Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.mft
File: g-I0DvXEpJUutBPSiMKdk3g0IjI.mft (raw, json)
Hash identifier: 5XDDMuw5dfhWlST9N9bziaFYVxIP2uIek9eOCNMUjc0=
Subject key identifier: 09:20:9E:CF:45:BD:C9:86:68:85:20:39:EF:49:B6:08:A5:74:28:04
Authority key identifier: 83:E2:34:0E:F5:C4:A4:95:2E:B4:13:D2:88:C2:9D:93:78:34:22:32
Certificate issuer: /CN=83e2340ef5c4a4952eb413d288c29d9378342232
Certificate serial: 019E1D598820F3463761F66C298C8A9C73BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-I0DvXEpJUutBPSiMKdk3g0IjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.mft
Manifest number: 12A0
Signing time: Tue 12 May 2026 18:01:07 +0000
Manifest this update: Tue 12 May 2026 18:01:07 +0000
Manifest next update: Wed 13 May 2026 18:01:07 +0000
Files and hashes: 1: N4QCwmv8Sw5ybiIBKm-0kiR2k5M.roa (hash: jAlFMSYTvLNZZPUNEkcMr5EHaq268sFn92XHnKsQ7g4=)
2: QQ5S1kn00ChCgstLW3aRVKkKIS4.roa (hash: X5JipwgBz71sKHnS2t/k7iUruR1RHoHrGOPn5Rwy9nI=)
3: g-I0DvXEpJUutBPSiMKdk3g0IjI.crl (hash: 6GGk+s9DUS5wcokGVMtUTLI3je5Hooj3lbFdsjtH6uM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/g-I0DvXEpJUutBPSiMKdk3g0IjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 18:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:88:20:f3:46:37:61:f6:6c:29:8c:8a:9c:73:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83e2340ef5c4a4952eb413d288c29d9378342232
Validity
Not Before: May 12 18:01:07 2026 GMT
Not After : May 13 18:01:07 2026 GMT
Subject: CN=09209ecf45bdc98668852039ef49b608a5742804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:82:aa:43:15:fe:c4:a5:ff:ae:75:11:1e:f7:
b9:30:83:e3:66:79:92:0d:5d:4b:08:14:fb:d3:e3:
5d:c0:6e:38:a1:25:41:41:74:98:00:b5:1b:12:bd:
89:14:ea:8d:16:00:7a:20:44:21:3b:39:25:a8:62:
96:4f:c0:bf:bc:5c:96:dc:1a:96:0f:df:72:e3:2b:
bd:21:f3:13:cd:ed:1a:b5:53:c4:64:33:54:da:f2:
6d:64:d2:03:d2:e4:3e:6d:30:2e:3e:86:ca:75:dd:
30:71:70:4b:6c:4a:57:c7:58:8b:4c:e8:6c:67:ea:
97:f7:8b:70:9e:bc:b3:69:5f:01:8d:6b:1c:b6:ca:
48:3a:23:7a:75:e7:de:51:04:ea:b5:5b:fe:b7:62:
59:41:91:49:6f:87:88:c6:d7:00:a0:33:e1:39:02:
69:a9:43:ab:36:92:82:a8:3b:43:5c:cc:03:53:52:
c1:19:c2:f4:16:64:4d:1e:6d:1f:26:5f:4c:37:b1:
f6:99:c5:d3:fe:27:5c:44:86:cd:40:d6:e3:51:82:
f9:6f:ad:df:91:f6:a7:75:f5:91:3b:17:5e:9b:5b:
54:78:3d:96:ce:58:99:1e:5c:5b:9c:b9:bf:6b:11:
6b:bf:cf:38:47:e5:01:35:c7:06:9b:34:3b:43:0d:
cc:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:20:9E:CF:45:BD:C9:86:68:85:20:39:EF:49:B6:08:A5:74:28:04
X509v3 Authority Key Identifier:
keyid:83:E2:34:0E:F5:C4:A4:95:2E:B4:13:D2:88:C2:9D:93:78:34:22:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-I0DvXEpJUutBPSiMKdk3g0IjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:95:35:81:67:a5:78:7f:ee:a1:78:61:39:4e:1a:db:57:bb:
b6:84:03:78:1f:ad:f5:7c:b8:37:5b:82:14:17:b6:ee:78:e3:
66:c4:0d:31:57:c6:17:f0:ac:70:63:8d:a8:96:3c:ea:51:6a:
7f:e5:70:23:81:c4:7f:b2:d1:c3:a9:3f:64:ec:ab:6b:c2:24:
0c:5e:bf:ef:52:65:1e:1c:0d:f6:54:5a:1f:7a:c2:32:58:97:
57:4c:e7:6f:c4:3f:76:cd:41:65:18:78:77:d2:93:0b:92:05:
9d:fc:86:aa:7a:d8:b6:c8:64:9f:db:65:90:1c:8f:69:2c:71:
22:7d:89:89:fc:82:3f:fd:82:cf:79:4f:a7:8d:dd:0b:8a:25:
38:d7:38:94:aa:f6:00:d5:14:6b:68:02:db:b5:12:92:2f:d7:
6e:24:3f:8f:fa:fa:ff:5d:0e:d2:4a:95:75:61:21:54:fa:77:
95:98:ea:0c:fc:89:71:a5:a2:01:90:bb:fb:6e:cb:c3:fe:db:
17:28:02:d8:6c:bf:31:0d:f6:d2:7e:63:4c:af:ee:d8:6a:f0:
bd:aa:1c:e6:67:26:b6:54:25:49:71:39:a4:bc:e9:f5:78:f2:
8e:e7:aa:e9:aa:3b:7b:5b:9b:a9:c4:ae:0a:53:a2:88:c6:82:
d3:02:82:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:36:06 2026 by rpki-client