Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ff50ec-b12d-4798-89fa-22d1bcfa1eda/1/g76BmaF8rKps1S15QSNtpuVuG-o.mft
File: g76BmaF8rKps1S15QSNtpuVuG-o.mft (raw, json)
Hash identifier: YArhDBa8eV5UnnAyfRjEjKI434U+syQm95h0HhfoBFY=
Subject key identifier: 6D:1B:04:4A:60:87:66:BD:E2:FC:FA:94:49:F4:2B:A6:66:D9:75:E4
Authority key identifier: 83:BE:81:99:A1:7C:AC:AA:6C:D5:2D:79:41:23:6D:A6:E5:6E:1B:EA
Certificate issuer: /CN=83be8199a17cacaa6cd52d7941236da6e56e1bea
Certificate serial: 019D258419F8955DAACCFD59DCA68FDBEB0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g76BmaF8rKps1S15QSNtpuVuG-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ff50ec-b12d-4798-89fa-22d1bcfa1eda/1/g76BmaF8rKps1S15QSNtpuVuG-o.mft
Manifest number: 0C0A
Signing time: Wed 25 Mar 2026 15:01:47 +0000
Manifest this update: Wed 25 Mar 2026 15:01:47 +0000
Manifest next update: Thu 26 Mar 2026 15:01:47 +0000
Files and hashes: 1: 6Wov37AwFcepue1WbA70fxV-s8I.asa (hash: kdFzn0uMLw4OiGMPXx8ZYbjqBGAjU05EQ4I1clqD91o=)
2: g76BmaF8rKps1S15QSNtpuVuG-o.crl (hash: oM1eYZTjZ29u1Xd1nG9ifwmqzwog1vDs6QlL6WRTk5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/ff50ec-b12d-4798-89fa-22d1bcfa1eda/1/g76BmaF8rKps1S15QSNtpuVuG-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/ff50ec-b12d-4798-89fa-22d1bcfa1eda/1/g76BmaF8rKps1S15QSNtpuVuG-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/g76BmaF8rKps1S15QSNtpuVuG-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:84:19:f8:95:5d:aa:cc:fd:59:dc:a6:8f:db:eb:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83be8199a17cacaa6cd52d7941236da6e56e1bea
Validity
Not Before: Mar 25 15:01:47 2026 GMT
Not After : Mar 26 15:01:47 2026 GMT
Subject: CN=6d1b044a608766bde2fcfa9449f42ba666d975e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:48:b9:5b:ff:97:80:ed:3d:f2:d4:0c:28:48:
41:94:19:c2:0e:38:30:f2:7f:9e:02:f0:3c:5d:85:
3d:9c:6d:6c:8d:a9:a0:a9:41:cf:13:9c:6f:d7:2f:
f8:fa:5f:9c:c2:5b:0e:15:75:31:b5:9f:21:5b:fd:
10:64:35:33:a1:33:d5:e7:be:e0:99:f3:c3:e0:25:
2c:1f:5c:fc:40:32:72:d3:ff:69:e6:b6:e9:e4:bd:
9d:2a:c9:df:9d:ee:5b:ca:2e:6f:50:35:09:3e:32:
87:9e:70:63:83:fc:15:00:0a:47:93:7c:c3:f3:db:
ef:41:71:90:0d:bf:1f:3c:82:4d:bb:c6:5c:5d:f9:
94:32:a8:62:99:57:8b:5f:de:61:90:f8:f6:8c:da:
ca:23:39:23:29:19:0f:c9:a6:40:65:b6:94:39:13:
7a:ee:81:d2:c1:e8:29:d0:b6:18:de:73:12:b7:7f:
e8:0b:f4:30:f7:7a:2e:26:78:00:05:c0:ad:84:18:
e2:a3:34:f8:bd:d5:a2:f3:59:a9:63:c5:fd:82:82:
3a:03:32:3d:84:10:71:da:69:28:96:36:19:36:d4:
02:8d:4c:cd:dd:f9:7f:8c:d7:83:46:ab:fb:49:d2:
b0:bb:96:41:26:aa:cd:46:7c:7c:4c:b2:6c:37:2e:
ec:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:1B:04:4A:60:87:66:BD:E2:FC:FA:94:49:F4:2B:A6:66:D9:75:E4
X509v3 Authority Key Identifier:
keyid:83:BE:81:99:A1:7C:AC:AA:6C:D5:2D:79:41:23:6D:A6:E5:6E:1B:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g76BmaF8rKps1S15QSNtpuVuG-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ff50ec-b12d-4798-89fa-22d1bcfa1eda/1/g76BmaF8rKps1S15QSNtpuVuG-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ff50ec-b12d-4798-89fa-22d1bcfa1eda/1/g76BmaF8rKps1S15QSNtpuVuG-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:36:69:9d:89:26:bb:53:a8:98:b2:d4:71:3e:8d:bf:02:d8:
93:92:d1:1a:51:58:f1:59:44:7b:8b:6e:8e:f2:27:dd:05:48:
49:04:b2:03:2b:e7:f8:f8:57:cf:74:c7:e8:f0:8f:7b:de:1e:
fe:51:59:a3:84:b1:f2:fc:4b:3c:d2:68:61:5c:ae:fd:60:a2:
43:28:27:40:e8:14:a9:68:fb:5b:a6:d4:f7:32:aa:c0:36:7d:
13:84:b2:5c:7b:f7:22:42:a1:d7:06:9b:96:62:fd:9d:c0:40:
2b:7e:c3:d0:c4:73:ae:51:b5:5d:60:d6:ba:4b:17:22:fe:72:
25:4e:af:33:b3:4b:13:e1:6a:60:b1:a4:fd:b9:f6:99:4c:5d:
ce:45:22:5c:99:30:e1:3f:fc:85:5b:fe:35:2d:23:f8:63:10:
85:17:9f:ae:d6:c5:2a:19:a5:d2:73:48:b6:41:36:25:f2:ac:
d3:86:b9:a1:f4:4a:c9:23:43:0a:7e:18:f3:67:f6:46:40:6c:
0f:87:65:3c:b1:e9:ed:f9:fa:68:b6:3a:fb:ee:75:a1:96:aa:
92:2e:ba:30:54:f4:18:6e:ae:4e:1d:a6:ea:3a:37:f0:af:8e:
6f:8b:fa:b9:f8:88:01:50:d1:3a:79:8e:d4:f7:cc:1b:4a:5b:
bf:ec:bb:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:25:38 2026 by rpki-client