Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.mft
File: g-I0DvXEpJUutBPSiMKdk3g0IjI.mft (raw, json)
Hash identifier: Z21p8LFKFZz8XmzEbUGEl3+CAMz6zdA7WcGjDDgZojQ=
Subject key identifier: E6:47:2A:A7:6D:C9:AC:59:1C:52:74:CD:C9:39:B3:DB:C4:EF:EC:30
Authority key identifier: 83:E2:34:0E:F5:C4:A4:95:2E:B4:13:D2:88:C2:9D:93:78:34:22:32
Certificate issuer: /CN=83e2340ef5c4a4952eb413d288c29d9378342232
Certificate serial: 019D9A06EC111B7D15FE6A4B058BD0339D27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-I0DvXEpJUutBPSiMKdk3g0IjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.mft
Manifest number: 125C
Signing time: Fri 17 Apr 2026 06:00:37 +0000
Manifest this update: Fri 17 Apr 2026 06:00:37 +0000
Manifest next update: Sat 18 Apr 2026 06:00:37 +0000
Files and hashes: 1: N4QCwmv8Sw5ybiIBKm-0kiR2k5M.roa (hash: jAlFMSYTvLNZZPUNEkcMr5EHaq268sFn92XHnKsQ7g4=)
2: QQ5S1kn00ChCgstLW3aRVKkKIS4.roa (hash: X5JipwgBz71sKHnS2t/k7iUruR1RHoHrGOPn5Rwy9nI=)
3: g-I0DvXEpJUutBPSiMKdk3g0IjI.crl (hash: /W1jhVlCdAcdYMVBWiOgz+S5Z7T3kDoIFlXdL1xN16A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/g-I0DvXEpJUutBPSiMKdk3g0IjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:ec:11:1b:7d:15:fe:6a:4b:05:8b:d0:33:9d:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83e2340ef5c4a4952eb413d288c29d9378342232
Validity
Not Before: Apr 17 06:00:37 2026 GMT
Not After : Apr 18 06:00:37 2026 GMT
Subject: CN=e6472aa76dc9ac591c5274cdc939b3dbc4efec30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d7:f0:e5:e3:67:44:17:61:ae:3a:8f:76:f4:
c7:55:44:93:83:7d:52:5c:66:79:77:72:b8:bc:3f:
b3:a2:cb:f8:08:ef:24:a7:24:ef:38:b2:7e:f8:03:
dd:82:e0:2d:7d:91:e7:7c:da:d5:42:b0:01:36:5c:
0a:b8:d9:f4:6e:f6:c0:61:f9:62:d2:e3:55:b3:61:
1c:66:95:d6:3d:d2:36:fe:c9:7a:66:27:48:b2:2a:
9b:e2:ba:49:5c:33:c3:83:28:2e:82:e0:3b:1a:1f:
64:68:b3:e5:37:df:91:3b:94:7c:b2:f8:35:ba:44:
99:5e:88:de:66:95:32:1e:ec:18:53:a3:b0:d0:c4:
77:2b:5c:25:83:25:18:3c:0f:ca:aa:8f:e8:ad:70:
ed:f0:8e:2d:bb:31:58:55:06:cd:36:9e:4c:db:7b:
bd:c6:ab:3f:a3:86:9c:0b:ea:09:a4:a4:ab:5f:8b:
95:53:3f:38:58:91:8b:ad:5a:d9:74:c5:3a:46:45:
db:f1:f1:36:8c:f1:73:3f:e4:0f:2c:d6:da:fd:41:
81:c5:b3:c9:42:32:97:2f:5e:8c:7d:84:de:e4:c3:
a0:c8:d5:b5:b8:f4:17:f3:89:28:c8:c5:82:c2:99:
4f:c9:f1:f2:b4:72:12:92:20:5d:1c:2a:9a:58:fb:
ae:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:47:2A:A7:6D:C9:AC:59:1C:52:74:CD:C9:39:B3:DB:C4:EF:EC:30
X509v3 Authority Key Identifier:
keyid:83:E2:34:0E:F5:C4:A4:95:2E:B4:13:D2:88:C2:9D:93:78:34:22:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-I0DvXEpJUutBPSiMKdk3g0IjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:7d:32:21:5c:a4:12:5f:4f:48:83:8b:20:5d:39:a4:0b:52:
1a:72:78:3a:b8:31:99:c1:c6:ee:53:82:28:4a:a7:40:2c:96:
92:16:40:c2:4c:87:0c:cc:81:e7:81:f9:82:da:80:9d:01:58:
ca:20:00:be:de:bc:17:9f:5b:6b:c9:05:e9:e5:7a:e2:93:87:
0d:69:2a:cc:b5:5a:73:42:22:ed:72:8b:ec:9e:23:f5:fc:13:
d2:12:19:27:20:28:a6:0f:ac:70:14:e4:78:b4:82:67:da:d8:
75:cf:36:48:ea:29:54:e3:c1:13:98:09:a2:79:a3:65:a4:64:
6a:30:ff:2e:35:73:c1:35:a6:16:01:c8:5b:49:89:5f:9f:bd:
05:4d:9d:1f:19:7e:72:ad:4d:da:92:c8:e1:eb:6d:a0:4c:ba:
f2:ac:a9:ef:c9:4a:a5:8c:aa:e4:dc:84:10:8b:ae:a6:76:7e:
51:d2:a9:bb:14:15:07:9c:cb:6c:dd:9c:40:df:e1:2d:da:6b:
17:e0:60:44:1b:6f:0c:22:1f:5e:e8:99:b8:7f:99:4c:39:75:
eb:c9:a0:01:a8:ca:24:9d:da:fc:4f:35:0e:50:47:90:5a:ea:
15:76:83:f5:f7:ac:12:84:32:ca:0f:f1:d6:4e:49:d6:6c:bb:
d3:ce:9e:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:45:22 2026 by rpki-client