Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/b2eaa8-898b-4f33-afb9-89267e528009/1/g0VE4aPiKMTTZH9iqdjJas6eLDE.mft
File: g0VE4aPiKMTTZH9iqdjJas6eLDE.mft (raw, json)
Hash identifier: VcAS+KXXZijRfAli0yOW+h/PSBVeaanYXk0cwLvE32w=
Subject key identifier: 38:AE:28:86:E5:9A:14:7A:D7:5A:8F:24:17:D8:A8:17:7A:D3:96:52
Authority key identifier: 83:45:44:E1:A3:E2:28:C4:D3:64:7F:62:A9:D8:C9:6A:CE:9E:2C:31
Certificate issuer: /CN=834544e1a3e228c4d3647f62a9d8c96ace9e2c31
Certificate serial: 019D9BF5D4CAB5C4A9BE3F336574795FA286
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g0VE4aPiKMTTZH9iqdjJas6eLDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/b2eaa8-898b-4f33-afb9-89267e528009/1/g0VE4aPiKMTTZH9iqdjJas6eLDE.mft
Manifest number: 025E
Signing time: Fri 17 Apr 2026 15:01:12 +0000
Manifest this update: Fri 17 Apr 2026 15:01:12 +0000
Manifest next update: Sat 18 Apr 2026 15:01:12 +0000
Files and hashes: 1: g0VE4aPiKMTTZH9iqdjJas6eLDE.crl (hash: IHZb/P0oUthhzCoLQmjGqTlQwqP5mZ+ylH2FHXQeuik=)
2: ibQR5d1f9YuNRleB1lEGG40hVjI.roa (hash: eJ7NUjjHSZG0K+6u15PytmHxHDBWRH5YWbs+72aktr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/b2eaa8-898b-4f33-afb9-89267e528009/1/g0VE4aPiKMTTZH9iqdjJas6eLDE.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/b2eaa8-898b-4f33-afb9-89267e528009/1/g0VE4aPiKMTTZH9iqdjJas6eLDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/g0VE4aPiKMTTZH9iqdjJas6eLDE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 15:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:f5:d4:ca:b5:c4:a9:be:3f:33:65:74:79:5f:a2:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=834544e1a3e228c4d3647f62a9d8c96ace9e2c31
Validity
Not Before: Apr 17 15:01:12 2026 GMT
Not After : Apr 18 15:01:12 2026 GMT
Subject: CN=38ae2886e59a147ad75a8f2417d8a8177ad39652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f4:a7:5c:43:90:9a:57:bd:31:e7:49:ed:8c:
26:14:73:32:96:d5:56:b6:15:bd:b6:e5:3f:dc:8e:
7e:6a:91:ba:bd:c5:94:ff:dd:cf:18:60:f8:34:f7:
9f:39:56:33:23:7d:a6:bc:cf:eb:06:77:2e:59:33:
93:4f:f2:55:f8:cf:dc:5b:c6:d6:ee:5f:e5:2e:a9:
57:0e:97:72:92:f7:d7:a4:3c:b3:b1:01:da:11:e1:
ca:b1:02:cb:51:f5:44:a5:22:51:73:80:d8:bc:54:
98:9a:6b:ad:a6:cd:06:ee:72:62:f3:7c:2b:32:8d:
86:f3:85:6d:eb:4b:25:bd:40:70:f3:0d:11:70:2f:
90:b0:45:19:3a:86:75:64:06:ca:2e:1f:64:ba:38:
54:ce:53:7f:1d:02:48:9d:11:1d:f7:98:44:b9:0c:
59:7e:6a:ba:66:b7:d0:1c:1f:e4:b2:21:1a:4f:a6:
62:b5:44:f0:c6:a6:33:07:fd:b8:ef:76:3c:aa:f3:
8f:95:58:ea:08:80:b7:58:a8:0e:96:0c:80:3f:3d:
0c:69:8e:82:17:fe:d1:60:7c:59:83:83:8c:29:15:
4e:d3:21:83:73:14:85:c7:81:f9:eb:37:ea:77:bc:
8a:da:76:41:9a:7b:5f:01:91:89:55:78:18:61:a2:
bb:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:AE:28:86:E5:9A:14:7A:D7:5A:8F:24:17:D8:A8:17:7A:D3:96:52
X509v3 Authority Key Identifier:
keyid:83:45:44:E1:A3:E2:28:C4:D3:64:7F:62:A9:D8:C9:6A:CE:9E:2C:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0VE4aPiKMTTZH9iqdjJas6eLDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b2eaa8-898b-4f33-afb9-89267e528009/1/g0VE4aPiKMTTZH9iqdjJas6eLDE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b2eaa8-898b-4f33-afb9-89267e528009/1/g0VE4aPiKMTTZH9iqdjJas6eLDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:a8:35:ce:c7:50:59:78:ad:c9:c1:c6:3f:35:de:c6:a6:aa:
a4:78:b8:73:56:c6:ef:af:f7:c3:60:ea:5a:a7:3a:9b:1f:dd:
a4:4d:d4:04:7e:99:11:06:12:c3:18:15:39:d3:59:c8:3a:fc:
7f:07:a2:6d:4b:35:83:3e:54:9f:34:e3:ad:0c:e4:63:7a:1b:
3b:93:49:35:f3:44:ab:8a:3f:53:1d:8f:c1:ac:e8:63:57:37:
51:73:db:96:c6:65:cf:40:70:85:fd:87:fe:ed:0a:30:ec:b3:
e2:e8:32:fe:14:c8:da:14:1d:56:c0:b7:11:4a:5a:bc:d1:6f:
f0:06:83:08:7f:34:9d:a2:fe:f1:11:de:ed:e3:9c:ca:44:1b:
39:62:0c:cb:f9:65:6c:72:86:43:94:f1:04:c0:39:ce:a3:76:
f9:c0:e6:7f:7a:7c:ad:66:e3:fa:89:d3:24:fc:9b:4f:b0:5f:
ec:39:d0:fd:10:77:6b:3e:b8:31:92:83:6b:e2:86:9c:0f:11:
80:6d:5e:e8:bd:75:68:87:d2:17:b6:16:09:4d:fc:eb:21:19:
db:8e:33:b5:b7:a8:0a:e0:f0:09:1b:c9:d6:8c:30:40:a6:d0:
fa:b3:7a:eb:fb:d5:a5:cb:28:e9:30:1e:3e:6c:af:40:7b:d6:
e2:14:34:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:59:51 2026 by rpki-client