Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.mft
File: g5DhBCut2I6W5jnqoK0CMofqUH8.mft (raw, json)
Hash identifier: bI1FHTPId5bDPSjgDsLLUzbU+3RyW1xsT0MlikZyoPY=
Subject key identifier: 44:73:F3:71:AA:4F:2E:42:8C:35:D6:62:7D:6E:68:E1:1F:6B:6D:F5
Authority key identifier: 83:90:E1:04:2B:AD:D8:8E:96:E6:39:EA:A0:AD:02:32:87:EA:50:7F
Certificate issuer: /CN=8390e1042badd88e96e639eaa0ad023287ea507f
Certificate serial: 019D26CD3D4F6717AFFE33C2D6F4F79D0CDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g5DhBCut2I6W5jnqoK0CMofqUH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.mft
Manifest number: 1885
Signing time: Wed 25 Mar 2026 21:01:17 +0000
Manifest this update: Wed 25 Mar 2026 21:01:17 +0000
Manifest next update: Thu 26 Mar 2026 21:01:17 +0000
Files and hashes: 1: Cms4_2kxSzeRcRSIA9wB43-LvT4.roa (hash: NlxgHVdUZqUs6S+kYTnLVRbbSz1aQACOBdzclkEtqQE=)
2: g5DhBCut2I6W5jnqoK0CMofqUH8.crl (hash: VnayS/s8k0Xzx+6JzH8jrhMjdLWVMAT96g1wjxQtTDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/g5DhBCut2I6W5jnqoK0CMofqUH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:3d:4f:67:17:af:fe:33:c2:d6:f4:f7:9d:0c:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8390e1042badd88e96e639eaa0ad023287ea507f
Validity
Not Before: Mar 25 21:01:17 2026 GMT
Not After : Mar 26 21:01:17 2026 GMT
Subject: CN=4473f371aa4f2e428c35d6627d6e68e11f6b6df5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:90:e9:ee:2d:55:fe:37:56:84:fd:60:f1:35:
94:89:24:64:d2:e2:96:54:fe:86:df:4b:f6:30:44:
c7:c8:e6:26:0a:87:85:59:57:74:2f:bf:d5:3d:1d:
2d:41:0f:d2:13:af:f6:cf:35:b5:50:ad:94:13:64:
4a:99:9d:c2:ea:75:a5:5e:1f:45:16:00:37:85:34:
1f:b6:aa:13:88:50:43:60:df:b8:de:2d:8d:cf:c7:
20:87:f2:a4:35:ed:2c:31:bd:ef:79:a0:9a:9a:ed:
61:f0:23:65:83:c2:0f:7e:27:9c:80:3e:f8:52:e2:
cd:d2:57:a3:e7:dc:7d:12:57:59:bf:4a:91:25:33:
f8:81:89:1a:fb:85:2b:12:1d:12:44:fb:fc:63:b9:
41:6c:76:3d:be:b6:f1:26:b0:ea:9d:a1:4d:98:12:
3f:46:43:39:b5:ed:4f:09:26:fa:60:c2:09:f9:c5:
bd:35:6d:ed:f7:bd:22:a1:11:a2:37:8f:92:46:ff:
77:ff:18:9d:df:00:20:6a:8c:38:dd:8f:bc:48:54:
fc:f6:bb:36:fc:e0:6b:93:a7:2a:6a:5c:b9:1e:da:
7e:14:c0:6d:35:dc:bd:7a:8a:0d:d3:fd:ab:99:a6:
d7:a6:29:89:84:ca:18:32:36:88:92:d8:6a:b2:0d:
d8:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:73:F3:71:AA:4F:2E:42:8C:35:D6:62:7D:6E:68:E1:1F:6B:6D:F5
X509v3 Authority Key Identifier:
keyid:83:90:E1:04:2B:AD:D8:8E:96:E6:39:EA:A0:AD:02:32:87:EA:50:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5DhBCut2I6W5jnqoK0CMofqUH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:e7:e0:6f:f4:bf:13:88:06:07:b8:b9:c9:7a:e0:bc:cc:f7:
49:c9:71:72:5e:2e:0c:81:b0:4c:32:a2:37:0d:5f:4b:58:52:
68:5d:5c:98:d8:16:60:6d:01:2f:d0:86:0b:83:c6:aa:a3:27:
b9:60:e8:b5:c0:17:3c:60:fb:f8:99:36:61:e0:ea:da:c9:58:
eb:7d:f0:0c:da:2a:90:56:4f:fe:13:2b:98:68:0c:79:a1:a7:
9f:20:60:74:ef:68:88:94:2f:ca:fb:9b:69:06:c1:26:e5:19:
79:80:3c:c5:eb:ac:d7:86:b4:fc:76:69:0a:ac:60:e9:e9:9e:
77:a1:22:8c:70:d0:90:df:af:66:68:d5:ae:cf:91:1a:96:5a:
e2:c4:be:83:56:a0:66:35:85:1e:5d:e3:31:b3:1b:47:49:e0:
db:1b:9a:1b:70:a9:53:fe:bf:d9:ed:58:31:d3:cf:7f:5e:6e:
fd:d9:e6:40:81:e5:45:8d:cf:ea:8e:41:7d:50:e7:83:11:05:
fb:75:81:02:fb:56:34:63:62:66:d0:a7:c8:b4:f4:bb:12:3e:
71:f2:f9:a3:45:d4:61:c5:db:9c:f2:c8:25:fe:7f:76:ae:f9:
4b:11:aa:88:f0:09:6d:b5:3a:8f:79:f7:a7:78:c7:7d:e8:83:
54:cf:4a:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzT1PZxev/jPC1vT3nQzcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzOTBlMTA0MmJhZGQ4OGU5NmU2MzllYWEwYWQwMjMyODdl
YTUwN2YwHhcNMjYwMzI1MjEwMTE3WhcNMjYwMzI2MjEwMTE3WjAzMTEwLwYDVQQD
Eyg0NDczZjM3MWFhNGYyZTQyOGMzNWQ2NjI3ZDZlNjhlMTFmNmI2ZGY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5Dp7i1V/jdWhP1g8TWUiSRk0uKW
VP6G30v2METHyOYmCoeFWVd0L7/VPR0tQQ/SE6/2zzW1UK2UE2RKmZ3C6nWlXh9F
FgA3hTQftqoTiFBDYN+43i2Nz8cgh/KkNe0sMb3veaCamu1h8CNlg8IPfiecgD74
UuLN0lej59x9EldZv0qRJTP4gYka+4UrEh0SRPv8Y7lBbHY9vrbxJrDqnaFNmBI/
RkM5te1PCSb6YMIJ+cW9NW3t970ioRGiN4+SRv93/xid3wAgaow43Y+8SFT89rs2
/OBrk6cqaly5Htp+FMBtNdy9eooN0/2rmabXpimJhMoYMjaIkthqsg3YWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFERz83GqTy5CjDXWYn1uaOEfa231MB8GA1UdIwQY
MBaAFIOQ4QQrrdiOluY56qCtAjKH6lB/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzVEaEJDdXQySTZXNWpucW9LMENNb2ZxVUg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9kODA4YzUtNDA2NC00ZThjLTg3NjYt
NDlmYTU4ZmVkZmYzLzEvZzVEaEJDdXQySTZXNWpucW9LMENNb2ZxVUg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My9kODA4YzUtNDA2NC00ZThjLTg3NjYtNDlmYTU4ZmVkZmYz
LzEvZzVEaEJDdXQySTZXNWpucW9LMENNb2ZxVUg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhufgb/S/
E4gGB7i5yXrgvMz3Sclxcl4uDIGwTDKiNw1fS1hSaF1cmNgWYG0BL9CGC4PGqqMn
uWDotcAXPGD7+Jk2YeDq2slY633wDNoqkFZP/hMrmGgMeaGnnyBgdO9oiJQvyvub
aQbBJuUZeYA8xeus14a0/HZpCqxg6emed6EijHDQkN+vZmjVrs+RGpZa4sS+g1ag
ZjWFHl3jMbMbR0ng2xuaG3CpU/6/2e1YMdPPf15u/dnmQIHlRY3P6o5BfVDngxEF
+3WBAvtWNGNiZtCnyLT0uxI+cfL5o0XUYcXbnPLIJf5/dq75SxGqiPAJbbU6j3n3
p3jHfeiDVM9KDA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:28:35 2026 by rpki-client