Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.mft
File: g-I0DvXEpJUutBPSiMKdk3g0IjI.mft (raw, json)
Hash identifier: 5Hs5Ss9UBr6L8O3u94TvGlTh2QSj5kW4403raR9qhRk=
Subject key identifier: BE:2D:C3:40:59:3A:01:C6:61:18:37:17:2F:13:3F:43:84:52:3B:6C
Authority key identifier: 83:E2:34:0E:F5:C4:A4:95:2E:B4:13:D2:88:C2:9D:93:78:34:22:32
Certificate issuer: /CN=83e2340ef5c4a4952eb413d288c29d9378342232
Certificate serial: 019CAA8FE4211E56187016DB51C39FEA88DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-I0DvXEpJUutBPSiMKdk3g0IjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.mft
Manifest number: 11E0
Signing time: Sun 01 Mar 2026 18:01:22 +0000
Manifest this update: Sun 01 Mar 2026 18:01:22 +0000
Manifest next update: Mon 02 Mar 2026 18:01:22 +0000
Files and hashes: 1: N4QCwmv8Sw5ybiIBKm-0kiR2k5M.roa (hash: jAlFMSYTvLNZZPUNEkcMr5EHaq268sFn92XHnKsQ7g4=)
2: QQ5S1kn00ChCgstLW3aRVKkKIS4.roa (hash: X5JipwgBz71sKHnS2t/k7iUruR1RHoHrGOPn5Rwy9nI=)
3: g-I0DvXEpJUutBPSiMKdk3g0IjI.crl (hash: 7acfZHkl4py9oD8SHFxKhNBMNGY7Ff/ESyX0Cz8dTQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/g-I0DvXEpJUutBPSiMKdk3g0IjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:e4:21:1e:56:18:70:16:db:51:c3:9f:ea:88:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83e2340ef5c4a4952eb413d288c29d9378342232
Validity
Not Before: Mar 1 18:01:22 2026 GMT
Not After : Mar 2 18:01:22 2026 GMT
Subject: CN=be2dc340593a01c6611837172f133f4384523b6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:48:7a:b3:48:10:ef:a4:61:1c:e7:60:91:0b:
5f:6f:b2:61:59:e6:4b:25:6a:96:f8:1e:a4:79:c4:
d5:0d:5d:e5:4e:54:ae:c0:15:20:91:b0:ac:de:9c:
84:ce:f1:cc:77:56:24:ee:ac:d4:b3:d9:0a:af:fb:
f9:d4:1f:89:4e:04:3d:7f:9f:5a:12:6f:8a:a1:40:
75:10:47:54:c6:a1:b8:c1:12:44:34:9c:44:ad:f8:
53:83:e7:f6:d9:04:43:94:d6:74:eb:58:75:ed:e8:
14:a0:65:2d:6a:75:b6:37:5b:f7:76:6f:6c:10:70:
74:4b:28:bf:a6:b9:ef:ca:40:08:00:16:1b:ca:08:
e0:34:5b:c0:1e:74:29:26:b6:d0:9b:84:c1:ff:61:
8d:62:1b:f6:b4:b6:ec:62:62:b9:54:23:c7:84:b8:
ed:7a:a3:5c:5c:13:f5:3f:4e:7b:89:29:da:64:e8:
36:0c:08:e2:fd:ac:97:39:33:35:bf:d5:77:b5:33:
6e:47:86:d9:45:c0:10:d7:58:39:c6:74:b0:f5:14:
18:bd:4d:18:6f:e0:11:f4:86:3d:cd:0b:35:90:d2:
3b:cd:e8:7b:20:ef:50:9a:21:cd:b6:82:09:01:75:
c3:f8:bc:17:52:be:62:ea:19:3e:ed:b5:68:91:83:
dd:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:2D:C3:40:59:3A:01:C6:61:18:37:17:2F:13:3F:43:84:52:3B:6C
X509v3 Authority Key Identifier:
keyid:83:E2:34:0E:F5:C4:A4:95:2E:B4:13:D2:88:C2:9D:93:78:34:22:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-I0DvXEpJUutBPSiMKdk3g0IjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:ad:99:72:b5:df:05:bb:52:f1:08:88:b4:9c:b0:7c:64:38:
13:21:e7:ea:1e:f8:19:6f:f2:1a:81:3b:d4:3c:03:2c:c4:c2:
55:b7:4f:e5:00:bd:0b:9d:19:09:66:64:9f:ea:45:45:e1:43:
4f:20:b0:1c:a4:68:7a:87:ac:9a:e7:61:62:96:df:6c:30:aa:
4a:fa:61:56:be:3a:25:a8:04:89:a3:c4:80:56:ec:aa:04:1b:
30:0a:2f:b8:20:49:8a:fb:be:eb:2c:a9:1c:22:6c:af:7a:27:
f4:e5:c8:69:e9:ce:69:57:28:5b:52:15:69:bb:4a:c6:f9:b0:
a2:66:23:47:85:d1:15:e3:2a:c9:a4:72:44:6b:f0:f0:2a:2b:
c9:23:14:d1:46:70:72:95:a7:6b:69:a2:37:4e:5e:d0:11:1f:
92:c8:4b:e8:34:91:d4:8f:ba:04:14:f6:b5:22:72:21:6c:95:
39:55:7c:71:b5:0f:2e:f9:30:9c:0e:6e:d4:c7:2d:d8:45:99:
7f:b6:6f:1f:50:74:f3:4e:5e:c8:44:96:4f:1a:90:66:f1:c6:
34:08:a9:cd:c9:0d:fc:f8:94:3c:2a:9c:e8:4d:91:ae:25:cc:
76:48:1e:a6:c2:3e:7b:32:88:47:77:2b:66:fb:43:3a:af:dc:
7e:6f:2e:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:26:49 2026 by rpki-client