Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.mft
File: g-XZAwHTz2e4j-5C3VRa_PFOpWE.mft (raw, json)
Hash identifier: b7fzkHPxdNQu+15QaAAOWMinTLSUXdug5P2Jt3qFPk0=
Subject key identifier: F4:11:31:14:CB:89:AD:F8:86:C9:2B:60:9E:A7:D6:F8:4F:9D:63:77
Authority key identifier: 83:E5:D9:03:01:D3:CF:67:B8:8F:EE:42:DD:54:5A:FC:F1:4E:A5:61
Certificate issuer: /CN=83e5d90301d3cf67b88fee42dd545afcf14ea561
Certificate serial: 019EC337DCBB285ECED75010808F497B4167
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-XZAwHTz2e4j-5C3VRa_PFOpWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.mft
Manifest number: 0FCA
Signing time: Sat 13 Jun 2026 23:01:18 +0000
Manifest this update: Sat 13 Jun 2026 23:01:18 +0000
Manifest next update: Sun 14 Jun 2026 23:01:18 +0000
Files and hashes: 1: g-XZAwHTz2e4j-5C3VRa_PFOpWE.crl (hash: zRRqLJSBUHzYXPikYkFOe4qqgWPk3u4A3aIh7hRSGCY=)
2: wimRgdCrrR4TvVjD45kak059z3k.roa (hash: a5C05EHm2JJFNFLb2g2uTQzLs6i6/Ga5rEL4Ya3/5kA=)
3: xkBGMTnH9dIUv5aeR6a2PC8pSMI.roa (hash: n4jn6g+/sKr9SjKht58rDpi14/4dvnS/2o8klkQ9iBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/g-XZAwHTz2e4j-5C3VRa_PFOpWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:37:dc:bb:28:5e:ce:d7:50:10:80:8f:49:7b:41:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83e5d90301d3cf67b88fee42dd545afcf14ea561
Validity
Not Before: Jun 13 23:01:18 2026 GMT
Not After : Jun 14 23:01:18 2026 GMT
Subject: CN=f4113114cb89adf886c92b609ea7d6f84f9d6377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6d:98:2d:36:fe:7c:8a:da:92:67:3a:ec:48:
07:40:86:ec:b8:09:56:74:4e:a7:9b:c8:0b:47:3a:
93:6d:20:50:a8:54:7c:84:86:c8:4e:c8:bd:9b:35:
92:27:1d:7f:02:f7:40:bd:74:6a:8d:42:b3:2f:a5:
85:bd:0a:32:30:4f:dd:d1:53:db:81:52:d2:55:2b:
2a:1f:bf:5d:07:1a:b7:5b:e4:cc:71:1a:51:5f:e2:
10:54:37:0d:96:9a:4a:a4:63:6a:c7:70:08:61:a3:
da:09:5b:9b:4e:ed:79:5d:92:45:c3:64:79:62:23:
0e:91:7f:95:19:c3:81:5c:f3:7c:ad:09:7a:f9:e5:
9c:73:84:18:b5:0f:37:ee:a3:46:79:5c:da:7f:e4:
d9:ee:a8:cc:5f:c6:d6:ea:39:a5:76:f7:8b:b2:65:
08:63:26:07:7c:0f:6d:9f:7b:25:2f:fd:4b:1b:78:
6d:b0:a1:0b:1a:1e:2b:c3:a7:67:4d:27:bf:aa:33:
59:fc:52:c0:e5:5f:02:22:a2:c7:fb:70:a5:b6:5c:
d1:1b:3b:03:22:e1:6c:07:db:bd:be:65:9d:07:e9:
b9:2f:c4:bf:60:88:47:d8:f2:d8:c5:ed:1d:5a:4c:
17:db:8b:37:e4:c8:64:77:bb:b5:1b:c5:07:0c:1a:
2d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:11:31:14:CB:89:AD:F8:86:C9:2B:60:9E:A7:D6:F8:4F:9D:63:77
X509v3 Authority Key Identifier:
keyid:83:E5:D9:03:01:D3:CF:67:B8:8F:EE:42:DD:54:5A:FC:F1:4E:A5:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-XZAwHTz2e4j-5C3VRa_PFOpWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/157ba9-5ae7-4460-887b-782b82ebcaae/1/g-XZAwHTz2e4j-5C3VRa_PFOpWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:8d:a0:d1:64:74:10:1e:bf:5e:29:85:45:01:e4:3d:b5:ac:
de:63:26:65:0b:c2:8b:06:0f:29:ed:03:6e:e8:34:73:d7:e4:
91:5c:06:91:46:3b:3f:8c:82:32:d7:a7:7e:82:e4:ff:b5:7c:
f0:df:4a:f4:b1:86:03:85:41:71:ac:08:89:a9:aa:ae:4a:c8:
73:38:d3:41:57:97:a1:bc:af:f5:e8:b4:b6:4e:8d:1b:db:ad:
3e:3c:72:f0:d7:8e:31:be:19:28:5b:86:5d:7f:9c:a8:4e:ec:
72:9c:4e:87:41:50:05:ba:d0:fd:ae:56:ba:8b:af:cc:5f:ef:
1d:f1:e7:a9:8f:63:11:19:42:4e:4c:3c:31:16:9a:67:66:a1:
da:d7:ea:ad:3a:83:0a:0b:ca:e2:97:35:3a:01:23:44:d5:39:
82:d3:72:43:75:24:5f:d7:90:85:17:da:d2:76:5f:2c:c0:2f:
92:05:ec:55:c6:d6:f3:36:66:3b:83:bd:6f:e8:b1:01:44:b2:
09:15:1f:81:6f:2b:9e:72:7d:b1:aa:b1:25:c3:a1:43:44:0a:
8f:14:09:de:0f:c1:fa:bc:90:d4:27:ad:14:d5:68:02:a8:82:
e5:57:39:ad:fb:92:95:6b:fb:c2:24:4a:35:d0:ed:89:81:0e:
9d:82:97:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:50:55 2026 by rpki-client