Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/463686-ce48-487c-bc3d-a2f59eae86d0/1/g4heOKx3ysBEgptTyzslq-Yen2Q.mft
File: g4heOKx3ysBEgptTyzslq-Yen2Q.mft (raw, json)
Hash identifier: ZyZvnQfimvtakxQ8vdJ/FBV0dLX/9kesRlO8COP72DI=
Subject key identifier: A9:AB:35:A0:87:14:DA:C2:90:BD:8C:26:7B:83:D0:7C:9C:27:4B:F0
Authority key identifier: 83:88:5E:38:AC:77:CA:C0:44:82:9B:53:CB:3B:25:AB:E6:1E:9F:64
Certificate issuer: /CN=83885e38ac77cac044829b53cb3b25abe61e9f64
Certificate serial: 019D27DF5AB46EE0A7F9EA2BD7EC3D27819D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g4heOKx3ysBEgptTyzslq-Yen2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/463686-ce48-487c-bc3d-a2f59eae86d0/1/g4heOKx3ysBEgptTyzslq-Yen2Q.mft
Manifest number: 0899
Signing time: Thu 26 Mar 2026 02:00:42 +0000
Manifest this update: Thu 26 Mar 2026 02:00:42 +0000
Manifest next update: Fri 27 Mar 2026 02:00:42 +0000
Files and hashes: 1: g4heOKx3ysBEgptTyzslq-Yen2Q.crl (hash: RfAf6jLfg+8FxyU8kEZ2mF/yL9C7eMm9IJfYgM+NL6c=)
2: uEbtYSs7oUq_8j5NRnUv73UK0pM.roa (hash: Poyt01XokZPztwUN5koWpemxrQ6OZRRxyOTp253pBsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/463686-ce48-487c-bc3d-a2f59eae86d0/1/g4heOKx3ysBEgptTyzslq-Yen2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/463686-ce48-487c-bc3d-a2f59eae86d0/1/g4heOKx3ysBEgptTyzslq-Yen2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/g4heOKx3ysBEgptTyzslq-Yen2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:5a:b4:6e:e0:a7:f9:ea:2b:d7:ec:3d:27:81:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83885e38ac77cac044829b53cb3b25abe61e9f64
Validity
Not Before: Mar 26 02:00:42 2026 GMT
Not After : Mar 27 02:00:42 2026 GMT
Subject: CN=a9ab35a08714dac290bd8c267b83d07c9c274bf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:33:c5:a8:13:23:7d:3c:f6:1f:cd:eb:7c:0b:
20:a3:63:f0:79:96:d9:62:23:10:ba:37:9e:7a:e4:
7f:3d:fd:e4:ef:f0:56:09:8c:6d:14:af:b3:0d:51:
c3:72:ce:eb:5f:02:53:b9:5f:4e:b9:00:2e:0a:df:
a6:d1:8c:94:ef:76:4b:aa:7a:72:a3:7a:f2:51:3f:
fd:ad:7a:be:b7:5a:42:33:c9:6c:74:f7:82:49:17:
12:0b:fe:ee:80:ec:18:ee:34:49:af:cb:b2:29:18:
e3:bb:76:68:f1:b3:4c:2b:bf:69:ff:39:c2:77:13:
7f:db:66:cd:33:4b:0c:8c:bd:8a:a8:6d:26:23:19:
1b:a7:94:1c:b0:dd:80:60:2e:b5:b3:79:b5:16:57:
4b:38:ad:14:02:94:3c:b2:ef:61:1b:5f:c0:7d:89:
25:d5:bf:b0:9d:38:e2:97:5b:3a:7c:07:e4:e5:35:
9c:83:90:4a:9c:3f:80:cd:88:7c:c1:26:50:1f:f5:
40:19:ca:85:71:c0:76:03:1d:ae:7b:67:3b:25:c1:
78:bf:82:6f:d2:7f:6a:9b:3a:a6:fa:d9:d6:a4:57:
b4:99:e5:d7:d4:b8:cb:7f:43:46:ea:48:b4:14:b3:
f5:06:aa:6b:76:f0:84:3a:57:97:58:54:fd:67:20:
95:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:AB:35:A0:87:14:DA:C2:90:BD:8C:26:7B:83:D0:7C:9C:27:4B:F0
X509v3 Authority Key Identifier:
keyid:83:88:5E:38:AC:77:CA:C0:44:82:9B:53:CB:3B:25:AB:E6:1E:9F:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g4heOKx3ysBEgptTyzslq-Yen2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/463686-ce48-487c-bc3d-a2f59eae86d0/1/g4heOKx3ysBEgptTyzslq-Yen2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/463686-ce48-487c-bc3d-a2f59eae86d0/1/g4heOKx3ysBEgptTyzslq-Yen2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:c1:b1:f8:10:2d:e4:91:8b:6a:82:ec:7e:bc:c7:d4:60:06:
3e:98:f2:05:8d:d1:b5:3a:ce:ce:8d:13:f4:6f:0a:84:24:c8:
78:1b:84:e5:92:2f:2c:1b:f4:91:d3:d3:56:87:1d:05:ac:11:
76:31:67:36:55:c1:97:42:c0:ad:3e:8c:9a:c4:ba:ca:4f:ba:
78:6b:82:d8:db:48:95:16:28:c0:70:d6:58:99:07:8c:da:89:
c5:00:c2:6a:fc:2b:4c:d9:c0:cf:64:aa:e9:b8:2a:31:25:ae:
d8:50:c1:ea:eb:f6:42:af:3f:91:8c:32:28:9a:7d:94:4a:af:
37:c9:bd:30:9d:b9:b6:ad:7c:99:99:ea:71:1a:f7:a3:58:d7:
2d:2c:1c:5b:2e:29:84:1a:60:e3:8d:c8:a4:f2:60:8c:e9:08:
1c:42:02:e6:53:e5:f9:62:c4:1e:85:72:ff:0c:80:24:7b:e1:
4c:d3:25:24:ad:bd:60:d2:97:6a:f7:83:81:8e:85:dd:d6:1d:
cd:34:65:fd:9b:e1:30:cc:34:52:ce:01:8e:83:14:8e:c5:8f:
db:1b:9f:4a:f1:f5:c3:9e:bf:4e:bd:6d:1a:57:3c:e4:14:11:
ce:86:71:e6:3a:39:86:a1:3a:27:a6:9f:1d:08:f4:8c:36:37:
ec:db:06:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:20:02 2026 by rpki-client