Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/g45PalvGxs45SfZa6_10vq4YBfc.mft
File: g45PalvGxs45SfZa6_10vq4YBfc.mft (raw, json)
Hash identifier: gkLlzGqBZMyH/DjjqnVLalv2hY8+ZHL11T2d4wVay7Y=
Subject key identifier: CF:48:DB:21:E5:46:6C:47:A7:2E:1E:6D:9B:45:0C:9E:C2:2A:D5:1F
Authority key identifier: 83:8E:4F:6A:5B:C6:C6:CE:39:49:F6:5A:EB:FD:74:BE:AE:18:05:F7
Certificate issuer: /CN=838e4f6a5bc6c6ce3949f65aebfd74beae1805f7
Certificate serial: 01A0DD97954E32E4D0A3A19726F8D29CAFFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g45PalvGxs45SfZa6_10vq4YBfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/g45PalvGxs45SfZa6_10vq4YBfc.mft
Manifest number: EC
Signing time: Sat 26 Sep 2026 12:01:33 +0000
Manifest this update: Sat 26 Sep 2026 12:01:33 +0000
Manifest next update: Sun 27 Sep 2026 12:01:33 +0000
Files and hashes: 1: M9hHH-XkfEyrQ9Tgg0N_97kMBk8.roa (hash: ww0iqqt1Yfsck01DFxFXo8c6Y6NbnJ1UQGfZa6OrRsM=)
2: g45PalvGxs45SfZa6_10vq4YBfc.crl (hash: uc/5BQsSQ47Vx8tMd9F+aKMQqEJzKYOEkTnVb/4896s=)
3: rwYJCpd9J4dX5QlLFB6y9XFZnjg.roa (hash: 3F/4Vc414MUT+81iTkj1XtSqLsoqK3OBVs9Vmtoasx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/g45PalvGxs45SfZa6_10vq4YBfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/g45PalvGxs45SfZa6_10vq4YBfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/g45PalvGxs45SfZa6_10vq4YBfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:97:95:4e:32:e4:d0:a3:a1:97:26:f8:d2:9c:af:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=838e4f6a5bc6c6ce3949f65aebfd74beae1805f7
Validity
Not Before: Sep 26 12:01:33 2026 GMT
Not After : Sep 27 12:01:33 2026 GMT
Subject: CN=cf48db21e5466c47a72e1e6d9b450c9ec22ad51f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:54:6f:42:4b:85:e1:49:b7:be:54:7e:a1:9e:
c0:93:19:e8:34:e4:f3:bb:d0:66:90:6b:c6:1e:98:
4b:30:17:20:2a:f0:f2:3e:89:65:37:b9:4b:db:49:
f6:79:d2:1f:df:af:c0:30:c5:c3:16:43:45:59:73:
02:c8:3f:a0:1c:41:f2:73:e0:c7:e0:58:50:ed:e8:
d8:8a:27:3f:9d:40:36:ec:a3:d1:65:4f:18:4e:b5:
b8:b0:cb:49:d1:f8:04:f0:25:67:d3:79:ad:0e:3b:
bb:12:e7:7f:84:01:c8:3f:f9:34:68:17:1b:48:cf:
a1:34:8c:61:22:2c:0c:f1:1a:73:9c:c5:2c:9f:b0:
2e:03:24:91:b2:a4:7b:58:21:e9:e9:ad:e8:54:8f:
10:ab:3e:19:5a:23:53:5a:4a:e3:8a:74:9c:e5:7a:
af:71:77:c5:90:a5:70:7f:d7:14:a4:98:63:ae:eb:
66:b3:1d:35:d6:b9:85:e0:87:c5:2f:4b:a9:18:89:
80:e5:3a:73:a1:fd:bd:5e:4c:da:c4:4f:7b:0d:89:
11:2a:53:ae:ae:2f:c2:bd:95:f3:6d:1d:75:ec:77:
35:43:3f:f6:51:dc:73:b8:34:92:e0:67:c7:fe:75:
78:c1:48:52:56:91:ae:a2:b5:7b:f1:d2:da:95:80:
bc:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:48:DB:21:E5:46:6C:47:A7:2E:1E:6D:9B:45:0C:9E:C2:2A:D5:1F
X509v3 Authority Key Identifier:
keyid:83:8E:4F:6A:5B:C6:C6:CE:39:49:F6:5A:EB:FD:74:BE:AE:18:05:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g45PalvGxs45SfZa6_10vq4YBfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/g45PalvGxs45SfZa6_10vq4YBfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/g45PalvGxs45SfZa6_10vq4YBfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:10:b1:53:b8:5e:55:61:44:65:03:3c:77:0b:dc:ee:fa:86:
f2:62:3f:04:b3:0b:f6:5f:fb:88:fe:6e:02:ce:e0:3f:a3:36:
bd:a2:de:9f:76:8a:7a:fa:f9:8a:5f:46:fc:63:d8:9b:5a:ba:
89:4f:d4:67:b4:84:54:a1:90:e9:ce:c6:0b:d9:6b:89:93:96:
b4:8a:ff:06:46:2b:c8:ee:1a:57:32:97:8f:2c:79:02:90:03:
a7:c2:6b:18:62:be:ea:9a:27:04:6c:49:60:7f:6e:a8:02:ed:
6e:98:fc:2f:2c:bf:be:04:fd:9c:98:85:16:e3:0b:f4:79:7c:
ae:d0:95:76:93:9d:66:05:07:8e:e0:fe:fb:a9:28:70:dd:b3:
cd:29:94:60:7b:9a:b1:ff:69:0b:fe:80:df:c9:1d:75:99:cb:
d2:07:71:8a:33:ff:58:8a:7f:b2:d7:72:80:7a:18:14:ba:0f:
bd:85:ae:33:9e:94:ab:6a:20:86:82:05:9c:3a:fa:18:c9:73:
59:37:2b:25:ed:f4:29:e4:ac:ca:0d:92:de:4c:54:e4:bf:1f:
36:00:59:29:f4:df:ce:84:7f:e8:3f:77:4e:3d:d2:47:92:eb:
91:03:25:2e:8a:38:87:cc:3a:f1:d2:49:e9:79:ed:0e:12:a2:
3d:33:c6:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:28:22 2026 by rpki-client