Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft
File: g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft (raw, json)
Hash identifier: jcSqMPU4m9B4bhNSLIj3fROF/Xwy4fvvrsRe+uD4G7Y=
Subject key identifier: D2:63:14:6A:10:E8:CC:9D:66:9B:CC:90:49:DB:9A:D2:4B:C0:15:01
Authority key identifier: 83:87:C2:19:C9:84:1E:BA:FA:A3:D4:08:06:C9:84:F9:F3:E4:E4:61
Certificate issuer: /CN=8387c219c9841ebafaa3d40806c984f9f3e4e461
Certificate serial: 019D2996C86FC28811CBC8C0729A110A1D45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g4fCGcmEHrr6o9QIBsmE-fPk5GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft
Manifest number: 1097
Signing time: Thu 26 Mar 2026 10:00:40 +0000
Manifest this update: Thu 26 Mar 2026 10:00:40 +0000
Manifest next update: Fri 27 Mar 2026 10:00:40 +0000
Files and hashes: 1: FiY50YnA9bU0VuqY_xB52WjpoQU.roa (hash: HLxKWl8h4/WN5MAo6nKsQwk0EYZk/ybbMsE7JxuTVx4=)
2: g4fCGcmEHrr6o9QIBsmE-fPk5GE.crl (hash: jBIFqgnKZ3pL9i2o45YfVcVVcjLr5467O9ffqvkQ2JE=)
3: gp8VTUjNUe2SHA6Nw6jMCrBEmpI.roa (hash: KkGcwa9MsEC5A+egSiEpb4oola97UKCGunqwzbxcwVw=)
4: q6vOzN1DPBf1vx1ss5zgg7dDXIU.roa (hash: pJZycJNT80sKDVuDlXh5Ajg519IZ1fSYiagFEg9PFpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/g4fCGcmEHrr6o9QIBsmE-fPk5GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:96:c8:6f:c2:88:11:cb:c8:c0:72:9a:11:0a:1d:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8387c219c9841ebafaa3d40806c984f9f3e4e461
Validity
Not Before: Mar 26 10:00:40 2026 GMT
Not After : Mar 27 10:00:40 2026 GMT
Subject: CN=d263146a10e8cc9d669bcc9049db9ad24bc01501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c0:03:9c:bd:10:9b:b3:64:14:64:bf:fa:ac:
53:05:69:cd:c4:d1:67:37:1a:e3:9e:b9:36:22:31:
7c:e1:39:b4:38:44:47:fd:37:3b:82:30:fa:05:a1:
40:ce:2d:2b:63:5b:1a:98:ce:ee:b5:48:5a:0f:9c:
46:96:25:86:05:14:3e:3e:ea:ac:48:f9:3c:c5:b1:
f2:3b:e8:b4:c6:8c:7b:9a:aa:8f:e5:d6:82:30:8d:
f0:ed:7e:a8:9f:e4:c9:c9:3f:40:a2:dd:a8:66:ad:
3e:f6:fa:6a:74:6b:b5:65:42:2a:1a:61:6c:6e:71:
d2:89:1f:39:76:f4:78:84:fe:02:7c:92:80:d2:a5:
f1:1d:12:8c:6f:e7:84:33:39:8c:20:42:c9:d3:fd:
f9:4a:09:87:99:1e:3e:94:40:4f:e6:d7:aa:b2:f0:
c0:9b:33:ac:f4:c8:b8:12:6b:69:4f:67:c2:d3:11:
98:95:2b:ea:9d:51:92:96:86:86:ca:3d:02:9e:1f:
42:4c:1c:8e:b2:42:a0:5c:b4:2f:31:43:49:1c:ee:
f8:b0:ab:7a:7d:c7:8a:36:00:a7:53:6c:44:ce:7e:
5d:c6:f4:14:c8:7f:35:0c:18:98:cc:4d:2c:87:c3:
38:eb:ea:35:1e:6e:14:ec:57:73:eb:4e:8e:c1:8d:
7b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:63:14:6A:10:E8:CC:9D:66:9B:CC:90:49:DB:9A:D2:4B:C0:15:01
X509v3 Authority Key Identifier:
keyid:83:87:C2:19:C9:84:1E:BA:FA:A3:D4:08:06:C9:84:F9:F3:E4:E4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g4fCGcmEHrr6o9QIBsmE-fPk5GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:a6:1d:bc:bf:a7:d6:e9:14:3f:13:17:e4:b0:80:84:96:e6:
8e:c7:5a:24:12:1d:97:ae:c9:8f:03:6b:3b:65:a2:4c:70:f0:
2e:97:47:f9:f9:2e:2d:59:d0:fe:73:19:8f:72:02:8c:09:6e:
f7:c8:9c:52:95:44:a4:1f:5b:e5:4e:67:1f:93:b5:43:90:f1:
88:87:ab:33:9b:85:44:0a:7b:0d:f1:1c:6e:7c:23:cd:08:59:
6b:af:3e:8e:d3:e8:46:17:92:65:87:ce:94:f6:2d:c2:c8:c1:
bd:20:76:b8:7c:3e:1a:84:00:56:00:57:99:87:ba:9d:51:ab:
54:c7:72:1b:88:23:00:67:b1:26:83:87:e7:3c:3d:b8:d9:4b:
51:53:b7:a0:13:aa:eb:8c:17:79:ea:dc:28:ac:2d:60:25:fd:
e6:b4:63:74:a4:ce:8f:8e:5f:41:ca:83:74:a2:33:93:6f:d0:
26:b7:c3:9a:9b:1b:fb:fa:b3:bc:02:ba:7c:29:26:4a:3a:f3:
78:83:73:d4:8b:cb:07:e2:bc:79:03:84:71:f5:59:8b:85:bb:
6f:fe:bd:e7:07:30:73:f8:db:e7:b5:8b:4f:36:e1:56:27:04:
70:05:1a:86:31:c7:4a:be:a6:81:32:f1:69:1f:6c:2a:e8:18:
e3:36:6a:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0plshvwogRy8jAcpoRCh1FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzODdjMjE5Yzk4NDFlYmFmYWEzZDQwODA2Yzk4NGY5ZjNl
NGU0NjEwHhcNMjYwMzI2MTAwMDQwWhcNMjYwMzI3MTAwMDQwWjAzMTEwLwYDVQQD
EyhkMjYzMTQ2YTEwZThjYzlkNjY5YmNjOTA0OWRiOWFkMjRiYzAxNTAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8ADnL0Qm7NkFGS/+qxTBWnNxNFn
Nxrjnrk2IjF84Tm0OERH/Tc7gjD6BaFAzi0rY1samM7utUhaD5xGliWGBRQ+Puqs
SPk8xbHyO+i0xox7mqqP5daCMI3w7X6on+TJyT9Aot2oZq0+9vpqdGu1ZUIqGmFs
bnHSiR85dvR4hP4CfJKA0qXxHRKMb+eEMzmMIELJ0/35SgmHmR4+lEBP5teqsvDA
mzOs9Mi4EmtpT2fC0xGYlSvqnVGSloaGyj0Cnh9CTByOskKgXLQvMUNJHO74sKt6
fceKNgCnU2xEzn5dxvQUyH81DBiYzE0sh8M46+o1Hm4U7Fdz606OwY17wQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNJjFGoQ6MydZpvMkEnbmtJLwBUBMB8GA1UdIwQY
MBaAFIOHwhnJhB66+qPUCAbJhPnz5ORhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzRmQ0djbUVIcnI2bzlRSUJzbUUtZlBrNUdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9lZDMwNTQtMGE5Ny00OTdjLTk3MDMt
YmM5MWMwNjcwZDAzLzEvZzRmQ0djbUVIcnI2bzlRSUJzbUUtZlBrNUdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi9lZDMwNTQtMGE5Ny00OTdjLTk3MDMtYmM5MWMwNjcwZDAz
LzEvZzRmQ0djbUVIcnI2bzlRSUJzbUUtZlBrNUdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAraYdvL+n
1ukUPxMX5LCAhJbmjsdaJBIdl67JjwNrO2WiTHDwLpdH+fkuLVnQ/nMZj3ICjAlu
98icUpVEpB9b5U5nH5O1Q5DxiIerM5uFRAp7DfEcbnwjzQhZa68+jtPoRheSZYfO
lPYtwsjBvSB2uHw+GoQAVgBXmYe6nVGrVMdyG4gjAGexJoOH5zw9uNlLUVO3oBOq
64wXeercKKwtYCX95rRjdKTOj45fQcqDdKIzk2/QJrfDmpsb+/qzvAK6fCkmSjrz
eINz1IvLB+K8eQOEcfVZi4W7b/695wcwc/jb57WLTzbhVicEcAUahjHHSr6mgTLx
aR9sKugY4zZqDA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:19:32 2026 by rpki-client