Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.mft
File: g5DhBCut2I6W5jnqoK0CMofqUH8.mft (raw, json)
Hash identifier: aZhXRwxulM5IfA5M78IeiVTzMt5pVX84LFi6DRWc6Aw=
Subject key identifier: 6D:A3:7F:78:07:CA:5D:B4:80:56:F9:22:2D:69:9B:88:83:F5:DC:AB
Authority key identifier: 83:90:E1:04:2B:AD:D8:8E:96:E6:39:EA:A0:AD:02:32:87:EA:50:7F
Certificate issuer: /CN=8390e1042badd88e96e639eaa0ad023287ea507f
Certificate serial: 019CAB3422A89C96668ECEFEF58B49512148
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g5DhBCut2I6W5jnqoK0CMofqUH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.mft
Manifest number: 1845
Signing time: Sun 01 Mar 2026 21:00:46 +0000
Manifest this update: Sun 01 Mar 2026 21:00:46 +0000
Manifest next update: Mon 02 Mar 2026 21:00:46 +0000
Files and hashes: 1: Cms4_2kxSzeRcRSIA9wB43-LvT4.roa (hash: NlxgHVdUZqUs6S+kYTnLVRbbSz1aQACOBdzclkEtqQE=)
2: g5DhBCut2I6W5jnqoK0CMofqUH8.crl (hash: iAUMUvX6zK6kwdJ5VId7+zTaVp5La6ADHUpo4CCL0JE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/g5DhBCut2I6W5jnqoK0CMofqUH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:22:a8:9c:96:66:8e:ce:fe:f5:8b:49:51:21:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8390e1042badd88e96e639eaa0ad023287ea507f
Validity
Not Before: Mar 1 21:00:46 2026 GMT
Not After : Mar 2 21:00:46 2026 GMT
Subject: CN=6da37f7807ca5db48056f9222d699b8883f5dcab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:51:63:c8:a6:d4:f3:1d:7a:93:12:d6:e2:d1:
33:9e:82:21:82:eb:67:72:6f:d1:52:a8:c8:b0:6a:
bd:4e:3b:90:6f:ad:bc:e7:5e:36:94:77:ec:ea:9c:
3e:5a:30:60:0a:58:f5:27:d5:22:d4:25:0d:38:f8:
43:60:ba:64:48:85:e5:e8:cb:67:f8:a9:7e:bc:e4:
1f:76:f2:e4:a9:7a:f1:50:ab:ce:a2:40:b8:c1:e7:
71:d2:ae:e7:1f:10:bc:b8:e3:e5:50:b5:ab:a1:bd:
bb:5e:8e:d7:5d:de:72:f5:05:62:4d:01:a5:cc:b7:
89:15:01:7c:78:30:97:43:59:5b:4c:a6:80:72:09:
ff:60:ff:21:73:1e:c6:76:7c:d1:2e:11:72:53:ba:
be:e1:cc:62:e2:4c:34:81:99:0b:94:67:13:91:6f:
a4:3f:14:29:86:97:3e:3c:ee:cb:62:0c:22:f9:74:
e8:96:ac:7b:41:9c:ee:fc:7b:f3:91:2d:d3:0b:28:
24:49:98:7b:40:40:0c:6f:46:2d:18:68:b7:f2:40:
33:02:7c:32:ef:23:1f:a4:e1:26:f8:f6:6a:ad:5d:
e1:df:f8:56:eb:d7:90:30:26:dc:3e:70:0a:2d:14:
eb:3a:62:32:84:9f:d9:45:6c:6b:70:81:36:13:56:
31:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:A3:7F:78:07:CA:5D:B4:80:56:F9:22:2D:69:9B:88:83:F5:DC:AB
X509v3 Authority Key Identifier:
keyid:83:90:E1:04:2B:AD:D8:8E:96:E6:39:EA:A0:AD:02:32:87:EA:50:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5DhBCut2I6W5jnqoK0CMofqUH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:5f:50:e7:09:66:6b:d1:5d:f8:b5:6c:e2:a2:6d:27:1f:e2:
b5:93:eb:b8:49:1c:50:7c:72:c5:53:16:8b:73:f5:b8:a2:90:
c3:f6:32:23:14:da:da:4c:c6:42:4b:17:03:e8:65:59:c9:6e:
b8:ca:52:42:ca:6b:79:c3:91:6c:1b:a9:97:8a:20:48:a7:62:
3e:57:79:30:d8:35:fb:7a:c2:51:41:84:42:50:4c:c7:13:09:
4b:fe:91:72:fc:6d:87:18:81:e2:9f:55:29:32:18:e9:4d:39:
8f:ad:e8:ad:81:64:c6:a4:00:84:22:b7:10:7b:fd:8e:01:c0:
c6:4f:07:54:50:a7:af:4d:2c:58:bc:79:35:ba:61:0e:51:57:
ea:f6:80:a8:e3:84:d1:cf:4a:9c:33:32:28:64:4a:af:27:9a:
18:e5:9d:ff:b2:2f:6e:e7:97:7e:97:55:d8:57:06:b5:4f:c4:
32:11:4a:c2:51:62:fe:7a:98:d7:5a:fd:64:ba:9d:e4:03:45:
bd:ef:fb:9b:de:7a:b3:bb:62:e8:b6:3f:0b:34:9e:c7:1a:16:
4b:c9:e9:a9:31:aa:f1:61:2f:cc:8c:ce:0c:26:5b:a8:b8:38:
b4:12:ce:f7:67:70:80:40:8c:4c:a3:43:99:8e:f7:19:c3:50:
d9:5d:af:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:37:32 2026 by rpki-client