Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.mft
File: g-I0DvXEpJUutBPSiMKdk3g0IjI.mft (raw, json)
Hash identifier: uFRHwHW5xfiNG1CTjQ3BCizGAejHgCOyd9TRxFz4FcM=
Subject key identifier: 5F:80:6C:68:BE:E5:81:01:18:EE:0C:73:0E:0A:15:B1:3E:19:54:03
Authority key identifier: 83:E2:34:0E:F5:C4:A4:95:2E:B4:13:D2:88:C2:9D:93:78:34:22:32
Certificate issuer: /CN=83e2340ef5c4a4952eb413d288c29d9378342232
Certificate serial: 019D2A0468C4191F6E8A7A43F4405879B8D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-I0DvXEpJUutBPSiMKdk3g0IjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.mft
Manifest number: 1222
Signing time: Thu 26 Mar 2026 12:00:25 +0000
Manifest this update: Thu 26 Mar 2026 12:00:25 +0000
Manifest next update: Fri 27 Mar 2026 12:00:25 +0000
Files and hashes: 1: N4QCwmv8Sw5ybiIBKm-0kiR2k5M.roa (hash: jAlFMSYTvLNZZPUNEkcMr5EHaq268sFn92XHnKsQ7g4=)
2: QQ5S1kn00ChCgstLW3aRVKkKIS4.roa (hash: X5JipwgBz71sKHnS2t/k7iUruR1RHoHrGOPn5Rwy9nI=)
3: g-I0DvXEpJUutBPSiMKdk3g0IjI.crl (hash: pzCjNrUlOPhWDCUf1sZJOG/xWq6TbWgVaUEywIopuZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/g-I0DvXEpJUutBPSiMKdk3g0IjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:68:c4:19:1f:6e:8a:7a:43:f4:40:58:79:b8:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83e2340ef5c4a4952eb413d288c29d9378342232
Validity
Not Before: Mar 26 12:00:25 2026 GMT
Not After : Mar 27 12:00:25 2026 GMT
Subject: CN=5f806c68bee5810118ee0c730e0a15b13e195403
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f3:5d:5a:59:53:57:ef:14:f3:22:f5:74:a9:
66:7a:97:01:cd:1c:bc:9a:80:08:d0:ca:43:10:d8:
3b:fd:84:79:62:29:6f:37:02:0b:d3:ac:d5:11:bc:
d1:ce:84:44:f2:cf:b1:48:59:e6:a6:bb:82:26:87:
a0:a1:98:38:65:c0:d1:76:65:2f:4c:79:26:b4:e0:
82:ad:fc:29:df:e1:bb:8a:73:38:e0:cf:38:f4:da:
d5:c8:94:6a:90:11:70:72:70:ef:f7:43:15:c8:16:
4e:8b:da:84:7c:76:17:61:5c:d6:1d:5b:d9:83:b1:
1f:3f:e7:66:c0:28:b0:db:97:a9:f9:e1:ef:c8:15:
88:1f:48:82:c7:40:c9:c8:d2:d6:5d:19:ad:64:4f:
91:cd:3e:c2:f2:af:8e:50:92:30:f5:48:46:af:9f:
36:a4:d9:33:fe:5f:4d:75:f3:4a:fe:72:93:66:9b:
b6:0a:6c:59:9d:38:84:7e:55:17:64:35:74:ad:16:
85:68:42:e0:7c:d6:cd:e3:fd:89:d9:3a:fa:78:af:
f8:86:d1:b8:05:76:1a:d8:41:f0:5d:5a:9f:9c:64:
e3:7d:2c:81:2a:4d:b0:68:cc:8e:7a:b3:18:0f:ff:
30:6c:49:77:47:83:c2:e6:2a:f6:c8:14:72:94:aa:
bb:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:80:6C:68:BE:E5:81:01:18:EE:0C:73:0E:0A:15:B1:3E:19:54:03
X509v3 Authority Key Identifier:
keyid:83:E2:34:0E:F5:C4:A4:95:2E:B4:13:D2:88:C2:9D:93:78:34:22:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-I0DvXEpJUutBPSiMKdk3g0IjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:7d:17:a6:e5:da:0e:d3:f0:83:ca:5a:2a:0a:80:be:3b:16:
97:f2:03:21:90:be:ac:be:23:8c:76:3e:26:ed:e3:ca:16:2f:
86:f0:86:25:f7:bd:d0:d3:e7:bd:87:7a:7d:40:1f:2a:9d:79:
1c:7b:ca:c7:56:91:38:b8:8a:1c:1c:cd:07:51:aa:53:e2:f3:
23:08:b6:c4:49:b1:3f:23:db:a8:b9:31:25:90:38:a1:c3:f3:
41:12:2e:e5:97:25:60:91:a6:0b:06:49:00:fc:08:97:d2:73:
72:28:b2:32:58:ad:f7:34:2d:a6:12:b7:a1:1c:03:e8:c6:a4:
b6:90:54:a7:43:ed:73:16:cb:e6:e2:6c:cb:e8:ec:b4:85:5b:
e2:04:51:8c:ce:1f:6c:a2:ff:56:ca:18:30:8a:b2:38:5d:df:
9d:4c:9e:b3:a9:48:0a:62:22:e5:3a:ca:0d:c4:a0:49:cc:f9:
11:8c:8a:ae:d5:09:94:05:8f:3c:14:78:ab:20:5e:08:ca:e4:
ae:2c:9f:8e:3c:7d:9d:0a:7b:1f:86:75:df:47:45:19:c0:2f:
d0:58:b4:27:10:8a:c5:2d:41:4d:1a:b9:b7:3b:ca:9e:64:e4:
bf:06:60:bf:28:ef:cf:b0:cc:85:0c:8c:d2:f0:6d:1a:44:7f:
93:16:f8:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:15:04 2026 by rpki-client