Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft
File: g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft (raw, json)
Hash identifier: s39TvFnxayvmje8lCLNpuG8mfGtyy0vFTzZWECBGhsE=
Subject key identifier: EA:0A:A8:7C:DE:C3:D0:17:1A:F2:F0:F4:DA:5D:85:5C:CD:DB:38:7E
Authority key identifier: 83:87:C2:19:C9:84:1E:BA:FA:A3:D4:08:06:C9:84:F9:F3:E4:E4:61
Certificate issuer: /CN=8387c219c9841ebafaa3d40806c984f9f3e4e461
Certificate serial: 019D99992E35A8341FEE4613D7D90A1294E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g4fCGcmEHrr6o9QIBsmE-fPk5GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft
Manifest number: 10D1
Signing time: Fri 17 Apr 2026 04:00:45 +0000
Manifest this update: Fri 17 Apr 2026 04:00:45 +0000
Manifest next update: Sat 18 Apr 2026 04:00:45 +0000
Files and hashes: 1: FiY50YnA9bU0VuqY_xB52WjpoQU.roa (hash: HLxKWl8h4/WN5MAo6nKsQwk0EYZk/ybbMsE7JxuTVx4=)
2: g4fCGcmEHrr6o9QIBsmE-fPk5GE.crl (hash: lq5qgLzjO62HuHwBHMjisnw5WMEChz0BM24/BV81a3U=)
3: gp8VTUjNUe2SHA6Nw6jMCrBEmpI.roa (hash: KkGcwa9MsEC5A+egSiEpb4oola97UKCGunqwzbxcwVw=)
4: q6vOzN1DPBf1vx1ss5zgg7dDXIU.roa (hash: pJZycJNT80sKDVuDlXh5Ajg519IZ1fSYiagFEg9PFpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/g4fCGcmEHrr6o9QIBsmE-fPk5GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:2e:35:a8:34:1f:ee:46:13:d7:d9:0a:12:94:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8387c219c9841ebafaa3d40806c984f9f3e4e461
Validity
Not Before: Apr 17 04:00:45 2026 GMT
Not After : Apr 18 04:00:45 2026 GMT
Subject: CN=ea0aa87cdec3d0171af2f0f4da5d855ccddb387e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c9:a6:f1:98:31:fa:d5:74:d0:4d:8d:73:8d:
0c:fd:b7:f8:40:22:5e:64:ff:d3:00:b1:02:1e:d8:
5a:ea:df:1f:bf:02:4e:e1:0a:f0:70:7e:ff:cd:0f:
0a:6a:85:d0:0e:df:28:c1:eb:45:55:06:7e:2e:ef:
b8:35:53:9f:cf:ca:6c:03:a7:a0:7f:b5:96:13:85:
73:01:d1:1d:3b:28:7a:b8:f4:63:dc:f9:3c:42:90:
a4:27:b9:b5:52:a0:3b:bf:3f:97:ed:2b:8a:6f:7b:
f9:46:4e:97:a2:8d:3c:dc:d4:a9:ee:e7:f3:83:5a:
7c:a8:4c:72:49:0c:35:65:6b:ea:55:1f:66:71:69:
47:e6:74:fd:5b:21:21:00:c5:73:ea:e4:fa:86:73:
c3:21:6a:92:08:7f:8c:56:0f:5d:9b:33:a9:d7:76:
f1:93:9e:69:92:13:00:81:df:99:e7:04:e3:d9:35:
8a:22:42:d6:a9:d9:ba:82:dc:32:5f:d5:80:a4:9f:
79:d5:56:ef:e3:96:2b:c9:03:d3:9d:ef:3c:32:b0:
19:9f:b8:99:5d:bd:17:32:7d:07:1a:e7:1c:d4:c7:
d4:81:ea:d2:54:00:4e:98:37:1d:b8:d8:d2:85:a4:
e6:85:2f:ef:4d:20:91:0f:d1:45:31:74:97:5d:e1:
34:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:0A:A8:7C:DE:C3:D0:17:1A:F2:F0:F4:DA:5D:85:5C:CD:DB:38:7E
X509v3 Authority Key Identifier:
keyid:83:87:C2:19:C9:84:1E:BA:FA:A3:D4:08:06:C9:84:F9:F3:E4:E4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g4fCGcmEHrr6o9QIBsmE-fPk5GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ed3054-0a97-497c-9703-bc91c0670d03/1/g4fCGcmEHrr6o9QIBsmE-fPk5GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:e1:ea:2e:bb:ba:70:2e:52:29:cf:2e:e8:51:df:33:a8:09:
0d:49:41:e7:65:d0:f5:13:35:82:f4:2b:16:72:f1:5f:f2:e6:
2c:a6:19:33:f0:2b:16:10:1d:e1:68:ae:73:20:48:28:c7:7a:
94:2e:25:00:90:1e:97:86:4e:cc:14:b7:60:0b:0c:45:f1:13:
80:2d:d3:97:51:ff:85:9c:05:b3:82:e2:ee:81:c5:94:a3:4e:
ef:19:2d:8b:40:67:73:3f:47:a9:40:b4:7c:dc:63:d5:2a:60:
46:bc:84:d9:3e:d0:a5:0e:8e:36:5f:7e:a0:85:41:a3:56:ec:
a9:43:e7:e3:de:72:24:1b:a5:e8:f2:c7:c2:6b:e5:60:88:cc:
75:ef:dd:a1:4e:7f:cb:be:c2:43:23:ef:c8:48:d7:8a:df:28:
51:6c:84:31:1e:9d:25:5a:a5:b7:6a:28:9a:23:2d:68:b7:82:
1b:f5:a9:bd:b0:89:a4:a8:62:bc:40:7f:70:fd:e9:4f:7b:34:
1f:48:20:ea:db:30:8f:0c:f0:6a:5b:ce:59:e9:6c:dd:38:0b:
a7:03:f3:2c:55:4f:3c:41:f8:f1:28:34:3f:77:34:98:50:8f:
b8:23:1b:13:d8:17:3d:14:63:73:76:81:0b:bd:2c:9a:cb:97:
4a:93:b9:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:30:06 2026 by rpki-client