Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/b2397c-b36d-46a3-a240-1d9a19f1295b/1/g_W9I77F0GOYM6kUGYXMV1OIbhY.mft
File: g_W9I77F0GOYM6kUGYXMV1OIbhY.mft (raw, json)
Hash identifier: q0z+48YWQhUlHRf3V4IF44zmNk9jIv7YYtx+QWehsbI=
Subject key identifier: F6:F5:E2:69:AF:EA:40:9A:50:29:AA:8A:F9:15:33:8E:D5:00:57:AF
Authority key identifier: 83:F5:BD:23:BE:C5:D0:63:98:33:A9:14:19:85:CC:57:53:88:6E:16
Certificate issuer: /CN=83f5bd23bec5d0639833a9141985cc5753886e16
Certificate serial: 019D2B4E4563AFB54612BEAF103C93F64A0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g_W9I77F0GOYM6kUGYXMV1OIbhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/b2397c-b36d-46a3-a240-1d9a19f1295b/1/g_W9I77F0GOYM6kUGYXMV1OIbhY.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 18:00:42 +0000
Manifest this update: Thu 26 Mar 2026 18:00:42 +0000
Manifest next update: Fri 27 Mar 2026 18:00:42 +0000
Files and hashes: 1: g_W9I77F0GOYM6kUGYXMV1OIbhY.crl (hash: hGULmmiM5R07Bn9l9mQaCFfJyV23VRzsgO/6jSqbL7A=)
2: z2shUf2aqRLmVJq8eVLYTJ_YFbI.roa (hash: Edkz13QcBJuRKSQNfHEA5UGNYVjpEOKlRl0wbxqZyxQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/b2397c-b36d-46a3-a240-1d9a19f1295b/1/g_W9I77F0GOYM6kUGYXMV1OIbhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/b2397c-b36d-46a3-a240-1d9a19f1295b/1/g_W9I77F0GOYM6kUGYXMV1OIbhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/g_W9I77F0GOYM6kUGYXMV1OIbhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4e:45:63:af:b5:46:12:be:af:10:3c:93:f6:4a:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83f5bd23bec5d0639833a9141985cc5753886e16
Validity
Not Before: Mar 26 18:00:42 2026 GMT
Not After : Mar 27 18:00:42 2026 GMT
Subject: CN=f6f5e269afea409a5029aa8af915338ed50057af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5d:a1:be:ba:d1:c7:c8:7a:0a:18:c3:c5:c4:
df:70:f4:85:9f:8f:4a:41:90:45:59:16:cd:e2:e5:
4a:33:f3:c8:fd:7b:e8:8f:ce:af:7d:9e:cf:a3:5c:
23:6e:45:30:03:8b:73:91:64:44:d1:f6:2b:38:e1:
f3:2c:bb:49:d8:65:8b:5a:14:64:0a:27:7f:5e:4a:
37:2e:16:da:81:16:57:6e:af:5a:0d:57:c0:8f:3b:
4a:fb:d2:9b:a0:dd:15:63:88:fc:8f:bd:96:38:1d:
8e:07:1b:cc:10:9d:46:d3:d3:20:5a:59:e7:76:60:
e3:50:e1:ee:a9:46:96:46:30:91:5f:1c:75:71:9f:
0d:57:66:3a:8b:c9:a6:75:b5:da:2f:e3:b4:9b:e3:
e6:d0:0a:ab:4a:18:e0:75:69:fb:48:c8:e9:df:c4:
de:83:30:32:be:f8:40:8d:a5:18:eb:aa:cb:3f:db:
0a:9a:a2:03:35:1a:b1:23:6e:01:c1:93:e6:57:a9:
66:d1:4c:aa:cb:fa:9d:ce:fa:ca:9e:90:5e:ee:b6:
05:ec:21:7f:70:8c:df:2c:fe:dc:35:16:79:bc:e1:
c5:06:29:66:65:40:50:a4:6a:87:a0:3f:29:7d:50:
49:c4:08:b7:43:f1:62:b0:63:7e:26:a2:6f:83:5a:
30:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:F5:E2:69:AF:EA:40:9A:50:29:AA:8A:F9:15:33:8E:D5:00:57:AF
X509v3 Authority Key Identifier:
keyid:83:F5:BD:23:BE:C5:D0:63:98:33:A9:14:19:85:CC:57:53:88:6E:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_W9I77F0GOYM6kUGYXMV1OIbhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b2397c-b36d-46a3-a240-1d9a19f1295b/1/g_W9I77F0GOYM6kUGYXMV1OIbhY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b2397c-b36d-46a3-a240-1d9a19f1295b/1/g_W9I77F0GOYM6kUGYXMV1OIbhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:4a:ee:31:66:2b:fc:a7:42:2f:bd:29:64:de:81:ce:e4:c2:
7f:c3:e4:76:c7:2e:51:8f:c1:f9:9e:29:c3:88:0c:80:e1:74:
a4:ad:a9:17:e5:60:65:81:c6:59:87:b7:50:e5:4f:fd:96:2b:
39:b9:d3:97:1d:18:53:40:08:f3:40:27:88:83:9d:2e:ca:e2:
2e:29:6d:46:b3:fc:ba:e9:57:45:59:cc:79:76:15:44:54:5f:
e2:c6:c6:ff:e2:e2:59:82:58:fa:80:4e:92:7c:e7:7e:d8:72:
5a:62:81:b0:25:69:f1:ab:f3:30:b5:4d:f1:32:bc:65:4c:91:
35:24:50:c3:07:f8:b1:f3:df:ae:0a:56:28:2c:58:ce:df:22:
40:96:a6:12:4c:21:42:8d:41:48:34:c3:cb:81:73:34:dc:77:
ed:f7:bf:bb:f3:77:7e:74:92:eb:e6:02:43:66:07:c2:48:99:
cc:03:05:6a:b4:f1:04:4b:95:1f:1d:17:5f:d4:4f:bd:5d:03:
9e:13:44:c2:35:86:b7:02:ab:ee:bf:08:cf:3a:44:ee:d8:8a:
52:90:9b:3f:2e:14:9e:95:f1:c0:f4:65:29:57:d3:d2:b9:69:
5e:bb:af:3f:1b:bf:be:63:ed:ed:2c:e1:4f:85:df:ae:78:35:
81:25:48:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:10:36 2026 by rpki-client