Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/57cb04-58ce-433b-93ab-10bc59d8ff8d/1/g0hoQbT0rcViZMWWMIUYKiIORtQ.mft
File: g0hoQbT0rcViZMWWMIUYKiIORtQ.mft (raw, json)
Hash identifier: CDvSz6G7gl32GOZMvviVJaTQ/lw1qeVNEeOd+NbLQA8=
Subject key identifier: 3C:C2:4C:1F:B0:BE:9B:D1:20:CF:15:50:D6:13:0E:6E:FB:FA:85:E6
Authority key identifier: 83:48:68:41:B4:F4:AD:C5:62:64:C5:96:30:85:18:2A:22:0E:46:D4
Certificate issuer: /CN=83486841b4f4adc56264c5963085182a220e46d4
Certificate serial: 019DA454275D6FEFE3F68330332D97428638
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g0hoQbT0rcViZMWWMIUYKiIORtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/57cb04-58ce-433b-93ab-10bc59d8ff8d/1/g0hoQbT0rcViZMWWMIUYKiIORtQ.mft
Manifest number: 07C5
Signing time: Sun 19 Apr 2026 06:01:11 +0000
Manifest this update: Sun 19 Apr 2026 06:01:11 +0000
Manifest next update: Mon 20 Apr 2026 06:01:11 +0000
Files and hashes: 1: OxO2e6IptwFyl3MF1m_wc096uog.roa (hash: XgxnYNxx97bw9TDM5PH16uspWk75sFzbBpJUQwxc1qc=)
2: g0hoQbT0rcViZMWWMIUYKiIORtQ.crl (hash: NkVuDtOjFJYEEx31Vo6bUFA5Q2ErGFxDu46Dr4zThJ0=)
3: xxgRb_Aeml7x0uDoodDZg1nH4Oo.roa (hash: 6S9DSgZ3vZaVU4t1RjWG3PEBfRSUa7Tr9UeA4iHzVhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/57cb04-58ce-433b-93ab-10bc59d8ff8d/1/g0hoQbT0rcViZMWWMIUYKiIORtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/57cb04-58ce-433b-93ab-10bc59d8ff8d/1/g0hoQbT0rcViZMWWMIUYKiIORtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/g0hoQbT0rcViZMWWMIUYKiIORtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:54:27:5d:6f:ef:e3:f6:83:30:33:2d:97:42:86:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83486841b4f4adc56264c5963085182a220e46d4
Validity
Not Before: Apr 19 06:01:11 2026 GMT
Not After : Apr 20 06:01:11 2026 GMT
Subject: CN=3cc24c1fb0be9bd120cf1550d6130e6efbfa85e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9e:4f:b6:71:82:0a:38:4d:7a:1d:4d:51:bf:
5a:fd:ac:c8:00:7a:f4:42:ab:06:7a:96:d3:20:d7:
58:f5:1b:bb:96:03:2a:e5:89:51:72:89:e3:f8:bd:
4f:d0:32:2a:75:d3:01:55:ee:5c:14:8f:d8:fd:12:
31:cd:d8:9c:c2:53:7b:d7:5e:6a:a3:95:d7:95:18:
d9:17:99:0c:b9:c7:58:9b:a9:fa:83:00:65:38:80:
eb:5b:f9:01:6e:f0:37:fd:01:a9:b6:d9:69:53:e8:
c9:86:e8:91:c6:e1:0e:1d:75:6f:b8:05:4b:28:bb:
a5:3d:e1:22:b2:7c:d7:82:6d:20:b0:78:4f:1e:6d:
bd:11:43:75:07:78:e0:8a:f6:08:2e:10:bc:dc:4d:
8e:47:dd:37:2d:87:f9:63:7d:92:4d:93:db:ce:43:
67:d4:96:e4:50:0a:ca:08:11:b4:91:5e:c8:71:71:
d9:f8:52:92:d5:c2:a9:72:c7:85:8b:d3:1e:ab:9b:
b0:68:8d:bc:d3:a4:e3:a6:70:ff:77:3b:90:6e:96:
a6:a3:2b:98:6e:59:e2:16:a1:7a:29:a7:f2:86:2c:
b8:05:6e:4a:cf:66:81:e0:0d:f4:03:ad:be:e8:6a:
df:61:61:8f:ad:50:c1:2e:a6:a6:d2:56:97:55:b3:
ff:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:C2:4C:1F:B0:BE:9B:D1:20:CF:15:50:D6:13:0E:6E:FB:FA:85:E6
X509v3 Authority Key Identifier:
keyid:83:48:68:41:B4:F4:AD:C5:62:64:C5:96:30:85:18:2A:22:0E:46:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0hoQbT0rcViZMWWMIUYKiIORtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/57cb04-58ce-433b-93ab-10bc59d8ff8d/1/g0hoQbT0rcViZMWWMIUYKiIORtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/57cb04-58ce-433b-93ab-10bc59d8ff8d/1/g0hoQbT0rcViZMWWMIUYKiIORtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:3f:f3:68:e6:04:90:49:d2:d9:90:81:53:41:99:dc:b7:df:
94:09:32:f6:6f:98:fc:80:80:e5:bd:87:41:cc:3c:7a:3a:09:
77:04:24:5c:03:59:ea:d2:90:09:1b:2f:d7:6e:4b:09:c4:92:
29:6d:1d:22:86:e5:4e:5d:fe:cb:30:18:ce:dc:2c:5d:a1:ce:
f7:a1:c6:a7:5c:aa:05:cd:6c:60:fa:33:7b:62:b2:75:03:dc:
90:9e:03:6e:61:43:b4:23:0c:7c:6c:1b:5c:28:21:ec:e7:6e:
ba:54:ba:b5:fe:be:a1:0f:78:d8:a7:5b:96:ce:ad:ee:d9:e0:
fb:2d:20:99:6c:23:49:fb:aa:0d:4c:ef:f0:c6:92:7a:d9:ae:
3d:79:7f:73:00:24:42:07:b4:36:a2:7e:3d:c0:04:dd:c1:6e:
b1:7b:bc:ee:7a:ca:ef:4b:c7:45:63:8f:ae:99:3b:66:8f:91:
2a:71:72:2b:0a:ef:ae:31:96:d9:5f:16:d9:c7:9b:87:2e:41:
88:cb:4d:b7:48:c5:75:08:c2:a1:b9:53:7f:2f:ce:08:f2:4f:
e4:f8:36:4d:7a:47:1d:a0:cb:01:7c:e5:2a:61:60:1b:f8:f0:
77:4a:a0:d5:a3:c1:bd:d8:38:b5:66:ff:b5:ef:13:14:cf:49:
a1:b6:9f:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2kVCddb+/j9oMwMy2XQoY4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzNDg2ODQxYjRmNGFkYzU2MjY0YzU5NjMwODUxODJhMjIw
ZTQ2ZDQwHhcNMjYwNDE5MDYwMTExWhcNMjYwNDIwMDYwMTExWjAzMTEwLwYDVQQD
EygzY2MyNGMxZmIwYmU5YmQxMjBjZjE1NTBkNjEzMGU2ZWZiZmE4NWU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZ5PtnGCCjhNeh1NUb9a/azIAHr0
QqsGepbTINdY9Ru7lgMq5YlRconj+L1P0DIqddMBVe5cFI/Y/RIxzdicwlN7115q
o5XXlRjZF5kMucdYm6n6gwBlOIDrW/kBbvA3/QGpttlpU+jJhuiRxuEOHXVvuAVL
KLulPeEisnzXgm0gsHhPHm29EUN1B3jgivYILhC83E2OR903LYf5Y32STZPbzkNn
1JbkUArKCBG0kV7IcXHZ+FKS1cKpcseFi9Meq5uwaI2806TjpnD/dzuQbpamoyuY
blniFqF6Kafyhiy4BW5Kz2aB4A30A62+6GrfYWGPrVDBLqam0laXVbP/vwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDzCTB+wvpvRIM8VUNYTDm77+oXmMB8GA1UdIwQY
MBaAFINIaEG09K3FYmTFljCFGCoiDkbUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzBob1FiVDByY1ZpWk1XV01JVVlLaUlPUnRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi81N2NiMDQtNThjZS00MzNiLTkzYWIt
MTBiYzU5ZDhmZjhkLzEvZzBob1FiVDByY1ZpWk1XV01JVVlLaUlPUnRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi81N2NiMDQtNThjZS00MzNiLTkzYWItMTBiYzU5ZDhmZjhk
LzEvZzBob1FiVDByY1ZpWk1XV01JVVlLaUlPUnRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWD/zaOYE
kEnS2ZCBU0GZ3LfflAky9m+Y/ICA5b2HQcw8ejoJdwQkXANZ6tKQCRsv125LCcSS
KW0dIoblTl3+yzAYztwsXaHO96HGp1yqBc1sYPoze2KydQPckJ4DbmFDtCMMfGwb
XCgh7OduulS6tf6+oQ942Kdbls6t7tng+y0gmWwjSfuqDUzv8MaSetmuPXl/cwAk
Qge0NqJ+PcAE3cFusXu87nrK70vHRWOPrpk7Zo+RKnFyKwrvrjGW2V8W2cebhy5B
iMtNt0jFdQjCoblTfy/OCPJP5Pg2TXpHHaDLAXzlKmFgG/jwd0qg1aPBvdg4tWb/
te8TFM9JobafsA==
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:22:14 2026 by rpki-client