Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.mft
File: g0KhQTsMzjTj9_vw5_OOCjcKYmc.mft (raw, json)
Hash identifier: PQmQHeknyGLjot99950znVgjFPmNgJHCJKOvsHHOp9U=
Subject key identifier: C1:19:7A:09:03:64:F7:1B:0C:64:59:0B:18:9B:56:82:A3:7D:52:E4
Authority key identifier: 83:42:A1:41:3B:0C:CE:34:E3:F7:FB:F0:E7:F3:8E:0A:37:0A:62:67
Certificate issuer: /CN=8342a1413b0cce34e3f7fbf0e7f38e0a370a6267
Certificate serial: 019CACEB8202B7E1FE63F87384A3972936A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g0KhQTsMzjTj9_vw5_OOCjcKYmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.mft
Manifest number: 11E0
Signing time: Mon 02 Mar 2026 05:00:41 +0000
Manifest this update: Mon 02 Mar 2026 05:00:41 +0000
Manifest next update: Tue 03 Mar 2026 05:00:41 +0000
Files and hashes: 1: bwRA1i-n189vPT-iJPMMcXm_fOU.roa (hash: /aZD95cwPbBEC+pYbods3hnay36mkiDzCXiuSjLwkjo=)
2: g0KhQTsMzjTj9_vw5_OOCjcKYmc.crl (hash: qDbzPf8i5vvEy4B0VuVuSUTvbhpLinzkYML8HgNop1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/g0KhQTsMzjTj9_vw5_OOCjcKYmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:82:02:b7:e1:fe:63:f8:73:84:a3:97:29:36:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8342a1413b0cce34e3f7fbf0e7f38e0a370a6267
Validity
Not Before: Mar 2 05:00:41 2026 GMT
Not After : Mar 3 05:00:41 2026 GMT
Subject: CN=c1197a090364f71b0c64590b189b5682a37d52e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:16:5a:c5:4f:a9:87:1e:f5:45:4a:5e:77:7b:
8d:7e:57:07:1a:2d:be:6e:c9:09:55:ce:c7:6c:69:
67:db:57:cf:f7:92:2d:33:fd:53:b8:eb:be:e0:ec:
ec:d1:22:25:d1:0a:a4:db:08:cc:ad:64:4b:86:53:
d7:02:f9:9b:b2:da:c2:25:42:08:b6:09:db:4e:87:
e6:ea:2a:12:2f:36:ac:db:31:e8:0d:72:4f:91:58:
96:05:58:62:c4:09:84:9a:4d:4a:5d:f3:b8:2a:94:
36:50:86:5d:fa:39:40:e7:f2:69:47:d4:0a:2a:8c:
b8:42:15:38:69:bd:89:fe:67:bb:78:31:34:85:ba:
6d:f0:32:92:21:21:0e:89:26:1b:e9:3e:45:a7:dd:
8e:68:2b:ce:20:c3:e6:c9:dd:23:53:d6:4c:34:40:
68:63:7e:df:80:87:ca:56:26:3d:1c:e0:4f:5c:1d:
a0:0c:5b:5f:d3:db:b9:b7:d4:1f:29:a6:9d:8d:10:
ff:61:c8:a2:0c:cc:6e:e0:5d:c4:df:59:e8:79:0a:
61:4f:94:83:60:de:3a:04:09:04:fb:08:d9:03:c4:
55:93:e8:df:c3:ff:32:ce:a7:d5:a7:d9:92:fd:6c:
61:11:db:b1:77:88:c7:23:ed:cf:77:ab:d4:78:d2:
72:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:19:7A:09:03:64:F7:1B:0C:64:59:0B:18:9B:56:82:A3:7D:52:E4
X509v3 Authority Key Identifier:
keyid:83:42:A1:41:3B:0C:CE:34:E3:F7:FB:F0:E7:F3:8E:0A:37:0A:62:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0KhQTsMzjTj9_vw5_OOCjcKYmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/54e797-dbe3-4945-a835-648b92276014/1/g0KhQTsMzjTj9_vw5_OOCjcKYmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:35:25:a8:bd:1c:6d:ef:97:ea:42:56:f6:ec:bb:3d:67:6e:
77:d7:40:1d:c9:36:91:56:84:8a:f9:31:9f:b2:dc:f3:97:5d:
55:d7:c0:b4:21:29:bc:bd:1e:a7:33:c0:09:dd:e9:20:a4:de:
47:28:50:af:59:7f:b4:ec:ff:fc:19:ee:0f:03:da:26:ef:a9:
cb:8f:f7:f5:3c:66:40:94:40:94:b5:a5:51:c6:14:73:ba:7e:
ae:0b:6a:41:ee:b1:23:17:76:38:48:27:3a:e3:e6:e9:8d:2d:
96:8e:39:60:23:5b:48:61:3e:ee:78:ba:62:2d:2f:54:9a:11:
99:3a:73:d3:c3:a9:79:d2:d8:f5:5e:59:5f:46:9e:42:80:47:
dc:5c:5b:ea:c6:3a:44:66:ea:71:8c:8a:d2:e3:dc:9d:95:49:
7d:89:43:7a:49:90:61:b9:a9:6a:d8:2b:00:ba:7f:7f:44:6d:
cb:65:4a:6b:59:bf:28:5c:6e:49:f8:70:db:7f:7c:97:69:d5:
2f:15:d6:5a:74:ba:d9:2f:fe:93:69:92:51:80:29:43:cd:44:
6c:09:ea:0c:fb:9f:36:56:6d:da:fe:7d:ed:bb:72:0a:ce:4e:
5f:9b:32:49:64:31:53:d8:81:a9:09:b6:f0:aa:83:e7:90:d3:
c4:f7:43:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:25:26 2026 by rpki-client