Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/b2eaa8-898b-4f33-afb9-89267e528009/1/g0VE4aPiKMTTZH9iqdjJas6eLDE.mft
File: g0VE4aPiKMTTZH9iqdjJas6eLDE.mft (raw, json)
Hash identifier: 3WoPs3s3q4kpHOQAK0sQJFLRWTMPo5qbKO6eu8uJRLA=
Subject key identifier: 02:90:FF:C0:7F:2C:75:61:47:7B:32:4E:AA:A5:02:34:7D:42:7E:37
Authority key identifier: 83:45:44:E1:A3:E2:28:C4:D3:64:7F:62:A9:D8:C9:6A:CE:9E:2C:31
Certificate issuer: /CN=834544e1a3e228c4d3647f62a9d8c96ace9e2c31
Certificate serial: 019EC111FEB71FF49B1C830D5A0759EEADD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g0VE4aPiKMTTZH9iqdjJas6eLDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/b2eaa8-898b-4f33-afb9-89267e528009/1/g0VE4aPiKMTTZH9iqdjJas6eLDE.mft
Manifest number: 02F7
Signing time: Sat 13 Jun 2026 13:00:42 +0000
Manifest this update: Sat 13 Jun 2026 13:00:42 +0000
Manifest next update: Sun 14 Jun 2026 13:00:42 +0000
Files and hashes: 1: Zvz4ZZe8TirGDr5YK1DXs7yV6ko.roa (hash: IZffctFNRu2D4ovNLuJ8QUvA9BXb4VzlfLdGt6txidc=)
2: g0VE4aPiKMTTZH9iqdjJas6eLDE.crl (hash: gJ4n3KO+tYGRiBVgCUH/p58/LIYWGEYWc7/ombZevss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/b2eaa8-898b-4f33-afb9-89267e528009/1/g0VE4aPiKMTTZH9iqdjJas6eLDE.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/b2eaa8-898b-4f33-afb9-89267e528009/1/g0VE4aPiKMTTZH9iqdjJas6eLDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/g0VE4aPiKMTTZH9iqdjJas6eLDE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:11:fe:b7:1f:f4:9b:1c:83:0d:5a:07:59:ee:ad:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=834544e1a3e228c4d3647f62a9d8c96ace9e2c31
Validity
Not Before: Jun 13 13:00:42 2026 GMT
Not After : Jun 14 13:00:42 2026 GMT
Subject: CN=0290ffc07f2c7561477b324eaaa502347d427e37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c3:87:03:39:ee:5b:dc:e4:97:8e:ae:9e:1c:
c5:99:0a:52:be:64:94:1c:ac:3f:98:3d:cc:5a:7b:
a0:d5:6f:75:9b:b0:66:bc:2a:4c:3a:79:a6:37:27:
b7:0e:65:ad:34:58:b9:5c:46:71:90:62:45:fa:c6:
49:77:13:f2:86:05:f8:08:68:43:25:1e:9d:01:62:
3b:9a:33:69:dc:52:8f:0c:78:1e:1e:c9:25:dd:5e:
9c:d0:2a:b7:64:97:e4:04:0e:06:28:88:38:84:13:
ae:b5:b1:52:8d:f4:87:24:cc:39:1d:e5:c7:53:f8:
b5:4b:97:e8:75:12:2c:16:88:0e:db:66:97:a8:f0:
d2:a0:df:9e:54:29:0b:58:75:48:b0:fb:d9:e9:69:
b1:2b:95:fc:9d:60:07:c2:1f:52:5d:19:19:75:c2:
56:34:ed:18:43:6a:1c:c3:1c:e6:fd:d2:a9:4d:ed:
b5:ab:03:95:62:ef:38:16:c5:6d:f4:0a:f8:98:59:
42:ff:96:bb:b1:07:06:1d:6d:02:0c:79:94:8a:d1:
52:2d:06:1f:60:83:a5:3a:4d:b0:96:da:56:5b:99:
98:d1:89:1a:91:45:ca:7e:e8:6c:a7:9c:ea:30:e5:
25:90:3e:46:9b:eb:97:91:b5:30:eb:55:74:1f:41:
e3:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:90:FF:C0:7F:2C:75:61:47:7B:32:4E:AA:A5:02:34:7D:42:7E:37
X509v3 Authority Key Identifier:
keyid:83:45:44:E1:A3:E2:28:C4:D3:64:7F:62:A9:D8:C9:6A:CE:9E:2C:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0VE4aPiKMTTZH9iqdjJas6eLDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b2eaa8-898b-4f33-afb9-89267e528009/1/g0VE4aPiKMTTZH9iqdjJas6eLDE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b2eaa8-898b-4f33-afb9-89267e528009/1/g0VE4aPiKMTTZH9iqdjJas6eLDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:04:36:f9:64:25:9d:c8:34:08:0f:64:ff:13:2a:21:3f:c8:
2a:14:9c:3f:02:12:00:e9:5c:b2:cd:00:70:9c:2e:58:b7:7a:
0c:e1:1d:24:93:d8:c2:d1:de:67:66:1a:3f:ba:60:3f:e4:d1:
db:89:ff:bb:09:db:11:b4:be:d5:1a:f8:3f:77:54:9b:ae:bb:
c1:12:0f:89:b3:e8:6a:24:14:58:73:db:e0:4a:4b:37:db:9e:
4d:f6:92:fe:0a:4e:a7:cb:63:8e:9e:ee:af:9a:fe:dd:db:90:
51:92:f2:90:8c:b4:0b:5e:5e:dd:b8:ed:03:12:b9:ed:b5:81:
bf:c4:6a:b5:67:b4:12:6e:e1:76:73:c5:fd:e9:84:14:7f:78:
75:7e:9a:80:f3:a7:7b:be:c3:70:e3:7c:3d:f3:c0:77:a8:79:
ea:a7:84:9b:25:ea:95:75:c9:3f:40:d9:52:50:d2:fb:78:f9:
48:90:81:6c:6e:0e:06:77:83:8e:f6:0e:b2:9d:e2:f4:60:23:
ae:fd:dd:ed:10:2e:f6:59:c4:0c:ea:7a:74:b1:0a:23:8b:ba:
a4:f3:89:64:50:70:87:8e:10:da:61:c6:f5:b9:cc:5c:77:4e:
33:f9:a9:d9:27:6b:50:cb:33:dd:38:33:ae:cb:63:2a:fd:f5:
92:80:a7:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:32:52 2026 by rpki-client