Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.mft
File: g6BiUlKSop6X_moFW5vWCEp3GXc.mft (raw, json)
Hash identifier: yfTExwp4zEAKIEe22wnhgiI9FvGENX3lsAmQQ82/RJY=
Subject key identifier: 8B:64:97:93:91:F2:66:23:46:B7:C7:0D:7A:9D:3B:A5:80:A3:C6:5F
Authority key identifier: 83:A0:62:52:52:92:A2:9E:97:FE:6A:05:5B:9B:D6:08:4A:77:19:77
Certificate issuer: /CN=83a062525292a29e97fe6a055b9bd6084a771977
Certificate serial: 019DCDBE03B71CA3999061D70283FFB00F42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g6BiUlKSop6X_moFW5vWCEp3GXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.mft
Manifest number: 18DD
Signing time: Mon 27 Apr 2026 07:01:15 +0000
Manifest this update: Mon 27 Apr 2026 07:01:15 +0000
Manifest next update: Tue 28 Apr 2026 07:01:15 +0000
Files and hashes: 1: MFlCR2JXbFM0gvBh_dWTVgoL37E.roa (hash: yQHl3h+BIb30RJsHlvxFsia7sgue1T2fPrdJ6ihTuRE=)
2: g6BiUlKSop6X_moFW5vWCEp3GXc.crl (hash: iyQmzx8E8tK1dVpLAn0YH2J//e59Uf0tKvv4IVFtKmk=)
3: ovEHIgoLlT5gFEr99b8QyIfy0Hw.roa (hash: iBbHmTmPmE2txWf3AwnVIHjDVj/1ExRukaV5Q59K53k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/g6BiUlKSop6X_moFW5vWCEp3GXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 07:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:be:03:b7:1c:a3:99:90:61:d7:02:83:ff:b0:0f:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83a062525292a29e97fe6a055b9bd6084a771977
Validity
Not Before: Apr 27 07:01:15 2026 GMT
Not After : Apr 28 07:01:15 2026 GMT
Subject: CN=8b64979391f2662346b7c70d7a9d3ba580a3c65f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:db:cc:33:3c:b3:f4:ca:7d:3f:b1:e0:e0:c8:
c1:e5:e3:34:29:8d:2f:75:bc:30:d0:a7:25:19:88:
66:a9:0c:3d:35:19:68:99:48:fa:9a:2d:96:10:89:
c1:42:4c:48:68:a4:72:75:87:80:21:0a:21:00:f7:
c7:92:1b:ac:07:d8:17:20:1a:2d:36:7c:1b:c3:90:
33:97:95:5e:fe:dd:1f:5a:16:9b:85:13:9e:1f:f6:
17:d1:14:5c:a2:15:b3:cc:00:c7:a3:db:f9:8c:e6:
d1:37:8c:aa:cc:09:83:54:1f:fb:5b:ff:92:fe:53:
3c:77:49:d7:86:a6:c6:c3:ff:27:84:c1:04:3d:cc:
5f:58:d2:4e:1f:59:98:ee:28:28:c9:cf:3e:f8:69:
82:6f:d5:d5:a1:4e:55:15:56:67:6b:11:1b:7a:41:
3b:07:fb:c8:2a:74:0d:f6:bc:7f:19:37:39:a6:c7:
18:e1:65:cc:42:70:96:a2:86:cb:a9:9b:99:16:44:
32:a2:8e:ba:11:b4:e5:47:93:48:31:07:19:25:51:
1a:a2:20:f0:78:99:b2:b5:37:d1:85:2c:d2:0e:8b:
e1:94:02:e4:d3:61:64:64:0f:db:50:fd:73:9c:52:
7b:69:6e:f8:d0:ed:a9:f7:f7:f4:3f:be:15:ab:99:
42:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:64:97:93:91:F2:66:23:46:B7:C7:0D:7A:9D:3B:A5:80:A3:C6:5F
X509v3 Authority Key Identifier:
keyid:83:A0:62:52:52:92:A2:9E:97:FE:6A:05:5B:9B:D6:08:4A:77:19:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g6BiUlKSop6X_moFW5vWCEp3GXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/958a2c-cef0-4bcc-99c2-321c9d66c847/1/g6BiUlKSop6X_moFW5vWCEp3GXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:86:5c:c9:16:b7:a9:38:47:60:86:23:3d:04:c1:59:a1:24:
e0:bf:34:66:62:df:22:ba:4f:c2:a2:b2:cb:63:6d:0b:9d:51:
2f:c0:bd:6a:7c:48:e9:72:a1:0c:ea:eb:38:88:37:d4:56:58:
23:cf:10:36:c0:35:77:be:b1:f0:f6:63:ed:35:a1:58:21:0e:
e6:9c:fd:f2:90:85:44:00:bf:ea:f3:78:13:08:53:79:e2:4a:
7b:03:05:98:98:68:75:57:a5:a9:89:5c:43:57:46:90:bf:cb:
dd:16:2b:17:24:b5:fb:f0:0f:37:f6:e7:80:86:b5:2a:52:27:
36:7d:52:f0:24:7a:2b:4e:75:b3:d8:b8:ba:82:56:51:5d:1d:
61:c4:15:b9:9f:89:fc:7c:05:ec:52:86:0b:05:f7:57:26:b1:
4a:65:17:74:d1:4f:fb:4e:3a:cf:e6:6d:2a:d4:09:05:de:fa:
97:af:83:aa:e6:47:d9:4a:bc:8b:56:65:1f:3a:b4:6c:07:71:
1b:a1:61:e7:25:34:05:58:59:4a:92:f4:c0:d9:5d:85:84:0d:
16:0d:33:60:d1:8d:aa:47:ea:6d:65:40:e6:22:8b:17:3c:a0:
a8:73:73:f4:0d:2d:32:5f:2c:2f:64:2a:8e:cf:5e:5d:17:72:
11:78:05:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 17:20:04 2026 by rpki-client