Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.mft
File: g-XZAwHTz2e4j-5C3VRa_PFOpWE.mft (raw, json)
Hash identifier: TEDcqEd0pE7a4bjTBp6XBvjDr/zr1uNYKCvYrJWqkDM=
Subject key identifier: FE:6F:9B:01:D7:21:32:F9:E8:69:DC:41:5B:0F:EF:63:63:0C:88:28
Authority key identifier: 83:E5:D9:03:01:D3:CF:67:B8:8F:EE:42:DD:54:5A:FC:F1:4E:A5:61
Certificate issuer: /CN=83e5d90301d3cf67b88fee42dd545afcf14ea561
Certificate serial: 019D99D0E5D0809CE44FDB367E86D5C271EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-XZAwHTz2e4j-5C3VRa_PFOpWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.mft
Manifest number: 0F30
Signing time: Fri 17 Apr 2026 05:01:37 +0000
Manifest this update: Fri 17 Apr 2026 05:01:37 +0000
Manifest next update: Sat 18 Apr 2026 05:01:37 +0000
Files and hashes: 1: g-XZAwHTz2e4j-5C3VRa_PFOpWE.crl (hash: oLPOMd7IyIzRMm5w4avYgWf/asSg1pmx43hcBSBrzoU=)
2: wimRgdCrrR4TvVjD45kak059z3k.roa (hash: a5C05EHm2JJFNFLb2g2uTQzLs6i6/Ga5rEL4Ya3/5kA=)
3: xkBGMTnH9dIUv5aeR6a2PC8pSMI.roa (hash: n4jn6g+/sKr9SjKht58rDpi14/4dvnS/2o8klkQ9iBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/g-XZAwHTz2e4j-5C3VRa_PFOpWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:e5:d0:80:9c:e4:4f:db:36:7e:86:d5:c2:71:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83e5d90301d3cf67b88fee42dd545afcf14ea561
Validity
Not Before: Apr 17 05:01:37 2026 GMT
Not After : Apr 18 05:01:37 2026 GMT
Subject: CN=fe6f9b01d72132f9e869dc415b0fef63630c8828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:eb:3d:18:5c:7c:11:61:fe:8b:cc:c5:3c:6c:
d7:9e:33:ac:94:53:fa:de:13:fe:b4:f4:f1:8a:b8:
ce:6a:94:de:e4:24:e2:33:18:58:dd:14:86:bd:55:
d3:bb:58:26:72:6a:31:ab:6d:9a:cb:2f:d0:eb:d2:
8d:e3:6e:74:fd:94:ec:c6:ca:c2:fa:8e:94:b7:d6:
4e:eb:4b:9f:93:7d:f1:06:b4:c3:75:df:9f:9a:10:
83:dd:48:f3:43:5e:04:ea:07:9d:6d:83:33:85:77:
7b:85:9b:6e:79:71:26:34:d7:1c:b2:13:ad:03:54:
8e:46:e0:64:77:5d:84:b9:7c:12:ce:52:37:49:ac:
aa:62:12:dc:0f:eb:b8:d1:5b:ee:77:39:e6:24:55:
69:40:f8:dc:44:4c:df:06:15:4b:f5:54:95:bb:b6:
c9:af:7d:71:be:e1:33:e0:d2:c9:8a:a3:ce:2d:3d:
79:b5:1a:32:13:af:1a:95:1d:3e:15:e1:43:02:76:
4d:7a:05:53:5c:16:9d:b4:05:bd:29:cd:29:01:62:
b8:cf:c1:27:25:6e:80:fc:76:e6:e3:05:90:f5:78:
6a:95:d6:fb:02:f6:53:45:14:1e:94:92:2c:45:5f:
7a:45:1d:36:58:90:8c:8c:7d:56:e9:9f:0e:3c:fe:
a3:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:6F:9B:01:D7:21:32:F9:E8:69:DC:41:5B:0F:EF:63:63:0C:88:28
X509v3 Authority Key Identifier:
keyid:83:E5:D9:03:01:D3:CF:67:B8:8F:EE:42:DD:54:5A:FC:F1:4E:A5:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-XZAwHTz2e4j-5C3VRa_PFOpWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:a4:ac:f2:7c:52:2b:17:25:52:be:1b:90:e0:63:af:29:68:
bb:7e:e0:c4:58:29:f4:75:b9:35:9c:24:c8:01:8d:d0:fc:a5:
cf:8e:9a:08:94:9c:3f:46:fe:b8:d5:3d:20:d6:76:24:51:2e:
ae:c9:dc:c5:c8:06:fe:76:5a:76:53:76:13:c0:98:fa:a8:fe:
55:9b:a4:3f:b6:f5:62:ec:f6:cf:cb:0c:3f:51:07:77:6d:46:
0c:57:61:e2:73:10:1a:1a:17:3f:a5:69:85:19:b4:c4:56:45:
e8:f6:ba:9b:20:98:d1:67:9f:62:ef:85:97:53:aa:52:2e:51:
3c:f6:86:48:d3:fa:d4:b7:af:24:39:4b:7c:5a:9b:c3:4f:52:
35:1d:d1:5c:4c:38:46:c9:b4:7c:13:c8:bb:ac:bc:6b:b4:92:
5b:a0:ae:4e:a0:14:4a:dd:ef:a9:9d:0f:90:ed:5a:2b:1e:3b:
ad:a2:8b:f5:74:3a:5d:2d:1e:17:55:20:05:74:4b:e1:49:01:
a7:42:99:75:06:ba:8f:90:53:97:c5:e1:73:b8:83:dc:7e:0f:
20:c0:bf:ec:1b:b6:04:35:de:c4:e3:91:a5:56:14:09:6a:69:
e5:eb:3c:32:e2:36:47:aa:8c:55:f9:bb:45:df:3a:99:71:48:
db:a6:67:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Z0OXQgJzkT9s2fobVwnHqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzZTVkOTAzMDFkM2NmNjdiODhmZWU0MmRkNTQ1YWZjZjE0
ZWE1NjEwHhcNMjYwNDE3MDUwMTM3WhcNMjYwNDE4MDUwMTM3WjAzMTEwLwYDVQQD
EyhmZTZmOWIwMWQ3MjEzMmY5ZTg2OWRjNDE1YjBmZWY2MzYzMGM4ODI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAres9GFx8EWH+i8zFPGzXnjOslFP6
3hP+tPTxirjOapTe5CTiMxhY3RSGvVXTu1gmcmoxq22ayy/Q69KN4250/ZTsxsrC
+o6Ut9ZO60ufk33xBrTDdd+fmhCD3UjzQ14E6gedbYMzhXd7hZtueXEmNNccshOt
A1SORuBkd12EuXwSzlI3SayqYhLcD+u40VvudznmJFVpQPjcREzfBhVL9VSVu7bJ
r31xvuEz4NLJiqPOLT15tRoyE68alR0+FeFDAnZNegVTXBadtAW9Kc0pAWK4z8En
JW6A/Hbm4wWQ9Xhqldb7AvZTRRQelJIsRV96RR02WJCMjH1W6Z8OPP6jVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP5vmwHXITL56GncQVsP72NjDIgoMB8GA1UdIwQY
MBaAFIPl2QMB089nuI/uQt1UWvzxTqVhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZy1YWkF3SFR6MmU0ai01QzNWUmFfUEZPcFdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8xNTdiYTktNWFlNy00NDYwLTg4N2It
NzgyYjgyZWJjYWFlLzEvZy1YWkF3SFR6MmU0ai01QzNWUmFfUEZPcFdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC8xNTdiYTktNWFlNy00NDYwLTg4N2ItNzgyYjgyZWJjYWFl
LzEvZy1YWkF3SFR6MmU0ai01QzNWUmFfUEZPcFdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjaSs8nxS
KxclUr4bkOBjrylou37gxFgp9HW5NZwkyAGN0Pylz46aCJScP0b+uNU9INZ2JFEu
rsncxcgG/nZadlN2E8CY+qj+VZukP7b1Yuz2z8sMP1EHd21GDFdh4nMQGhoXP6Vp
hRm0xFZF6Pa6myCY0WefYu+Fl1OqUi5RPPaGSNP61LevJDlLfFqbw09SNR3RXEw4
Rsm0fBPIu6y8a7SSW6CuTqAUSt3vqZ0PkO1aKx47raKL9XQ6XS0eF1UgBXRL4UkB
p0KZdQa6j5BTl8Xhc7iD3H4PIMC/7Bu2BDXexOORpVYUCWpp5es8MuI2R6qMVfm7
Rd86mXFI26Znhg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:54:32 2026 by rpki-client