Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.mft
File: g-XZAwHTz2e4j-5C3VRa_PFOpWE.mft (raw, json)
Hash identifier: 7PVdRjfjKdH/JwVtHfYEOgAU0WUtZDVQi/yYzLuHKLM=
Subject key identifier: 86:6B:0E:16:F8:74:FA:2A:1E:05:44:E4:1C:5A:FC:E5:7F:B3:28:52
Authority key identifier: 83:E5:D9:03:01:D3:CF:67:B8:8F:EE:42:DD:54:5A:FC:F1:4E:A5:61
Certificate issuer: /CN=83e5d90301d3cf67b88fee42dd545afcf14ea561
Certificate serial: 019D9DAD7A45F33DE4FA99CD371227375F08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-XZAwHTz2e4j-5C3VRa_PFOpWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.mft
Manifest number: 0F32
Signing time: Fri 17 Apr 2026 23:01:25 +0000
Manifest this update: Fri 17 Apr 2026 23:01:25 +0000
Manifest next update: Sat 18 Apr 2026 23:01:25 +0000
Files and hashes: 1: g-XZAwHTz2e4j-5C3VRa_PFOpWE.crl (hash: 418UdHk7YHPM2IBchOABmrqY1l4uMvytXgcnKwn7ta4=)
2: wimRgdCrrR4TvVjD45kak059z3k.roa (hash: a5C05EHm2JJFNFLb2g2uTQzLs6i6/Ga5rEL4Ya3/5kA=)
3: xkBGMTnH9dIUv5aeR6a2PC8pSMI.roa (hash: n4jn6g+/sKr9SjKht58rDpi14/4dvnS/2o8klkQ9iBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/g-XZAwHTz2e4j-5C3VRa_PFOpWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:ad:7a:45:f3:3d:e4:fa:99:cd:37:12:27:37:5f:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83e5d90301d3cf67b88fee42dd545afcf14ea561
Validity
Not Before: Apr 17 23:01:25 2026 GMT
Not After : Apr 18 23:01:25 2026 GMT
Subject: CN=866b0e16f874fa2a1e0544e41c5afce57fb32852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:33:fd:d3:9f:a3:48:4c:e4:34:16:37:84:4d:
0b:e5:db:c6:77:71:73:0e:4f:1b:48:31:f5:8a:b1:
7c:10:be:41:e4:c4:15:e2:ca:d1:cd:6c:95:83:35:
11:1b:0b:d0:98:fc:84:2d:53:eb:cb:99:b6:01:aa:
c3:16:26:af:fa:6a:e5:1e:54:e3:8c:3c:95:8f:fe:
80:00:da:bf:20:7b:bf:c6:ab:ac:8b:1d:4e:45:d7:
34:8c:92:dc:86:28:fd:97:9a:4d:68:8d:11:b0:85:
f0:6b:8a:84:34:b0:2e:c3:a6:41:79:93:f9:f2:19:
65:cf:d6:76:60:f4:00:a6:4e:ea:16:49:86:46:d2:
d8:58:3b:d8:95:c7:ea:a5:b1:5b:42:ec:05:2d:01:
c7:24:7c:03:0c:2f:29:2b:00:31:e3:dd:63:68:19:
91:1c:d1:ea:92:86:61:ba:e7:9f:29:b7:43:f0:b2:
01:78:13:e4:0f:ab:18:65:62:41:6a:b0:8e:c6:53:
bb:d2:3a:ea:9f:52:4d:91:a9:4e:19:3c:f9:c5:6a:
1b:e5:ca:5c:79:6e:fb:bf:66:ff:7e:2f:6b:e7:14:
ec:5d:b7:59:3b:bf:0c:f8:5c:cf:ab:a7:60:e2:c0:
be:fa:2e:72:36:89:7f:66:ce:cf:cf:bf:b2:68:8d:
df:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:6B:0E:16:F8:74:FA:2A:1E:05:44:E4:1C:5A:FC:E5:7F:B3:28:52
X509v3 Authority Key Identifier:
keyid:83:E5:D9:03:01:D3:CF:67:B8:8F:EE:42:DD:54:5A:FC:F1:4E:A5:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-XZAwHTz2e4j-5C3VRa_PFOpWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:27:24:6c:cf:a6:e4:24:c6:d2:46:6b:63:4a:0b:1f:04:96:
cf:92:bd:07:e1:55:5f:c9:b9:65:1c:38:e6:a0:c8:a8:ef:e1:
0c:a8:79:8a:bf:01:34:16:df:38:b5:79:9d:61:e9:e8:15:97:
e1:d4:61:b2:df:6c:68:8e:62:fe:96:63:ce:38:18:e3:b3:45:
cf:81:bc:ce:34:b7:c1:50:41:f7:3b:19:bf:20:82:14:ab:27:
fa:18:06:13:76:26:ff:bb:fc:57:56:51:83:5e:f1:0e:aa:34:
89:89:b7:3b:c8:51:0a:86:74:49:f6:b2:b8:86:1f:32:87:7c:
1c:5f:3b:88:05:e1:72:5d:36:c0:f0:a4:22:08:81:7c:6c:cc:
4a:7a:6b:ed:bc:5c:af:d9:72:04:0b:74:87:c6:54:95:7f:b9:
53:6d:f2:2f:19:59:2f:c7:66:1c:7c:35:9b:45:1f:5e:20:22:
8d:b8:31:db:d4:da:a2:a5:c6:ba:cc:0b:df:40:87:77:2f:96:
d2:eb:94:b8:6d:2d:d7:a0:99:89:e0:30:ac:68:8f:39:e3:ef:
69:c5:99:ee:8e:36:7c:af:09:a9:e4:71:70:41:8c:c0:7f:07:
98:14:78:86:08:46:0a:63:da:e6:b3:7a:69:f5:81:0b:ac:58:
48:69:8d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:49:05 2026 by rpki-client