Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.mft
File: g-XZAwHTz2e4j-5C3VRa_PFOpWE.mft (raw, json)
Hash identifier: jGq/nklf7+Ansz00wUvwc41hvfoT334WjKbOK7CEags=
Subject key identifier: F5:CB:0E:7B:FD:4A:62:0F:9B:89:AF:B3:09:BF:6A:94:73:87:C7:3B
Authority key identifier: 83:E5:D9:03:01:D3:CF:67:B8:8F:EE:42:DD:54:5A:FC:F1:4E:A5:61
Certificate issuer: /CN=83e5d90301d3cf67b88fee42dd545afcf14ea561
Certificate serial: 019EFB3A47F80588B6410D01C9BF4282D01D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-XZAwHTz2e4j-5C3VRa_PFOpWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.mft
Manifest number: 0FE7
Signing time: Wed 24 Jun 2026 20:02:40 +0000
Manifest this update: Wed 24 Jun 2026 20:02:40 +0000
Manifest next update: Thu 25 Jun 2026 20:02:40 +0000
Files and hashes: 1: g-XZAwHTz2e4j-5C3VRa_PFOpWE.crl (hash: /jl2jzzaIJ9sX92h7NODiqW/3VqgGDSylFH4atLup/I=)
2: wimRgdCrrR4TvVjD45kak059z3k.roa (hash: a5C05EHm2JJFNFLb2g2uTQzLs6i6/Ga5rEL4Ya3/5kA=)
3: xkBGMTnH9dIUv5aeR6a2PC8pSMI.roa (hash: n4jn6g+/sKr9SjKht58rDpi14/4dvnS/2o8klkQ9iBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/g-XZAwHTz2e4j-5C3VRa_PFOpWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 14:31:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fb:3a:47:f8:05:88:b6:41:0d:01:c9:bf:42:82:d0:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83e5d90301d3cf67b88fee42dd545afcf14ea561
Validity
Not Before: Jun 24 20:02:40 2026 GMT
Not After : Jun 25 20:02:40 2026 GMT
Subject: CN=f5cb0e7bfd4a620f9b89afb309bf6a947387c73b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ee:cd:4f:1c:1b:59:4b:41:1c:d7:be:c3:9e:
73:18:61:53:31:6c:02:96:5e:d9:ba:23:6d:e8:33:
45:98:f1:fc:b8:0a:ff:70:e3:10:b7:f8:2e:82:22:
6d:9c:13:2c:5c:8c:c5:1b:6e:16:74:6a:01:45:02:
40:b8:b1:7d:b3:88:6e:ed:8e:c2:9b:91:7d:f8:38:
bf:7c:2a:a2:b7:be:af:91:d6:ac:da:bb:a1:03:cb:
45:de:b1:ae:52:12:12:76:0b:63:4c:8c:32:23:48:
09:74:ce:98:ac:17:83:2f:86:5e:e4:fb:fe:45:5f:
2e:5e:c4:93:f2:05:0e:93:5e:70:5e:8b:a7:9f:6c:
23:15:63:3f:47:b5:1f:f5:95:72:03:46:20:a4:bd:
0b:e3:df:2f:c5:88:7e:c8:93:e8:74:ce:1c:23:fe:
43:ee:67:63:0b:04:ed:d8:af:f3:34:ae:cf:ed:72:
07:85:0b:45:91:11:11:44:4d:72:27:f6:63:fd:0f:
1a:3b:ae:3d:23:a9:ee:11:01:a1:89:63:25:8c:6b:
ee:02:33:55:93:3a:79:41:df:0f:76:83:cb:31:d5:
74:58:94:0d:00:ab:b9:68:28:df:ea:df:8f:6f:92:
2d:55:d0:21:8c:0b:82:65:2b:ff:ce:e4:7f:05:1e:
a7:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:CB:0E:7B:FD:4A:62:0F:9B:89:AF:B3:09:BF:6A:94:73:87:C7:3B
X509v3 Authority Key Identifier:
keyid:83:E5:D9:03:01:D3:CF:67:B8:8F:EE:42:DD:54:5A:FC:F1:4E:A5:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-XZAwHTz2e4j-5C3VRa_PFOpWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:2c:b0:4e:fb:40:28:7b:bc:c6:91:57:3f:92:0c:fc:84:71:
c8:b9:4d:85:d4:0d:bf:e3:5d:e9:ee:5b:48:ef:d7:50:ec:70:
ce:91:5b:89:1a:a5:6b:82:48:82:9a:0c:9e:e3:1b:d1:5c:a1:
b3:ea:36:8b:c0:7e:ad:ba:db:96:8a:24:27:fd:72:5f:7c:4f:
34:be:8e:4f:5c:d2:8f:cb:c9:5a:ea:20:c8:4b:09:3d:0d:b4:
16:50:3c:ba:dd:33:66:8e:2c:97:bc:aa:44:30:78:23:57:33:
a3:4e:3b:ef:0e:58:b2:9b:2b:95:65:71:da:e3:1d:54:51:5b:
7b:d2:10:a3:89:3a:21:d4:47:af:0f:24:0e:85:44:04:9c:a2:
30:13:92:90:dd:bf:8c:ab:ca:a8:64:2e:71:b1:d8:28:75:91:
c1:e0:b8:71:4d:10:8e:c2:f4:fe:83:65:43:87:32:8c:d1:5c:
d3:57:e9:f2:5b:d7:6f:b2:ae:48:97:a5:04:2b:b8:2d:bd:9b:
ba:d6:6d:45:b8:9b:5c:37:90:6c:60:ab:e7:45:59:64:5a:88:
15:a7:82:ab:e6:76:14:21:e4:b5:09:40:fd:40:65:84:09:a1:
e6:8a:13:5a:03:e9:f9:30:0b:a4:81:e4:95:01:2a:e1:04:a5:
f4:b7:31:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 22:18:30 2026 by rpki-client