Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/g45PalvGxs45SfZa6_10vq4YBfc.mft
File: g45PalvGxs45SfZa6_10vq4YBfc.mft (raw, json)
Hash identifier: WD8ENKQffsd7/KZCo7MFq2PnBtNLJruxed1kkbI1jM0=
Subject key identifier: 5C:FF:6B:84:AE:16:40:67:BB:A1:35:16:37:B5:79:9D:3C:7F:36:75
Authority key identifier: 83:8E:4F:6A:5B:C6:C6:CE:39:49:F6:5A:EB:FD:74:BE:AE:18:05:F7
Certificate issuer: /CN=838e4f6a5bc6c6ce3949f65aebfd74beae1805f7
Certificate serial: 01A0D20123F22470221D3C0A9461F37C38E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g45PalvGxs45SfZa6_10vq4YBfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/g45PalvGxs45SfZa6_10vq4YBfc.mft
Manifest number: E6
Signing time: Thu 24 Sep 2026 06:01:25 +0000
Manifest this update: Thu 24 Sep 2026 06:01:25 +0000
Manifest next update: Fri 25 Sep 2026 06:01:25 +0000
Files and hashes: 1: M9hHH-XkfEyrQ9Tgg0N_97kMBk8.roa (hash: ww0iqqt1Yfsck01DFxFXo8c6Y6NbnJ1UQGfZa6OrRsM=)
2: g45PalvGxs45SfZa6_10vq4YBfc.crl (hash: QG+0PO0DLz3ZPw8+yLXKGAA7W6GHYM7QBPfDn4/f63w=)
3: rwYJCpd9J4dX5QlLFB6y9XFZnjg.roa (hash: 3F/4Vc414MUT+81iTkj1XtSqLsoqK3OBVs9Vmtoasx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/g45PalvGxs45SfZa6_10vq4YBfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/g45PalvGxs45SfZa6_10vq4YBfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/g45PalvGxs45SfZa6_10vq4YBfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 06:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:01:23:f2:24:70:22:1d:3c:0a:94:61:f3:7c:38:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=838e4f6a5bc6c6ce3949f65aebfd74beae1805f7
Validity
Not Before: Sep 24 06:01:25 2026 GMT
Not After : Sep 25 06:01:25 2026 GMT
Subject: CN=5cff6b84ae164067bba1351637b5799d3c7f3675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c7:2e:b1:72:bd:81:8a:ba:04:96:b2:ff:14:
61:a7:e6:b2:8f:01:85:f1:75:33:ac:e0:93:7d:01:
2e:ee:e1:ad:02:dc:0d:8a:fb:d1:6e:b4:99:44:eb:
df:5f:61:d9:be:e4:4d:e2:fb:d8:bf:80:4d:32:0e:
98:09:37:7b:91:70:82:aa:9e:78:aa:dc:56:a7:11:
18:c7:8d:47:e8:3b:56:60:49:07:b9:dd:3c:9d:b8:
6e:01:92:21:17:c1:a1:64:cb:12:4b:d9:8a:62:e2:
b6:aa:ae:e0:60:88:f8:8a:27:25:90:44:8f:38:07:
f6:e5:64:83:4b:b1:62:b2:dc:fc:e1:b8:e8:4f:e7:
75:2d:fb:62:b8:bc:c3:aa:13:ab:9a:8f:fe:d7:bd:
d4:14:b6:85:66:94:3e:34:1b:4a:e5:89:29:09:e1:
aa:4d:f4:9d:31:ac:af:af:91:6f:84:2d:0b:1e:70:
ef:87:7b:11:cb:cc:f4:17:e7:cf:b1:f2:ec:67:ef:
1a:5e:de:d5:b8:c6:50:24:62:39:62:fc:64:8a:c7:
66:43:e5:ce:c0:32:3f:e1:c3:c4:aa:c0:b6:a7:01:
4e:af:7c:4b:79:09:4e:37:6e:29:31:e3:9b:69:ef:
32:46:5a:a3:53:7b:82:68:52:d8:67:8d:8f:2f:69:
8e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:FF:6B:84:AE:16:40:67:BB:A1:35:16:37:B5:79:9D:3C:7F:36:75
X509v3 Authority Key Identifier:
keyid:83:8E:4F:6A:5B:C6:C6:CE:39:49:F6:5A:EB:FD:74:BE:AE:18:05:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g45PalvGxs45SfZa6_10vq4YBfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/g45PalvGxs45SfZa6_10vq4YBfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/g45PalvGxs45SfZa6_10vq4YBfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:9a:b1:1c:69:92:56:be:20:d3:f6:b1:1a:27:58:0b:80:c0:
89:e5:70:1e:1c:59:ab:88:2d:13:c8:61:73:11:bc:cf:ec:a7:
64:3d:72:8d:0e:0e:8a:70:eb:1d:32:64:ad:21:72:aa:b3:0a:
c3:2c:d4:b3:8b:1a:c1:68:f4:2e:d9:97:9a:15:c7:39:50:f1:
1c:29:0b:cf:cb:9b:f7:c4:77:a7:05:4e:25:d3:fe:71:b7:8e:
bb:c2:27:40:3c:c5:bc:82:e3:0d:1b:14:78:ed:97:3b:11:19:
62:2e:1b:95:9f:4a:ce:dc:38:35:65:fa:04:b0:58:b7:69:16:
8d:57:7c:6c:4a:89:9c:2a:10:0a:9f:2f:d2:3d:d3:31:87:6f:
d9:19:35:af:ef:6f:f6:2c:25:89:70:83:ae:24:0e:df:5a:7f:
6f:6c:fa:c8:18:f1:43:a3:17:c9:5d:e9:b0:76:c1:af:77:71:
ad:85:38:7d:2b:5f:84:eb:fa:64:03:09:b0:95:1c:ff:2a:85:
ad:79:1b:5d:88:bc:0b:b2:64:11:8e:dc:30:35:ef:41:9e:d4:
ee:83:32:f0:53:29:0e:19:0f:b5:e2:54:1b:d6:10:35:ed:d0:
b1:70:5e:44:23:9d:46:fd:bc:9a:b7:28:67:1b:41:7b:b0:19:
db:84:a9:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 15:43:07 2026 by rpki-client