E3:D7:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2p3PWMyRWGcjs3t1MlLQY_j120.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e376af-2641-4aeb-b89f-c11de3925043/1/g2p3PWMyRWGcjs3t1MlLQY_j120.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e376af-2641-4aeb-b89f-c11de3925043/1/g2p3PWMyRWGcjs3t1MlLQY_j120.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:a4:ee:89:c9:c6:c7:f5:ea:2d:39:49:16:a7:db:f7:16:d7:
06:57:10:4d:ca:a8:a5:9f:ea:29:33:50:8a:d9:de:77:54:64:
7c:bb:75:06:f7:16:23:8c:2d:60:47:15:99:61:b6:d6:e3:be:
74:13:14:30:fa:67:02:ba:84:10:e1:93:ef:4c:a1:ce:32:91:
23:cd:b0:ca:dc:56:c4:c3:d0:72:16:7c:57:22:6f:f5:e3:14:
90:42:5b:d3:ca:08:46:1c:8b:d8:99:de:12:70:15:7c:12:dc:
b4:c3:5d:fc:45:5f:e7:99:43:64:25:d9:55:c8:fd:bd:4e:73:
52:a7:45:26:19:fd:7c:6d:88:7d:b2:07:ef:9e:4a:88:6f:16:
6a:9a:5e:e4:51:bf:46:d8:d5:0b:e6:7a:2d:50:61:67:2a:be:
e4:f9:53:0f:8e:b9:2c:95:96:63:12:7a:cb:61:00:3a:d5:8d:
28:3d:85:66:79:e3:e9:99:1e:7a:99:a0:c2:aa:6e:6f:3f:5e:
f1:a3:86:46:d2:5c:a8:6b:2f:0c:67:55:02:ff:2a:7a:eb:1a:
f6:73:a1:a0:52:18:83:6c:4f:47:0f:87:4d:7f:13:c5:ff:20:
78:65:1b:2a:95:da:ef:8d:ac:fb:0e:ab:f9:75:88:cb:d9:52:
d6:cb:c1:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:14:28 2026 by rpki-client