Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.mft
File: g0KhQTsMzjTj9_vw5_OOCjcKYmc.mft (raw, json)
Hash identifier: l4CwEqZyIjl1dyIw/UxZp3jOkSqgiMaeih3bWYCHRQI=
Subject key identifier: 34:4A:E5:BA:2A:B7:9D:C0:11:6C:03:AF:5E:34:40:99:CF:DB:34:9D
Authority key identifier: 83:42:A1:41:3B:0C:CE:34:E3:F7:FB:F0:E7:F3:8E:0A:37:0A:62:67
Certificate issuer: /CN=8342a1413b0cce34e3f7fbf0e7f38e0a370a6267
Certificate serial: 019D288466B1ADC45C7F3112AA7FA29FA9A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g0KhQTsMzjTj9_vw5_OOCjcKYmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.mft
Manifest number: 1220
Signing time: Thu 26 Mar 2026 05:00:58 +0000
Manifest this update: Thu 26 Mar 2026 05:00:58 +0000
Manifest next update: Fri 27 Mar 2026 05:00:58 +0000
Files and hashes: 1: bwRA1i-n189vPT-iJPMMcXm_fOU.roa (hash: /aZD95cwPbBEC+pYbods3hnay36mkiDzCXiuSjLwkjo=)
2: g0KhQTsMzjTj9_vw5_OOCjcKYmc.crl (hash: LnDA8WuFTiE8iwP7iH+oDynKkil8g4U9YwyKMhODomQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/g0KhQTsMzjTj9_vw5_OOCjcKYmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:66:b1:ad:c4:5c:7f:31:12:aa:7f:a2:9f:a9:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8342a1413b0cce34e3f7fbf0e7f38e0a370a6267
Validity
Not Before: Mar 26 05:00:58 2026 GMT
Not After : Mar 27 05:00:58 2026 GMT
Subject: CN=344ae5ba2ab79dc0116c03af5e344099cfdb349d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:09:07:af:e3:8b:88:82:e4:f3:eb:a0:8a:57:
c7:57:6f:b7:8c:18:5b:22:aa:6a:21:90:c6:95:33:
a8:e6:51:eb:9a:56:6b:b6:1d:0b:64:0c:fa:6b:24:
f1:5c:31:38:9e:06:1e:9c:f5:1b:7b:a4:ba:9b:99:
3d:53:ec:66:1c:43:7b:32:18:2d:7d:2d:5a:79:22:
c5:19:73:0a:0f:ce:1d:b3:48:2e:64:94:3a:dd:8b:
8e:ba:5e:11:8a:c2:ec:92:60:6f:a2:74:b9:87:09:
64:06:0e:91:33:27:6e:c3:2d:88:f6:4e:35:fc:fe:
b3:a7:04:25:51:fc:e2:71:e4:79:60:88:0f:2e:48:
d3:7b:6a:c3:0e:5a:95:18:0a:ab:94:de:a8:f3:28:
2c:12:b7:a6:f0:e7:bb:3c:d8:30:50:be:cb:8a:4d:
fb:b5:43:b8:f9:3a:63:dd:0f:15:9a:ce:2d:12:f9:
f6:25:8b:32:97:b7:81:52:b7:77:d7:3f:41:17:95:
62:ba:f2:95:3e:c6:ea:b2:f2:9b:b7:e3:53:62:9d:
65:a4:45:8a:ea:a7:1f:f2:dd:9b:eb:24:83:a6:46:
c9:7a:e9:8b:f7:a5:3f:9e:14:79:28:42:c7:26:e0:
4a:16:b2:ec:44:b8:c7:d3:74:cc:43:ac:b0:da:12:
3d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:4A:E5:BA:2A:B7:9D:C0:11:6C:03:AF:5E:34:40:99:CF:DB:34:9D
X509v3 Authority Key Identifier:
keyid:83:42:A1:41:3B:0C:CE:34:E3:F7:FB:F0:E7:F3:8E:0A:37:0A:62:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0KhQTsMzjTj9_vw5_OOCjcKYmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:35:4f:5b:c5:2a:4b:d6:bd:9c:fb:c3:0f:32:f7:2d:a3:45:
19:ed:cb:f8:3e:61:1f:c6:2c:ee:c9:95:f6:c5:70:89:34:75:
7d:fe:68:1a:3c:21:62:8e:4f:62:1e:b1:f9:a6:ec:8f:cf:cd:
b4:1b:1f:e4:ff:a4:09:5c:91:c0:8c:e3:b0:69:c3:95:fb:32:
8d:54:9a:cb:95:3f:32:42:8e:ae:21:11:d2:58:81:e0:c9:3f:
6d:74:86:bb:7f:7c:d8:58:51:19:78:04:01:6c:a1:65:8e:1e:
af:d6:e4:33:92:72:11:85:34:b5:47:b6:b1:ee:53:7f:1c:2f:
ec:c2:d0:d5:e9:a7:13:e1:2e:bf:f0:bf:07:e0:2b:3e:7f:b4:
63:83:08:6f:d4:0c:d4:8e:30:d6:38:8e:6c:da:c2:da:1d:bd:
62:4b:1e:dd:0b:05:40:3e:c6:f9:21:c4:91:07:07:e3:2b:8f:
53:6d:64:82:eb:d2:46:41:2c:a1:c4:94:bd:88:34:9b:81:b2:
44:5c:99:ac:fd:36:0a:ef:d9:00:ff:61:53:c1:f1:48:00:eb:
dc:19:5a:31:38:42:55:11:26:67:05:6b:c5:14:0c:5c:52:b3:
d7:47:92:37:ac:e4:b8:99:4d:7e:92:75:f7:a5:05:bd:e6:c1:
03:31:ac:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:53:54 2026 by rpki-client