Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/57cb04-58ce-433b-93ab-10bc59d8ff8d/1/g0hoQbT0rcViZMWWMIUYKiIORtQ.mft
File: g0hoQbT0rcViZMWWMIUYKiIORtQ.mft (raw, json)
Hash identifier: oXbpARS/yivFXF6pCqBO2UTcJodKubSXWDdL+WNjVMY=
Subject key identifier: 1D:D8:3D:4E:B8:F2:6D:9A:81:A3:20:E9:5E:0B:00:39:AB:34:89:B0
Authority key identifier: 83:48:68:41:B4:F4:AD:C5:62:64:C5:96:30:85:18:2A:22:0E:46:D4
Certificate issuer: /CN=83486841b4f4adc56264c5963085182a220e46d4
Certificate serial: 019FA9E2F819F067401DE8B6E280E46A97B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g0hoQbT0rcViZMWWMIUYKiIORtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/57cb04-58ce-433b-93ab-10bc59d8ff8d/1/g0hoQbT0rcViZMWWMIUYKiIORtQ.mft
Manifest number: 08D1
Signing time: Tue 28 Jul 2026 18:00:51 +0000
Manifest this update: Tue 28 Jul 2026 18:00:51 +0000
Manifest next update: Wed 29 Jul 2026 18:00:51 +0000
Files and hashes: 1: OxO2e6IptwFyl3MF1m_wc096uog.roa (hash: XgxnYNxx97bw9TDM5PH16uspWk75sFzbBpJUQwxc1qc=)
2: g0hoQbT0rcViZMWWMIUYKiIORtQ.crl (hash: JC0BhDNbewkf21+E6z/rAoOrVVsGkjE6UkaGp31x5Fk=)
3: xxgRb_Aeml7x0uDoodDZg1nH4Oo.roa (hash: 6S9DSgZ3vZaVU4t1RjWG3PEBfRSUa7Tr9UeA4iHzVhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/57cb04-58ce-433b-93ab-10bc59d8ff8d/1/g0hoQbT0rcViZMWWMIUYKiIORtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/57cb04-58ce-433b-93ab-10bc59d8ff8d/1/g0hoQbT0rcViZMWWMIUYKiIORtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/g0hoQbT0rcViZMWWMIUYKiIORtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:f8:19:f0:67:40:1d:e8:b6:e2:80:e4:6a:97:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83486841b4f4adc56264c5963085182a220e46d4
Validity
Not Before: Jul 28 18:00:51 2026 GMT
Not After : Jul 29 18:00:51 2026 GMT
Subject: CN=1dd83d4eb8f26d9a81a320e95e0b0039ab3489b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:be:a1:bc:57:7f:33:f8:14:ab:c3:1f:4e:ed:
75:c6:30:74:2d:1e:8b:fa:5b:99:6e:83:3f:9c:50:
a9:28:1b:b5:c0:93:87:b2:f3:6c:a2:b7:45:d7:d4:
97:53:a8:cf:43:8e:44:6c:57:b4:0b:b0:d9:a2:52:
c1:44:fa:3d:b7:57:01:bf:f4:88:4d:9c:c7:69:d3:
a6:50:ac:f5:12:15:18:e2:a1:6a:75:37:a5:7c:ac:
e6:63:f2:02:28:1f:62:b0:a7:36:fb:3a:bf:5b:42:
18:25:65:dc:80:df:97:60:e0:13:8a:7f:31:0c:53:
72:f4:e9:15:0f:5a:93:1b:dc:fa:dc:ef:a1:1b:68:
11:34:f3:b3:93:bb:e4:b3:e4:b3:81:ee:25:65:17:
63:c5:0c:3a:cf:08:cd:42:e9:bd:08:df:31:35:17:
cd:f9:d8:55:9d:a8:2c:a6:f0:7b:88:ce:29:4d:4a:
54:7f:c3:7d:8a:65:57:69:74:a1:d0:8e:17:cd:92:
82:33:f2:59:d3:8b:eb:4f:20:7f:f8:48:74:24:e6:
ce:33:92:63:52:41:31:6e:e0:4c:5d:58:ef:30:00:
b6:f8:24:85:5a:da:46:6c:d2:e2:b9:d9:d3:0d:eb:
92:da:51:3e:ac:c4:33:d5:f6:aa:54:d5:a7:84:54:
c6:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:D8:3D:4E:B8:F2:6D:9A:81:A3:20:E9:5E:0B:00:39:AB:34:89:B0
X509v3 Authority Key Identifier:
keyid:83:48:68:41:B4:F4:AD:C5:62:64:C5:96:30:85:18:2A:22:0E:46:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0hoQbT0rcViZMWWMIUYKiIORtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/57cb04-58ce-433b-93ab-10bc59d8ff8d/1/g0hoQbT0rcViZMWWMIUYKiIORtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/57cb04-58ce-433b-93ab-10bc59d8ff8d/1/g0hoQbT0rcViZMWWMIUYKiIORtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:72:3f:7e:90:94:36:63:ad:dd:be:bd:41:14:01:31:b9:65:
45:15:f4:5c:b9:7f:4f:4c:84:63:4e:54:99:87:e7:27:9e:57:
17:54:3a:42:83:d9:31:a3:06:49:8c:f0:27:4b:4e:51:16:bc:
68:29:ee:74:a3:41:aa:be:42:25:f8:1b:dc:b1:59:a2:91:2e:
6a:da:ec:1d:98:c1:62:a0:c2:0e:d4:98:cb:a1:2a:92:c0:b5:
6f:89:84:fd:17:f9:19:ef:b4:e8:39:ab:54:54:1e:b3:2e:36:
f7:e7:22:a5:23:ed:15:62:67:89:c5:ec:0a:45:e1:40:38:30:
a3:bb:f7:36:8f:68:27:e0:b1:3b:66:b2:ca:f9:e4:4b:76:a6:
d2:ee:25:8f:77:87:12:4d:3a:3c:19:3c:e9:81:b1:36:1f:42:
81:7a:e0:68:5f:67:b2:8f:7f:69:57:2c:cd:b6:4b:13:0b:e1:
29:56:8b:2d:05:c8:af:3c:22:0d:97:ec:35:55:d6:17:39:14:
58:a2:16:4f:99:b3:f1:2c:83:67:de:99:a3:05:42:3c:16:f6:
92:77:6d:bc:97:b7:2e:57:5d:60:bf:73:66:22:c5:ed:26:1d:
61:d9:02:35:fa:6e:85:34:bd:70:58:ec:0f:b0:72:de:0b:14:
67:85:1a:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:08:52 2026 by rpki-client