Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/g45PalvGxs45SfZa6_10vq4YBfc.mft
File: g45PalvGxs45SfZa6_10vq4YBfc.mft (raw, json)
Hash identifier: SZTQfjoYvqXIH53DUZ0Uztlh1XimSySfZ5EJBXUfiuI=
Subject key identifier: 00:12:20:FD:F6:88:BB:96:B2:E2:D1:27:37:0C:8B:0A:38:B6:E3:6B
Authority key identifier: 83:8E:4F:6A:5B:C6:C6:CE:39:49:F6:5A:EB:FD:74:BE:AE:18:05:F7
Certificate issuer: /CN=838e4f6a5bc6c6ce3949f65aebfd74beae1805f7
Certificate serial: 019FAA888F60BA0C52391FD7727B2DF1E444
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g45PalvGxs45SfZa6_10vq4YBfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/g45PalvGxs45SfZa6_10vq4YBfc.mft
Manifest number: 4D
Signing time: Tue 28 Jul 2026 21:01:43 +0000
Manifest this update: Tue 28 Jul 2026 21:01:43 +0000
Manifest next update: Wed 29 Jul 2026 21:01:43 +0000
Files and hashes: 1: M9hHH-XkfEyrQ9Tgg0N_97kMBk8.roa (hash: ww0iqqt1Yfsck01DFxFXo8c6Y6NbnJ1UQGfZa6OrRsM=)
2: g45PalvGxs45SfZa6_10vq4YBfc.crl (hash: C9fo1K5ulkP5EvoRZG/BLd48/P0d9CHIgrywflieWYc=)
3: rwYJCpd9J4dX5QlLFB6y9XFZnjg.roa (hash: 3F/4Vc414MUT+81iTkj1XtSqLsoqK3OBVs9Vmtoasx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/g45PalvGxs45SfZa6_10vq4YBfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/g45PalvGxs45SfZa6_10vq4YBfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/g45PalvGxs45SfZa6_10vq4YBfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:8f:60:ba:0c:52:39:1f:d7:72:7b:2d:f1:e4:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=838e4f6a5bc6c6ce3949f65aebfd74beae1805f7
Validity
Not Before: Jul 28 21:01:43 2026 GMT
Not After : Jul 29 21:01:43 2026 GMT
Subject: CN=001220fdf688bb96b2e2d127370c8b0a38b6e36b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f0:54:96:39:f9:6c:3e:64:41:1e:8a:4e:de:
8f:fd:b4:e6:9d:55:5d:36:21:83:af:52:47:a4:1e:
75:a6:3c:cd:b3:6b:6b:19:d9:c4:9d:3d:3a:d8:cc:
98:2c:13:38:86:8e:63:01:53:02:1a:0d:0e:72:4b:
60:f7:cb:76:74:29:90:5a:2c:af:e9:8c:9e:21:0b:
f0:a8:77:e6:be:0b:13:91:a0:7f:a1:c0:55:04:bb:
93:1a:54:63:0a:f0:71:a9:08:17:16:54:45:e9:43:
58:be:c1:e2:3d:73:81:37:a7:31:cb:81:52:f1:ae:
02:39:78:37:b1:18:38:a6:8b:78:36:33:35:fb:35:
7f:cd:1c:fb:b0:49:0d:a7:e8:5b:48:be:d9:c5:e0:
e2:86:b7:71:5c:c5:3f:5c:21:b3:33:ea:ec:ef:68:
ac:03:23:01:66:ac:55:e6:8b:4a:6d:69:60:e5:e5:
26:9f:f0:56:4e:d4:4b:cc:84:3c:fb:39:9b:cb:d9:
fa:47:11:75:12:74:15:c9:6b:de:32:9c:d3:c1:26:
ce:dd:44:d5:f1:52:ff:7c:81:79:3d:50:cd:4c:2b:
54:39:44:7c:ac:9b:32:7a:0c:99:80:bb:28:71:f8:
e3:ad:27:ee:6f:a3:bb:2e:6f:98:e3:ec:f7:c1:8f:
bc:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:12:20:FD:F6:88:BB:96:B2:E2:D1:27:37:0C:8B:0A:38:B6:E3:6B
X509v3 Authority Key Identifier:
keyid:83:8E:4F:6A:5B:C6:C6:CE:39:49:F6:5A:EB:FD:74:BE:AE:18:05:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g45PalvGxs45SfZa6_10vq4YBfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/g45PalvGxs45SfZa6_10vq4YBfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/g45PalvGxs45SfZa6_10vq4YBfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:f4:86:97:0f:3b:71:ff:67:0e:bb:a5:ed:a0:e9:b3:5b:ee:
7a:02:35:c5:98:28:53:a1:b9:d5:df:f3:cc:22:22:e6:3e:d0:
ea:da:b5:fb:00:8c:8c:29:4a:3a:a5:44:b2:9a:25:d7:41:d2:
59:f5:70:5b:bf:3a:a8:ec:f1:70:0d:41:e8:e8:45:d9:9f:b5:
72:01:3c:f5:ec:3a:33:d5:ae:1a:4f:71:fd:4d:fc:c7:05:9c:
76:17:d6:be:3b:44:e8:0d:f4:d4:85:f4:4b:bc:b1:aa:3a:14:
22:8d:5b:8d:48:9a:2b:f6:e1:b7:9e:0f:1f:2f:64:6e:45:8a:
37:34:e4:a4:37:5e:a7:8a:32:75:ac:40:97:aa:f0:1f:18:89:
bd:63:78:a8:74:bc:8e:b3:9a:88:a2:fa:19:9d:48:70:22:cf:
58:c4:cb:b2:80:d2:a2:8e:bf:ff:c9:f4:74:2c:d0:e7:ef:6b:
82:f6:58:95:d7:8d:75:5f:3a:60:73:eb:1d:fc:76:98:16:fa:
5c:38:af:aa:90:2d:9f:40:d4:af:81:b1:4d:14:04:f8:89:48:
7c:15:b6:f7:b7:07:33:e4:f0:fb:00:04:3c:2a:88:4c:24:e2:
6c:72:18:7a:ed:a7:a0:28:ba:06:43:69:e0:21:3b:e0:bd:82:
d9:95:29:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:20:04 2026 by rpki-client