Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/453542-08b2-4399-bc5c-c756ae01fa8a/1/g2CIUSAjKNzl_AG_ndKSUgUw2f4.mft
File: g2CIUSAjKNzl_AG_ndKSUgUw2f4.mft (raw, json)
Hash identifier: HsMHy0aacpxSV6D5DdwQ/MptjKT+xV/nxtoSAtdh1bw=
Subject key identifier: 42:EE:41:54:44:D4:3C:0A:94:80:7B:CC:D7:28:B2:8A:DE:8E:4F:02
Authority key identifier: 83:60:88:51:20:23:28:DC:E5:FC:01:BF:9D:D2:92:52:05:30:D9:FE
Certificate issuer: /CN=83608851202328dce5fc01bf9dd292520530d9fe
Certificate serial: 019D99D08AC52F55038563170E2F1D1CC81F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2CIUSAjKNzl_AG_ndKSUgUw2f4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/453542-08b2-4399-bc5c-c756ae01fa8a/1/g2CIUSAjKNzl_AG_ndKSUgUw2f4.mft
Manifest number: 086D
Signing time: Fri 17 Apr 2026 05:01:14 +0000
Manifest this update: Fri 17 Apr 2026 05:01:14 +0000
Manifest next update: Sat 18 Apr 2026 05:01:14 +0000
Files and hashes: 1: Ya4-DOHb6IMAOxmkcETIsWTPCOg.roa (hash: u4TLCuqpTYyL9fIrK/kr+oWhEP1P1uyD8bPrTE+F3k0=)
2: g2CIUSAjKNzl_AG_ndKSUgUw2f4.crl (hash: gLaWCMp8ozKAhHNL3vGUszKupZswIz5hAfoLoIB0w+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/453542-08b2-4399-bc5c-c756ae01fa8a/1/g2CIUSAjKNzl_AG_ndKSUgUw2f4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/453542-08b2-4399-bc5c-c756ae01fa8a/1/g2CIUSAjKNzl_AG_ndKSUgUw2f4.mft
rsync://rpki.ripe.net/repository/DEFAULT/g2CIUSAjKNzl_AG_ndKSUgUw2f4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:8a:c5:2f:55:03:85:63:17:0e:2f:1d:1c:c8:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83608851202328dce5fc01bf9dd292520530d9fe
Validity
Not Before: Apr 17 05:01:14 2026 GMT
Not After : Apr 18 05:01:14 2026 GMT
Subject: CN=42ee415444d43c0a94807bccd728b28ade8e4f02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c7:99:e9:32:15:50:25:45:06:86:09:30:7b:
b1:71:67:e3:ba:f8:6f:04:4b:b8:c1:3c:82:c4:28:
ac:08:1f:67:6b:a7:0c:50:04:22:8c:87:68:a8:6a:
3a:1d:19:23:f1:10:7f:29:4c:56:0e:5c:9c:a7:9b:
a4:38:43:93:e2:11:e2:d2:5c:9d:14:11:e7:77:7c:
52:e2:f4:76:61:b3:bb:fc:e4:22:d5:2f:e3:bd:fb:
9c:08:9f:83:e2:26:fc:67:ae:74:cc:82:4b:0a:67:
97:fd:ba:6d:e0:87:14:e5:db:9d:28:e6:43:ab:e5:
7d:01:c0:f6:c7:51:51:4c:6b:67:87:d8:a1:81:e9:
16:61:08:14:33:46:ad:71:29:82:44:3c:32:17:22:
62:6e:36:f5:98:f6:32:c7:b9:87:3c:ea:84:5d:56:
fc:0a:7d:c8:8f:8d:87:7c:d2:8a:50:73:5a:51:6b:
57:e4:9f:1f:27:ab:79:56:fe:a4:84:60:f9:6b:a6:
4f:93:f9:df:2b:3c:02:48:3b:f6:49:de:79:c1:6c:
e8:93:b8:0a:40:32:dd:b8:a8:66:49:fa:ce:7c:ab:
b9:af:77:1f:ba:fc:84:45:e2:32:84:8a:ac:bf:bc:
f3:85:0c:52:d1:67:c5:45:cb:80:dd:22:cd:97:b7:
a5:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:EE:41:54:44:D4:3C:0A:94:80:7B:CC:D7:28:B2:8A:DE:8E:4F:02
X509v3 Authority Key Identifier:
keyid:83:60:88:51:20:23:28:DC:E5:FC:01:BF:9D:D2:92:52:05:30:D9:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2CIUSAjKNzl_AG_ndKSUgUw2f4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/453542-08b2-4399-bc5c-c756ae01fa8a/1/g2CIUSAjKNzl_AG_ndKSUgUw2f4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/453542-08b2-4399-bc5c-c756ae01fa8a/1/g2CIUSAjKNzl_AG_ndKSUgUw2f4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:b6:5a:d8:9c:50:ec:3e:b3:4a:69:cf:5b:3a:4c:83:3d:38:
47:0a:a9:9e:a8:68:54:72:f5:0b:ba:6f:c2:c1:06:a3:4d:d4:
41:eb:8d:c1:40:f0:59:d4:21:94:06:fd:31:30:ee:61:14:fe:
3a:e1:26:f1:f8:05:c6:f2:68:d7:0d:80:66:68:50:3d:64:c4:
8e:71:1f:2d:c3:6b:07:55:88:c4:f8:97:29:eb:55:98:eb:6c:
6f:75:fc:78:dc:86:78:1a:c8:e7:0d:99:5b:e3:ca:f6:7c:e4:
be:12:65:d8:68:c5:4c:37:e5:a5:5d:8b:78:f5:92:05:a7:07:
30:df:ea:6b:e4:9e:a4:6f:58:30:ba:df:53:b3:4e:73:6b:aa:
4a:53:83:ca:6f:e0:92:86:ef:98:c0:8f:ec:86:30:70:bf:70:
84:f2:ac:24:a7:ba:23:9f:60:2f:ef:02:36:25:ce:03:23:38:
b9:d7:b6:e2:d8:32:fe:1c:78:9b:93:6e:36:92:b5:4c:ba:e4:
e8:14:6b:b6:51:87:ab:a8:54:85:ef:39:85:18:58:d5:56:4d:
5a:35:f1:b6:15:6a:90:70:0b:ce:16:0e:91:d0:0c:3a:b3:43:
83:29:06:07:5c:33:1b:02:38:84:b4:55:22:67:c1:c1:ea:2a:
1c:f6:fe:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:08:15 2026 by rpki-client