Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.mft
File: g5DhBCut2I6W5jnqoK0CMofqUH8.mft (raw, json)
Hash identifier: 1X4vgbKo/mJIsVkhcyVctBMuuRMc2cal0NjJXZD8BV4=
Subject key identifier: 4C:98:1A:64:E4:16:06:EA:F0:2E:07:53:E2:E6:4F:83:A7:6F:28:15
Authority key identifier: 83:90:E1:04:2B:AD:D8:8E:96:E6:39:EA:A0:AD:02:32:87:EA:50:7F
Certificate issuer: /CN=8390e1042badd88e96e639eaa0ad023287ea507f
Certificate serial: 01A0D15B662CA08CADE81F35201D84ADDD58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g5DhBCut2I6W5jnqoK0CMofqUH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.mft
Manifest number: 1A6B
Signing time: Thu 24 Sep 2026 03:00:22 +0000
Manifest this update: Thu 24 Sep 2026 03:00:22 +0000
Manifest next update: Fri 25 Sep 2026 03:00:22 +0000
Files and hashes: 1: Cms4_2kxSzeRcRSIA9wB43-LvT4.roa (hash: NlxgHVdUZqUs6S+kYTnLVRbbSz1aQACOBdzclkEtqQE=)
2: g5DhBCut2I6W5jnqoK0CMofqUH8.crl (hash: 9yqXF0mso8VTAIRe9fkdl80eCSmxO+iMXsPjKOtfuzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/g5DhBCut2I6W5jnqoK0CMofqUH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 03:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:5b:66:2c:a0:8c:ad:e8:1f:35:20:1d:84:ad:dd:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8390e1042badd88e96e639eaa0ad023287ea507f
Validity
Not Before: Sep 24 03:00:22 2026 GMT
Not After : Sep 25 03:00:22 2026 GMT
Subject: CN=4c981a64e41606eaf02e0753e2e64f83a76f2815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:7c:91:c4:4e:48:ca:a9:47:75:1f:bb:25:54:
c1:b1:f1:c3:d0:1a:8f:3b:94:df:de:06:39:4c:b8:
c1:27:16:1d:ac:f1:f9:05:54:32:38:74:61:df:b4:
69:d5:d8:85:a6:b9:f7:95:80:f0:d2:4d:d5:57:0e:
8a:ad:29:6a:0a:c1:5c:55:69:9d:45:d3:a0:f2:33:
87:e9:a6:73:a0:a0:39:90:1c:ae:51:df:88:4e:cd:
c9:bf:ab:c0:2d:08:be:ad:ed:c1:ee:29:9c:f3:1d:
45:6c:d6:f9:4c:79:e0:3e:d8:b2:d9:58:c3:39:7b:
c3:25:f1:99:9a:86:89:30:dc:8f:cc:e8:82:40:70:
e8:58:2f:21:ef:a2:b6:97:1f:4d:a0:34:5c:cb:6b:
4e:33:b5:14:39:23:75:08:f5:31:ed:7f:84:4f:5e:
d3:18:18:22:05:46:31:60:6e:1c:54:2b:d2:99:97:
5d:16:e3:a6:57:2d:7d:3d:5a:f0:2b:13:8c:44:19:
21:d1:23:66:0a:c4:95:3f:99:fb:d2:2d:ff:f9:bb:
1b:72:59:97:c6:18:6b:e9:87:fe:94:e9:9c:64:49:
b5:32:db:8d:0e:b4:4e:70:b7:38:60:66:55:56:cd:
39:9d:f2:b8:d7:d6:d3:6f:db:72:08:e6:97:21:7b:
21:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:98:1A:64:E4:16:06:EA:F0:2E:07:53:E2:E6:4F:83:A7:6F:28:15
X509v3 Authority Key Identifier:
keyid:83:90:E1:04:2B:AD:D8:8E:96:E6:39:EA:A0:AD:02:32:87:EA:50:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5DhBCut2I6W5jnqoK0CMofqUH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:29:ce:5c:90:d8:5e:66:87:f3:57:31:49:27:f2:b4:67:59:
56:2f:9f:4c:40:10:51:3e:2f:e6:b8:82:57:42:9d:1e:35:f2:
27:1f:06:6e:f4:7f:e1:4d:79:e1:0a:a6:2e:12:3b:b7:dc:75:
98:5d:03:07:7a:43:18:6c:f1:ab:95:7f:83:a6:f2:93:a3:f5:
dd:e6:3c:35:41:bd:b8:be:c4:4b:72:1a:6b:8e:76:a2:63:66:
16:b6:8a:4a:4f:bc:e8:83:94:a6:82:af:85:4a:57:e3:da:8b:
92:ee:85:e1:79:03:87:77:95:b3:65:27:2c:d8:ec:36:ec:77:
62:2c:06:8c:69:1b:68:8d:ab:16:ba:43:8d:40:d2:eb:30:e2:
38:6e:e3:85:0d:7a:a5:96:f5:37:fd:49:d1:cd:d3:ad:77:d5:
9f:1c:91:47:43:c8:86:85:5d:35:4a:9a:dc:66:fa:8e:f7:46:
22:d7:81:f6:0d:cd:e2:35:8c:13:bc:c8:98:fc:1a:67:a3:6c:
19:82:03:44:92:7f:ea:d8:62:4e:c9:3c:1d:53:92:a7:f9:0f:
a6:a4:fe:62:18:f3:32:d8:fc:7c:79:e3:c7:23:62:85:b5:fd:
31:96:5b:1d:d4:67:00:1b:14:77:11:e4:ef:c4:b1:63:03:5f:
d9:53:63:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:33:10 2026 by rpki-client