Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/aa1c51-9264-406e-b796-4e00c3b70878/1/g98MrLn9UOG-ffvz0KyFS-7Xhr4.mft
File: g98MrLn9UOG-ffvz0KyFS-7Xhr4.mft (raw, json)
Hash identifier: q4P0p9AGv9Wu0BzlErFO5JHTC8gPCkCfvhweIY6fhho=
Subject key identifier: BA:73:55:01:FA:9E:49:9E:50:72:1F:43:4B:05:01:56:7D:99:94:A7
Authority key identifier: 83:DF:0C:AC:B9:FD:50:E1:BE:7D:FB:F3:D0:AC:85:4B:EE:D7:86:BE
Certificate issuer: /CN=83df0cacb9fd50e1be7dfbf3d0ac854beed786be
Certificate serial: 019D3A1C8A660A74001B6EA78901044E81B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g98MrLn9UOG-ffvz0KyFS-7Xhr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/aa1c51-9264-406e-b796-4e00c3b70878/1/g98MrLn9UOG-ffvz0KyFS-7Xhr4.mft
Manifest number: 0367
Signing time: Sun 29 Mar 2026 15:00:42 +0000
Manifest this update: Sun 29 Mar 2026 15:00:42 +0000
Manifest next update: Mon 30 Mar 2026 15:00:42 +0000
Files and hashes: 1: g98MrLn9UOG-ffvz0KyFS-7Xhr4.crl (hash: gaV9FxLVjxieU/Z6eYvOpJUa8EjjgdWnbNbyiAE4tvk=)
2: uIfUkBd_2uvsZ7jS1ZsJEmyn92c.roa (hash: GOXOMoC6ne/A4gF/DBNRcpJh+oHhM3k8jJSQVwLmm48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/aa1c51-9264-406e-b796-4e00c3b70878/1/g98MrLn9UOG-ffvz0KyFS-7Xhr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/aa1c51-9264-406e-b796-4e00c3b70878/1/g98MrLn9UOG-ffvz0KyFS-7Xhr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/g98MrLn9UOG-ffvz0KyFS-7Xhr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:8a:66:0a:74:00:1b:6e:a7:89:01:04:4e:81:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83df0cacb9fd50e1be7dfbf3d0ac854beed786be
Validity
Not Before: Mar 29 15:00:42 2026 GMT
Not After : Mar 30 15:00:42 2026 GMT
Subject: CN=ba735501fa9e499e50721f434b0501567d9994a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:10:80:c2:b9:b0:59:fb:ba:5e:0f:20:77:31:
0f:4d:05:2b:27:01:71:df:da:55:53:bc:de:41:10:
19:97:6d:81:c2:36:e2:57:45:37:44:42:05:6e:b4:
4a:3d:e0:56:da:88:68:11:4d:e6:08:0d:d5:33:6e:
f8:1d:49:b2:87:2d:16:a3:32:a8:5e:02:fe:ef:34:
9e:cc:8f:2a:29:27:48:88:5d:73:87:b9:7f:0d:1a:
3a:70:50:03:79:70:8d:20:fe:95:30:6b:53:b1:80:
1e:f9:5b:9c:ff:ac:9c:05:2f:e6:0b:72:29:fa:e5:
17:8e:9f:f7:af:c5:a3:66:20:a9:90:0a:66:b2:2e:
51:05:c3:3d:aa:a1:92:5c:c1:7e:c9:4b:a1:90:39:
af:3f:0d:d1:a1:5e:a0:1b:73:38:93:e6:64:3e:1a:
49:f5:95:72:f0:81:d2:42:3e:af:12:9e:21:c9:d0:
af:8b:04:b8:49:31:7d:11:21:06:a8:1f:3d:75:06:
90:13:8e:59:a8:fd:5e:e2:7c:4e:96:e8:ad:70:9f:
a2:75:f2:63:48:dd:6e:ed:94:e2:cc:06:97:d8:53:
f0:9d:a3:74:c0:8c:41:af:0d:4a:0d:46:90:0e:f2:
f4:89:a2:08:f0:86:64:20:a9:0a:8b:44:73:2e:d1:
1d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:73:55:01:FA:9E:49:9E:50:72:1F:43:4B:05:01:56:7D:99:94:A7
X509v3 Authority Key Identifier:
keyid:83:DF:0C:AC:B9:FD:50:E1:BE:7D:FB:F3:D0:AC:85:4B:EE:D7:86:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g98MrLn9UOG-ffvz0KyFS-7Xhr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/aa1c51-9264-406e-b796-4e00c3b70878/1/g98MrLn9UOG-ffvz0KyFS-7Xhr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/aa1c51-9264-406e-b796-4e00c3b70878/1/g98MrLn9UOG-ffvz0KyFS-7Xhr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:0a:ac:15:40:43:de:28:a7:fe:21:bb:6f:12:0f:ba:d1:7f:
9c:01:b5:5a:01:82:60:51:23:b4:65:bb:44:03:36:c3:72:3a:
cf:0c:b3:6d:6a:2d:7b:d3:62:2e:e4:55:f9:5d:41:d7:e1:b5:
47:d2:a6:78:1c:75:18:33:56:65:d9:5c:5b:d3:e2:29:29:82:
92:55:7d:8c:0b:bb:23:2b:dc:ec:07:6f:40:e3:07:be:2e:2e:
93:17:54:19:cf:b5:f1:16:5d:9e:93:a1:03:10:e9:0e:f8:0c:
37:6b:c7:1b:df:95:92:01:1d:83:29:da:8f:86:51:c8:f7:ed:
f6:a6:77:c1:8a:81:be:aa:71:14:47:d6:89:41:09:37:62:8f:
b1:c1:56:7f:eb:a9:97:b1:73:9d:b0:95:3c:46:9c:3e:b2:b2:
c6:a7:ed:f2:5c:82:54:f6:cd:b0:3a:59:52:db:f3:74:81:2d:
d5:fe:ac:85:d0:0f:2c:b4:ef:b6:31:9d:b5:47:3e:17:bc:33:
a1:bb:dd:3d:6f:fb:1d:88:e5:9e:7c:23:db:e7:5e:e8:7d:19:
8a:55:20:50:7c:58:6d:ab:d2:87:7c:df:b2:64:4a:20:66:ae:
b8:6c:2c:3f:a5:64:23:46:dc:fa:9b:62:2f:10:f2:aa:53:4e:
25:ac:08:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:47:55 2026 by rpki-client