Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/ff4bbb-785d-46b6-b29f-2b85f70a3666/1/g4fa4eZQhWzIVx5GLr2evrZccDg.mft
File: g4fa4eZQhWzIVx5GLr2evrZccDg.mft (raw, json)
Hash identifier: DWMCj1YqWo+kuCW7hopu5+oTR+ZP29Ma7nq3LMhPAbw=
Subject key identifier: 5D:54:2F:C0:34:6F:92:BD:40:76:C2:BE:15:98:03:53:9F:5E:59:3B
Authority key identifier: 83:87:DA:E1:E6:50:85:6C:C8:57:1E:46:2E:BD:9E:BE:B6:5C:70:38
Certificate issuer: /CN=8387dae1e650856cc8571e462ebd9ebeb65c7038
Certificate serial: 019D2AA98AEDFC5E598B8E092A4069D51AD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g4fa4eZQhWzIVx5GLr2evrZccDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/ff4bbb-785d-46b6-b29f-2b85f70a3666/1/g4fa4eZQhWzIVx5GLr2evrZccDg.mft
Manifest number: 1885
Signing time: Thu 26 Mar 2026 15:00:47 +0000
Manifest this update: Thu 26 Mar 2026 15:00:47 +0000
Manifest next update: Fri 27 Mar 2026 15:00:47 +0000
Files and hashes: 1: g4fa4eZQhWzIVx5GLr2evrZccDg.crl (hash: XKmc8iPMBMhOfc/oHEtlcgJrwD3ixjXGd2boGRP2//M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/ff4bbb-785d-46b6-b29f-2b85f70a3666/1/g4fa4eZQhWzIVx5GLr2evrZccDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/ff4bbb-785d-46b6-b29f-2b85f70a3666/1/g4fa4eZQhWzIVx5GLr2evrZccDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/g4fa4eZQhWzIVx5GLr2evrZccDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:8a:ed:fc:5e:59:8b:8e:09:2a:40:69:d5:1a:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8387dae1e650856cc8571e462ebd9ebeb65c7038
Validity
Not Before: Mar 26 15:00:47 2026 GMT
Not After : Mar 27 15:00:47 2026 GMT
Subject: CN=5d542fc0346f92bd4076c2be159803539f5e593b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:22:aa:21:aa:79:ab:e0:30:6a:f0:26:6e:45:
3b:80:f3:3c:bb:e8:77:8e:aa:16:5c:72:66:1b:d5:
4c:08:11:d1:2d:1a:a1:19:96:9b:15:1a:31:a1:c8:
ee:a6:6b:f6:3e:92:2f:a6:89:54:f7:da:a8:21:f6:
78:2b:14:1d:7a:d0:0f:00:4e:98:5c:77:d3:31:8f:
8f:17:8c:18:01:79:ac:0e:ff:69:61:fe:36:25:22:
a7:f4:50:56:c0:78:bf:15:6e:71:a3:c2:68:94:9b:
26:d1:18:3a:62:08:2a:29:54:df:df:f0:2b:dd:fa:
52:87:b5:dc:be:fb:dd:7b:dc:02:f4:d5:72:9f:1b:
22:1f:94:01:18:5d:48:64:2d:f0:01:e0:b8:a0:aa:
de:34:87:81:db:64:cf:1b:f3:98:da:f7:02:df:81:
c6:ae:64:f6:53:d6:df:88:a8:6c:a8:67:73:a9:40:
11:55:2d:d4:78:93:a5:87:df:a5:8b:44:9f:fd:6c:
c1:09:6c:22:15:fa:73:db:f3:a4:03:ad:8c:06:07:
7a:04:89:ae:4d:41:81:91:e1:7e:08:30:d0:ce:ac:
fb:ed:ff:5c:f8:10:7c:5b:4e:c7:0d:9e:4b:b2:6a:
5a:8f:72:ff:90:61:61:ca:39:f9:07:03:59:97:a7:
96:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:54:2F:C0:34:6F:92:BD:40:76:C2:BE:15:98:03:53:9F:5E:59:3B
X509v3 Authority Key Identifier:
keyid:83:87:DA:E1:E6:50:85:6C:C8:57:1E:46:2E:BD:9E:BE:B6:5C:70:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g4fa4eZQhWzIVx5GLr2evrZccDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ff4bbb-785d-46b6-b29f-2b85f70a3666/1/g4fa4eZQhWzIVx5GLr2evrZccDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ff4bbb-785d-46b6-b29f-2b85f70a3666/1/g4fa4eZQhWzIVx5GLr2evrZccDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e1:15:16:95:5e:50:6e:d5:2b:0d:10:81:a4:13:b1:e7:02:a3:
3d:d5:7d:5c:ee:8b:a8:b9:c2:b8:67:54:bf:c5:4c:ef:b0:39:
d2:f1:df:92:f8:4f:a2:f0:22:60:fa:47:cc:32:16:22:28:4b:
1e:75:ed:f3:e3:a9:56:4a:55:57:81:ee:3d:5d:b5:37:dc:43:
5d:0c:16:c2:14:b1:06:7e:0f:80:87:b6:cc:bb:e6:e4:3c:df:
81:65:24:ab:f6:7a:1f:b3:ee:67:b3:e5:32:70:10:28:35:39:
08:dd:bc:82:4f:e6:30:87:6d:f4:b1:77:d5:c2:60:98:7b:f7:
d8:e2:8c:43:fb:d8:dd:7d:ec:46:af:f2:06:f2:8f:f5:f3:b0:
4d:95:00:f8:a1:a3:d6:05:c5:4d:ff:2b:95:2e:fb:03:61:88:
44:4c:b4:d2:7f:4d:d3:18:7c:32:09:ea:0e:b0:63:73:df:07:
cd:b5:24:37:3e:61:ca:31:43:b8:88:2b:99:d3:ca:0b:83:70:
d5:c9:94:e8:9f:dd:50:15:f3:73:99:7e:dc:9c:6b:3f:89:aa:
cc:f1:b6:fd:f8:8a:39:cb:a0:e3:97:16:3b:38:e6:32:4e:98:
54:6f:34:48:b4:f4:2a:ae:45:42:26:52:6e:7a:fb:1d:f1:f9:
9a:2f:81:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:16:54 2026 by rpki-client