Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/250423-fa91-4a22-b83a-83e47580b3ec/1/g4xPgQ16IKeDpPqxwDRGe4JQUbk.mft
File: g4xPgQ16IKeDpPqxwDRGe4JQUbk.mft (raw, json)
Hash identifier: EIToTgl+TJbF79xicp4++DW5KDo3glxBbhqr4k8V4ak=
Subject key identifier: 84:74:A3:50:86:8E:0C:0C:3F:C0:F0:D7:CF:61:03:6A:7F:21:E7:7A
Authority key identifier: 83:8C:4F:81:0D:7A:20:A7:83:A4:FA:B1:C0:34:46:7B:82:50:51:B9
Certificate issuer: /CN=838c4f810d7a20a783a4fab1c034467b825051b9
Certificate serial: 019E216DB1D97B3716C74998B4647736CDCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g4xPgQ16IKeDpPqxwDRGe4JQUbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/250423-fa91-4a22-b83a-83e47580b3ec/1/g4xPgQ16IKeDpPqxwDRGe4JQUbk.mft
Manifest number: 1907
Signing time: Wed 13 May 2026 13:01:37 +0000
Manifest this update: Wed 13 May 2026 13:01:37 +0000
Manifest next update: Thu 14 May 2026 13:01:37 +0000
Files and hashes: 1: g4xPgQ16IKeDpPqxwDRGe4JQUbk.crl (hash: +apYY62ntbxUlpzbWo4VRRApCcXn85G8o6HTuSYUz2g=)
2: jUh5kPqCBDpArkt6K7K31qvOD8c.roa (hash: qUwUoHmjfXhrPLn74zGv7aYCTKLavD/2JI0PvwjIvp4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/250423-fa91-4a22-b83a-83e47580b3ec/1/g4xPgQ16IKeDpPqxwDRGe4JQUbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/250423-fa91-4a22-b83a-83e47580b3ec/1/g4xPgQ16IKeDpPqxwDRGe4JQUbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/g4xPgQ16IKeDpPqxwDRGe4JQUbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:6d:b1:d9:7b:37:16:c7:49:98:b4:64:77:36:cd:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=838c4f810d7a20a783a4fab1c034467b825051b9
Validity
Not Before: May 13 13:01:37 2026 GMT
Not After : May 14 13:01:37 2026 GMT
Subject: CN=8474a350868e0c0c3fc0f0d7cf61036a7f21e77a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bb:5d:6e:5d:54:21:8d:f1:d3:78:d4:fd:62:
08:4a:10:77:cc:dd:05:9d:d0:aa:20:11:49:6c:e3:
a0:1e:37:aa:c6:07:99:d8:16:47:eb:23:8b:a1:7b:
41:c9:e6:4b:bc:a1:ac:a4:9c:4f:57:53:52:d7:eb:
97:78:09:9f:7e:78:c1:91:4e:e3:a1:7c:3e:f1:90:
a2:d8:3d:1e:03:ca:7e:15:32:89:19:d9:9e:72:53:
91:7b:ff:21:6b:df:18:38:a4:2f:bc:4f:83:39:3c:
e0:e9:ff:28:69:b7:09:ed:dd:d4:7a:f8:3f:c2:e5:
a4:fc:f9:fd:fd:74:8c:66:27:6f:d3:a9:dd:14:87:
91:01:76:97:70:78:3c:5e:ac:40:c1:7c:12:f1:59:
e8:e5:11:90:f8:21:aa:d7:e6:98:2d:99:9c:ba:7b:
28:2a:5a:7b:f3:68:1a:36:84:3b:4b:f1:65:a5:ee:
e9:78:2d:13:bd:70:e5:49:0c:77:2f:14:16:c6:c6:
af:af:2d:e9:af:40:7f:8e:ff:28:7a:29:bd:40:07:
7e:0d:98:a1:b6:d0:38:b9:ab:ce:af:88:f7:13:45:
0b:b2:f7:f8:22:12:0f:7d:1e:51:9e:8b:27:f5:0a:
26:aa:ba:53:b4:8a:fe:a6:30:fd:c8:69:56:a2:ac:
63:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:74:A3:50:86:8E:0C:0C:3F:C0:F0:D7:CF:61:03:6A:7F:21:E7:7A
X509v3 Authority Key Identifier:
keyid:83:8C:4F:81:0D:7A:20:A7:83:A4:FA:B1:C0:34:46:7B:82:50:51:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g4xPgQ16IKeDpPqxwDRGe4JQUbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/250423-fa91-4a22-b83a-83e47580b3ec/1/g4xPgQ16IKeDpPqxwDRGe4JQUbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/250423-fa91-4a22-b83a-83e47580b3ec/1/g4xPgQ16IKeDpPqxwDRGe4JQUbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:74:30:a9:77:32:56:53:6e:c8:3d:e9:3d:11:bf:2c:8d:35:
73:72:86:b5:24:9e:01:d9:70:83:15:3b:23:b2:30:a4:e4:43:
f1:24:ab:41:0c:15:b2:0a:8d:b8:3d:ce:85:17:cc:74:b8:7d:
d6:cb:68:4d:2d:a3:f5:4e:eb:99:29:45:d1:bc:72:a3:e1:7d:
1e:c9:4d:79:28:08:83:a3:1b:44:8b:e8:5a:90:26:59:75:ab:
9c:01:cd:dd:13:33:63:83:a0:c5:f2:bc:72:72:cb:91:8c:e8:
7a:ae:f7:3c:05:43:8e:84:9e:df:9c:6b:33:83:d5:ef:2e:6d:
7c:8c:ed:d4:2a:f8:6f:4a:94:5f:4b:28:03:fe:c1:60:9d:17:
50:d2:ad:89:3e:77:ff:9f:16:2b:d5:64:a2:05:6f:97:f2:e3:
bc:04:04:ef:7d:81:e5:73:79:92:90:e7:10:49:6a:ec:1a:bd:
28:cb:1c:05:59:5a:bf:15:b7:87:5f:33:e7:b7:1a:9e:48:4c:
2a:1c:c7:39:3f:2b:fd:8c:99:65:ea:ad:2e:42:e7:1a:c9:e4:
6a:e0:11:62:9c:7c:d4:71:7e:bd:9b:60:7d:79:c1:77:e3:47:
f1:93:bc:f3:69:23:ab:70:a7:a2:98:53:43:d2:52:f5:ac:2c:
0b:31:98:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:12:45 2026 by rpki-client