Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/031463-58e6-4fcb-8ca1-1fcfd0c8bdf5/1/g-z7ZL2lITcI_2e61Mg5ULH_3Dg.mft
File: g-z7ZL2lITcI_2e61Mg5ULH_3Dg.mft (raw, json)
Hash identifier: yjB/pBEKA/qTOi1cH43cjs85+DuCu+XvU1GToiwWD4k=
Subject key identifier: 6F:F6:3A:F6:93:84:40:55:75:DF:2B:5F:19:EB:9A:5A:D7:99:5C:7F
Authority key identifier: 83:EC:FB:64:BD:A5:21:37:08:FF:67:BA:D4:C8:39:50:B1:FF:DC:38
Certificate issuer: /CN=83ecfb64bda5213708ff67bad4c83950b1ffdc38
Certificate serial: 019D2884B1D77BA6D03ADDEBA5223CCB8C6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-z7ZL2lITcI_2e61Mg5ULH_3Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/031463-58e6-4fcb-8ca1-1fcfd0c8bdf5/1/g-z7ZL2lITcI_2e61Mg5ULH_3Dg.mft
Manifest number: 04AA
Signing time: Thu 26 Mar 2026 05:01:18 +0000
Manifest this update: Thu 26 Mar 2026 05:01:18 +0000
Manifest next update: Fri 27 Mar 2026 05:01:18 +0000
Files and hashes: 1: g-z7ZL2lITcI_2e61Mg5ULH_3Dg.crl (hash: YZFa3M8m1y+tmpKkCUPtNS7xBRLfX1tRk47B25QFZgo=)
2: uX9RFldD_ZI14WBF0_J3zmXVSmY.roa (hash: 5VQ5HAdHZFYwUc79OmQg0PEjho46iWIuaIrNO9hQGtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/031463-58e6-4fcb-8ca1-1fcfd0c8bdf5/1/g-z7ZL2lITcI_2e61Mg5ULH_3Dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/031463-58e6-4fcb-8ca1-1fcfd0c8bdf5/1/g-z7ZL2lITcI_2e61Mg5ULH_3Dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/g-z7ZL2lITcI_2e61Mg5ULH_3Dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:b1:d7:7b:a6:d0:3a:dd:eb:a5:22:3c:cb:8c:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83ecfb64bda5213708ff67bad4c83950b1ffdc38
Validity
Not Before: Mar 26 05:01:18 2026 GMT
Not After : Mar 27 05:01:18 2026 GMT
Subject: CN=6ff63af69384405575df2b5f19eb9a5ad7995c7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:8f:e8:19:93:39:9b:20:3a:e0:3d:07:3e:7b:
42:de:9b:dc:27:7b:2a:a9:97:5e:0f:51:ad:86:3e:
ae:a3:b7:e8:aa:7d:be:66:f4:1b:df:aa:14:e6:e2:
65:5c:c1:30:b1:de:14:64:89:ac:30:24:02:f0:92:
fb:4d:39:ba:e0:9a:9f:e6:84:9e:25:d9:e8:35:95:
f5:bc:66:fe:3e:f2:4b:c6:eb:4c:33:60:79:e5:c5:
04:c7:76:e7:03:ff:bd:51:19:1b:00:87:fb:0f:db:
2e:d7:5e:7f:98:1c:2b:dd:ea:ee:62:cb:f9:89:78:
45:9a:31:d1:ea:cf:10:46:76:eb:d8:db:78:e5:b6:
b5:e3:26:70:77:fc:e4:1e:e0:a5:dd:2b:6f:f9:99:
69:45:89:2a:2d:f7:2d:7b:c7:41:bd:f3:37:b2:f5:
dd:0c:fb:09:71:d8:ab:b6:7c:4d:2f:e9:9b:23:95:
23:a9:0b:e3:cb:df:48:72:24:5e:f7:61:4a:2a:0b:
1b:be:0c:83:22:1d:41:27:1b:ea:54:1e:37:83:ff:
74:27:c1:d0:f8:9a:ac:15:e4:ae:69:d6:4f:39:11:
1c:19:bc:bc:e5:50:52:33:de:25:82:7f:13:56:aa:
2c:a9:55:8c:a2:bd:8d:4b:d4:b6:19:78:23:09:74:
f2:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:F6:3A:F6:93:84:40:55:75:DF:2B:5F:19:EB:9A:5A:D7:99:5C:7F
X509v3 Authority Key Identifier:
keyid:83:EC:FB:64:BD:A5:21:37:08:FF:67:BA:D4:C8:39:50:B1:FF:DC:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-z7ZL2lITcI_2e61Mg5ULH_3Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/031463-58e6-4fcb-8ca1-1fcfd0c8bdf5/1/g-z7ZL2lITcI_2e61Mg5ULH_3Dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/031463-58e6-4fcb-8ca1-1fcfd0c8bdf5/1/g-z7ZL2lITcI_2e61Mg5ULH_3Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:a4:a4:24:fc:d0:f1:78:39:3e:37:3e:87:aa:50:c6:5f:7f:
21:f9:d5:7b:22:fc:92:ed:96:6b:af:b3:cf:a5:27:d3:f7:87:
16:52:a4:b2:d7:e7:a7:71:f3:0f:9a:75:11:55:1a:2f:13:52:
28:d9:80:ff:ed:5e:2c:54:d1:b8:5c:a6:89:93:56:3a:5e:b7:
ec:e6:95:05:b2:ba:dc:1b:f0:f4:e4:6d:9d:c5:e7:2b:29:99:
9f:5e:15:74:5c:f3:0b:14:f4:cf:fe:1a:29:98:41:c1:ba:29:
50:ba:d4:c1:6d:6f:d7:4d:5a:b0:9e:f0:6c:5f:1b:03:30:b9:
a9:44:fd:52:9e:b8:ff:14:d9:49:9f:41:27:30:91:f3:c3:97:
51:ab:e6:b7:86:24:54:6d:96:61:4a:99:d9:43:48:85:06:d1:
98:81:e5:ab:0e:9d:58:41:c8:77:56:fb:b1:70:c1:3b:b8:98:
5a:86:3e:17:c5:6e:df:d3:ed:f3:22:ac:ca:53:31:3f:5b:6c:
66:6f:cd:a1:81:60:6a:46:52:d3:bf:de:04:6e:b8:3b:8c:28:
74:cf:09:a9:ab:d4:d0:9c:19:83:b9:8f:29:1d:1c:4c:4a:bd:
6d:3e:bb:9c:64:12:d6:fd:15:63:8f:45:24:63:ad:f0:d3:2e:
56:67:ea:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:12:16 2026 by rpki-client