Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/004284-d4a7-4962-9697-f23b077edb96/1/g_s0shoO-MQBkcDgfDtFJOMjss8.mft
File: g_s0shoO-MQBkcDgfDtFJOMjss8.mft (raw, json)
Hash identifier: GlYmgN3nFAyx/xgCAvg3z8eznRIjlLTDtNgOnyzLgmk=
Subject key identifier: 28:6D:0E:74:93:47:49:F0:C9:02:77:D2:44:E8:B1:74:0C:63:75:28
Authority key identifier: 83:FB:34:B2:1A:0E:F8:C4:01:91:C0:E0:7C:3B:45:24:E3:23:B2:CF
Certificate issuer: /CN=83fb34b21a0ef8c40191c0e07c3b4524e323b2cf
Certificate serial: 019D2C97E080CDCFB0E97AF082C95F01C51D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g_s0shoO-MQBkcDgfDtFJOMjss8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/004284-d4a7-4962-9697-f23b077edb96/1/g_s0shoO-MQBkcDgfDtFJOMjss8.mft
Manifest number: 1591
Signing time: Fri 27 Mar 2026 00:00:44 +0000
Manifest this update: Fri 27 Mar 2026 00:00:44 +0000
Manifest next update: Sat 28 Mar 2026 00:00:44 +0000
Files and hashes: 1: g_s0shoO-MQBkcDgfDtFJOMjss8.crl (hash: HRDSRRG/NtxA7w3kglqkq0YzuwFHcZKMUBnHtx/xe+I=)
2: mj008ZBThqouoibk7dGm4Ll0iRc.roa (hash: eaUut3ld4CKzlD3QYCYu9OoqJfcd+Rj1aPxNKdwJaAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/004284-d4a7-4962-9697-f23b077edb96/1/g_s0shoO-MQBkcDgfDtFJOMjss8.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/004284-d4a7-4962-9697-f23b077edb96/1/g_s0shoO-MQBkcDgfDtFJOMjss8.mft
rsync://rpki.ripe.net/repository/DEFAULT/g_s0shoO-MQBkcDgfDtFJOMjss8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 20:56:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2c:97:e0:80:cd:cf:b0:e9:7a:f0:82:c9:5f:01:c5:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83fb34b21a0ef8c40191c0e07c3b4524e323b2cf
Validity
Not Before: Mar 27 00:00:44 2026 GMT
Not After : Mar 28 00:00:44 2026 GMT
Subject: CN=286d0e74934749f0c90277d244e8b1740c637528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fe:bd:57:68:f4:c0:6a:1d:1c:f8:57:42:f7:
1a:54:62:7b:48:0e:64:99:f6:3a:64:18:52:24:ba:
5e:28:da:19:1b:5a:ac:39:f7:5e:f1:5e:16:89:a4:
91:a6:76:e0:ac:6b:54:77:3e:77:e9:52:fe:af:65:
08:64:39:75:f0:90:5e:a9:70:b5:6b:14:6a:9f:f5:
4c:57:a1:f7:b4:6f:41:9f:64:a3:77:61:ad:48:c1:
2f:32:87:dd:83:de:89:3d:7b:fb:b4:2c:5e:d3:7e:
03:08:86:8e:bc:8f:e8:bd:bc:26:19:45:69:54:d4:
1d:19:b1:c1:24:66:fa:2f:5b:4e:bc:0e:4d:69:66:
63:e9:14:c0:e2:c1:ba:84:ff:c4:dd:22:1a:1e:31:
27:01:d7:4e:9a:a2:69:10:54:29:40:a7:f6:24:a8:
50:07:64:a8:3b:c6:9d:81:5f:2e:30:24:7b:08:68:
9f:da:d5:5a:61:9f:b2:02:85:f9:81:20:16:82:79:
bb:4d:3b:bc:31:b5:29:09:36:e7:cf:1d:09:37:51:
f7:c8:f2:ec:14:ab:9b:85:a2:90:11:42:54:8c:e9:
70:30:73:bc:5f:4b:00:b9:42:86:9e:09:00:a4:90:
3e:a2:7f:f0:21:ff:c1:bf:89:41:00:b6:16:52:e0:
16:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:6D:0E:74:93:47:49:F0:C9:02:77:D2:44:E8:B1:74:0C:63:75:28
X509v3 Authority Key Identifier:
keyid:83:FB:34:B2:1A:0E:F8:C4:01:91:C0:E0:7C:3B:45:24:E3:23:B2:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_s0shoO-MQBkcDgfDtFJOMjss8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/004284-d4a7-4962-9697-f23b077edb96/1/g_s0shoO-MQBkcDgfDtFJOMjss8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/004284-d4a7-4962-9697-f23b077edb96/1/g_s0shoO-MQBkcDgfDtFJOMjss8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:c3:f1:d3:56:ae:ee:66:6b:1f:a8:16:89:96:a2:8c:1a:b5:
ae:32:11:aa:d7:a5:27:77:41:1b:84:2c:ff:34:27:c6:39:0f:
b0:f0:4c:cb:96:c6:af:9c:c5:cf:bc:0a:32:8b:ff:5e:37:40:
4b:61:79:de:63:fa:07:8c:d2:cd:c2:38:6b:cc:44:9d:44:63:
0e:85:5e:2d:70:a5:2d:f2:2b:6f:91:2b:28:2c:61:c8:e2:21:
8e:5a:01:4c:f5:d1:ac:1c:a1:c4:a5:d0:d1:69:21:7b:f1:cc:
15:2f:89:d6:43:43:98:95:de:42:96:1d:9a:3c:8b:61:69:48:
89:b1:aa:23:db:35:af:1f:26:e2:d1:af:70:1e:a4:1c:5f:c8:
95:92:c3:67:d8:0b:16:e8:d5:d4:d5:b1:57:1c:96:2e:19:5e:
4c:8a:68:57:47:41:0e:0e:c7:74:aa:23:80:2b:5c:09:70:f6:
30:03:6f:17:ac:fc:b9:3e:34:93:6e:13:42:c7:7a:db:ad:e1:
d5:d1:45:b4:2a:d2:de:73:5f:82:79:de:33:70:b6:b4:62:f8:
df:3c:99:b4:e2:b1:a6:ba:65:ab:84:ae:21:5d:d4:8b:bc:3c:
ef:a4:bb:69:0f:cc:23:a2:ea:68:47:9c:9f:ec:8c:5a:eb:56:
aa:8c:e2:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 03:26:35 2026 by rpki-client