Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/0c4b16-6b94-4080-9165-b853567da0ea/1/g47DlCgT0_NTbBJ-GoIb--9tsqQ.mft
File: g47DlCgT0_NTbBJ-GoIb--9tsqQ.mft (raw, json)
Hash identifier: UfjNjgMKQsjurJf5mWCXnZ4Ffcgg8bNjch9CjuObLQA=
Subject key identifier: 7D:E7:13:A0:C6:B8:F1:1D:2C:36:A1:66:B1:1F:A4:79:B5:8E:16:44
Authority key identifier: 83:8E:C3:94:28:13:D3:F3:53:6C:12:7E:1A:82:1B:FB:EF:6D:B2:A4
Certificate issuer: /CN=838ec3942813d3f3536c127e1a821bfbef6db2a4
Certificate serial: 019CACB4B11545FC4D589CE8559B945C0128
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g47DlCgT0_NTbBJ-GoIb--9tsqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/0c4b16-6b94-4080-9165-b853567da0ea/1/g47DlCgT0_NTbBJ-GoIb--9tsqQ.mft
Manifest number: 135F
Signing time: Mon 02 Mar 2026 04:00:48 +0000
Manifest this update: Mon 02 Mar 2026 04:00:48 +0000
Manifest next update: Tue 03 Mar 2026 04:00:48 +0000
Files and hashes: 1: g47DlCgT0_NTbBJ-GoIb--9tsqQ.crl (hash: EXi9Z0jkLOfo0vF6CF8c+S4zRrbVUwPK3sOBdPcy2tA=)
2: zJ9YO7uI6W1Gq5hqe_FdpaKHEOs.roa (hash: wHDNKsjqy6w/5WpMFtLcJHbUM6e7hIDnbt9VTy3GjT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/0c4b16-6b94-4080-9165-b853567da0ea/1/g47DlCgT0_NTbBJ-GoIb--9tsqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/0c4b16-6b94-4080-9165-b853567da0ea/1/g47DlCgT0_NTbBJ-GoIb--9tsqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/g47DlCgT0_NTbBJ-GoIb--9tsqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:b1:15:45:fc:4d:58:9c:e8:55:9b:94:5c:01:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=838ec3942813d3f3536c127e1a821bfbef6db2a4
Validity
Not Before: Mar 2 04:00:48 2026 GMT
Not After : Mar 3 04:00:48 2026 GMT
Subject: CN=7de713a0c6b8f11d2c36a166b11fa479b58e1644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:23:c0:4d:ba:fc:2d:bb:84:b7:97:e4:c9:39:
f2:26:ae:ba:2a:65:a4:f0:df:fb:a6:a5:7e:91:ac:
e6:ae:95:92:21:e0:88:e5:6f:a1:95:63:9b:63:6f:
4f:c7:48:4c:c9:84:5c:b8:a0:42:ac:a6:8e:08:eb:
68:78:3a:6c:64:58:b9:47:f5:f9:01:56:28:48:bf:
66:6b:1d:d6:d9:98:7b:e9:2f:94:57:11:40:1c:6d:
bd:16:db:8a:ae:75:07:d0:19:99:19:b0:f1:db:ed:
f6:ae:c1:5d:16:df:96:38:53:88:1e:d2:80:33:53:
02:44:e2:92:0a:c9:6a:c1:ca:39:0e:b4:b6:9a:fa:
38:e7:21:66:df:aa:58:be:2a:dd:56:5e:df:5b:1e:
72:0f:75:f8:d1:9b:82:aa:85:5e:4d:6a:da:bf:49:
86:ec:f2:d4:47:9d:43:45:6a:63:e0:05:f6:d4:5c:
b6:db:f2:bb:6e:e5:de:91:1b:fa:24:c5:fe:d4:d9:
4d:f6:53:b4:2f:bf:46:09:ff:32:e4:87:56:96:86:
fb:7e:a3:11:dc:be:ed:09:2b:85:fa:ce:d0:83:e7:
8d:57:bf:04:02:ff:11:7f:ec:e2:63:09:29:b0:cc:
6a:97:a4:4c:70:1f:81:06:9b:51:20:f1:2c:7e:e6:
7b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:E7:13:A0:C6:B8:F1:1D:2C:36:A1:66:B1:1F:A4:79:B5:8E:16:44
X509v3 Authority Key Identifier:
keyid:83:8E:C3:94:28:13:D3:F3:53:6C:12:7E:1A:82:1B:FB:EF:6D:B2:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g47DlCgT0_NTbBJ-GoIb--9tsqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/0c4b16-6b94-4080-9165-b853567da0ea/1/g47DlCgT0_NTbBJ-GoIb--9tsqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/0c4b16-6b94-4080-9165-b853567da0ea/1/g47DlCgT0_NTbBJ-GoIb--9tsqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:95:ca:d6:6b:f4:8d:25:b0:7b:1b:03:22:aa:3e:0e:71:78:
ee:ba:07:68:3f:04:48:f3:63:10:41:0e:4e:fe:d1:62:d7:70:
de:8f:24:68:36:20:2c:d0:64:3b:75:4d:1c:7a:67:ca:4b:8f:
03:12:bd:4a:05:f7:1e:0b:a2:54:8e:d0:4b:37:64:42:d8:c2:
d8:48:05:bd:0d:1c:4a:94:90:3c:8d:98:d7:f9:32:05:33:77:
68:2b:a6:a1:09:e8:f0:21:a8:5a:27:b7:d4:11:07:58:e7:4b:
70:d5:9b:7a:d3:a4:8f:fb:3d:a0:14:b0:96:31:b8:c8:bd:a5:
28:b6:a3:8a:64:b0:39:e4:92:d4:0b:2a:8e:ea:62:db:01:8f:
9f:08:ff:db:63:91:00:6f:58:9e:56:0f:31:a5:f1:1e:cc:73:
ba:ce:a3:37:e8:11:10:d7:39:29:e6:00:8c:ed:69:23:4c:a8:
94:11:dc:c4:e4:72:9e:dd:ce:38:39:e0:80:31:09:c8:4a:4b:
55:67:b7:81:e3:f5:bf:52:85:05:e0:d9:75:e7:0d:7d:67:4c:
62:8d:71:b1:2f:36:50:93:db:42:d4:4c:b1:5d:bc:6e:d4:3c:
cd:4b:c3:0b:7c:97:f5:1e:57:5c:e7:e4:40:f9:3d:25:ca:5b:
9c:ff:fe:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:46:01 2026 by rpki-client