Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a51c75-ef7b-48ab-870f-460cbe688ce5/1/g5JNIiU91reGmbxdCgEQJ5E-X3A.mft
File: g5JNIiU91reGmbxdCgEQJ5E-X3A.mft (raw, json)
Hash identifier: ssRd7etUa8gVlOdA4fdkvGtqIyXQsnDa9zlZ0BjYkBs=
Subject key identifier: 43:02:4E:E8:96:85:7E:0E:6B:F6:42:6A:88:B1:C7:D5:E3:8A:D4:DE
Authority key identifier: 83:92:4D:22:25:3D:D6:B7:86:99:BC:5D:0A:01:10:27:91:3E:5F:70
Certificate issuer: /CN=83924d22253dd6b78699bc5d0a011027913e5f70
Certificate serial: 019D9D081D047110FD0E97A5C062568B037D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g5JNIiU91reGmbxdCgEQJ5E-X3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a51c75-ef7b-48ab-870f-460cbe688ce5/1/g5JNIiU91reGmbxdCgEQJ5E-X3A.mft
Manifest number: 07FA
Signing time: Fri 17 Apr 2026 20:00:47 +0000
Manifest this update: Fri 17 Apr 2026 20:00:47 +0000
Manifest next update: Sat 18 Apr 2026 20:00:47 +0000
Files and hashes: 1: g5JNIiU91reGmbxdCgEQJ5E-X3A.crl (hash: NEWkFuqaA6BKGHSjr1U1YVXJtLeNMmwr0FwyoFAo0Fg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a51c75-ef7b-48ab-870f-460cbe688ce5/1/g5JNIiU91reGmbxdCgEQJ5E-X3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a51c75-ef7b-48ab-870f-460cbe688ce5/1/g5JNIiU91reGmbxdCgEQJ5E-X3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/g5JNIiU91reGmbxdCgEQJ5E-X3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 20:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:08:1d:04:71:10:fd:0e:97:a5:c0:62:56:8b:03:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83924d22253dd6b78699bc5d0a011027913e5f70
Validity
Not Before: Apr 17 20:00:47 2026 GMT
Not After : Apr 18 20:00:47 2026 GMT
Subject: CN=43024ee896857e0e6bf6426a88b1c7d5e38ad4de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:39:4a:b8:23:5a:63:f4:55:95:01:35:c5:e3:
76:1f:ef:3c:89:90:f0:c9:5d:90:96:8f:eb:7e:f8:
cd:48:5a:f8:01:ba:fd:d7:66:6c:10:7b:dc:50:19:
f4:f2:2a:16:56:71:7d:e3:75:64:bb:c2:80:c8:f4:
a2:21:2c:97:c7:bc:b1:55:c8:3c:22:75:04:ed:78:
b6:ac:5c:b0:9c:c6:26:da:46:a5:2f:8c:dd:4a:ae:
8d:70:59:37:8b:39:16:11:4b:43:73:d2:64:76:5d:
62:0e:52:2f:ed:a4:c1:60:5c:08:f3:e0:ea:1a:49:
0a:1f:a9:dc:97:b3:1a:b0:9f:1a:4f:1c:d0:80:b7:
c7:aa:80:60:bd:20:a6:6a:d2:ae:2e:7f:e8:08:0d:
63:c2:13:78:4b:be:38:f4:ed:05:2f:96:8a:2b:12:
a6:61:61:dc:b2:0a:fd:32:73:9a:ab:24:62:f4:aa:
90:0e:61:e1:44:ba:e1:72:33:86:a1:b5:44:a2:9f:
2d:e0:e6:cd:23:d9:98:2f:25:4e:6a:6f:40:30:16:
ff:f5:7a:00:1b:78:d9:9e:e3:fd:9b:ee:2b:6e:1c:
24:83:94:a3:19:06:07:1d:d7:46:de:59:d1:37:07:
ec:06:3c:dc:7b:3e:8b:35:e9:14:7a:91:5a:d0:66:
b4:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:02:4E:E8:96:85:7E:0E:6B:F6:42:6A:88:B1:C7:D5:E3:8A:D4:DE
X509v3 Authority Key Identifier:
keyid:83:92:4D:22:25:3D:D6:B7:86:99:BC:5D:0A:01:10:27:91:3E:5F:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5JNIiU91reGmbxdCgEQJ5E-X3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a51c75-ef7b-48ab-870f-460cbe688ce5/1/g5JNIiU91reGmbxdCgEQJ5E-X3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a51c75-ef7b-48ab-870f-460cbe688ce5/1/g5JNIiU91reGmbxdCgEQJ5E-X3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:b4:92:da:e0:8a:ad:a5:de:04:17:d8:1f:e1:15:cf:fe:c9:
41:8a:a9:9d:be:23:76:bb:f9:49:96:f1:c9:fc:ee:a8:5d:c9:
7c:63:21:90:19:14:6f:58:30:bd:f7:78:4e:de:74:1c:b7:d7:
54:19:f4:df:bf:8a:76:f6:09:bb:4a:bf:ec:3d:64:bf:b0:dc:
24:81:73:cd:ce:0f:c1:e9:b3:b6:b8:4d:b9:b1:db:4a:3a:07:
20:64:b5:58:73:79:05:b6:bc:b4:36:cd:24:8c:d6:ee:c7:4b:
b4:86:7e:ce:04:98:76:bf:a2:43:6e:54:1a:f5:19:be:77:8b:
fc:5a:d6:ee:5e:af:ba:3f:1f:22:9c:5e:52:ab:b8:a5:51:cc:
46:39:84:f7:90:f5:32:ca:37:6f:d7:5c:b2:a2:ea:16:6c:12:
a7:9b:f5:5f:52:3e:80:74:15:45:2c:91:0c:6c:db:2c:6a:f2:
1b:60:5c:e4:57:75:06:c4:dd:79:77:8c:36:09:bc:7a:2b:b2:
67:3b:e6:ce:7d:e2:0e:fd:a7:92:75:35:ef:3d:69:a0:b3:ba:
49:0a:87:05:80:48:66:c7:2c:f8:42:5e:2a:d6:36:3e:b0:34:
55:70:2c:03:9b:b1:e0:2c:0c:35:b8:fd:aa:22:ff:2e:7e:cf:
26:9b:74:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2dCB0EcRD9DpelwGJWiwN9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzOTI0ZDIyMjUzZGQ2Yjc4Njk5YmM1ZDBhMDExMDI3OTEz
ZTVmNzAwHhcNMjYwNDE3MjAwMDQ3WhcNMjYwNDE4MjAwMDQ3WjAzMTEwLwYDVQQD
Eyg0MzAyNGVlODk2ODU3ZTBlNmJmNjQyNmE4OGIxYzdkNWUzOGFkNGRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjlKuCNaY/RVlQE1xeN2H+88iZDw
yV2Qlo/rfvjNSFr4Abr912ZsEHvcUBn08ioWVnF943Vku8KAyPSiISyXx7yxVcg8
InUE7Xi2rFywnMYm2kalL4zdSq6NcFk3izkWEUtDc9Jkdl1iDlIv7aTBYFwI8+Dq
GkkKH6ncl7MasJ8aTxzQgLfHqoBgvSCmatKuLn/oCA1jwhN4S7449O0FL5aKKxKm
YWHcsgr9MnOaqyRi9KqQDmHhRLrhcjOGobVEop8t4ObNI9mYLyVOam9AMBb/9XoA
G3jZnuP9m+4rbhwkg5SjGQYHHddG3lnRNwfsBjzcez6LNekUepFa0Ga0uwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEMCTuiWhX4Oa/ZCaoixx9XjitTeMB8GA1UdIwQY
MBaAFIOSTSIlPda3hpm8XQoBECeRPl9wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzVKTklpVTkxcmVHbWJ4ZENnRVFKNUUtWDNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNTFjNzUtZWY3Yi00OGFiLTg3MGYt
NDYwY2JlNjg4Y2U1LzEvZzVKTklpVTkxcmVHbWJ4ZENnRVFKNUUtWDNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9hNTFjNzUtZWY3Yi00OGFiLTg3MGYtNDYwY2JlNjg4Y2U1
LzEvZzVKTklpVTkxcmVHbWJ4ZENnRVFKNUUtWDNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPrSS2uCK
raXeBBfYH+EVz/7JQYqpnb4jdrv5SZbxyfzuqF3JfGMhkBkUb1gwvfd4Tt50HLfX
VBn037+KdvYJu0q/7D1kv7DcJIFzzc4PwemztrhNubHbSjoHIGS1WHN5Bba8tDbN
JIzW7sdLtIZ+zgSYdr+iQ25UGvUZvneL/FrW7l6vuj8fIpxeUqu4pVHMRjmE95D1
Mso3b9dcsqLqFmwSp5v1X1I+gHQVRSyRDGzbLGryG2Bc5Fd1BsTdeXeMNgm8eiuy
Zzvmzn3iDv2nknU17z1poLO6SQqHBYBIZscs+EJeKtY2PrA0VXAsA5ux4CwMNbj9
qiL/Ln7PJpt0cw==
-----END CERTIFICATE-----
Generated at Sat Apr 18 03:04:14 2026 by rpki-client