Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/b2eaa8-898b-4f33-afb9-89267e528009/1/g0VE4aPiKMTTZH9iqdjJas6eLDE.mft
File: g0VE4aPiKMTTZH9iqdjJas6eLDE.mft (raw, json)
Hash identifier: D7z8plZBIJ/2SLsZRSO4vvcUnFhUR9po9Ua1tYuk4jo=
Subject key identifier: 57:79:EF:CA:EF:09:B0:14:DC:C5:EA:08:31:5B:29:AD:96:46:BA:40
Authority key identifier: 83:45:44:E1:A3:E2:28:C4:D3:64:7F:62:A9:D8:C9:6A:CE:9E:2C:31
Certificate issuer: /CN=834544e1a3e228c4d3647f62a9d8c96ace9e2c31
Certificate serial: 019FAABE40FCEE6948DA5441C63A46213541
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g0VE4aPiKMTTZH9iqdjJas6eLDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/b2eaa8-898b-4f33-afb9-89267e528009/1/g0VE4aPiKMTTZH9iqdjJas6eLDE.mft
Manifest number: 0370
Signing time: Tue 28 Jul 2026 22:00:22 +0000
Manifest this update: Tue 28 Jul 2026 22:00:22 +0000
Manifest next update: Wed 29 Jul 2026 22:00:22 +0000
Files and hashes: 1: Zvz4ZZe8TirGDr5YK1DXs7yV6ko.roa (hash: IZffctFNRu2D4ovNLuJ8QUvA9BXb4VzlfLdGt6txidc=)
2: g0VE4aPiKMTTZH9iqdjJas6eLDE.crl (hash: XsHvFxEiuAvZZDm+qtti6dN8kRtAUCo40uG7BayIKF8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/b2eaa8-898b-4f33-afb9-89267e528009/1/g0VE4aPiKMTTZH9iqdjJas6eLDE.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/b2eaa8-898b-4f33-afb9-89267e528009/1/g0VE4aPiKMTTZH9iqdjJas6eLDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/g0VE4aPiKMTTZH9iqdjJas6eLDE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:40:fc:ee:69:48:da:54:41:c6:3a:46:21:35:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=834544e1a3e228c4d3647f62a9d8c96ace9e2c31
Validity
Not Before: Jul 28 22:00:22 2026 GMT
Not After : Jul 29 22:00:22 2026 GMT
Subject: CN=5779efcaef09b014dcc5ea08315b29ad9646ba40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:33:44:b8:d2:95:23:4e:05:c4:03:39:eb:d2:
ff:9e:6d:33:11:2f:34:3d:55:65:fe:d8:b1:db:b3:
e2:ed:f2:f0:80:26:1d:ea:52:87:20:c5:44:79:79:
9d:1e:e8:e6:14:36:41:ef:d2:5d:16:ae:14:f3:48:
4f:2d:21:0c:c9:b2:54:e7:64:46:d4:72:db:2e:78:
a0:50:2b:62:5c:11:22:49:c2:6f:96:2b:32:58:a5:
28:54:13:de:a8:5f:00:13:0e:91:66:ae:4a:f9:86:
bd:d2:87:ac:b0:1a:87:2d:94:74:70:f2:1a:30:01:
9a:bf:b4:b6:98:82:8d:db:dc:46:f2:16:28:ab:d8:
08:3f:e5:fa:24:72:02:22:4a:80:51:0d:f0:f0:c7:
72:99:ac:52:64:20:1e:e6:c1:80:69:65:77:40:b2:
2a:42:ef:25:63:80:b6:15:de:58:f2:4d:53:5d:0f:
3f:4d:28:3c:5b:48:d4:5f:8e:f6:a4:1b:05:c7:7a:
0d:fd:ea:6a:ab:c9:2e:21:4b:09:e5:86:d4:c3:76:
6d:7f:31:fe:a2:69:76:98:3d:0a:69:67:b5:3d:0c:
e8:45:98:66:14:ac:f1:cb:19:76:48:83:0a:4f:9c:
6f:d3:56:c4:95:38:9f:26:82:f0:70:46:9a:d3:f8:
7e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:79:EF:CA:EF:09:B0:14:DC:C5:EA:08:31:5B:29:AD:96:46:BA:40
X509v3 Authority Key Identifier:
keyid:83:45:44:E1:A3:E2:28:C4:D3:64:7F:62:A9:D8:C9:6A:CE:9E:2C:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0VE4aPiKMTTZH9iqdjJas6eLDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b2eaa8-898b-4f33-afb9-89267e528009/1/g0VE4aPiKMTTZH9iqdjJas6eLDE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b2eaa8-898b-4f33-afb9-89267e528009/1/g0VE4aPiKMTTZH9iqdjJas6eLDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:0b:d1:a6:72:58:ce:a0:f0:a2:d6:ba:43:7f:d3:c0:ab:c1:
7f:24:54:1c:04:8a:9a:0d:8a:52:7f:0d:78:51:b9:a0:cd:58:
77:42:36:37:c5:2b:85:a3:2e:0f:3a:39:05:c2:3e:7f:00:09:
d7:60:aa:81:5b:30:b2:20:4f:e4:89:c0:f0:e4:f5:75:a7:30:
9a:42:96:c4:07:79:c3:61:11:4e:2a:bc:99:0e:85:e9:f7:cc:
e4:6b:7f:10:71:e5:dd:4e:7e:ff:a2:96:4e:03:e1:f2:a1:9d:
cc:7a:56:24:14:85:e5:17:8f:02:98:39:3f:a5:de:c8:53:0b:
fd:a9:0d:f3:0b:62:c3:27:49:a8:51:94:9a:7d:58:41:a5:59:
82:9f:64:7f:db:c5:cf:99:fd:54:74:11:2d:c5:3e:41:bf:7c:
85:6e:07:1a:d8:f3:8c:df:2b:80:97:8a:a5:f0:fa:f5:ea:ab:
ee:87:12:28:cc:74:5d:fb:9b:f4:60:a1:b7:93:14:37:34:05:
f9:85:5f:85:82:89:27:45:0f:ed:fb:bb:ce:0e:bc:ee:81:88:
27:84:11:d1:5d:db:c5:7a:e3:be:26:27:31:b8:ad:22:88:46:
b1:44:8d:57:58:f5:9e:01:bb:30:7c:94:bd:94:9f:c3:94:aa:
d3:2c:42:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:53:47 2026 by rpki-client