Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/93da3a-87d5-4433-9f38-a296092be153/1/g0jafL6MpBhlvaGgguAMtcJYh68.mft
File: g0jafL6MpBhlvaGgguAMtcJYh68.mft (raw, json)
Hash identifier: GEhV5gSiQEM3Fp1InS1DmRLothZVJfVpx8631LbEUqw=
Subject key identifier: B2:C1:4E:FC:B5:32:6E:FC:74:1C:95:04:45:1A:FD:99:56:25:65:A6
Authority key identifier: 83:48:DA:7C:BE:8C:A4:18:65:BD:A1:A0:82:E0:0C:B5:C2:58:87:AF
Certificate issuer: /CN=8348da7cbe8ca41865bda1a082e00cb5c25887af
Certificate serial: 019D2A048BE80F8E9AA5A34B76C1D7244828
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g0jafL6MpBhlvaGgguAMtcJYh68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/93da3a-87d5-4433-9f38-a296092be153/1/g0jafL6MpBhlvaGgguAMtcJYh68.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 12:00:33 +0000
Manifest this update: Thu 26 Mar 2026 12:00:33 +0000
Manifest next update: Fri 27 Mar 2026 12:00:33 +0000
Files and hashes: 1: O3TgIYfAHWe9Lkw62SIONG49OPw.roa (hash: smitBFjOFy5lk8KDnUJs0cJsQZAkU4O65hjTxT88iY0=)
2: g0jafL6MpBhlvaGgguAMtcJYh68.crl (hash: QxvuJDvDloE00mZlxdzX8JRQBoxhCqyvAy5AdCykWQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/93da3a-87d5-4433-9f38-a296092be153/1/g0jafL6MpBhlvaGgguAMtcJYh68.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/93da3a-87d5-4433-9f38-a296092be153/1/g0jafL6MpBhlvaGgguAMtcJYh68.mft
rsync://rpki.ripe.net/repository/DEFAULT/g0jafL6MpBhlvaGgguAMtcJYh68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 12:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:8b:e8:0f:8e:9a:a5:a3:4b:76:c1:d7:24:48:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8348da7cbe8ca41865bda1a082e00cb5c25887af
Validity
Not Before: Mar 26 12:00:33 2026 GMT
Not After : Mar 27 12:00:33 2026 GMT
Subject: CN=b2c14efcb5326efc741c9504451afd99562565a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:dc:15:0b:79:5f:3d:2d:53:db:6f:29:81:07:
71:8e:ca:fd:0e:88:ff:89:6b:d7:1f:79:20:18:06:
f7:1a:2c:5a:2c:0a:68:f4:a4:98:2a:8b:a3:45:60:
99:c8:c7:8c:c5:2a:0d:c8:d2:8a:5e:9d:d8:6f:a6:
c8:f1:72:66:be:b6:1b:d2:2e:cc:ac:ab:41:62:2c:
05:69:a7:bc:64:94:c6:44:e9:26:f0:bf:31:da:29:
e7:42:da:b0:e0:7f:f1:04:d6:38:89:c9:3e:08:3e:
99:b5:f1:43:38:62:30:89:e5:0d:51:bc:f7:16:c2:
a1:a8:aa:6d:52:35:46:57:e3:6f:11:35:b4:19:57:
f0:7a:54:04:3a:8a:35:59:26:93:36:62:19:13:7b:
3f:03:51:bc:66:19:fa:ee:9f:ee:be:db:df:ba:d0:
d1:8d:ee:f0:69:a5:dd:8a:f4:de:c4:1f:f5:d4:4b:
ca:4a:6a:25:04:c5:20:f0:81:47:c5:1d:50:94:65:
49:27:b0:24:ec:7d:e9:c4:89:27:5c:28:8a:33:e7:
5b:1f:87:cc:cf:a5:b6:50:b7:7e:74:9d:f7:3f:bd:
69:a2:d3:73:d3:fc:02:53:79:f0:dc:e4:60:70:10:
ec:7c:f7:ab:10:54:a7:73:97:75:be:81:5b:58:5f:
35:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:C1:4E:FC:B5:32:6E:FC:74:1C:95:04:45:1A:FD:99:56:25:65:A6
X509v3 Authority Key Identifier:
keyid:83:48:DA:7C:BE:8C:A4:18:65:BD:A1:A0:82:E0:0C:B5:C2:58:87:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0jafL6MpBhlvaGgguAMtcJYh68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/93da3a-87d5-4433-9f38-a296092be153/1/g0jafL6MpBhlvaGgguAMtcJYh68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/93da3a-87d5-4433-9f38-a296092be153/1/g0jafL6MpBhlvaGgguAMtcJYh68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:0b:33:3f:50:7a:5d:56:f0:fb:23:3e:6d:4c:65:b8:78:4c:
c0:e6:a7:45:71:59:35:94:d6:d5:39:93:d2:00:e3:3b:1f:95:
77:e9:26:dd:6b:cb:c3:d2:32:2a:3e:00:18:04:7e:cc:26:99:
56:bc:c7:88:3f:7f:2e:62:3d:41:8a:fb:5d:10:66:a9:49:0a:
3d:31:66:31:19:a1:e2:73:81:e0:bd:29:37:4d:ff:9b:fe:2a:
0b:9a:fa:51:0f:28:6a:c8:17:3f:bd:7b:74:9d:4b:72:cf:df:
cb:07:f7:f1:66:b6:07:01:32:cb:b2:38:39:9f:4a:b6:17:c1:
04:86:3c:2e:99:db:f6:af:4b:c7:1a:11:7b:df:d1:fd:50:75:
b1:b0:dc:9a:9f:8d:ba:45:5d:82:23:40:63:a6:a3:30:fb:9d:
3c:9f:25:0c:83:95:f7:69:95:4d:7b:5b:8e:14:b4:28:f0:6e:
a9:35:e0:fe:47:50:14:87:2d:73:88:30:a2:b0:cd:e5:e8:6c:
73:31:54:cd:38:32:69:f3:f7:79:1c:c7:00:73:e1:dc:48:3a:
10:7e:b0:30:a4:20:ba:ad:59:1f:ee:ae:66:40:19:4b:2c:0a:
df:ec:d8:33:15:55:55:e4:fa:86:1a:eb:c1:6a:68:b1:65:6b:
4d:c7:b3:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:27:45 2026 by rpki-client