Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/540929-ba5e-4316-a138-bd0dee844047/1/g6PKzqjF0dmJsH6m4JdKANoDako.mft
File: g6PKzqjF0dmJsH6m4JdKANoDako.mft (raw, json)
Hash identifier: qzjLE6D3pVpYZ9ikpkzk9i2FSuONLJNx7cvhc2IABwU=
Subject key identifier: A9:EB:9C:57:68:F1:18:80:EC:74:90:7C:79:A0:A8:3D:EA:EE:A3:D5
Authority key identifier: 83:A3:CA:CE:A8:C5:D1:D9:89:B0:7E:A6:E0:97:4A:00:DA:03:6A:4A
Certificate issuer: /CN=83a3cacea8c5d1d989b07ea6e0974a00da036a4a
Certificate serial: 019D29290058B7EE359CB72FCB061B24308F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g6PKzqjF0dmJsH6m4JdKANoDako.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/540929-ba5e-4316-a138-bd0dee844047/1/g6PKzqjF0dmJsH6m4JdKANoDako.mft
Manifest number: 013C
Signing time: Thu 26 Mar 2026 08:00:46 +0000
Manifest this update: Thu 26 Mar 2026 08:00:46 +0000
Manifest next update: Fri 27 Mar 2026 08:00:46 +0000
Files and hashes: 1: eTK6_P37nQZzruBHzeHGcO4T3zY.asa (hash: tOEzSunzuWj37U3B09PX4r97OTZ1nR4yyZSVGcYBXmU=)
2: g6PKzqjF0dmJsH6m4JdKANoDako.crl (hash: z4xkx9ko9J2eUPTHjpVWB2nopsg3Vf9tX1viGg0pmIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/540929-ba5e-4316-a138-bd0dee844047/1/g6PKzqjF0dmJsH6m4JdKANoDako.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/540929-ba5e-4316-a138-bd0dee844047/1/g6PKzqjF0dmJsH6m4JdKANoDako.mft
rsync://rpki.ripe.net/repository/DEFAULT/g6PKzqjF0dmJsH6m4JdKANoDako.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:00:58:b7:ee:35:9c:b7:2f:cb:06:1b:24:30:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83a3cacea8c5d1d989b07ea6e0974a00da036a4a
Validity
Not Before: Mar 26 08:00:46 2026 GMT
Not After : Mar 27 08:00:46 2026 GMT
Subject: CN=a9eb9c5768f11880ec74907c79a0a83deaeea3d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e1:a1:86:3e:e5:09:a4:be:e3:d8:74:32:44:
b3:d1:70:6a:ad:97:b4:f7:40:04:58:9f:b6:de:07:
a2:13:ed:ab:26:6d:06:49:64:78:75:3c:06:ea:c5:
fd:de:78:24:70:b8:7f:0c:e3:ba:9e:d2:44:9e:b5:
4d:b1:25:78:d0:bd:67:14:9f:52:66:d4:5e:f5:4a:
a3:a6:bd:a2:a4:d5:56:88:03:cf:90:c6:d9:f8:fc:
90:4d:f4:41:12:77:49:c3:3d:19:ae:e2:09:a9:b1:
fe:22:80:dd:d3:0a:7f:b5:96:9f:18:eb:58:21:71:
b2:54:bd:69:a5:40:e1:f5:d9:74:5a:53:00:ac:23:
3c:80:89:16:17:87:c4:4f:3d:54:25:9c:16:67:fc:
8d:f6:db:6f:9c:0c:76:c0:74:3b:ce:77:b1:f3:08:
bc:94:b7:e4:b9:bf:eb:99:ee:58:5f:e9:36:ab:a6:
56:34:f7:36:61:2c:3e:39:23:06:f8:81:3c:ac:ca:
0b:9b:44:1b:81:95:82:1c:3c:04:dc:85:76:ce:a4:
b2:dd:ed:6b:5c:fb:f2:38:44:15:18:6c:6a:03:f7:
6a:e9:31:9b:c7:3a:83:1d:4d:e1:9a:4c:ae:b5:d6:
ff:b2:7d:bf:d1:17:fd:70:05:d0:fe:a2:4a:08:8e:
5b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:EB:9C:57:68:F1:18:80:EC:74:90:7C:79:A0:A8:3D:EA:EE:A3:D5
X509v3 Authority Key Identifier:
keyid:83:A3:CA:CE:A8:C5:D1:D9:89:B0:7E:A6:E0:97:4A:00:DA:03:6A:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g6PKzqjF0dmJsH6m4JdKANoDako.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/540929-ba5e-4316-a138-bd0dee844047/1/g6PKzqjF0dmJsH6m4JdKANoDako.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/540929-ba5e-4316-a138-bd0dee844047/1/g6PKzqjF0dmJsH6m4JdKANoDako.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:41:db:24:9d:84:b4:e1:23:62:bd:db:4c:bd:8f:7c:c7:8c:
13:57:4c:45:30:85:f1:6a:ff:91:cd:d3:bb:d1:df:8f:84:e2:
c0:c7:f2:86:40:e5:09:53:26:f8:ea:bb:02:a2:f2:89:48:ee:
71:7f:4b:63:a7:dd:c7:06:b4:16:1e:71:7c:d7:6c:ad:88:5b:
4a:ad:36:2d:b0:8d:12:c0:83:6a:ba:47:fe:f4:bd:cc:41:53:
31:b8:bd:20:5f:93:d9:ef:da:59:05:98:4f:1a:ca:dd:6d:1c:
de:12:0e:9a:9e:a0:f5:7b:2a:af:66:5a:24:5e:94:99:ad:78:
9b:fc:ab:68:c9:d5:4f:31:e7:74:73:e9:99:37:4d:81:2a:1d:
cf:96:32:37:7b:26:b0:75:1c:63:f3:20:a4:90:a9:18:19:db:
36:6c:5b:e9:aa:c9:6a:24:e9:dd:f5:33:aa:b5:3b:cc:7d:c8:
a1:2f:78:7d:ff:88:84:af:75:71:ad:6a:7a:ce:25:44:8f:67:
ac:77:7e:e5:cd:80:a8:6e:9e:e2:67:22:aa:4a:58:a5:8c:68:
fe:cb:f2:e3:bf:64:01:a3:81:c2:07:32:de:6d:90:ed:7a:09:
07:95:b6:b3:e5:ac:36:90:ec:37:80:f6:9d:a8:64:2b:c2:31:
fc:6b:f1:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pKQBYt+41nLcvywYbJDCPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzYTNjYWNlYThjNWQxZDk4OWIwN2VhNmUwOTc0YTAwZGEw
MzZhNGEwHhcNMjYwMzI2MDgwMDQ2WhcNMjYwMzI3MDgwMDQ2WjAzMTEwLwYDVQQD
EyhhOWViOWM1NzY4ZjExODgwZWM3NDkwN2M3OWEwYTgzZGVhZWVhM2Q1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOGhhj7lCaS+49h0MkSz0XBqrZe0
90AEWJ+23geiE+2rJm0GSWR4dTwG6sX93ngkcLh/DOO6ntJEnrVNsSV40L1nFJ9S
ZtRe9Uqjpr2ipNVWiAPPkMbZ+PyQTfRBEndJwz0ZruIJqbH+IoDd0wp/tZafGOtY
IXGyVL1ppUDh9dl0WlMArCM8gIkWF4fETz1UJZwWZ/yN9ttvnAx2wHQ7znex8wi8
lLfkub/rme5YX+k2q6ZWNPc2YSw+OSMG+IE8rMoLm0QbgZWCHDwE3IV2zqSy3e1r
XPvyOEQVGGxqA/dq6TGbxzqDHU3hmkyutdb/sn2/0Rf9cAXQ/qJKCI5brwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKnrnFdo8RiA7HSQfHmgqD3q7qPVMB8GA1UdIwQY
MBaAFIOjys6oxdHZibB+puCXSgDaA2pKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzZQS3pxakYwZG1Kc0g2bTRKZEtBTm9EYWtvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy81NDA5MjktYmE1ZS00MzE2LWExMzgt
YmQwZGVlODQ0MDQ3LzEvZzZQS3pxakYwZG1Kc0g2bTRKZEtBTm9EYWtvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy81NDA5MjktYmE1ZS00MzE2LWExMzgtYmQwZGVlODQ0MDQ3
LzEvZzZQS3pxakYwZG1Kc0g2bTRKZEtBTm9EYWtvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvEHbJJ2E
tOEjYr3bTL2PfMeME1dMRTCF8Wr/kc3Tu9Hfj4TiwMfyhkDlCVMm+Oq7AqLyiUju
cX9LY6fdxwa0Fh5xfNdsrYhbSq02LbCNEsCDarpH/vS9zEFTMbi9IF+T2e/aWQWY
TxrK3W0c3hIOmp6g9Xsqr2ZaJF6Uma14m/yraMnVTzHndHPpmTdNgSodz5YyN3sm
sHUcY/MgpJCpGBnbNmxb6arJaiTp3fUzqrU7zH3IoS94ff+IhK91ca1qes4lRI9n
rHd+5c2AqG6e4mciqkpYpYxo/svy479kAaOBwgcy3m2Q7XoJB5W2s+WsNpDsN4D2
nahkK8Ix/GvxKA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:55:23 2026 by rpki-client