Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/85/b2eaa8-898b-4f33-afb9-89267e528009/1/g0VE4aPiKMTTZH9iqdjJas6eLDE.mft
File: g0VE4aPiKMTTZH9iqdjJas6eLDE.mft (raw, json)
Hash identifier: 0Ch7jfO0Mdi7JroL1xhEX5zZ8ZnOBbojMy3ujPcVS1o=
Subject key identifier: 5E:8B:B3:EC:57:13:2C:DA:05:5C:D3:0C:68:48:DE:BF:4D:D3:93:32
Authority key identifier: 83:45:44:E1:A3:E2:28:C4:D3:64:7F:62:A9:D8:C9:6A:CE:9E:2C:31
Certificate issuer: /CN=834544e1a3e228c4d3647f62a9d8c96ace9e2c31
Certificate serial: 01A0DFBCC61A44814BE8E5D0A118C8BB80A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g0VE4aPiKMTTZH9iqdjJas6eLDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/b2eaa8-898b-4f33-afb9-89267e528009/1/g0VE4aPiKMTTZH9iqdjJas6eLDE.mft
Manifest number: 0410
Signing time: Sat 26 Sep 2026 22:01:25 +0000
Manifest this update: Sat 26 Sep 2026 22:01:25 +0000
Manifest next update: Sun 27 Sep 2026 22:01:25 +0000
Files and hashes: 1: Zvz4ZZe8TirGDr5YK1DXs7yV6ko.roa (hash: IZffctFNRu2D4ovNLuJ8QUvA9BXb4VzlfLdGt6txidc=)
2: g0VE4aPiKMTTZH9iqdjJas6eLDE.crl (hash: bEu5SNcPmaR8+BMKYkqzroO0gyNDsVRY/ts4SLj/Pck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/b2eaa8-898b-4f33-afb9-89267e528009/1/g0VE4aPiKMTTZH9iqdjJas6eLDE.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/b2eaa8-898b-4f33-afb9-89267e528009/1/g0VE4aPiKMTTZH9iqdjJas6eLDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/g0VE4aPiKMTTZH9iqdjJas6eLDE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:bc:c6:1a:44:81:4b:e8:e5:d0:a1:18:c8:bb:80:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=834544e1a3e228c4d3647f62a9d8c96ace9e2c31
Validity
Not Before: Sep 26 22:01:25 2026 GMT
Not After : Sep 27 22:01:25 2026 GMT
Subject: CN=5e8bb3ec57132cda055cd30c6848debf4dd39332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2e:dc:73:fb:fe:b0:05:dc:b9:eb:d1:15:8a:
5a:b7:14:92:a9:91:79:5b:25:0d:28:3e:fd:cd:07:
a6:b6:1b:01:2c:ae:13:e5:1f:c3:41:da:d3:2e:b8:
2b:f3:8d:7e:4c:00:f8:0a:01:98:b6:14:b2:94:66:
eb:e8:ff:62:ce:70:9d:a0:33:2e:0f:7f:6f:74:ba:
1d:d7:aa:65:1f:0a:7f:9c:77:05:a4:44:c5:69:6b:
b3:8f:7d:f5:2a:bb:9b:89:13:a7:d9:49:eb:d6:e6:
be:f6:9a:f9:be:a9:a3:71:cd:42:a9:a3:ff:44:20:
40:54:bc:3e:18:1e:16:18:28:f3:f6:77:8f:5a:06:
7b:7b:76:1d:05:66:20:8b:b8:22:e5:9e:3a:b4:1e:
ae:58:c6:ec:b5:d1:ab:d6:7d:19:d2:37:0f:c8:b6:
4c:45:5e:f2:67:f0:50:98:8b:97:d1:d9:29:ea:77:
d1:25:8e:93:ab:66:f9:d5:ea:96:31:6e:11:dc:4c:
4e:fa:d1:75:c3:dc:fa:0f:fd:fb:87:03:c9:2b:e3:
82:a8:88:60:e0:44:c7:f1:0c:93:4c:99:e3:67:e2:
7d:56:ab:a7:ca:2c:42:77:31:3b:89:ea:7a:10:f8:
30:9c:20:45:c7:ef:1e:72:b0:a7:19:9f:3f:c2:0d:
b0:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:8B:B3:EC:57:13:2C:DA:05:5C:D3:0C:68:48:DE:BF:4D:D3:93:32
X509v3 Authority Key Identifier:
keyid:83:45:44:E1:A3:E2:28:C4:D3:64:7F:62:A9:D8:C9:6A:CE:9E:2C:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0VE4aPiKMTTZH9iqdjJas6eLDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b2eaa8-898b-4f33-afb9-89267e528009/1/g0VE4aPiKMTTZH9iqdjJas6eLDE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b2eaa8-898b-4f33-afb9-89267e528009/1/g0VE4aPiKMTTZH9iqdjJas6eLDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:28:2f:62:56:1e:e2:f4:cd:43:80:94:54:25:e5:4b:4c:af:
96:f5:38:87:6b:82:f7:d2:67:d7:f8:17:6f:2a:29:12:12:95:
c1:de:fb:bb:15:72:85:73:d1:43:c8:c4:c9:a4:cb:c6:59:db:
18:0b:e4:4c:a7:71:51:9e:94:12:29:08:b0:43:05:e0:54:a6:
73:48:9c:00:16:a5:11:b5:73:3c:0a:6c:1f:ce:ab:3f:61:d5:
5c:17:73:79:c1:9f:8a:1a:df:bd:14:d1:27:a5:16:50:a1:4c:
46:66:df:02:f4:9b:dc:c6:4a:29:b5:df:31:27:91:8a:34:2d:
b0:3a:b9:a9:c4:4d:a0:78:c7:bc:f1:d6:24:a1:f9:dd:e4:04:
3b:45:2c:c1:45:d1:21:fe:20:35:15:ca:15:f2:4e:2d:7d:ed:
0b:a4:bf:6a:5b:6c:bb:44:dc:63:f4:53:89:2a:98:c2:3b:42:
9e:4b:c2:c7:93:52:00:fa:6d:91:20:d2:59:31:a9:63:02:c5:
96:31:cc:fa:98:b6:41:e5:75:b5:4f:17:f1:d9:ae:4a:18:34:
5c:84:b3:ad:d7:dd:6d:92:32:bb:97:85:c4:47:ac:84:0a:e9:
2d:c9:05:53:e0:61:43:80:10:1d:60:0a:48:73:fe:ec:2d:a9:
84:38:d7:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 05:19:41 2026 by rpki-client