Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/57cb04-58ce-433b-93ab-10bc59d8ff8d/1/g0hoQbT0rcViZMWWMIUYKiIORtQ.mft
File: g0hoQbT0rcViZMWWMIUYKiIORtQ.mft (raw, json)
Hash identifier: ej9yfbDA8XWjYmepDivr7nv8cDmDubt0hClK4qRD5pg=
Subject key identifier: EF:AE:B5:F1:B7:F6:2D:7A:CA:5E:38:BC:99:E2:68:A1:6E:82:82:0C
Authority key identifier: 83:48:68:41:B4:F4:AD:C5:62:64:C5:96:30:85:18:2A:22:0E:46:D4
Certificate issuer: /CN=83486841b4f4adc56264c5963085182a220e46d4
Certificate serial: 019CAD2308C25CC6A7C5EE10FED2CE9680E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g0hoQbT0rcViZMWWMIUYKiIORtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/57cb04-58ce-433b-93ab-10bc59d8ff8d/1/g0hoQbT0rcViZMWWMIUYKiIORtQ.mft
Manifest number: 0745
Signing time: Mon 02 Mar 2026 06:01:20 +0000
Manifest this update: Mon 02 Mar 2026 06:01:20 +0000
Manifest next update: Tue 03 Mar 2026 06:01:20 +0000
Files and hashes: 1: OxO2e6IptwFyl3MF1m_wc096uog.roa (hash: XgxnYNxx97bw9TDM5PH16uspWk75sFzbBpJUQwxc1qc=)
2: g0hoQbT0rcViZMWWMIUYKiIORtQ.crl (hash: qCHVPsn3eWlqcIJDxtHD9o1GrBxd+9fGECaFHyAsVw8=)
3: xxgRb_Aeml7x0uDoodDZg1nH4Oo.roa (hash: 6S9DSgZ3vZaVU4t1RjWG3PEBfRSUa7Tr9UeA4iHzVhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/57cb04-58ce-433b-93ab-10bc59d8ff8d/1/g0hoQbT0rcViZMWWMIUYKiIORtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/57cb04-58ce-433b-93ab-10bc59d8ff8d/1/g0hoQbT0rcViZMWWMIUYKiIORtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/g0hoQbT0rcViZMWWMIUYKiIORtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:23:08:c2:5c:c6:a7:c5:ee:10:fe:d2:ce:96:80:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83486841b4f4adc56264c5963085182a220e46d4
Validity
Not Before: Mar 2 06:01:20 2026 GMT
Not After : Mar 3 06:01:20 2026 GMT
Subject: CN=efaeb5f1b7f62d7aca5e38bc99e268a16e82820c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:00:0a:de:78:74:43:f3:49:7f:63:d4:8c:be:
34:0e:ec:b9:e8:9f:c5:7b:98:f7:1a:fa:82:e2:fb:
1e:f6:c8:91:5f:4f:f5:62:1a:62:ce:90:c6:4e:d5:
64:43:65:8e:b1:fb:b7:58:a7:22:fc:a0:01:5f:f8:
a7:f1:16:65:ec:5a:24:ef:d3:9e:80:54:1a:10:5f:
37:9a:38:7c:37:09:6a:c3:a9:a1:c1:94:20:c3:1c:
4a:d8:c4:66:5f:b4:9b:3c:e0:20:55:e4:1e:a5:b0:
ae:ef:fe:50:e7:be:81:e8:c2:0e:61:9a:35:9e:10:
f9:c9:9d:79:b2:c5:36:da:9b:d5:ba:a6:c2:d5:3f:
db:3f:1d:f8:71:77:fe:ea:74:4f:10:a7:61:34:83:
58:56:ad:68:74:53:2e:15:fa:44:af:d5:c8:70:10:
78:55:09:f1:af:b2:62:a7:88:3b:81:55:cf:b0:cd:
37:37:fb:f4:1e:85:2a:f7:38:2b:be:25:03:25:3c:
05:e6:61:bd:09:36:3a:4e:a7:21:91:7b:d6:41:91:
24:99:18:39:dd:67:61:f3:36:92:e2:3e:a0:c4:b8:
ab:39:63:75:65:8f:47:5f:34:5c:dc:f2:97:0f:2a:
36:ee:a7:62:83:52:81:42:bb:87:d5:9c:8c:48:bd:
87:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:AE:B5:F1:B7:F6:2D:7A:CA:5E:38:BC:99:E2:68:A1:6E:82:82:0C
X509v3 Authority Key Identifier:
keyid:83:48:68:41:B4:F4:AD:C5:62:64:C5:96:30:85:18:2A:22:0E:46:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0hoQbT0rcViZMWWMIUYKiIORtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/57cb04-58ce-433b-93ab-10bc59d8ff8d/1/g0hoQbT0rcViZMWWMIUYKiIORtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/57cb04-58ce-433b-93ab-10bc59d8ff8d/1/g0hoQbT0rcViZMWWMIUYKiIORtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:d6:56:6b:e5:65:93:47:df:79:a7:0c:4e:b8:50:6a:39:6a:
df:a5:bc:f2:84:a5:17:0b:e9:3c:fc:fa:9c:68:d5:8a:2d:9b:
10:7e:3a:7e:64:7a:9a:f5:9c:bc:f1:18:26:aa:99:75:2b:76:
dc:dd:ff:7e:db:4c:32:0b:19:aa:d3:78:10:39:95:78:df:47:
56:55:0a:1f:ba:f1:61:3b:67:65:e5:49:32:53:c3:34:a1:25:
48:20:e7:6e:6d:bb:35:1d:b7:5c:f3:2b:36:61:0d:e6:bf:5c:
81:ca:2a:1f:78:80:de:65:cc:1b:0c:1c:54:7f:d1:9f:fc:c9:
11:4a:ee:49:7f:39:8e:e3:55:c0:72:ae:2e:69:42:06:12:82:
8b:e7:17:8b:09:e0:5b:9c:82:60:b4:2c:ad:93:09:b3:aa:06:
95:e5:08:36:e9:30:03:60:5d:7b:a6:75:20:ba:c6:8d:7a:e0:
18:2a:cb:a0:ca:2a:e3:6d:f1:60:5b:f2:50:a2:cc:7e:3c:c2:
3f:c6:8c:16:7b:6f:2e:ac:38:7d:6a:05:90:22:71:3d:95:43:
80:95:ec:8a:bf:fb:ee:b6:e0:53:c0:79:ae:3e:3d:04:39:01:
9f:6d:6a:f5:d1:bf:42:57:9c:00:26:e5:22:0e:64:67:fe:66:
a4:4e:7d:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:38:42 2026 by rpki-client