Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/031463-58e6-4fcb-8ca1-1fcfd0c8bdf5/1/g-z7ZL2lITcI_2e61Mg5ULH_3Dg.mft
File: g-z7ZL2lITcI_2e61Mg5ULH_3Dg.mft (raw, json)
Hash identifier: Z5nvFffFGmXKa+a1PYIJ2oXyqwJTrPxiU7GmbxV3tcc=
Subject key identifier: 15:47:D3:3B:FA:1D:5B:04:02:89:39:25:A6:3C:19:BC:FF:E1:B7:CB
Authority key identifier: 83:EC:FB:64:BD:A5:21:37:08:FF:67:BA:D4:C8:39:50:B1:FF:DC:38
Certificate issuer: /CN=83ecfb64bda5213708ff67bad4c83950b1ffdc38
Certificate serial: 019D98865224D13522B39969113BFBA02D3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-z7ZL2lITcI_2e61Mg5ULH_3Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/031463-58e6-4fcb-8ca1-1fcfd0c8bdf5/1/g-z7ZL2lITcI_2e61Mg5ULH_3Dg.mft
Manifest number: 04E4
Signing time: Thu 16 Apr 2026 23:00:32 +0000
Manifest this update: Thu 16 Apr 2026 23:00:32 +0000
Manifest next update: Fri 17 Apr 2026 23:00:32 +0000
Files and hashes: 1: g-z7ZL2lITcI_2e61Mg5ULH_3Dg.crl (hash: g7tgzHixyum20MawE5mQNPNVhVx0pdJS9jFObUdhilU=)
2: uX9RFldD_ZI14WBF0_J3zmXVSmY.roa (hash: 5VQ5HAdHZFYwUc79OmQg0PEjho46iWIuaIrNO9hQGtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/031463-58e6-4fcb-8ca1-1fcfd0c8bdf5/1/g-z7ZL2lITcI_2e61Mg5ULH_3Dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/031463-58e6-4fcb-8ca1-1fcfd0c8bdf5/1/g-z7ZL2lITcI_2e61Mg5ULH_3Dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/g-z7ZL2lITcI_2e61Mg5ULH_3Dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:52:24:d1:35:22:b3:99:69:11:3b:fb:a0:2d:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83ecfb64bda5213708ff67bad4c83950b1ffdc38
Validity
Not Before: Apr 16 23:00:32 2026 GMT
Not After : Apr 17 23:00:32 2026 GMT
Subject: CN=1547d33bfa1d5b0402893925a63c19bcffe1b7cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9d:cd:91:f9:c3:c9:54:f3:b3:de:5b:fc:84:
79:98:e6:ab:19:0a:a6:6f:32:22:b3:99:e6:24:de:
8d:b0:36:c4:dc:ec:c6:48:d0:eb:57:d6:34:60:2b:
78:cd:02:b4:5e:36:58:2e:dd:3e:88:2a:08:77:26:
09:cc:3f:4d:1b:3b:bb:db:d2:c0:7c:cc:aa:ac:c8:
e3:e7:9e:13:75:cf:56:22:92:58:ef:59:49:56:55:
7e:62:7d:72:c4:89:18:52:7b:93:04:c2:37:fe:ca:
b4:32:a6:14:d6:ed:bf:23:7d:ba:14:1f:9e:9f:a0:
e9:0e:90:eb:da:7b:18:66:85:25:4c:7d:57:06:15:
7c:24:c2:85:b9:44:fb:21:1a:e5:91:c5:bb:8e:4d:
a1:b5:76:1a:e5:d2:82:0e:bb:56:e3:7a:c4:e4:e9:
b0:de:de:5a:05:16:9d:28:0c:18:b1:f7:07:9e:df:
08:7c:f7:06:65:3d:39:8c:ec:d4:00:4b:eb:c1:22:
7d:65:68:90:95:84:a7:d7:ad:24:d4:82:47:71:84:
9f:8a:76:15:53:fd:a4:54:46:03:f2:d7:f7:fb:63:
7e:32:7d:9b:15:6f:43:6a:00:17:8d:4e:21:b0:ea:
06:dc:70:93:9a:1d:25:01:9e:cc:8a:1c:27:01:89:
fe:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:47:D3:3B:FA:1D:5B:04:02:89:39:25:A6:3C:19:BC:FF:E1:B7:CB
X509v3 Authority Key Identifier:
keyid:83:EC:FB:64:BD:A5:21:37:08:FF:67:BA:D4:C8:39:50:B1:FF:DC:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-z7ZL2lITcI_2e61Mg5ULH_3Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/031463-58e6-4fcb-8ca1-1fcfd0c8bdf5/1/g-z7ZL2lITcI_2e61Mg5ULH_3Dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/031463-58e6-4fcb-8ca1-1fcfd0c8bdf5/1/g-z7ZL2lITcI_2e61Mg5ULH_3Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:a9:07:b9:c4:c5:a0:96:f8:dd:d6:ba:51:1b:f3:4b:a3:85:
87:d9:11:ad:7f:a6:7e:e2:ce:03:fe:80:8f:ad:31:27:09:ed:
be:4b:f1:af:a3:90:fc:d4:0f:8b:27:88:b5:a3:72:4d:fb:63:
59:5e:f5:42:73:0d:ae:2f:6c:ca:4a:81:40:46:3f:98:e3:8e:
f5:bb:7d:3a:33:d3:25:9b:57:f2:27:a3:21:20:6a:ed:8e:be:
14:48:cb:89:cc:d1:96:86:46:cc:f7:3f:c9:6f:f1:41:2f:cf:
c7:93:f9:9d:d9:d1:cb:88:b6:d4:ea:1c:bf:3e:5c:f1:fc:1e:
2d:74:1c:50:1b:cc:f0:cc:a4:3d:37:3b:b7:4c:67:81:b1:94:
52:95:22:da:67:24:cf:9e:c2:8a:05:85:7c:45:f9:db:37:cf:
db:23:65:52:5e:4c:48:65:e7:ec:c6:53:fc:0b:9a:45:ff:9b:
db:49:d5:cf:11:aa:47:6b:4a:b1:10:e1:be:43:7c:f3:fe:94:
84:f0:9d:ad:29:96:8e:f1:bb:37:50:aa:9e:84:f5:64:7f:cf:
7e:fd:e0:3b:29:35:5c:f8:dd:6a:50:fc:5a:61:e7:df:ad:d3:
a8:da:a9:c7:07:ca:08:fb:8c:3a:2d:62:73:49:87:8b:60:09:
56:ab:50:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:37:16 2026 by rpki-client