Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/a8df58-eabc-45d4-9437-b57616136ab6/1/g_2WfGwZoxt-OOnlycqPoN49YUk.mft
File: g_2WfGwZoxt-OOnlycqPoN49YUk.mft (raw, json)
Hash identifier: YozoXMfKLRDkiWpiIU+Gj6NIipaeKMXPhE+lfdMUEIM=
Subject key identifier: A1:4D:37:5B:DD:EF:2A:46:CD:03:45:47:44:10:BB:21:F8:0D:97:BC
Authority key identifier: 83:FD:96:7C:6C:19:A3:1B:7E:38:E9:E5:C9:CA:8F:A0:DE:3D:61:49
Certificate issuer: /CN=83fd967c6c19a31b7e38e9e5c9ca8fa0de3d6149
Certificate serial: 019CAA592DD498882E758522CC511CC7BAC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g_2WfGwZoxt-OOnlycqPoN49YUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/a8df58-eabc-45d4-9437-b57616136ab6/1/g_2WfGwZoxt-OOnlycqPoN49YUk.mft
Manifest number: 13C1
Signing time: Sun 01 Mar 2026 17:01:36 +0000
Manifest this update: Sun 01 Mar 2026 17:01:36 +0000
Manifest next update: Mon 02 Mar 2026 17:01:36 +0000
Files and hashes: 1: c28eAYv0rrRe6_MausaY2by0884.roa (hash: Oxg9SozDO0QIj1rDPvskXO8gNt2LP5JL6/sMnFmtWaM=)
2: g_2WfGwZoxt-OOnlycqPoN49YUk.crl (hash: LS9fgto3nqY89ScrcFCnv0N2skCwI5O5I7mlNcvXcq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/a8df58-eabc-45d4-9437-b57616136ab6/1/g_2WfGwZoxt-OOnlycqPoN49YUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/a8df58-eabc-45d4-9437-b57616136ab6/1/g_2WfGwZoxt-OOnlycqPoN49YUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/g_2WfGwZoxt-OOnlycqPoN49YUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:59:2d:d4:98:88:2e:75:85:22:cc:51:1c:c7:ba:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83fd967c6c19a31b7e38e9e5c9ca8fa0de3d6149
Validity
Not Before: Mar 1 17:01:36 2026 GMT
Not After : Mar 2 17:01:36 2026 GMT
Subject: CN=a14d375bddef2a46cd0345474410bb21f80d97bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b2:55:6a:78:c3:b5:e6:43:6e:c3:57:10:86:
76:db:5b:11:a6:17:28:6e:11:c6:bf:ff:b8:38:07:
51:c4:c9:82:f4:2b:a4:dc:4b:7e:0f:44:c8:36:68:
e9:b1:de:08:78:45:79:0b:a7:1f:23:d9:25:41:d1:
41:c1:10:ac:d6:3d:1d:d1:07:b8:84:d3:a6:6a:7a:
05:51:08:f1:90:b2:b7:ce:7e:f0:7f:f6:e5:e1:dc:
47:74:80:a7:d0:a8:3c:50:4a:af:06:21:f4:73:f7:
82:34:34:8c:d7:27:0f:3a:b2:31:78:a7:a9:d9:9d:
fb:c6:9e:d1:a3:4f:32:06:3d:4b:82:32:85:a8:b4:
fa:7e:ff:90:d7:a1:9e:79:c9:3d:c3:be:8c:5e:c9:
1b:7f:93:b9:81:fa:22:62:cc:19:69:45:01:0e:82:
ca:97:ac:b2:1d:2d:87:be:f4:50:3b:09:c3:f0:92:
c2:89:6b:e5:ce:76:39:aa:03:fb:d9:79:99:eb:f8:
91:8a:21:8f:83:d0:2e:d6:6d:55:91:ae:53:58:43:
05:4d:2d:15:47:a6:53:76:2c:ee:0f:01:a1:1c:7e:
89:22:7e:53:53:1c:fb:ad:2c:8f:79:3c:8d:56:79:
89:8a:02:6e:c6:92:49:95:92:e5:fc:c5:c4:1a:e0:
dd:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:4D:37:5B:DD:EF:2A:46:CD:03:45:47:44:10:BB:21:F8:0D:97:BC
X509v3 Authority Key Identifier:
keyid:83:FD:96:7C:6C:19:A3:1B:7E:38:E9:E5:C9:CA:8F:A0:DE:3D:61:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g_2WfGwZoxt-OOnlycqPoN49YUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a8df58-eabc-45d4-9437-b57616136ab6/1/g_2WfGwZoxt-OOnlycqPoN49YUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a8df58-eabc-45d4-9437-b57616136ab6/1/g_2WfGwZoxt-OOnlycqPoN49YUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:ea:de:02:85:15:d7:33:9f:c3:41:1b:ce:1a:17:2b:a7:86:
e2:5d:47:cb:03:70:df:78:ba:94:70:ce:27:ce:ec:b5:9a:0f:
b2:cd:8c:f7:33:65:e8:0e:39:da:d4:13:84:d5:97:ce:a3:ae:
64:f6:f7:a6:2f:3d:61:e2:0c:88:f8:74:5d:e5:3f:02:28:f5:
c6:bd:22:b4:e8:8e:6d:c9:cf:0c:50:11:4b:c6:49:4b:e8:96:
9e:61:b3:4f:7e:53:70:a6:ef:50:77:bf:28:70:eb:5b:f9:d0:
aa:1e:41:0b:89:b6:bb:5f:e3:57:20:48:5c:7b:a9:33:e8:8c:
f9:38:51:31:bb:4a:23:e1:fc:53:59:46:5c:41:f3:92:4d:db:
82:c9:ad:76:50:7e:32:51:96:89:7c:8f:00:d4:74:34:c0:f4:
f1:74:1a:c6:17:93:e1:bf:3e:6a:7f:d7:76:f4:05:de:32:9d:
60:fe:6c:2a:a7:b4:33:1f:71:30:1d:56:a0:c1:f5:91:73:d8:
1e:a5:57:81:91:c6:a4:0e:ca:ef:7d:72:87:65:72:42:94:96:
4c:34:a9:0d:64:a4:ed:da:20:b5:ac:ce:c2:cb:35:6e:30:35:
c7:60:cb:ef:39:a1:6a:a6:86:3b:4a:7e:a0:51:0e:0d:38:9c:
89:8b:0d:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:27:25 2026 by rpki-client