Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/250423-fa91-4a22-b83a-83e47580b3ec/1/g4xPgQ16IKeDpPqxwDRGe4JQUbk.mft
File: g4xPgQ16IKeDpPqxwDRGe4JQUbk.mft (raw, json)
Hash identifier: +ENKz2nGVkbrmG+CPjRBMgzeLrl67uXuI8bLxpWAAww=
Subject key identifier: 36:32:7C:AA:3B:53:B7:E5:72:25:AA:0A:2B:3A:77:83:FE:03:DB:C1
Authority key identifier: 83:8C:4F:81:0D:7A:20:A7:83:A4:FA:B1:C0:34:46:7B:82:50:51:B9
Certificate issuer: /CN=838c4f810d7a20a783a4fab1c034467b825051b9
Certificate serial: 019D265F927CF286368AC921413974C57FDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g4xPgQ16IKeDpPqxwDRGe4JQUbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/250423-fa91-4a22-b83a-83e47580b3ec/1/g4xPgQ16IKeDpPqxwDRGe4JQUbk.mft
Manifest number: 1885
Signing time: Wed 25 Mar 2026 19:01:30 +0000
Manifest this update: Wed 25 Mar 2026 19:01:30 +0000
Manifest next update: Thu 26 Mar 2026 19:01:30 +0000
Files and hashes: 1: g4xPgQ16IKeDpPqxwDRGe4JQUbk.crl (hash: STFxetdBC4a7Sv56x1Z3LgQM4VXZLgtm0eY4BZXWSiY=)
2: jUh5kPqCBDpArkt6K7K31qvOD8c.roa (hash: qUwUoHmjfXhrPLn74zGv7aYCTKLavD/2JI0PvwjIvp4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/250423-fa91-4a22-b83a-83e47580b3ec/1/g4xPgQ16IKeDpPqxwDRGe4JQUbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/250423-fa91-4a22-b83a-83e47580b3ec/1/g4xPgQ16IKeDpPqxwDRGe4JQUbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/g4xPgQ16IKeDpPqxwDRGe4JQUbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:92:7c:f2:86:36:8a:c9:21:41:39:74:c5:7f:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=838c4f810d7a20a783a4fab1c034467b825051b9
Validity
Not Before: Mar 25 19:01:30 2026 GMT
Not After : Mar 26 19:01:30 2026 GMT
Subject: CN=36327caa3b53b7e57225aa0a2b3a7783fe03dbc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f9:f3:84:28:83:c1:a1:3d:d7:bd:8b:18:01:
85:91:f6:fc:72:a1:a0:72:6d:0e:80:69:cc:7c:ca:
80:d8:7b:14:cc:a5:79:ab:26:49:65:90:6d:11:03:
88:de:0a:f5:23:07:eb:0e:ed:ab:e2:cd:41:bd:6a:
60:0e:eb:fd:e9:99:6d:0d:a3:68:f7:a1:1c:c2:fa:
cf:22:07:37:2e:bd:be:78:fc:6d:e5:ec:8a:ed:96:
00:68:4c:1c:74:cf:5d:cd:78:43:60:02:b0:45:a8:
c9:e9:db:d0:3e:48:5d:0e:6f:7d:1b:3b:41:56:6f:
bc:e3:96:2c:04:f9:1a:e4:36:d8:90:02:a1:e9:93:
af:05:da:1a:f7:ad:5c:63:8d:b3:35:c5:30:b0:75:
2d:97:8f:13:59:11:45:6f:4d:d4:e3:5f:6f:bf:47:
08:0e:08:16:9a:a6:d0:75:d7:63:ef:61:3f:99:4b:
6d:11:06:09:52:d8:fc:78:55:7d:7a:09:a9:1e:8c:
f9:1f:e1:5c:29:6e:35:ef:71:f4:a2:4d:5f:1e:d9:
6b:d6:9f:02:1f:b8:7a:e4:c4:43:25:98:b2:f4:fe:
d5:e7:3a:04:96:3c:ff:72:73:b1:c8:5e:20:6d:a9:
b6:c1:ce:c9:29:71:06:22:81:47:f8:f2:c0:d8:f6:
bd:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:32:7C:AA:3B:53:B7:E5:72:25:AA:0A:2B:3A:77:83:FE:03:DB:C1
X509v3 Authority Key Identifier:
keyid:83:8C:4F:81:0D:7A:20:A7:83:A4:FA:B1:C0:34:46:7B:82:50:51:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g4xPgQ16IKeDpPqxwDRGe4JQUbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/250423-fa91-4a22-b83a-83e47580b3ec/1/g4xPgQ16IKeDpPqxwDRGe4JQUbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/250423-fa91-4a22-b83a-83e47580b3ec/1/g4xPgQ16IKeDpPqxwDRGe4JQUbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:13:c7:4b:c3:e1:0c:61:65:19:4e:6b:55:c8:6e:00:f1:1f:
d0:71:08:89:d9:bb:95:79:38:eb:b3:01:6f:e8:a7:4e:68:11:
d8:8b:0a:6d:41:e7:59:2c:22:54:a6:69:d5:3d:03:a1:6e:7b:
d5:39:c1:55:ea:5f:4f:c8:c3:3e:e1:77:e3:da:4d:50:91:5b:
ac:fe:e8:1f:e2:78:72:cf:69:13:5f:ee:40:d6:67:25:fe:18:
4e:ea:cf:f8:bc:f2:4d:cf:b8:82:0a:49:68:60:f9:c0:15:56:
46:25:17:9c:b7:17:2b:73:39:ac:cf:fa:b3:c2:4d:4d:f5:3b:
3b:3c:03:26:6c:64:f8:1f:33:73:18:88:70:c8:2d:dd:da:40:
83:79:6e:6a:c4:ff:9f:8e:7a:23:10:b7:9d:a8:c6:fa:13:6f:
55:3d:c9:67:bc:81:ae:61:ad:df:9f:9a:df:97:13:8e:6b:84:
b6:05:d5:bd:78:e1:46:9f:6a:6b:59:a5:06:c9:9f:7d:9f:40:
31:2c:e0:ab:7b:1e:f5:37:1b:09:64:f2:6a:a3:47:50:4b:23:
3e:13:93:6b:36:a7:39:e1:4a:11:83:14:b4:67:ea:3f:d8:a7:
e9:b8:bd:b5:67:8f:00:2b:23:f5:1a:91:3d:50:78:29:f6:43:
25:ac:9c:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:11:22 2026 by rpki-client