Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/b2eaa8-898b-4f33-afb9-89267e528009/1/g0VE4aPiKMTTZH9iqdjJas6eLDE.mft
File: g0VE4aPiKMTTZH9iqdjJas6eLDE.mft (raw, json)
Hash identifier: VzfH7/2NtnOJTs/42T5ilu7gRGfYX6NesaOn2wV2lU8=
Subject key identifier: 8A:12:8F:6E:8F:5B:4F:76:08:16:21:56:51:CE:73:96:7A:78:B7:82
Authority key identifier: 83:45:44:E1:A3:E2:28:C4:D3:64:7F:62:A9:D8:C9:6A:CE:9E:2C:31
Certificate issuer: /CN=834544e1a3e228c4d3647f62a9d8c96ace9e2c31
Certificate serial: 019F957FF2A0E465FE37F6D08CA48A8C379C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g0VE4aPiKMTTZH9iqdjJas6eLDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/b2eaa8-898b-4f33-afb9-89267e528009/1/g0VE4aPiKMTTZH9iqdjJas6eLDE.mft
Manifest number: 0365
Signing time: Fri 24 Jul 2026 19:00:18 +0000
Manifest this update: Fri 24 Jul 2026 19:00:18 +0000
Manifest next update: Sat 25 Jul 2026 19:00:18 +0000
Files and hashes: 1: Zvz4ZZe8TirGDr5YK1DXs7yV6ko.roa (hash: IZffctFNRu2D4ovNLuJ8QUvA9BXb4VzlfLdGt6txidc=)
2: g0VE4aPiKMTTZH9iqdjJas6eLDE.crl (hash: ln3GtZlXegX9d2tPNiScBEKRf0v5/w6H8dQPVOBWuiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/b2eaa8-898b-4f33-afb9-89267e528009/1/g0VE4aPiKMTTZH9iqdjJas6eLDE.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/b2eaa8-898b-4f33-afb9-89267e528009/1/g0VE4aPiKMTTZH9iqdjJas6eLDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/g0VE4aPiKMTTZH9iqdjJas6eLDE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:7f:f2:a0:e4:65:fe:37:f6:d0:8c:a4:8a:8c:37:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=834544e1a3e228c4d3647f62a9d8c96ace9e2c31
Validity
Not Before: Jul 24 19:00:18 2026 GMT
Not After : Jul 25 19:00:18 2026 GMT
Subject: CN=8a128f6e8f5b4f760816215651ce73967a78b782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ed:f1:82:71:a0:24:a7:e3:b5:d2:45:32:07:
ae:93:18:35:2a:00:9e:c3:a0:fc:99:0a:33:6f:52:
ea:76:77:e5:68:dc:eb:96:68:da:27:4e:e5:a6:13:
c2:31:30:b8:c0:99:f9:1f:36:b4:6d:ec:fb:6a:42:
54:2b:c0:a9:80:67:2b:2a:57:9e:17:6c:84:97:42:
da:cb:42:77:01:bc:46:42:2e:1c:f0:f4:7b:6a:6f:
1d:a4:48:53:47:06:e8:49:79:ff:74:76:73:73:0a:
34:c0:f8:e7:d8:c1:8c:d2:e7:75:23:72:a0:da:a6:
a8:4c:1a:af:9f:04:74:fc:42:8f:f5:d3:01:8d:a0:
7b:54:39:b3:43:58:19:b9:3d:2d:da:4a:89:26:d1:
57:62:65:56:69:d6:42:4c:5c:b1:20:79:ff:99:67:
d3:df:4e:a0:88:ca:06:1d:35:76:c5:cf:02:cd:5e:
3c:2e:03:ab:61:13:3b:8d:dc:d5:73:99:f8:a3:70:
62:e9:ba:3e:4b:26:cb:87:ef:f6:41:d6:a9:1c:0d:
dc:7e:ac:14:f9:06:75:0b:0b:b9:8f:36:03:8d:79:
30:51:86:77:ea:f0:01:29:52:28:9a:5b:5c:ad:2c:
98:d0:43:53:e4:0c:03:af:de:02:f3:3b:12:d1:32:
f3:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:12:8F:6E:8F:5B:4F:76:08:16:21:56:51:CE:73:96:7A:78:B7:82
X509v3 Authority Key Identifier:
keyid:83:45:44:E1:A3:E2:28:C4:D3:64:7F:62:A9:D8:C9:6A:CE:9E:2C:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0VE4aPiKMTTZH9iqdjJas6eLDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b2eaa8-898b-4f33-afb9-89267e528009/1/g0VE4aPiKMTTZH9iqdjJas6eLDE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b2eaa8-898b-4f33-afb9-89267e528009/1/g0VE4aPiKMTTZH9iqdjJas6eLDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:b1:60:fb:66:45:8b:a6:c3:46:95:20:ae:37:95:85:d2:ea:
d6:2a:b3:a4:8e:a3:95:75:5c:68:3d:e8:a8:4b:6a:13:27:64:
36:78:67:2f:ce:83:48:e1:f9:a1:2e:0e:e1:8c:40:c6:a5:aa:
99:7e:bb:ad:0c:e0:e9:28:a7:79:b5:79:13:32:6c:1e:c2:a7:
95:41:21:ab:cd:d6:72:fa:ee:c2:f9:e5:1e:a1:6f:de:9f:ef:
92:92:3b:45:ef:4c:16:cc:c6:56:de:ff:16:20:cb:23:24:87:
6a:31:03:bb:0f:7a:dc:71:89:ef:ab:cf:36:4f:68:8d:b5:0e:
32:53:80:d0:33:da:72:eb:ce:6f:9d:ca:1b:81:9f:27:36:50:
78:56:ff:a4:49:da:54:ed:f8:e0:16:f3:7a:a8:8a:d8:dc:77:
ff:4b:0b:4f:5c:99:b7:c3:10:39:94:fa:cd:c8:49:a6:a0:91:
69:e7:5b:09:f6:69:5b:da:93:19:4b:37:ed:73:2d:c2:f2:49:
24:32:bc:85:1f:8f:86:fb:2f:bd:6c:a4:e2:9d:4d:1f:f3:38:
dc:19:1b:a1:c9:3d:19:89:a9:52:bf:07:ce:72:dc:d9:16:a0:
12:fd:e7:5f:31:e5:51:3f:de:51:fd:22:b7:c1:06:7c:7d:a6:
20:95:c3:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:02:47 2026 by rpki-client