Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.mft
File: g0KhQTsMzjTj9_vw5_OOCjcKYmc.mft (raw, json)
Hash identifier: UyH6cImWX9t/L7PyWFwPt0h/DUyzKmX2+VqcMF2Ez0M=
Subject key identifier: 80:7A:15:94:AA:8A:A4:A7:A2:5D:7F:8D:BE:F5:ED:37:4F:0F:D5:01
Authority key identifier: 83:42:A1:41:3B:0C:CE:34:E3:F7:FB:F0:E7:F3:8E:0A:37:0A:62:67
Certificate issuer: /CN=8342a1413b0cce34e3f7fbf0e7f38e0a370a6267
Certificate serial: 019D9C63106FF4B73C57E0D59AC11F7A0B44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g0KhQTsMzjTj9_vw5_OOCjcKYmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.mft
Manifest number: 125C
Signing time: Fri 17 Apr 2026 17:00:30 +0000
Manifest this update: Fri 17 Apr 2026 17:00:30 +0000
Manifest next update: Sat 18 Apr 2026 17:00:30 +0000
Files and hashes: 1: bwRA1i-n189vPT-iJPMMcXm_fOU.roa (hash: /aZD95cwPbBEC+pYbods3hnay36mkiDzCXiuSjLwkjo=)
2: g0KhQTsMzjTj9_vw5_OOCjcKYmc.crl (hash: xT68PGvg+cIYq5BbbdI6FoXv/Ar5TLw6bYFHsRSGt9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/g0KhQTsMzjTj9_vw5_OOCjcKYmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:63:10:6f:f4:b7:3c:57:e0:d5:9a:c1:1f:7a:0b:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8342a1413b0cce34e3f7fbf0e7f38e0a370a6267
Validity
Not Before: Apr 17 17:00:30 2026 GMT
Not After : Apr 18 17:00:30 2026 GMT
Subject: CN=807a1594aa8aa4a7a25d7f8dbef5ed374f0fd501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a4:82:99:a1:a5:e6:d1:96:75:15:8a:6d:31:
dc:d5:62:78:1b:cc:48:fd:92:5d:ed:4c:d1:3c:f4:
2e:1a:fd:09:7d:cc:16:26:c6:ca:a6:da:a0:df:78:
1a:4a:2e:be:c1:e4:be:da:be:36:e0:7a:0b:5f:d0:
a4:75:9f:0a:1d:62:ed:87:34:a8:5a:f5:da:ab:09:
f0:a6:b3:af:df:88:4e:27:0d:84:0a:8e:33:4e:54:
81:fe:cb:76:71:28:1b:d6:f4:5a:d4:bc:4a:dc:ef:
40:3d:25:b4:f7:fc:3a:39:f8:a4:37:e7:dc:84:f7:
d0:20:8b:4f:63:5d:fe:a7:36:70:cb:d9:74:3d:d1:
9f:77:68:89:23:80:64:63:a9:37:c3:05:82:7f:00:
f1:1b:fd:e4:87:61:04:07:15:69:d9:3d:06:2b:37:
90:0c:34:ef:25:c8:82:80:eb:28:62:21:88:00:34:
f8:30:b9:c9:b9:b6:fc:e9:f6:55:be:e9:08:ac:94:
6c:ef:30:11:41:e3:10:d2:f4:3a:87:ce:cd:cc:08:
db:9f:a2:c0:51:c6:b0:d9:94:4d:a7:56:02:f9:c3:
12:2f:46:e9:01:75:13:e7:2b:6f:64:97:62:2d:70:
f3:28:23:f4:75:ce:b3:2e:14:3c:ea:19:db:41:2c:
2a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:7A:15:94:AA:8A:A4:A7:A2:5D:7F:8D:BE:F5:ED:37:4F:0F:D5:01
X509v3 Authority Key Identifier:
keyid:83:42:A1:41:3B:0C:CE:34:E3:F7:FB:F0:E7:F3:8E:0A:37:0A:62:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0KhQTsMzjTj9_vw5_OOCjcKYmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:63:e8:6d:ff:6c:a7:f1:d1:c9:1c:57:42:83:5c:b3:3d:75:
33:45:8f:48:fb:3d:37:d3:d1:ef:cf:38:04:7c:78:b3:b7:3f:
75:b0:b4:a5:3b:34:c5:39:4c:fc:89:c5:df:3e:c0:19:1d:56:
84:94:3a:5b:ea:1f:bb:99:ed:f6:82:bc:9f:9f:3c:3e:3a:72:
fb:a6:1e:f3:a1:85:91:81:ab:18:6a:4b:3b:8e:16:18:26:1e:
ae:0a:e7:67:fc:8f:25:90:87:9b:73:74:6a:61:f9:f2:0e:57:
09:bc:c0:46:d6:bc:e7:e2:6e:63:19:50:bb:db:0a:48:ef:42:
f5:f5:fb:60:e6:6e:50:58:77:92:2c:03:c2:12:8d:10:70:49:
1b:76:13:dd:d0:e0:09:80:12:a5:b0:60:6c:51:0a:64:d9:eb:
b8:a7:05:6c:e3:9b:2d:f2:62:20:26:a4:85:e6:34:c7:8b:39:
cc:b2:f1:8a:82:01:16:ee:e7:3b:59:38:06:8c:f0:f3:0b:7e:
e4:52:7d:0a:9f:e7:a5:f2:e2:6d:d1:e6:c1:0b:51:07:67:39:
9f:ba:d4:06:a5:07:ae:58:e5:db:a2:1f:ae:c8:85:b6:c0:c2:
05:36:f6:11:8d:e7:e3:1e:fc:ce:77:d2:3a:a7:5d:fe:9e:c8:
55:af:21:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:39:43 2026 by rpki-client