Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/ed3edb-d275-47c9-be7f-c4367592ae8a/1/g2RqtwYhSO24-ptgqDHIJA3KuAQ.mft
File: g2RqtwYhSO24-ptgqDHIJA3KuAQ.mft (raw, json)
Hash identifier: t9M/LFCFIpPZe2AyiCkuXkOKdLK80cpILRVrjMmcahE=
Subject key identifier: 41:01:21:EE:FB:6D:8C:D2:28:3D:90:D3:4A:D6:31:B0:AE:83:51:74
Authority key identifier: 83:64:6A:B7:06:21:48:ED:B8:FA:9B:60:A8:31:C8:24:0D:CA:B8:04
Certificate issuer: /CN=83646ab7062148edb8fa9b60a831c8240dcab804
Certificate serial: 019D2816CF583ECD9691BB70B1CB36E174DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2RqtwYhSO24-ptgqDHIJA3KuAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/ed3edb-d275-47c9-be7f-c4367592ae8a/1/g2RqtwYhSO24-ptgqDHIJA3KuAQ.mft
Manifest number: 0F5D
Signing time: Thu 26 Mar 2026 03:01:16 +0000
Manifest this update: Thu 26 Mar 2026 03:01:16 +0000
Manifest next update: Fri 27 Mar 2026 03:01:16 +0000
Files and hashes: 1: 77kfN6wOfaolUHGNqDj3LGpTo5w.roa (hash: UKDV0ljQgSgXrQFAq0g5SC1urVlROAhWOWoTZWtshBw=)
2: g2RqtwYhSO24-ptgqDHIJA3KuAQ.crl (hash: 3NL8w0rkuI6FJ18+rIxKOX0MGskbPsE8/DTCvZQipx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/ed3edb-d275-47c9-be7f-c4367592ae8a/1/g2RqtwYhSO24-ptgqDHIJA3KuAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/ed3edb-d275-47c9-be7f-c4367592ae8a/1/g2RqtwYhSO24-ptgqDHIJA3KuAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/g2RqtwYhSO24-ptgqDHIJA3KuAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:cf:58:3e:cd:96:91:bb:70:b1:cb:36:e1:74:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83646ab7062148edb8fa9b60a831c8240dcab804
Validity
Not Before: Mar 26 03:01:16 2026 GMT
Not After : Mar 27 03:01:16 2026 GMT
Subject: CN=410121eefb6d8cd2283d90d34ad631b0ae835174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:86:b3:82:c4:28:38:be:83:a2:22:02:8c:3f:
ef:95:23:4a:a2:1f:c1:60:43:1c:eb:60:62:6e:39:
01:53:3d:07:b7:a8:70:96:a0:62:1e:a7:b5:5c:53:
e6:fd:ab:eb:02:2c:3c:9b:df:7b:59:d5:f5:4e:70:
1f:b8:e1:1b:04:9f:b4:c4:ea:b6:64:f5:de:7b:ee:
de:68:85:ed:93:9d:83:bc:8d:e2:f5:1f:04:17:d5:
16:bb:99:3e:ac:03:89:2d:eb:97:ff:e3:e5:fd:42:
3c:7b:9a:0d:23:a7:e8:91:6c:c5:38:96:49:d3:a4:
ab:c0:a1:c8:0c:1d:0e:ea:a4:0a:b7:9e:04:70:90:
c0:1f:e8:50:f4:6c:bc:33:7d:ee:0c:ee:67:be:a4:
50:43:7a:0b:95:1b:76:7e:db:eb:bc:4e:b7:8c:a6:
af:bc:7d:20:8d:92:dc:6d:4c:9a:d8:99:d8:58:89:
0c:27:1e:76:ed:04:bc:09:24:04:03:13:97:36:89:
e5:5c:69:b7:be:77:19:62:1c:c0:bf:67:25:9b:e6:
54:89:b2:79:79:7b:30:e5:d9:7f:b8:f4:20:8b:32:
37:27:e1:eb:43:58:15:6d:8a:9f:bd:83:ec:4b:a3:
2b:fe:bf:6f:cb:9b:48:f7:5d:76:16:14:bd:02:50:
f0:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:01:21:EE:FB:6D:8C:D2:28:3D:90:D3:4A:D6:31:B0:AE:83:51:74
X509v3 Authority Key Identifier:
keyid:83:64:6A:B7:06:21:48:ED:B8:FA:9B:60:A8:31:C8:24:0D:CA:B8:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2RqtwYhSO24-ptgqDHIJA3KuAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/ed3edb-d275-47c9-be7f-c4367592ae8a/1/g2RqtwYhSO24-ptgqDHIJA3KuAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/ed3edb-d275-47c9-be7f-c4367592ae8a/1/g2RqtwYhSO24-ptgqDHIJA3KuAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:8f:3b:12:4b:9f:1f:f4:49:f7:7a:fb:32:12:a4:51:c6:e0:
c6:ba:cd:a4:08:c2:82:17:2f:e9:a6:3e:0a:57:ed:18:f1:8d:
e6:57:d8:96:d5:c6:e3:7a:fb:3d:a5:5a:ca:3c:b4:3f:43:f7:
29:39:1c:5b:15:1f:7d:77:03:6d:86:a9:d2:64:35:31:65:8b:
f0:ab:d5:a4:df:47:a4:bd:a0:8e:5b:d9:83:82:8a:ba:84:c5:
57:bc:0b:f7:db:00:71:0f:fb:ef:73:54:3b:f4:2f:83:88:4a:
e8:4b:57:ac:7a:8d:2e:12:35:2a:93:66:11:d0:e6:c1:0a:ab:
f0:d5:29:58:3b:36:3a:0d:00:3d:49:b0:4c:78:30:31:b5:38:
f9:0a:c1:d9:a3:6c:86:2f:20:44:6d:36:ca:80:c0:2b:4f:8c:
83:3d:14:e1:ee:22:dd:f6:11:67:b5:ce:7b:d4:d9:90:67:0e:
22:df:c8:f5:65:9e:5b:b4:ce:20:8d:c2:d5:4f:e7:c1:35:b5:
e0:c5:06:17:d2:4c:f9:1f:5d:d1:b5:e4:63:98:a6:b3:92:c7:
04:96:da:51:0f:5d:d5:1f:b9:22:7b:ea:8f:30:1f:7b:5a:91:
b1:65:ac:f2:22:c0:34:75:ed:1d:2c:01:d7:32:74:e4:93:63:
19:0b:75:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:01:10 2026 by rpki-client