Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/e376af-2641-4aeb-b89f-c11de3925043/1/g2p3PWMyRWGcjs3t1MlLQY_j120.mft
File: g2p3PWMyRWGcjs3t1MlLQY_j120.mft (raw, json)
Hash identifier: WsQv7b/+zRFMJALuZ6fYEdRbBaVIFPTsvxqHYSff4B0=
Subject key identifier: FD:FB:09:8A:A6:96:75:C5:1C:79:9B:0F:67:3B:19:83:0D:2B:17:59
Authority key identifier: 83:6A:77:3D:63:32:45:61:9C:8E:CD:ED:D4:C9:4B:41:8F:E3:D7:6D
Certificate issuer: /CN=836a773d633245619c8ecdedd4c94b418fe3d76d
Certificate serial: 019D2CCF34346D70679E327A24FF4A874C84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2p3PWMyRWGcjs3t1MlLQY_j120.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/e376af-2641-4aeb-b89f-c11de3925043/1/g2p3PWMyRWGcjs3t1MlLQY_j120.mft
Manifest number: 26
Signing time: Fri 27 Mar 2026 01:01:09 +0000
Manifest this update: Fri 27 Mar 2026 01:01:09 +0000
Manifest next update: Sat 28 Mar 2026 01:01:09 +0000
Files and hashes: 1: 2lSIdgx3Qs-YZF0wAAumY43frjg.roa (hash: HAwBeX3iybs+ecUh2CgT9lHQ03ODLUy9p/NbMRpq8Z4=)
2: g2p3PWMyRWGcjs3t1MlLQY_j120.crl (hash: pLEzUPJVcZposncWDTA9e8kzNkF2rOkhfsl0tViJ7D0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/e376af-2641-4aeb-b89f-c11de3925043/1/g2p3PWMyRWGcjs3t1MlLQY_j120.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/e376af-2641-4aeb-b89f-c11de3925043/1/g2p3PWMyRWGcjs3t1MlLQY_j120.mft
rsync://rpki.ripe.net/repository/DEFAULT/g2p3PWMyRWGcjs3t1MlLQY_j120.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Mar 2026 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2c:cf:34:34:6d:70:67:9e:32:7a:24:ff:4a:87:4c:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=836a773d633245619c8ecdedd4c94b418fe3d76d
Validity
Not Before: Mar 27 01:01:09 2026 GMT
Not After : Mar 28 01:01:09 2026 GMT
Subject: CN=fdfb098aa69675c51c799b0f673b19830d2b1759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2c:aa:db:47:66:1d:84:c3:82:a2:1f:d1:27:
50:f8:be:6e:98:d2:c6:5e:07:c1:aa:ea:e6:ce:c0:
a1:61:5a:fb:5f:31:bd:85:b7:01:72:b1:7c:7e:12:
3c:a4:26:7b:01:1f:41:86:18:0e:08:84:8c:79:7f:
d9:c3:2b:32:33:12:fe:df:0f:17:d3:3c:01:8e:82:
f6:7d:d2:14:7d:7a:21:41:e3:db:69:5e:42:72:29:
dd:c5:a1:d2:fa:7d:8f:2c:3e:56:4b:cd:e8:7b:50:
c9:0e:46:dd:7d:f3:aa:9e:73:e1:78:5e:1a:d3:56:
8c:b0:de:78:f6:b8:08:2f:58:d4:6e:7b:e2:b8:1b:
fd:58:2d:fd:7b:c6:7c:a4:27:e8:bd:7e:98:07:15:
6f:d5:3e:3d:9b:f4:93:55:56:d5:c4:9e:78:7b:96:
f3:4c:71:61:35:22:39:97:16:9f:c3:8b:f9:3b:ff:
8e:9e:9e:22:3c:ca:40:2a:08:28:79:a4:2c:f6:de:
2c:d3:5d:69:56:b9:ea:7c:8e:a8:87:7c:ff:58:e5:
28:de:bf:18:39:b2:81:c4:91:47:0e:c8:7f:10:45:
0a:5b:b7:c1:fb:67:98:2c:96:21:16:b8:12:fe:be:
e2:39:c4:2a:d9:59:72:37:f1:ae:14:4d:49:08:e3:
c5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:FB:09:8A:A6:96:75:C5:1C:79:9B:0F:67:3B:19:83:0D:2B:17:59
X509v3 Authority Key Identifier:
keyid:83:6A:77:3D:63:32:45:61:9C:8E:CD:ED:D4:C9:4B:41:8F:E3:D7:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2p3PWMyRWGcjs3t1MlLQY_j120.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e376af-2641-4aeb-b89f-c11de3925043/1/g2p3PWMyRWGcjs3t1MlLQY_j120.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e376af-2641-4aeb-b89f-c11de3925043/1/g2p3PWMyRWGcjs3t1MlLQY_j120.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:72:1e:e9:0b:a3:ae:91:67:a5:95:79:8e:94:bf:d0:af:73:
e5:f8:78:4b:b3:8e:48:52:09:ad:7c:d3:82:b8:9f:97:e5:eb:
73:88:3f:f4:0f:f6:91:67:78:21:21:ad:30:97:fd:d3:ff:c2:
84:f2:58:8b:bb:e0:c6:5d:d1:f9:8b:94:b9:48:ca:fc:1c:3f:
f2:bf:6e:b2:5c:b0:0e:c3:54:d2:ce:22:c2:8a:27:fd:b5:2c:
04:ca:e1:f3:c5:28:9d:28:9d:38:f7:83:7c:bd:db:e7:bf:93:
9d:a6:85:ad:c1:94:71:75:19:c9:e0:c1:92:05:ed:c4:71:21:
6e:94:72:81:d5:1d:33:db:83:92:b6:16:a9:fd:b7:63:cc:28:
6b:4d:9b:29:b1:46:d1:df:41:2c:29:a9:26:87:6b:6c:a6:b1:
bd:25:3f:25:96:72:74:cd:70:6c:79:d9:e6:64:48:41:77:a5:
ed:4a:5e:09:57:16:56:c0:d9:c9:2a:b4:56:7e:84:5f:bd:79:
38:b9:a8:2a:a7:56:62:67:4d:b9:ba:cb:70:ad:60:fb:ce:ce:
b8:5d:45:7f:e6:12:c6:04:cd:81:c5:31:6e:59:74:9c:55:6f:
03:d0:58:cf:74:62:e2:c4:12:6e:c2:a9:2b:fa:85:63:63:89:
d4:a5:a7:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 06:01:45 2026 by rpki-client