Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/b2eaa8-898b-4f33-afb9-89267e528009/1/g0VE4aPiKMTTZH9iqdjJas6eLDE.mft
File: g0VE4aPiKMTTZH9iqdjJas6eLDE.mft (raw, json)
Hash identifier: s1zVl4m3R3RfjWf0dojF7jP5ylkTU0Z8bJPPYrzICgc=
Subject key identifier: 04:32:EF:70:B0:0F:71:A4:ED:76:6C:F5:3E:92:45:E6:AC:6B:57:89
Authority key identifier: 83:45:44:E1:A3:E2:28:C4:D3:64:7F:62:A9:D8:C9:6A:CE:9E:2C:31
Certificate issuer: /CN=834544e1a3e228c4d3647f62a9d8c96ace9e2c31
Certificate serial: 019D28168ADE650847E4D46DBA94D3374E20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g0VE4aPiKMTTZH9iqdjJas6eLDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/b2eaa8-898b-4f33-afb9-89267e528009/1/g0VE4aPiKMTTZH9iqdjJas6eLDE.mft
Manifest number: 0222
Signing time: Thu 26 Mar 2026 03:00:58 +0000
Manifest this update: Thu 26 Mar 2026 03:00:58 +0000
Manifest next update: Fri 27 Mar 2026 03:00:58 +0000
Files and hashes: 1: g0VE4aPiKMTTZH9iqdjJas6eLDE.crl (hash: DR0tZcxBtMkNg17bGHnYIqoC2CbCaWvS2IUEW2Zax4Q=)
2: ibQR5d1f9YuNRleB1lEGG40hVjI.roa (hash: eJ7NUjjHSZG0K+6u15PytmHxHDBWRH5YWbs+72aktr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/b2eaa8-898b-4f33-afb9-89267e528009/1/g0VE4aPiKMTTZH9iqdjJas6eLDE.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/b2eaa8-898b-4f33-afb9-89267e528009/1/g0VE4aPiKMTTZH9iqdjJas6eLDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/g0VE4aPiKMTTZH9iqdjJas6eLDE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:8a:de:65:08:47:e4:d4:6d:ba:94:d3:37:4e:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=834544e1a3e228c4d3647f62a9d8c96ace9e2c31
Validity
Not Before: Mar 26 03:00:58 2026 GMT
Not After : Mar 27 03:00:58 2026 GMT
Subject: CN=0432ef70b00f71a4ed766cf53e9245e6ac6b5789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:33:a2:83:73:50:77:d3:73:7b:43:e6:f9:9f:
da:41:cc:9b:76:10:3e:9c:4d:8d:54:0c:8e:38:6c:
be:7b:82:ed:30:92:f3:53:5e:21:05:a7:57:88:8d:
5f:ca:3a:0e:5c:d6:3b:88:1f:99:d6:93:ef:1a:f2:
7a:91:ed:7f:47:c8:ab:8c:ac:91:86:9f:e8:14:9f:
33:59:2f:c8:e4:39:c9:7a:d4:10:df:cb:bc:a8:08:
7b:ca:0d:9c:e1:4a:ad:25:1b:8f:c1:bc:59:64:38:
9e:a3:93:62:dd:be:1d:77:08:5e:72:11:95:14:5b:
34:6b:8c:f1:bd:85:8f:77:d8:54:c4:5c:7a:91:e1:
da:67:4d:18:24:c2:8c:09:34:5d:d2:04:f8:1d:3f:
e2:02:b6:4e:2c:c6:45:31:39:d4:67:b3:d6:0c:5d:
92:27:dd:6a:a8:b6:47:cd:bf:35:a1:30:88:90:97:
3f:19:a0:fa:68:9e:99:c1:3c:5f:37:18:cb:f1:8c:
91:e5:68:42:b3:e2:84:38:62:38:a0:e6:d1:f3:b9:
c5:ff:25:48:51:31:88:4a:2d:a6:54:52:75:ef:bd:
7a:3e:05:0c:da:1a:39:15:1f:de:f4:d1:fc:1c:4a:
e2:9f:aa:a5:dc:6c:4a:f6:e2:1a:1d:d8:7f:f9:4e:
12:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:32:EF:70:B0:0F:71:A4:ED:76:6C:F5:3E:92:45:E6:AC:6B:57:89
X509v3 Authority Key Identifier:
keyid:83:45:44:E1:A3:E2:28:C4:D3:64:7F:62:A9:D8:C9:6A:CE:9E:2C:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0VE4aPiKMTTZH9iqdjJas6eLDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b2eaa8-898b-4f33-afb9-89267e528009/1/g0VE4aPiKMTTZH9iqdjJas6eLDE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b2eaa8-898b-4f33-afb9-89267e528009/1/g0VE4aPiKMTTZH9iqdjJas6eLDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:2e:29:25:73:22:26:40:bb:7c:16:81:2c:66:41:ff:33:ec:
97:28:e3:df:36:4b:8a:b4:e5:c5:2b:f7:7b:43:36:fe:0b:c7:
b1:34:bb:0b:64:bc:df:b0:31:d1:7f:d1:15:c3:94:ce:7d:5b:
e6:6b:f4:19:9d:c7:fb:d3:19:52:aa:50:ba:00:fd:e6:4e:68:
d8:e7:9b:9c:e0:4d:00:f2:ad:b8:59:29:e4:87:b5:b8:16:80:
f1:9b:82:d8:60:d6:a8:ab:e4:7e:c1:94:61:bd:ca:9b:94:a8:
9f:61:7c:a0:9a:b8:d5:bf:79:f7:f9:4c:3c:98:0d:7e:de:7e:
24:7a:20:43:e3:1e:9d:04:23:f3:0f:19:4e:5f:10:8b:c8:21:
c9:ea:35:1e:09:75:ae:03:e4:9e:5e:97:0f:a9:1a:15:08:52:
3f:1a:b9:53:1b:80:b6:ce:b8:6d:2e:6c:b7:cf:7b:fb:be:27:
24:e4:11:2c:01:c6:8e:91:6b:86:e0:5c:19:c9:f1:e7:84:e6:
d2:d6:34:b4:36:ae:a4:d9:74:11:b4:82:a6:e6:e4:0f:45:7e:
38:4c:16:68:a9:81:8e:e8:b0:13:ff:10:19:74:10:71:f4:1e:
2c:c5:62:e4:97:c1:87:11:c3:83:90:69:02:6f:0f:63:7a:3f:
63:d4:6d:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:59:08 2026 by rpki-client