Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/4b99b8-0657-4162-ab04-f572a0fce0ee/1/g8lm2l7q1QkFCRw7WZyaRAdHOdA.mft
File: g8lm2l7q1QkFCRw7WZyaRAdHOdA.mft (raw, json)
Hash identifier: d71DSmB5aMtglj4rJJ9hzUWW9OHJxsu0Z0DsMFwIuMg=
Subject key identifier: FB:C5:33:C2:69:4A:68:66:33:A5:8F:6C:AF:43:49:00:EB:31:C3:F9
Authority key identifier: 83:C9:66:DA:5E:EA:D5:09:05:09:1C:3B:59:9C:9A:44:07:47:39:D0
Certificate issuer: /CN=83c966da5eead50905091c3b599c9a44074739d0
Certificate serial: 019D28F29A725452499CADB20B83089C9A30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g8lm2l7q1QkFCRw7WZyaRAdHOdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/4b99b8-0657-4162-ab04-f572a0fce0ee/1/g8lm2l7q1QkFCRw7WZyaRAdHOdA.mft
Manifest number: 0E53
Signing time: Thu 26 Mar 2026 07:01:20 +0000
Manifest this update: Thu 26 Mar 2026 07:01:20 +0000
Manifest next update: Fri 27 Mar 2026 07:01:20 +0000
Files and hashes: 1: g8lm2l7q1QkFCRw7WZyaRAdHOdA.crl (hash: Kacini6/sI+eR8/6GNQnjZ+K9UcCWR9skA21bFBunFM=)
2: tmAf1azkcGtUOtTbKWTp-7eeT4g.roa (hash: KoPapYw4h0I1GJjh8TmzzNsgwe+AZxyvTgeQhB0hejE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/4b99b8-0657-4162-ab04-f572a0fce0ee/1/g8lm2l7q1QkFCRw7WZyaRAdHOdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/4b99b8-0657-4162-ab04-f572a0fce0ee/1/g8lm2l7q1QkFCRw7WZyaRAdHOdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/g8lm2l7q1QkFCRw7WZyaRAdHOdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:9a:72:54:52:49:9c:ad:b2:0b:83:08:9c:9a:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83c966da5eead50905091c3b599c9a44074739d0
Validity
Not Before: Mar 26 07:01:20 2026 GMT
Not After : Mar 27 07:01:20 2026 GMT
Subject: CN=fbc533c2694a686633a58f6caf434900eb31c3f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8d:9c:36:74:c1:55:e9:3e:cf:ef:db:cb:47:
46:d1:76:52:50:61:e5:c0:44:a8:e4:18:89:f8:c9:
f9:28:41:66:02:32:2b:b7:cc:76:fc:b9:ef:9f:1a:
66:9d:87:bf:42:cb:1d:f7:61:08:5b:90:c6:c9:f3:
e0:22:8f:9d:2d:b8:ee:19:59:ed:06:88:c5:66:59:
77:78:85:e1:8b:12:7e:e4:56:87:70:b6:ef:df:9f:
e9:c6:a1:90:55:23:37:75:12:64:0f:6b:fa:79:4e:
8e:93:8b:7b:c1:eb:83:49:3b:16:0e:83:f1:90:90:
f6:5e:eb:f5:77:18:4b:df:fe:33:1a:53:02:c1:2b:
dd:20:30:24:6f:b1:23:5b:9d:56:30:2f:71:a8:ea:
b3:80:fe:31:9e:93:42:0b:9b:70:1b:31:93:2f:cf:
39:22:0b:1b:68:6d:63:63:08:40:d0:1c:b2:22:7e:
7c:0e:e5:4e:95:80:92:82:9a:59:dc:c0:07:a3:8f:
bd:4d:b9:72:a2:e1:a5:57:40:0e:35:e3:58:de:56:
5f:80:25:7b:85:eb:49:63:c1:df:27:64:d3:64:75:
64:15:08:a9:eb:f7:15:90:53:3f:38:b5:8f:c2:1f:
aa:0b:f8:cf:46:80:e1:32:0c:7d:3a:f0:6f:2e:d7:
5a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:C5:33:C2:69:4A:68:66:33:A5:8F:6C:AF:43:49:00:EB:31:C3:F9
X509v3 Authority Key Identifier:
keyid:83:C9:66:DA:5E:EA:D5:09:05:09:1C:3B:59:9C:9A:44:07:47:39:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g8lm2l7q1QkFCRw7WZyaRAdHOdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4b99b8-0657-4162-ab04-f572a0fce0ee/1/g8lm2l7q1QkFCRw7WZyaRAdHOdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4b99b8-0657-4162-ab04-f572a0fce0ee/1/g8lm2l7q1QkFCRw7WZyaRAdHOdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:9e:88:ee:b7:9d:64:13:dc:77:54:94:53:7a:01:45:90:6d:
64:db:74:91:4e:77:ee:e4:d7:e1:25:54:c0:40:90:e4:1f:a3:
a4:65:69:e0:e8:0a:9b:ad:69:6d:df:2d:7a:c0:0d:f2:41:e1:
c3:5b:ec:9f:2f:8a:84:c0:d4:c6:3f:b3:33:db:ad:57:7b:fd:
7c:da:06:82:a6:55:e5:db:35:b5:fd:68:6c:93:cd:00:38:3b:
a7:58:ad:de:bf:e7:62:ea:bf:72:18:c9:5c:59:54:01:c8:17:
0a:4e:cb:64:bf:86:30:5f:ab:6c:ba:4d:c0:76:4d:7f:fb:19:
cb:76:c8:a5:d2:de:6f:9c:8b:24:c7:fb:76:32:61:3e:67:96:
e1:68:a9:34:34:25:d2:27:71:7f:13:5e:6b:27:57:23:51:df:
38:82:a6:c5:4a:18:5b:58:9d:0e:d8:1e:84:e7:ab:51:6e:04:
8b:44:b7:89:18:a6:57:9f:e6:10:24:18:25:ee:ea:a2:f6:79:
f7:ee:05:52:95:e1:53:bf:20:9c:6c:43:58:8b:05:bb:b7:1a:
a0:14:8d:ca:ac:98:ac:fb:b9:00:26:02:58:f5:7d:4f:f8:cd:
36:ad:74:0f:3e:be:90:d5:c9:e8:e8:2a:ca:ad:60:97:fe:cb:
96:39:47:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:05:33 2026 by rpki-client