Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.mft
File: g-XZAwHTz2e4j-5C3VRa_PFOpWE.mft (raw, json)
Hash identifier: lRHrX8SyZMSY0RzZmOjktenJBAhKYE31RYIhOBB0biM=
Subject key identifier: 36:94:85:C8:B1:96:D5:0E:E9:25:71:A2:0F:4B:E0:2A:9F:0A:DB:E9
Authority key identifier: 83:E5:D9:03:01:D3:CF:67:B8:8F:EE:42:DD:54:5A:FC:F1:4E:A5:61
Certificate issuer: /CN=83e5d90301d3cf67b88fee42dd545afcf14ea561
Certificate serial: 019CAC46D26043E337A68D55AE02707B72C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-XZAwHTz2e4j-5C3VRa_PFOpWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.mft
Manifest number: 0EB5
Signing time: Mon 02 Mar 2026 02:00:48 +0000
Manifest this update: Mon 02 Mar 2026 02:00:48 +0000
Manifest next update: Tue 03 Mar 2026 02:00:48 +0000
Files and hashes: 1: g-XZAwHTz2e4j-5C3VRa_PFOpWE.crl (hash: JHcRWcO3CEEybQuuMkynMeDDXY/Ef4a4sWjfFYwz64c=)
2: wimRgdCrrR4TvVjD45kak059z3k.roa (hash: a5C05EHm2JJFNFLb2g2uTQzLs6i6/Ga5rEL4Ya3/5kA=)
3: xkBGMTnH9dIUv5aeR6a2PC8pSMI.roa (hash: n4jn6g+/sKr9SjKht58rDpi14/4dvnS/2o8klkQ9iBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/g-XZAwHTz2e4j-5C3VRa_PFOpWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:d2:60:43:e3:37:a6:8d:55:ae:02:70:7b:72:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83e5d90301d3cf67b88fee42dd545afcf14ea561
Validity
Not Before: Mar 2 02:00:48 2026 GMT
Not After : Mar 3 02:00:48 2026 GMT
Subject: CN=369485c8b196d50ee92571a20f4be02a9f0adbe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:82:d4:ee:0e:a3:16:3e:2a:88:a5:73:52:51:
e7:16:d9:a9:55:41:c0:77:59:bd:73:c3:38:ad:5c:
72:29:bb:b3:a0:e1:4d:55:7a:5b:c7:ad:b7:72:4d:
b8:56:0c:85:05:d1:95:39:61:4f:d0:66:27:27:64:
61:e6:67:7b:38:d7:23:79:56:31:e5:bf:62:64:3f:
25:4d:35:cc:b2:92:e7:61:39:be:d3:f2:57:6a:73:
26:36:16:54:6a:70:17:5a:0f:8f:d0:65:29:c1:b0:
ab:c8:5d:0f:c0:33:2e:55:04:51:7d:6b:77:0d:de:
00:86:ff:13:3f:20:b1:27:f0:c7:0a:f3:86:bc:9f:
67:c5:c3:8e:8a:3d:8b:32:f2:e2:d2:fb:67:7e:f2:
fc:a1:9a:a2:3c:98:db:c5:ac:d6:93:99:3a:28:56:
03:1f:20:e4:98:a5:40:48:ea:fd:51:6a:d7:58:44:
1f:3a:63:e7:09:ee:26:d4:a8:49:5b:15:87:0a:94:
a3:70:73:b2:7f:cb:10:14:cc:48:0f:2e:ef:f0:66:
25:29:4b:3f:db:73:e3:b3:07:34:a8:59:f2:11:4f:
8d:e2:97:c5:e2:77:b6:96:c4:22:83:ae:21:a4:e2:
dc:c7:50:76:53:9a:e4:84:74:0b:ae:e4:21:0c:88:
92:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:94:85:C8:B1:96:D5:0E:E9:25:71:A2:0F:4B:E0:2A:9F:0A:DB:E9
X509v3 Authority Key Identifier:
keyid:83:E5:D9:03:01:D3:CF:67:B8:8F:EE:42:DD:54:5A:FC:F1:4E:A5:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-XZAwHTz2e4j-5C3VRa_PFOpWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:75:d1:e2:99:96:53:07:75:d7:d7:ec:e9:64:6a:47:22:ce:
ac:eb:91:53:0d:5b:92:00:a1:e3:16:34:82:82:55:42:79:86:
09:8f:58:5f:d2:92:27:c8:62:38:76:fd:69:d4:5a:71:2c:29:
d3:a2:44:0f:40:55:31:44:66:3d:5c:fd:d5:b3:79:75:19:b7:
c2:92:85:61:70:86:ea:1a:77:b1:6c:19:2f:68:34:c7:5d:0e:
5b:ee:6e:8b:00:a4:e2:cf:ff:8e:19:0c:c1:fc:c1:6c:21:02:
5d:42:5e:a1:87:8f:d9:dd:17:42:e3:6d:7f:99:7c:c2:d2:b6:
31:78:c2:5d:e1:a1:58:9c:87:ab:e8:9b:5d:73:c9:a6:44:72:
59:a6:d3:54:95:58:9c:97:23:7b:eb:4f:53:05:14:f8:78:af:
21:a1:e0:42:a5:51:dd:1e:de:2b:41:0f:12:82:25:a6:e8:1f:
a1:f4:5d:fa:f1:86:31:f3:bb:cd:ec:c4:14:34:8b:d4:d5:ef:
a4:17:b5:b2:f4:49:f6:e2:06:b3:57:99:ba:e7:54:cc:a3:98:
2a:8e:d2:e8:a9:af:92:45:41:c7:a3:15:c3:f7:de:0d:15:a7:
2e:88:4d:86:db:ac:a9:b6:64:3b:51:ac:9f:d7:dd:b7:47:c5:
0e:97:3a:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:50:42 2026 by rpki-client