Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.mft
File: g7826xjvmlfF-2A62kAP5rZojm4.mft (raw, json)
Hash identifier: XldL+9EpuyiXeYLCmYhogf9d9N67Uldi4S2GC6yYiaU=
Subject key identifier: 0E:35:A5:8F:AD:12:53:5F:3E:A9:F2:A5:1C:45:1E:BE:69:BD:3B:2A
Authority key identifier: 83:BF:36:EB:18:EF:9A:57:C5:FB:60:3A:DA:40:0F:E6:B6:68:8E:6E
Certificate issuer: /CN=83bf36eb18ef9a57c5fb603ada400fe6b6688e6e
Certificate serial: 019CABD9440003A3C3C128B724C1AF126860
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g7826xjvmlfF-2A62kAP5rZojm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.mft
Manifest number: 137A
Signing time: Mon 02 Mar 2026 00:01:08 +0000
Manifest this update: Mon 02 Mar 2026 00:01:08 +0000
Manifest next update: Tue 03 Mar 2026 00:01:08 +0000
Files and hashes: 1: g7826xjvmlfF-2A62kAP5rZojm4.crl (hash: M+VOFQcU4ofNztg9ekEAQvzhgQCfAer1+xcGH99KNYw=)
2: ja3xbYHhCypT2kKyeAbUDM6JjaI.roa (hash: 97d7xvyjN2GHwh42t3hRtYWBfO2mX62sHwBd8SOvXh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/g7826xjvmlfF-2A62kAP5rZojm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:44:00:03:a3:c3:c1:28:b7:24:c1:af:12:68:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83bf36eb18ef9a57c5fb603ada400fe6b6688e6e
Validity
Not Before: Mar 2 00:01:08 2026 GMT
Not After : Mar 3 00:01:08 2026 GMT
Subject: CN=0e35a58fad12535f3ea9f2a51c451ebe69bd3b2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6d:f1:20:4d:c8:c5:b8:a5:9b:7a:5a:5e:eb:
c3:d4:88:38:99:d3:c7:49:a3:41:38:8b:2b:66:c9:
c0:2c:7c:89:da:98:b0:bf:91:6e:45:6d:d0:8d:4e:
e9:de:05:2d:82:95:1a:84:a3:88:48:89:58:37:3e:
83:9c:76:a9:b3:54:51:e4:d5:3c:ce:8e:c0:aa:64:
5a:3e:3b:c9:99:de:d1:10:63:2d:eb:cb:77:c3:dd:
a3:aa:ef:5c:ae:cd:9c:7d:9f:e1:1a:cb:75:d2:ca:
b6:4d:65:51:54:d2:70:1a:12:91:75:64:f1:6a:54:
87:21:8e:2d:2d:3e:f4:14:30:49:66:57:ed:33:47:
fe:96:85:98:85:1c:3a:c5:0a:eb:58:1f:fe:69:10:
5a:a2:9c:bc:c2:9d:46:ad:7a:70:54:a6:36:1c:23:
0d:c0:cc:d5:d2:14:70:93:81:ae:86:31:78:5e:bd:
2f:8b:7e:50:6a:db:9e:81:b5:17:50:97:b8:f9:25:
27:4e:08:49:49:35:65:59:ee:3b:90:59:17:52:4b:
42:83:a6:33:81:8b:f6:52:2e:95:8a:62:17:1f:d0:
5a:39:b3:90:5a:39:76:41:69:2a:80:f1:7e:65:1f:
4e:ec:4f:5c:bc:77:37:ec:d9:e5:bd:9c:bc:87:fd:
05:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:35:A5:8F:AD:12:53:5F:3E:A9:F2:A5:1C:45:1E:BE:69:BD:3B:2A
X509v3 Authority Key Identifier:
keyid:83:BF:36:EB:18:EF:9A:57:C5:FB:60:3A:DA:40:0F:E6:B6:68:8E:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g7826xjvmlfF-2A62kAP5rZojm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:ec:64:5f:02:07:2e:74:df:bd:a7:30:6a:31:44:9a:b5:1f:
c0:9d:73:eb:96:06:ef:71:1f:60:b6:fb:31:ab:1b:1a:63:87:
a5:b5:a9:b7:d3:a5:b7:d5:3f:10:72:df:ec:ec:f9:2e:17:fc:
1e:28:09:9b:56:fe:ba:91:ec:a7:09:5d:f0:c8:14:3f:53:59:
d3:76:1c:e4:e2:7c:48:03:4e:e8:24:ce:aa:ce:e8:52:d2:18:
cc:3f:c2:b0:4d:b2:59:fd:4c:13:d2:40:49:99:a8:7f:9b:de:
ce:c7:16:5d:b6:55:8f:b9:eb:6f:ce:08:ff:de:4c:1e:a1:2c:
32:49:80:0f:a6:6d:0f:8c:64:ac:d4:c6:e4:a5:52:e4:11:ff:
54:eb:ba:70:93:2b:29:70:82:9b:85:6d:b1:89:3d:3c:0c:32:
e4:6b:c8:df:28:1d:1d:b5:ea:0b:d7:3a:2c:8b:57:54:e5:cd:
da:55:e2:3e:13:f0:95:1b:0f:77:b5:ea:bf:1a:83:af:7e:80:
9b:da:a0:f7:ad:1a:f7:56:34:52:65:26:28:de:03:f8:f1:b2:
14:e0:77:85:f5:49:5a:e9:af:21:eb:8b:ca:48:f0:a0:6e:d6:
53:c2:21:41:c2:9e:35:d3:ed:47:49:a1:40:02:a2:7f:4e:e2:
73:44:c0:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2UQAA6PDwSi3JMGvEmhgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzYmYzNmViMThlZjlhNTdjNWZiNjAzYWRhNDAwZmU2YjY2
ODhlNmUwHhcNMjYwMzAyMDAwMTA4WhcNMjYwMzAzMDAwMTA4WjAzMTEwLwYDVQQD
EygwZTM1YTU4ZmFkMTI1MzVmM2VhOWYyYTUxYzQ1MWViZTY5YmQzYjJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuG3xIE3Ixbilm3paXuvD1Ig4mdPH
SaNBOIsrZsnALHyJ2piwv5FuRW3QjU7p3gUtgpUahKOISIlYNz6DnHaps1RR5NU8
zo7AqmRaPjvJmd7REGMt68t3w92jqu9crs2cfZ/hGst10sq2TWVRVNJwGhKRdWTx
alSHIY4tLT70FDBJZlftM0f+loWYhRw6xQrrWB/+aRBaopy8wp1GrXpwVKY2HCMN
wMzV0hRwk4GuhjF4Xr0vi35QatuegbUXUJe4+SUnTghJSTVlWe47kFkXUktCg6Yz
gYv2Ui6VimIXH9BaObOQWjl2QWkqgPF+ZR9O7E9cvHc37NnlvZy8h/0FLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA41pY+tElNfPqnypRxFHr5pvTsqMB8GA1UdIwQY
MBaAFIO/NusY75pXxftgOtpAD+a2aI5uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzc4MjZ4anZtbGZGLTJBNjJrQVA1clpvam00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9mNzdkNTEtZWUxYy00N2E5LTkwYmMt
ZTBkMmExYjZlOGFjLzEvZzc4MjZ4anZtbGZGLTJBNjJrQVA1clpvam00Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi9mNzdkNTEtZWUxYy00N2E5LTkwYmMtZTBkMmExYjZlOGFj
LzEvZzc4MjZ4anZtbGZGLTJBNjJrQVA1clpvam00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi+xkXwIH
LnTfvacwajFEmrUfwJ1z65YG73EfYLb7MasbGmOHpbWpt9Olt9U/EHLf7Oz5Lhf8
HigJm1b+upHspwld8MgUP1NZ03Yc5OJ8SANO6CTOqs7oUtIYzD/CsE2yWf1ME9JA
SZmof5vezscWXbZVj7nrb84I/95MHqEsMkmAD6ZtD4xkrNTG5KVS5BH/VOu6cJMr
KXCCm4VtsYk9PAwy5GvI3ygdHbXqC9c6LItXVOXN2lXiPhPwlRsPd7XqvxqDr36A
m9qg960a91Y0UmUmKN4D+PGyFOB3hfVJWumvIeuLykjwoG7WU8IhQcKeNdPtR0mh
QAKif07ic0TAeA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:05:45 2026 by rpki-client