Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.mft
File: g-I0DvXEpJUutBPSiMKdk3g0IjI.mft (raw, json)
Hash identifier: jqhAo0fL1q3gF9FLthjVH0DQ+1b3yYAQZWfBfmaTzZ4=
Subject key identifier: 33:FE:79:A7:B4:2A:E9:A4:CE:57:B3:70:A3:D3:F2:FA:95:77:1E:5D
Authority key identifier: 83:E2:34:0E:F5:C4:A4:95:2E:B4:13:D2:88:C2:9D:93:78:34:22:32
Certificate issuer: /CN=83e2340ef5c4a4952eb413d288c29d9378342232
Certificate serial: 019EC18016F171D1CCF2A0B9AF58440873AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-I0DvXEpJUutBPSiMKdk3g0IjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.mft
Manifest number: 12F5
Signing time: Sat 13 Jun 2026 15:00:57 +0000
Manifest this update: Sat 13 Jun 2026 15:00:57 +0000
Manifest next update: Sun 14 Jun 2026 15:00:57 +0000
Files and hashes: 1: N4QCwmv8Sw5ybiIBKm-0kiR2k5M.roa (hash: jAlFMSYTvLNZZPUNEkcMr5EHaq268sFn92XHnKsQ7g4=)
2: QQ5S1kn00ChCgstLW3aRVKkKIS4.roa (hash: X5JipwgBz71sKHnS2t/k7iUruR1RHoHrGOPn5Rwy9nI=)
3: g-I0DvXEpJUutBPSiMKdk3g0IjI.crl (hash: KnSbteCWqQL1fPsH/zslN+1YRK+qpSF8zgGbAg3eEEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/g-I0DvXEpJUutBPSiMKdk3g0IjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:80:16:f1:71:d1:cc:f2:a0:b9:af:58:44:08:73:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83e2340ef5c4a4952eb413d288c29d9378342232
Validity
Not Before: Jun 13 15:00:57 2026 GMT
Not After : Jun 14 15:00:57 2026 GMT
Subject: CN=33fe79a7b42ae9a4ce57b370a3d3f2fa95771e5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:dc:65:3d:9f:0b:08:91:62:8b:0a:5e:de:b6:
76:6a:60:09:40:9b:a7:6f:66:58:24:bd:20:b0:7a:
75:bd:32:14:61:ad:22:4e:f2:1b:1e:db:08:68:42:
2d:ad:4a:cc:47:d0:b4:03:72:66:be:fb:ac:6a:f6:
ab:36:c6:23:9f:d2:3b:f0:74:a7:f1:96:58:62:40:
e5:e2:de:c0:3f:07:98:06:77:72:0c:fb:f7:40:1e:
0a:0b:24:8e:4b:62:ba:a4:b1:d8:c3:fc:6d:c3:f8:
6f:8a:25:1e:6c:8f:87:67:c8:21:b7:19:27:ca:0d:
4e:bf:06:09:84:b6:25:d0:a4:91:18:c8:2d:9b:cb:
ca:11:95:6f:f2:f5:75:42:c4:be:3f:c3:a3:d9:c6:
cb:4c:29:f2:61:e6:33:b9:3d:19:72:fc:a1:42:b8:
2b:0d:11:9c:15:70:52:c7:1f:26:f2:71:f0:91:d8:
70:bd:02:fa:68:da:21:ba:1c:1d:b7:48:3d:6b:54:
84:ae:14:5d:e3:70:59:34:ea:33:b4:5a:f4:c7:a5:
f7:ae:74:49:d7:3b:47:bb:94:4b:c6:28:f5:f2:76:
39:6d:e4:9e:47:e0:92:13:02:ec:d0:09:04:f2:71:
38:e0:92:71:03:e2:43:7a:16:01:d8:e7:4b:ab:db:
83:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:FE:79:A7:B4:2A:E9:A4:CE:57:B3:70:A3:D3:F2:FA:95:77:1E:5D
X509v3 Authority Key Identifier:
keyid:83:E2:34:0E:F5:C4:A4:95:2E:B4:13:D2:88:C2:9D:93:78:34:22:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-I0DvXEpJUutBPSiMKdk3g0IjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:de:5a:67:e0:ff:86:0b:8c:2c:34:12:5c:8b:29:6d:01:07:
26:d1:b5:4d:39:4b:7e:75:12:f5:d0:6d:3b:52:80:b4:87:fb:
7b:75:ae:da:4d:1c:78:ab:24:aa:89:9d:b0:67:da:da:d1:5d:
36:49:53:56:80:80:76:57:1e:d1:31:17:33:b4:16:5d:69:57:
63:60:8b:f2:ae:43:b6:eb:81:dc:42:73:2d:3b:f1:b3:86:85:
e3:91:ed:6d:55:84:b6:f9:9d:18:54:5b:66:96:e8:73:ea:3d:
d5:3d:d3:12:da:e5:97:0c:a9:02:7c:4b:57:ee:44:84:88:f4:
7b:ab:a4:43:75:6b:5d:30:74:69:4f:95:f0:b0:80:01:91:6e:
4d:6e:2c:e3:29:52:7e:7c:eb:4e:92:ef:11:38:10:76:a9:60:
96:d5:87:40:e9:94:73:f9:05:11:6c:13:c1:79:a1:2e:c1:75:
8d:65:12:46:16:5e:dc:47:3d:b1:4d:56:66:b5:67:57:c5:de:
35:c2:06:72:f0:55:89:38:a2:9b:59:7f:61:8f:0f:4e:04:62:
32:71:c0:32:f6:00:11:e6:47:83:8b:3a:5d:7a:e0:d3:0a:09:
7a:7f:a0:4a:19:c4:e8:65:3f:fb:86:6c:96:2b:29:a2:19:c4:
7a:fe:36:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:32:42 2026 by rpki-client