Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/aa1c51-9264-406e-b796-4e00c3b70878/1/g98MrLn9UOG-ffvz0KyFS-7Xhr4.mft
File: g98MrLn9UOG-ffvz0KyFS-7Xhr4.mft (raw, json)
Hash identifier: DnlgW/jI4S2lxsQGX09EaLGGOV/IRmYHbdu0EDSqDRQ=
Subject key identifier: D0:53:D4:1D:BE:88:69:6B:0F:88:31:54:FF:3A:DC:DA:64:29:83:1B
Authority key identifier: 83:DF:0C:AC:B9:FD:50:E1:BE:7D:FB:F3:D0:AC:85:4B:EE:D7:86:BE
Certificate issuer: /CN=83df0cacb9fd50e1be7dfbf3d0ac854beed786be
Certificate serial: 019D26CD657D46E5FCA59449AB344A06C31C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g98MrLn9UOG-ffvz0KyFS-7Xhr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/aa1c51-9264-406e-b796-4e00c3b70878/1/g98MrLn9UOG-ffvz0KyFS-7Xhr4.mft
Manifest number: 035D
Signing time: Wed 25 Mar 2026 21:01:28 +0000
Manifest this update: Wed 25 Mar 2026 21:01:28 +0000
Manifest next update: Thu 26 Mar 2026 21:01:28 +0000
Files and hashes: 1: g98MrLn9UOG-ffvz0KyFS-7Xhr4.crl (hash: 84jJu0myU16lp7DjvewSACbD9P0rD7T1HK33davrqbo=)
2: uIfUkBd_2uvsZ7jS1ZsJEmyn92c.roa (hash: GOXOMoC6ne/A4gF/DBNRcpJh+oHhM3k8jJSQVwLmm48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/aa1c51-9264-406e-b796-4e00c3b70878/1/g98MrLn9UOG-ffvz0KyFS-7Xhr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/aa1c51-9264-406e-b796-4e00c3b70878/1/g98MrLn9UOG-ffvz0KyFS-7Xhr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/g98MrLn9UOG-ffvz0KyFS-7Xhr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:65:7d:46:e5:fc:a5:94:49:ab:34:4a:06:c3:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83df0cacb9fd50e1be7dfbf3d0ac854beed786be
Validity
Not Before: Mar 25 21:01:28 2026 GMT
Not After : Mar 26 21:01:28 2026 GMT
Subject: CN=d053d41dbe88696b0f883154ff3adcda6429831b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d8:97:52:d8:8d:7b:f5:27:1e:c5:8b:a7:6d:
4e:0b:bb:e9:8b:33:4b:35:5e:1c:0e:c6:d2:89:5d:
6b:c5:47:50:72:03:ad:f9:5c:02:df:72:15:21:fe:
70:02:90:58:8d:82:39:80:ab:66:74:c4:0b:2c:be:
d2:78:c9:c1:a3:70:98:1f:e1:1e:34:d0:87:61:86:
22:02:65:db:82:5c:bd:b1:09:76:cb:d8:5c:d7:94:
eb:1f:33:e2:49:39:9b:2f:21:56:76:a6:cc:01:96:
de:c0:48:41:ec:a6:e0:5f:c5:71:05:fc:e8:23:94:
fc:e6:8e:35:3b:32:ec:9a:c0:59:63:3d:b9:a4:02:
f8:7e:90:57:9c:af:69:16:65:3c:61:8f:9b:84:da:
3f:47:c9:e0:0c:3c:cd:0c:6e:b8:93:49:bc:f4:66:
90:ce:16:f7:fb:2a:05:95:45:83:61:81:db:4d:19:
e8:a3:83:d1:f4:c3:f4:9b:f8:a2:fe:7d:30:d5:bb:
8a:93:7c:34:c9:ff:93:e9:b1:a5:4c:f4:e9:f2:21:
26:87:f0:31:6b:fd:1b:0d:f3:84:d7:3b:29:80:ef:
1d:34:3b:b5:a7:a0:5f:47:32:cb:3c:0a:b6:27:e6:
76:52:97:aa:f4:eb:7a:dc:18:ed:2e:1f:b1:01:9a:
33:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:53:D4:1D:BE:88:69:6B:0F:88:31:54:FF:3A:DC:DA:64:29:83:1B
X509v3 Authority Key Identifier:
keyid:83:DF:0C:AC:B9:FD:50:E1:BE:7D:FB:F3:D0:AC:85:4B:EE:D7:86:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g98MrLn9UOG-ffvz0KyFS-7Xhr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/aa1c51-9264-406e-b796-4e00c3b70878/1/g98MrLn9UOG-ffvz0KyFS-7Xhr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/aa1c51-9264-406e-b796-4e00c3b70878/1/g98MrLn9UOG-ffvz0KyFS-7Xhr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:48:43:0d:2b:b7:58:26:4e:5f:36:f9:f3:1d:28:ee:e1:8d:
f2:c6:90:41:a4:23:0e:f6:c7:4e:02:6a:96:e0:d3:dd:89:3f:
f8:f7:00:f8:a7:3d:55:dd:46:0b:bf:f5:6f:22:75:33:0e:f3:
02:b4:28:86:b1:d7:e5:90:bf:45:a4:b0:f1:ee:29:64:f8:b8:
58:24:4f:d1:61:43:d6:0d:75:8a:95:ed:44:76:43:54:ba:36:
0f:e6:d2:87:09:ee:0a:ab:b7:94:b6:0b:be:aa:ff:7a:62:97:
a2:69:e5:95:38:de:1a:c8:76:23:02:5e:cd:9a:f2:da:96:ad:
b0:15:36:56:69:36:7d:9a:7f:2b:e7:00:49:30:19:6a:43:b0:
66:6b:e7:80:82:89:53:c0:0f:47:ac:83:76:cf:68:06:2a:20:
37:c0:8b:dc:84:88:bf:95:66:30:e2:33:20:67:f1:c6:56:c0:
7d:fa:3d:e6:8a:bf:38:0f:db:7b:1c:ba:ff:56:a6:d1:34:65:
30:1e:39:b1:93:d6:79:08:7b:11:2c:33:56:40:ac:d3:d9:9e:
f7:a7:0a:06:78:39:ad:22:84:ec:73:12:f5:1b:84:61:0c:6d:
9c:b7:fe:e5:df:60:da:2b:25:bd:66:ea:6f:7e:e3:b4:c8:e2:
74:61:21:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:37 2026 by rpki-client