Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/35064b-7a5a-4c74-8743-fd8660c4fd6e/1/g7zjVWH1Qb2pfnd-aHmh1wTntC8.mft
File: g7zjVWH1Qb2pfnd-aHmh1wTntC8.mft (raw, json)
Hash identifier: DKa/KjRom2KY6/WC0VudWPyLYqJlrNRkxuv/LflGmwI=
Subject key identifier: C2:5F:6F:A8:49:89:23:08:C7:5E:C1:5A:5C:D8:0A:84:89:71:2E:68
Authority key identifier: 83:BC:E3:55:61:F5:41:BD:A9:7E:77:7E:68:79:A1:D7:04:E7:B4:2F
Certificate issuer: /CN=83bce35561f541bda97e777e6879a1d704e7b42f
Certificate serial: 019D2A3C5FAE79D71514FA18881EA0E7C121
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g7zjVWH1Qb2pfnd-aHmh1wTntC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/35064b-7a5a-4c74-8743-fd8660c4fd6e/1/g7zjVWH1Qb2pfnd-aHmh1wTntC8.mft
Manifest number: 1522
Signing time: Thu 26 Mar 2026 13:01:32 +0000
Manifest this update: Thu 26 Mar 2026 13:01:32 +0000
Manifest next update: Fri 27 Mar 2026 13:01:32 +0000
Files and hashes: 1: 1-4qxd5VbzfmdNK4R27R_jJ9_1qQ.roa (hash: LhFU85+HkE34Z66acYVRTu9YoEypcaFTomtfzQ5Jcjc=)
2: g7zjVWH1Qb2pfnd-aHmh1wTntC8.crl (hash: q4jKTD5oc32vVgJ2W80uADiQq6IuL21MOjHlHT59J80=)
3: pf67aXCsTeM7_4TjxXUetdfZrpQ.roa (hash: mLhUEmXDDwujvnZ5FywWYPBQNtDMI33ozAwZ5PxzgJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/35064b-7a5a-4c74-8743-fd8660c4fd6e/1/g7zjVWH1Qb2pfnd-aHmh1wTntC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/35064b-7a5a-4c74-8743-fd8660c4fd6e/1/g7zjVWH1Qb2pfnd-aHmh1wTntC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/g7zjVWH1Qb2pfnd-aHmh1wTntC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3c:5f:ae:79:d7:15:14:fa:18:88:1e:a0:e7:c1:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83bce35561f541bda97e777e6879a1d704e7b42f
Validity
Not Before: Mar 26 13:01:32 2026 GMT
Not After : Mar 27 13:01:32 2026 GMT
Subject: CN=c25f6fa849892308c75ec15a5cd80a8489712e68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:05:af:e2:22:58:17:08:a4:ee:73:9c:a2:75:
a2:f8:f1:5e:e0:10:fd:5d:eb:9d:36:98:20:7c:03:
65:3d:74:c4:75:63:1f:82:13:f4:ed:0f:9a:19:f6:
54:b9:13:b4:20:b6:91:7d:cc:95:ae:bc:b2:e3:9f:
6d:23:03:63:98:12:39:a9:78:ff:9a:4c:e7:31:f5:
15:b3:ed:b5:87:40:38:c1:c2:84:a4:dd:ca:51:0d:
1f:b7:6d:8d:8f:1b:1a:b6:49:bd:36:b4:b7:4d:8d:
30:f0:e2:03:ec:dd:37:36:11:56:bd:e9:f7:19:0e:
d5:ad:9c:58:00:25:d8:8e:a3:60:f0:07:1a:91:f2:
7b:98:00:d6:a7:55:54:d9:ba:85:6a:e0:0d:cc:82:
1f:cb:e3:d8:3f:8f:09:13:dd:ba:31:48:a6:2a:c8:
c7:82:1e:76:78:50:85:62:50:9f:39:ff:a6:9f:0b:
ab:79:39:f2:ac:6a:d7:61:48:68:4a:22:84:9e:ba:
29:97:4d:13:c5:49:b6:f7:dd:36:81:46:de:df:b0:
a7:0a:f5:93:36:68:8f:b3:37:1d:04:48:1e:65:11:
2c:87:02:e6:27:47:7a:82:c4:1d:41:c2:59:22:37:
36:bf:c7:72:fc:dc:b1:a9:22:c0:ff:bd:e8:22:5c:
4c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:5F:6F:A8:49:89:23:08:C7:5E:C1:5A:5C:D8:0A:84:89:71:2E:68
X509v3 Authority Key Identifier:
keyid:83:BC:E3:55:61:F5:41:BD:A9:7E:77:7E:68:79:A1:D7:04:E7:B4:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g7zjVWH1Qb2pfnd-aHmh1wTntC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/35064b-7a5a-4c74-8743-fd8660c4fd6e/1/g7zjVWH1Qb2pfnd-aHmh1wTntC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/35064b-7a5a-4c74-8743-fd8660c4fd6e/1/g7zjVWH1Qb2pfnd-aHmh1wTntC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:01:33:f7:a2:9e:1f:66:c4:c6:9e:97:ed:ae:81:96:44:1b:
57:57:9b:ba:b6:28:86:8b:6e:f6:94:fb:30:45:e2:01:6d:c0:
20:1b:34:89:30:45:62:42:d3:b7:dd:80:61:f9:69:a2:8c:8a:
19:65:a6:fb:94:de:57:01:75:49:59:e4:cc:a1:bf:c4:a5:91:
49:12:d2:50:7a:f9:a4:ea:5b:93:e2:6a:ca:c8:0b:30:8f:0f:
67:d1:0c:19:ea:c1:a4:b7:55:57:19:f1:7c:ee:19:1d:23:6a:
ce:fa:6c:f9:0d:03:2b:50:a0:b3:59:ed:b7:d1:39:80:f3:7b:
ef:c1:b8:70:02:c1:32:07:79:da:62:cf:8f:d0:f1:bd:89:33:
a6:b7:7d:bb:0a:8b:59:f1:2f:3a:e2:25:91:0e:40:6d:22:c0:
d3:1c:19:6e:93:11:5e:60:46:bd:b2:90:dd:83:9d:b7:bf:4d:
34:b0:ee:93:72:8c:8d:ef:e2:ad:54:91:92:b5:42:cd:a1:a1:
61:32:e5:61:b0:72:7b:a8:93:e5:e9:f7:8b:7c:70:fd:4a:95:
f8:b0:ee:71:0b:67:ef:8a:88:fe:12:93:b0:b6:e0:b5:d2:1b:
f5:8a:65:8c:77:31:82:86:87:e3:90:af:a0:00:52:e9:f9:46:
25:4d:ca:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:53:58 2026 by rpki-client