Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/g45PalvGxs45SfZa6_10vq4YBfc.mft
File: g45PalvGxs45SfZa6_10vq4YBfc.mft (raw, json)
Hash identifier: 8DH+7WQogRZo3DlPHdlIBZZ1DRZofD4rDk1lwCQFMB4=
Subject key identifier: C5:FE:6A:7A:56:FC:1B:1B:20:B3:1F:31:43:12:19:ED:F4:48:8A:89
Authority key identifier: 83:8E:4F:6A:5B:C6:C6:CE:39:49:F6:5A:EB:FD:74:BE:AE:18:05:F7
Certificate issuer: /CN=838e4f6a5bc6c6ce3949f65aebfd74beae1805f7
Certificate serial: 019F916C4E74493E5576EF3FE450447AC8DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g45PalvGxs45SfZa6_10vq4YBfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/g45PalvGxs45SfZa6_10vq4YBfc.mft
Manifest number: 40
Signing time: Fri 24 Jul 2026 00:00:21 +0000
Manifest this update: Fri 24 Jul 2026 00:00:21 +0000
Manifest next update: Sat 25 Jul 2026 00:00:21 +0000
Files and hashes: 1: M9hHH-XkfEyrQ9Tgg0N_97kMBk8.roa (hash: ww0iqqt1Yfsck01DFxFXo8c6Y6NbnJ1UQGfZa6OrRsM=)
2: g45PalvGxs45SfZa6_10vq4YBfc.crl (hash: miQhUZXjQEp0i2z+dIcm5JWZ881DazWQrNYMmtmCx3g=)
3: rwYJCpd9J4dX5QlLFB6y9XFZnjg.roa (hash: 3F/4Vc414MUT+81iTkj1XtSqLsoqK3OBVs9Vmtoasx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/g45PalvGxs45SfZa6_10vq4YBfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/g45PalvGxs45SfZa6_10vq4YBfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/g45PalvGxs45SfZa6_10vq4YBfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:4e:74:49:3e:55:76:ef:3f:e4:50:44:7a:c8:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=838e4f6a5bc6c6ce3949f65aebfd74beae1805f7
Validity
Not Before: Jul 24 00:00:21 2026 GMT
Not After : Jul 25 00:00:21 2026 GMT
Subject: CN=c5fe6a7a56fc1b1b20b31f31431219edf4488a89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:09:3f:1a:3a:ff:55:43:bf:6f:d8:a4:c9:a9:
2d:8c:47:42:f3:a0:ba:36:76:dc:da:2a:f0:2f:c0:
cc:ca:63:e9:ff:8c:eb:86:a5:c8:73:b5:c2:d1:e9:
98:fa:a9:61:a5:74:1b:71:70:89:bf:f7:08:5e:1f:
94:70:6f:0f:65:f0:ae:8e:f3:89:16:2c:f9:5d:23:
12:77:34:0c:bc:65:aa:3c:29:46:c2:15:c2:e5:70:
77:97:c0:7a:39:19:c5:23:b9:c4:61:b4:cb:dc:b0:
c6:7b:57:c6:8a:88:65:f4:7a:71:39:92:18:e1:23:
e7:5c:d6:8c:d9:d8:be:fc:71:b7:3a:20:e6:77:11:
b8:4a:9b:57:9d:d5:ca:0a:80:3a:83:e6:15:08:8f:
65:02:77:a7:86:1b:3c:bf:fd:f9:7a:64:71:c0:0a:
a0:36:4d:78:5d:de:28:29:bf:a7:5f:fa:d8:b4:34:
0f:db:00:37:8b:4f:31:77:6c:c3:b4:ab:cf:5d:07:
a5:7b:74:88:66:98:fa:f4:e8:54:e5:c6:df:1b:2d:
af:c3:4a:41:0f:cd:25:61:99:cb:21:0a:64:2f:a7:
e4:6f:e5:d2:69:a7:fe:a2:85:26:3b:fd:7f:e4:bd:
0d:9a:15:a9:a2:42:82:07:75:f7:55:1d:88:4d:f5:
8b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:FE:6A:7A:56:FC:1B:1B:20:B3:1F:31:43:12:19:ED:F4:48:8A:89
X509v3 Authority Key Identifier:
keyid:83:8E:4F:6A:5B:C6:C6:CE:39:49:F6:5A:EB:FD:74:BE:AE:18:05:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g45PalvGxs45SfZa6_10vq4YBfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/g45PalvGxs45SfZa6_10vq4YBfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/g45PalvGxs45SfZa6_10vq4YBfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:bd:8d:80:e2:b0:c2:01:6b:04:49:02:a9:90:b0:2c:e7:fa:
0a:eb:7b:da:36:76:0b:53:13:09:74:b0:5f:ed:93:5c:ac:49:
f7:28:ea:1f:40:ef:ad:a8:25:e2:2e:8c:85:8d:88:b1:56:9e:
df:45:39:39:e6:38:d0:5f:35:f0:52:40:4f:fa:a2:ea:42:0b:
52:62:29:a9:a7:2a:bb:60:fd:85:e4:76:58:7d:23:2f:76:ed:
5c:7d:2a:be:f3:dd:fc:ff:a9:49:ca:be:1c:bf:c0:a0:60:c3:
36:13:6c:2c:e1:c4:34:b8:51:40:dd:8c:6e:ca:82:64:ff:fa:
1b:9a:9d:18:24:c2:c5:f6:cb:9c:68:2d:ad:1d:36:54:90:d6:
34:ad:e6:32:13:94:fd:c6:f4:0b:06:be:63:bf:0d:13:7c:b3:
63:2a:f7:72:48:e4:22:71:eb:31:99:06:1d:91:60:bd:3e:3a:
53:ea:fd:c1:7b:85:35:f6:44:46:7e:b7:35:0f:f6:bc:55:ea:
60:e5:f2:dd:20:36:9e:2c:3c:d7:69:e0:c5:c2:e8:61:ec:88:
44:5e:22:af:b1:59:f0:08:f2:aa:e4:f9:b2:41:59:03:17:80:
93:70:ad:67:ce:11:a9:60:95:2e:0d:59:51:73:c1:1f:41:76:
ed:7c:0a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:22:58 2026 by rpki-client