Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/RpG_08_sWhEI8choVHZOK5A9eIg.mft
File: RpG_08_sWhEI8choVHZOK5A9eIg.mft (raw, json)
Hash identifier: GOJS06nuFzzykhWoZPIQ++pxakV5HbPmbQTueB5PNVA=
Subject key identifier: CB:EA:AE:30:98:BD:09:65:77:F5:F8:2C:89:68:41:1D:A6:64:59:B9
Authority key identifier: 46:91:BF:D3:CF:EC:5A:11:08:F1:C8:68:54:76:4E:2B:90:3D:78:88
Certificate issuer: /CN=4691bfd3cfec5a1108f1c86854764e2b903d7888
Certificate serial: 019D37C025882A2BF63529BA2BD1CC6B6905
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RpG_08_sWhEI8choVHZOK5A9eIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/RpG_08_sWhEI8choVHZOK5A9eIg.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 04:00:32 +0000
Manifest this update: Sun 29 Mar 2026 04:00:32 +0000
Manifest next update: Mon 30 Mar 2026 04:00:32 +0000
Files and hashes: 1: 99lIgCZ8a0ei-5wRBXuee2SsGpY.roa (hash: 1ppSKjyGESECn+t5RQboX3iN+5A+rZBrqwtQSTJrj4A=)
2: RpG_08_sWhEI8choVHZOK5A9eIg.crl (hash: i2+2p/V0+XlXDTvwFWI1erfAPNOU82ZO9fh1J0pz/8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/RpG_08_sWhEI8choVHZOK5A9eIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/RpG_08_sWhEI8choVHZOK5A9eIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/RpG_08_sWhEI8choVHZOK5A9eIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:25:88:2a:2b:f6:35:29:ba:2b:d1:cc:6b:69:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4691bfd3cfec5a1108f1c86854764e2b903d7888
Validity
Not Before: Mar 29 04:00:32 2026 GMT
Not After : Mar 30 04:00:32 2026 GMT
Subject: CN=cbeaae3098bd096577f5f82c8968411da66459b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ec:7a:85:0e:b7:8f:70:5a:20:02:7e:34:11:
ee:a1:2e:49:c1:57:12:40:d9:42:e5:fb:ee:11:d6:
51:27:d3:ab:f5:90:1f:e9:be:91:23:d2:c4:4c:05:
8c:a7:da:81:a9:d8:d9:3b:55:77:b7:1a:79:f0:02:
43:0f:3d:43:04:63:35:e5:83:f3:5f:cb:ba:91:ff:
35:d5:09:df:dc:f1:da:e4:9a:01:df:53:1b:34:0a:
63:0f:fd:7d:5f:3a:cf:e7:98:9f:b1:86:d7:ba:b8:
3b:73:36:82:d0:10:b3:ed:0d:5a:8d:a9:18:e1:11:
b5:5f:ae:ec:16:28:88:22:53:a1:78:d8:f2:cf:4a:
72:0b:fa:d5:58:41:d6:87:e5:29:ce:f7:78:b7:0b:
82:8b:a2:92:7f:b1:3e:b4:3a:7b:51:97:89:c3:9d:
af:ec:6f:f0:21:0f:83:44:c2:f6:25:ff:43:08:25:
34:7b:67:8b:33:dd:53:78:b9:79:54:f3:de:1d:c0:
ac:f0:f8:56:10:4a:be:70:8e:f8:23:0a:f5:91:b9:
e9:aa:8d:5b:5a:2d:a4:42:8b:f4:0d:a9:ed:f8:4c:
66:e3:0a:81:6c:68:28:fe:7a:06:67:78:29:bd:bd:
33:a8:1f:a6:be:09:1a:52:1e:cf:bb:00:7a:17:e5:
e3:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:EA:AE:30:98:BD:09:65:77:F5:F8:2C:89:68:41:1D:A6:64:59:B9
X509v3 Authority Key Identifier:
keyid:46:91:BF:D3:CF:EC:5A:11:08:F1:C8:68:54:76:4E:2B:90:3D:78:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RpG_08_sWhEI8choVHZOK5A9eIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/RpG_08_sWhEI8choVHZOK5A9eIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5ea5f0-02d7-4b0f-b0b2-1b86177af0dd/1/RpG_08_sWhEI8choVHZOK5A9eIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:dc:5b:b9:84:a4:9e:cd:04:3a:5d:61:fc:43:22:02:d4:24:
64:f4:34:2d:e4:38:74:3a:fb:8c:e6:7e:10:dc:e4:fd:19:f8:
a4:d4:a0:9c:7c:52:fc:7c:51:2a:e6:f6:37:c6:6f:bf:d3:0b:
14:9d:b1:e4:44:c6:35:15:7c:5f:2c:fa:f1:24:97:4f:ef:f8:
e2:a5:e2:6e:fd:98:63:cd:f7:7f:c5:d5:91:8a:1a:ef:e8:9a:
70:7f:fa:c3:96:82:66:10:71:d9:3e:45:63:20:8f:af:3c:7c:
53:36:af:61:a8:8b:fe:5a:27:65:64:82:95:3e:8d:eb:4d:d6:
4d:c9:ad:81:74:5d:a8:a5:7b:c6:86:cf:87:d4:a4:21:d6:88:
bf:d0:e8:22:ba:ec:f8:be:27:6a:e2:db:37:12:20:9a:c8:8a:
ea:4d:24:2a:cd:6c:e7:fa:94:c0:88:11:3a:e6:26:ad:fb:cf:
f6:1e:cc:e5:ad:51:c5:27:bb:6b:0f:16:f2:77:3b:e2:de:83:
00:b5:a3:a1:54:32:09:d4:51:95:74:ca:79:e4:31:a5:6a:c7:
c2:ab:bf:01:a2:36:24:bc:dd:fe:06:0c:05:99:4a:0d:90:43:
2e:79:16:33:69:fe:ac:29:9d:c3:d5:ee:f4:bf:39:59:02:a7:
a8:f4:db:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:20 2026 by rpki-client