Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.mft
File: g-XZAwHTz2e4j-5C3VRa_PFOpWE.mft (raw, json)
Hash identifier: 3hGsHhGmUdrmYnCxqyRN7VPVk6WGfQheeg7VGJGWyss=
Subject key identifier: 75:C9:BE:11:B0:B4:5F:D7:83:98:17:39:15:99:FA:E7:F9:F9:28:4F
Authority key identifier: 83:E5:D9:03:01:D3:CF:67:B8:8F:EE:42:DD:54:5A:FC:F1:4E:A5:61
Certificate issuer: /CN=83e5d90301d3cf67b88fee42dd545afcf14ea561
Certificate serial: 019D27DFAD9AE8ABDDB7F9D54E8A8B5E0282
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-XZAwHTz2e4j-5C3VRa_PFOpWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.mft
Manifest number: 0EF5
Signing time: Thu 26 Mar 2026 02:01:03 +0000
Manifest this update: Thu 26 Mar 2026 02:01:03 +0000
Manifest next update: Fri 27 Mar 2026 02:01:03 +0000
Files and hashes: 1: g-XZAwHTz2e4j-5C3VRa_PFOpWE.crl (hash: XxQEwW2G80znGanhAUnR+4Y6FUzfHCJ4w98r4EVJXJA=)
2: wimRgdCrrR4TvVjD45kak059z3k.roa (hash: a5C05EHm2JJFNFLb2g2uTQzLs6i6/Ga5rEL4Ya3/5kA=)
3: xkBGMTnH9dIUv5aeR6a2PC8pSMI.roa (hash: n4jn6g+/sKr9SjKht58rDpi14/4dvnS/2o8klkQ9iBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/g-XZAwHTz2e4j-5C3VRa_PFOpWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:ad:9a:e8:ab:dd:b7:f9:d5:4e:8a:8b:5e:02:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83e5d90301d3cf67b88fee42dd545afcf14ea561
Validity
Not Before: Mar 26 02:01:03 2026 GMT
Not After : Mar 27 02:01:03 2026 GMT
Subject: CN=75c9be11b0b45fd7839817391599fae7f9f9284f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:79:a7:bf:70:42:84:23:57:ac:22:50:dc:e3:
08:9e:88:4a:90:67:40:c5:97:4a:c4:81:5e:f0:76:
53:a1:c4:4b:0b:36:55:6a:6f:dc:1c:85:85:2b:27:
98:91:47:12:b5:7b:d5:c2:dd:a3:08:17:9a:70:06:
b6:d0:75:32:ab:e3:42:e9:1d:79:48:1c:35:0f:0f:
98:0e:1f:3d:12:ca:50:70:8b:16:72:28:d1:64:46:
10:2f:4a:de:ba:9a:33:d2:35:f9:b7:c8:da:72:35:
20:3c:6d:0c:fa:b1:e1:8f:f4:42:a4:57:0b:b7:e6:
38:97:04:64:a0:1d:cf:d3:90:06:8a:c2:49:69:2c:
8b:25:a7:82:d4:43:5e:d7:67:e7:55:27:3d:84:f9:
2a:eb:93:2e:98:85:cc:d5:7a:c6:59:1f:1b:2b:eb:
16:95:0a:84:37:d2:9c:0b:20:0a:37:39:07:86:30:
86:a1:cd:0f:95:20:ad:75:81:59:29:3a:8c:6d:5d:
37:5b:4e:4d:bf:7b:9a:4c:c0:2a:80:7d:fb:1e:40:
ca:9f:22:f9:0a:c1:24:a6:ef:f9:ad:2a:1b:ed:72:
70:2f:7d:0d:b0:f0:92:d8:d8:a7:59:a1:8b:d2:9d:
b7:1e:ab:4b:e5:05:a0:7a:21:ac:44:d8:7a:a3:c6:
18:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:C9:BE:11:B0:B4:5F:D7:83:98:17:39:15:99:FA:E7:F9:F9:28:4F
X509v3 Authority Key Identifier:
keyid:83:E5:D9:03:01:D3:CF:67:B8:8F:EE:42:DD:54:5A:FC:F1:4E:A5:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-XZAwHTz2e4j-5C3VRa_PFOpWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:4e:d5:ab:12:16:14:2b:da:1e:11:72:f2:7f:e3:8f:48:6b:
8a:3c:15:f1:63:7a:e5:d7:ec:21:cc:0b:16:81:4d:f7:58:df:
57:71:38:a7:c8:18:b9:28:f7:57:5e:8f:b9:5c:92:cf:7e:15:
3e:53:b1:03:d0:4e:3a:d9:3d:e2:34:f2:6a:3b:2f:8e:ca:46:
7e:d6:29:50:fd:4e:e9:af:4a:3a:e9:c1:2f:73:1e:08:1a:bb:
9f:eb:5b:8a:3f:a1:3b:b4:f6:4e:65:f6:a2:14:9e:1e:0a:93:
09:2b:52:44:6a:85:71:09:da:da:93:c5:34:9a:3c:4e:4b:d1:
ce:a0:5f:31:d9:f7:f2:03:71:36:c6:31:41:52:ad:43:f0:93:
58:c8:cf:6b:74:d9:fb:15:c7:88:32:ed:3b:2c:da:6b:83:74:
b9:f8:d8:a2:ff:dd:37:ba:c4:a0:39:c7:37:9f:47:5b:99:ad:
a4:e1:f0:00:e9:92:6e:cf:2f:11:71:22:fb:dd:fc:41:9b:28:
b2:4c:b2:d0:3e:7e:e3:d3:94:55:c9:fa:a7:a9:79:1f:82:86:
91:48:c8:b7:81:48:b0:93:7e:f2:a3:03:d5:60:6a:5e:b8:8b:
8b:42:9a:e3:09:13:e1:26:16:7a:35:b9:1b:94:ae:a0:e1:fe:
e0:14:f0:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:06:57 2026 by rpki-client