Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.mft
File: g6yI8BcMv-RGz9MaWCPN4OCTGZo.mft (raw, json)
Hash identifier: pYe5toC+lgegKSeR77PSsYhmcClJVlaLfsKehO/ODAE=
Subject key identifier: D3:17:69:5D:87:9D:67:09:9F:39:F1:AE:64:FA:20:75:C6:75:0C:11
Authority key identifier: 83:AC:88:F0:17:0C:BF:E4:46:CF:D3:1A:58:23:CD:E0:E0:93:19:9A
Certificate issuer: /CN=83ac88f0170cbfe446cfd31a5823cde0e093199a
Certificate serial: 019D99995CEF0135DBE9DBCB3111E4A82ACF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g6yI8BcMv-RGz9MaWCPN4OCTGZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.mft
Manifest number: 1856
Signing time: Fri 17 Apr 2026 04:00:57 +0000
Manifest this update: Fri 17 Apr 2026 04:00:57 +0000
Manifest next update: Sat 18 Apr 2026 04:00:57 +0000
Files and hashes: 1: 4otQnggN5_uQC9wKi00qa0eySrY.roa (hash: mMnLCC58FrEpo9AcseP6Ttc1YSWB7rt8x7N2xaBJU6E=)
2: g6yI8BcMv-RGz9MaWCPN4OCTGZo.crl (hash: 5i6GvvJ8fniCKQHbcBqFDlE5RYlEiekfRWgbm7/igok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/g6yI8BcMv-RGz9MaWCPN4OCTGZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:5c:ef:01:35:db:e9:db:cb:31:11:e4:a8:2a:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83ac88f0170cbfe446cfd31a5823cde0e093199a
Validity
Not Before: Apr 17 04:00:57 2026 GMT
Not After : Apr 18 04:00:57 2026 GMT
Subject: CN=d317695d879d67099f39f1ae64fa2075c6750c11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d4:02:12:b2:67:45:00:e2:4e:76:e6:1d:66:
29:47:4d:5d:28:03:b9:71:29:e3:bb:f0:cd:8a:9b:
8a:82:0f:be:87:e2:43:60:fe:b5:e5:82:cd:59:69:
09:0b:2a:cf:d1:b3:29:1a:d5:26:95:3c:0d:e7:1b:
6c:2b:70:43:fa:3a:6d:6e:f7:f0:5c:b0:55:08:e4:
a1:02:b5:6e:6d:1c:3e:90:0f:a7:dc:48:f2:94:f3:
e1:c0:4a:46:8d:c5:b6:0c:02:bb:b8:10:32:44:b1:
b7:7a:65:7b:93:d4:93:04:82:fb:60:72:70:3c:fa:
e9:8b:80:61:78:76:d8:2a:9f:ec:70:37:2c:ac:42:
a2:b8:07:67:10:07:a0:8d:a1:ad:15:15:09:4b:5d:
b3:9e:d0:85:45:d5:b7:e0:6e:79:7f:f2:cf:69:64:
15:71:28:26:47:40:72:04:97:80:d1:e9:61:75:47:
49:48:2f:ad:16:ab:ab:16:87:35:16:ab:1a:c2:1a:
79:d2:43:96:2e:83:a3:5a:58:20:fd:54:83:6e:75:
7e:4c:99:42:05:91:0a:a5:ab:3b:24:0b:65:f7:d9:
1c:f4:2e:ba:35:4a:7c:68:21:d4:df:1f:06:f2:fc:
32:47:53:1b:76:95:9c:af:cd:5b:ae:83:03:b6:cd:
4f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:17:69:5D:87:9D:67:09:9F:39:F1:AE:64:FA:20:75:C6:75:0C:11
X509v3 Authority Key Identifier:
keyid:83:AC:88:F0:17:0C:BF:E4:46:CF:D3:1A:58:23:CD:E0:E0:93:19:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g6yI8BcMv-RGz9MaWCPN4OCTGZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:e7:63:4a:a7:6b:7c:08:d4:20:37:20:d4:2e:0a:53:ea:69:
12:b6:8a:f9:30:a0:da:db:33:6d:e5:d3:d9:4a:bf:11:21:ae:
cd:7e:49:83:a5:03:4d:ec:f2:48:22:19:e1:20:e0:34:3e:37:
cd:c2:04:3c:4c:91:c6:53:69:a0:b8:18:85:75:ab:39:3e:15:
6a:39:45:54:1b:76:75:a2:04:a9:fc:41:74:41:0c:a3:74:a4:
f4:00:1c:82:3e:da:0f:88:e1:5c:bf:3b:dc:64:c5:0e:f5:37:
2c:c6:ac:86:f8:e2:6e:27:91:06:ee:1c:a0:24:20:32:a3:8c:
69:86:0c:78:a0:ee:6d:a6:6b:d7:19:0c:4f:be:59:b1:f7:c7:
d6:5e:e2:de:44:6b:21:54:00:48:c0:9a:58:18:85:86:b6:30:
01:2b:6d:47:0e:c5:dc:0b:00:6b:b6:d9:da:79:23:00:27:e7:
05:ad:4d:f3:f9:63:b6:9d:00:60:6b:e5:89:81:38:73:77:d3:
0b:f1:d3:9c:a2:a0:03:4b:09:ba:ee:31:4b:22:ec:c3:17:5a:
3a:0c:3a:1d:30:ca:9e:57:1e:1b:14:ae:88:1e:6e:f2:f6:f4:
36:d8:c8:21:dd:48:56:ba:d4:79:96:71:13:0d:99:65:2a:73:
90:34:0a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:08:33 2026 by rpki-client