Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/f8be9b-58f0-4544-b23f-6354ef0771c9/1/g2elJH2fTpT3vVcc8T01q0iwHSQ.mft
File: g2elJH2fTpT3vVcc8T01q0iwHSQ.mft (raw, json)
Hash identifier: Gcy4uEq1sk5wxJe7PvbfYGYK7tAKy8GW6vKFGftHDB8=
Subject key identifier: 92:E6:1C:B4:F3:33:AE:85:94:79:ED:AB:B9:1B:8F:57:BB:D5:1D:B9
Authority key identifier: 83:67:A5:24:7D:9F:4E:94:F7:BD:57:1C:F1:3D:35:AB:48:B0:1D:24
Certificate issuer: /CN=8367a5247d9f4e94f7bd571cf13d35ab48b01d24
Certificate serial: 019D29CE81010C2C02948B4961527135FE00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2elJH2fTpT3vVcc8T01q0iwHSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/f8be9b-58f0-4544-b23f-6354ef0771c9/1/g2elJH2fTpT3vVcc8T01q0iwHSQ.mft
Manifest number: 0816
Signing time: Thu 26 Mar 2026 11:01:32 +0000
Manifest this update: Thu 26 Mar 2026 11:01:32 +0000
Manifest next update: Fri 27 Mar 2026 11:01:32 +0000
Files and hashes: 1: g2elJH2fTpT3vVcc8T01q0iwHSQ.crl (hash: +hrfa108mjA8AzKkF/3PyarmbU+l+OlpDuSdqvN24AY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/f8be9b-58f0-4544-b23f-6354ef0771c9/1/g2elJH2fTpT3vVcc8T01q0iwHSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/f8be9b-58f0-4544-b23f-6354ef0771c9/1/g2elJH2fTpT3vVcc8T01q0iwHSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/g2elJH2fTpT3vVcc8T01q0iwHSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:81:01:0c:2c:02:94:8b:49:61:52:71:35:fe:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8367a5247d9f4e94f7bd571cf13d35ab48b01d24
Validity
Not Before: Mar 26 11:01:32 2026 GMT
Not After : Mar 27 11:01:32 2026 GMT
Subject: CN=92e61cb4f333ae859479edabb91b8f57bbd51db9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0b:0e:da:4e:da:36:86:f7:e4:e0:52:16:14:
05:0c:5a:42:c3:ad:d7:c3:a7:4d:54:bf:4d:48:62:
8e:c8:4d:6f:63:51:5f:f9:44:a8:d5:6a:5a:22:ed:
d2:b7:a1:e3:2d:53:3f:4b:46:9a:40:e1:61:3f:72:
f1:41:2c:d8:92:e5:25:01:90:cd:2b:25:17:f6:7e:
21:9d:c7:12:44:c5:63:5a:27:01:4d:2d:97:ac:fd:
c0:4d:8e:ee:c9:94:43:a7:6d:e1:51:8d:e4:77:a3:
4f:78:c3:5e:93:21:18:1c:1b:8d:05:30:cf:71:19:
fe:04:bc:62:b8:20:43:da:67:1f:6e:f7:0e:65:58:
b7:aa:c6:a8:07:03:f6:6b:1c:74:96:6a:e8:8b:8c:
ec:bb:4a:c1:62:4b:14:4d:99:de:0c:38:8d:fd:e9:
f4:61:a1:3a:81:49:eb:1a:da:84:b3:b2:02:38:25:
40:37:17:bc:39:d7:55:e9:b3:2f:40:88:0d:80:d8:
96:de:f1:17:6f:79:ea:a2:02:8d:32:3f:66:a3:4e:
aa:d7:8c:05:b4:75:c4:1c:b1:83:c9:ea:cf:72:5d:
fb:c4:76:19:6b:0e:5a:87:d2:a9:31:dd:f2:c2:66:
c2:1a:fa:df:bb:d4:13:38:04:c6:3b:eb:1a:2f:d2:
9f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:E6:1C:B4:F3:33:AE:85:94:79:ED:AB:B9:1B:8F:57:BB:D5:1D:B9
X509v3 Authority Key Identifier:
keyid:83:67:A5:24:7D:9F:4E:94:F7:BD:57:1C:F1:3D:35:AB:48:B0:1D:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2elJH2fTpT3vVcc8T01q0iwHSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f8be9b-58f0-4544-b23f-6354ef0771c9/1/g2elJH2fTpT3vVcc8T01q0iwHSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f8be9b-58f0-4544-b23f-6354ef0771c9/1/g2elJH2fTpT3vVcc8T01q0iwHSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:01:76:04:6d:e0:d3:37:63:c8:cd:54:f7:b1:8d:e1:c3:99:
d7:b4:86:43:0b:00:83:d1:f0:20:a9:e0:4e:22:63:de:96:77:
25:04:7c:d7:3f:2b:f2:af:2f:80:90:33:0a:c9:28:4e:50:bb:
03:9f:92:24:28:c1:05:4b:c0:63:92:d5:f1:78:89:5d:f9:ce:
fc:a5:bd:ba:04:f1:07:d7:08:de:cf:4e:c8:48:2f:de:15:06:
df:8c:61:c2:b4:f6:7b:b0:e6:e3:00:1a:34:75:13:de:ff:d7:
f9:d4:31:0d:c6:b1:34:5f:36:65:69:09:b5:80:3f:ac:f3:69:
fe:aa:3e:21:99:7b:a1:bd:64:1f:eb:7c:7d:b9:09:b9:44:92:
94:06:a0:b3:64:9f:bb:64:c6:1c:3e:c9:d7:61:b1:94:aa:e8:
26:f7:ef:96:0c:2a:88:00:21:32:0d:8c:b0:36:27:7a:1e:16:
96:6c:72:d9:ab:fd:5e:a1:18:e0:0f:08:67:f4:2a:3d:d3:ed:
fd:cb:b7:e4:30:47:f0:f9:c2:8c:02:1d:3d:80:1c:cb:6a:29:
f2:be:86:35:18:3a:00:8b:ae:54:a8:89:e6:62:f4:8d:70:4c:
ce:34:26:e6:00:90:3b:78:97:87:22:1b:6c:d5:c7:87:ab:e4:
06:4e:46:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pzoEBDCwClItJYVJxNf4AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzNjdhNTI0N2Q5ZjRlOTRmN2JkNTcxY2YxM2QzNWFiNDhi
MDFkMjQwHhcNMjYwMzI2MTEwMTMyWhcNMjYwMzI3MTEwMTMyWjAzMTEwLwYDVQQD
Eyg5MmU2MWNiNGYzMzNhZTg1OTQ3OWVkYWJiOTFiOGY1N2JiZDUxZGI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQsO2k7aNob35OBSFhQFDFpCw63X
w6dNVL9NSGKOyE1vY1Ff+USo1WpaIu3St6HjLVM/S0aaQOFhP3LxQSzYkuUlAZDN
KyUX9n4hnccSRMVjWicBTS2XrP3ATY7uyZRDp23hUY3kd6NPeMNekyEYHBuNBTDP
cRn+BLxiuCBD2mcfbvcOZVi3qsaoBwP2axx0lmroi4zsu0rBYksUTZneDDiN/en0
YaE6gUnrGtqEs7ICOCVANxe8OddV6bMvQIgNgNiW3vEXb3nqogKNMj9mo06q14wF
tHXEHLGDyerPcl37xHYZaw5ah9KpMd3ywmbCGvrfu9QTOATGO+saL9KfyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJLmHLTzM66FlHntq7kbj1e71R25MB8GA1UdIwQY
MBaAFINnpSR9n06U971XHPE9NatIsB0kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzJlbEpIMmZUcFQzdlZjYzhUMDFxMGl3SFNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9mOGJlOWItNThmMC00NTQ0LWIyM2Yt
NjM1NGVmMDc3MWM5LzEvZzJlbEpIMmZUcFQzdlZjYzhUMDFxMGl3SFNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9mOGJlOWItNThmMC00NTQ0LWIyM2YtNjM1NGVmMDc3MWM5
LzEvZzJlbEpIMmZUcFQzdlZjYzhUMDFxMGl3SFNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfwF2BG3g
0zdjyM1U97GN4cOZ17SGQwsAg9HwIKngTiJj3pZ3JQR81z8r8q8vgJAzCskoTlC7
A5+SJCjBBUvAY5LV8XiJXfnO/KW9ugTxB9cI3s9OyEgv3hUG34xhwrT2e7Dm4wAa
NHUT3v/X+dQxDcaxNF82ZWkJtYA/rPNp/qo+IZl7ob1kH+t8fbkJuUSSlAags2Sf
u2TGHD7J12GxlKroJvfvlgwqiAAhMg2MsDYneh4Wlmxy2av9XqEY4A8IZ/QqPdPt
/cu35DBH8PnCjAIdPYAcy2op8r6GNRg6AIuuVKiJ5mL0jXBMzjQm5gCQO3iXhyIb
bNXHh6vkBk5GUg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:14:35 2026 by rpki-client