Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/cfa7c3-f0c8-4622-8a47-9ab26b266aa7/1/g8jQHK8rB1HQNcU3Vm9FYnkl5PY.mft
File: g8jQHK8rB1HQNcU3Vm9FYnkl5PY.mft (raw, json)
Hash identifier: dOXPLFS80Vom4BT+bbGYcPThVZ/IbykzIWALh9qUJSQ=
Subject key identifier: 86:1E:0A:58:5A:61:6A:2E:22:02:ED:91:F9:FD:2A:56:B4:27:2C:6B
Authority key identifier: 83:C8:D0:1C:AF:2B:07:51:D0:35:C5:37:56:6F:45:62:79:25:E4:F6
Certificate issuer: /CN=83c8d01caf2b0751d035c537566f45627925e4f6
Certificate serial: 019CACEBE6ED0B5E991A93DD898921EACE64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g8jQHK8rB1HQNcU3Vm9FYnkl5PY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/cfa7c3-f0c8-4622-8a47-9ab26b266aa7/1/g8jQHK8rB1HQNcU3Vm9FYnkl5PY.mft
Manifest number: 138C
Signing time: Mon 02 Mar 2026 05:01:06 +0000
Manifest this update: Mon 02 Mar 2026 05:01:06 +0000
Manifest next update: Tue 03 Mar 2026 05:01:06 +0000
Files and hashes: 1: g2p638fZZwCrnvRFqg9eTRpbiw4.roa (hash: qSK6pl1sLuO5L8q2M8N4Ull7ELILSQAIXlEcO8nJrKo=)
2: g8jQHK8rB1HQNcU3Vm9FYnkl5PY.crl (hash: 0CXRdfHn07wH0vj9xfS0n3y/cGNC/4YFRFCv8w8R7DM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/cfa7c3-f0c8-4622-8a47-9ab26b266aa7/1/g8jQHK8rB1HQNcU3Vm9FYnkl5PY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/cfa7c3-f0c8-4622-8a47-9ab26b266aa7/1/g8jQHK8rB1HQNcU3Vm9FYnkl5PY.mft
rsync://rpki.ripe.net/repository/DEFAULT/g8jQHK8rB1HQNcU3Vm9FYnkl5PY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 05:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:e6:ed:0b:5e:99:1a:93:dd:89:89:21:ea:ce:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83c8d01caf2b0751d035c537566f45627925e4f6
Validity
Not Before: Mar 2 05:01:06 2026 GMT
Not After : Mar 3 05:01:06 2026 GMT
Subject: CN=861e0a585a616a2e2202ed91f9fd2a56b4272c6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b7:8c:05:69:14:09:f7:f6:34:8a:b6:57:80:
0f:22:3f:c6:4f:cb:7e:9c:6a:2d:b3:a9:d1:8e:48:
c4:d3:e4:24:a3:45:39:8a:3e:19:8f:fc:9f:0a:61:
5b:4c:70:96:70:d8:58:52:3c:97:a4:c5:56:91:dd:
57:2d:24:bd:38:3e:13:4c:4f:68:80:7e:38:19:b3:
9a:18:2c:de:0b:da:7e:6d:3c:8c:d5:0f:a2:a1:f3:
67:e1:89:4d:7c:81:6a:e7:73:ca:4b:f7:13:f6:58:
e2:07:88:57:0c:23:fe:b3:cf:d8:9a:d1:21:96:ef:
18:f9:5b:a8:07:09:2a:e0:20:f3:06:9c:98:c6:f8:
2d:b9:07:42:17:5b:01:82:e0:9d:f8:14:0b:ba:cb:
a6:4d:4a:5c:f7:3d:b1:a5:eb:6f:ac:73:c4:d1:11:
a4:7c:7d:06:3d:cf:a1:10:6d:87:f9:89:46:7e:86:
8d:84:96:46:64:f7:ed:b3:5f:4e:7e:5e:66:56:2e:
49:8e:35:27:0d:21:5d:78:35:30:ab:ce:5d:c6:49:
77:d6:30:76:78:00:8f:76:4a:1a:fd:15:da:7b:0d:
76:65:93:45:59:d6:56:56:38:d8:10:90:88:54:57:
c4:02:cd:01:9f:c1:8a:bd:ef:44:99:15:73:e8:05:
7c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:1E:0A:58:5A:61:6A:2E:22:02:ED:91:F9:FD:2A:56:B4:27:2C:6B
X509v3 Authority Key Identifier:
keyid:83:C8:D0:1C:AF:2B:07:51:D0:35:C5:37:56:6F:45:62:79:25:E4:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g8jQHK8rB1HQNcU3Vm9FYnkl5PY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/cfa7c3-f0c8-4622-8a47-9ab26b266aa7/1/g8jQHK8rB1HQNcU3Vm9FYnkl5PY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/cfa7c3-f0c8-4622-8a47-9ab26b266aa7/1/g8jQHK8rB1HQNcU3Vm9FYnkl5PY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:ba:74:cc:e2:5e:98:0f:20:9f:b8:b9:3e:ef:1e:59:88:e2:
1b:1d:05:85:cf:8c:10:e9:5e:52:2b:8b:42:4d:79:d7:06:60:
e3:00:42:f1:1a:4d:71:c4:4d:8e:9b:5a:48:ca:96:7f:68:9a:
8b:c9:90:0f:ac:0f:8a:0d:90:7b:1a:c1:a4:c5:ea:64:72:41:
e5:ec:e9:9b:84:9f:6d:3f:39:2d:3d:89:1e:5b:6f:b7:a0:ec:
0f:4b:4a:ca:b9:c8:b6:f2:1e:e9:c2:46:7f:d5:d6:a0:de:50:
0c:60:ff:48:5d:60:26:c9:fb:af:45:95:d9:2e:f9:cf:d5:ea:
93:e2:fb:07:87:7d:7b:9e:7c:80:7a:bf:7e:58:39:57:53:05:
40:c7:f0:bb:f0:b8:11:e1:aa:f1:9d:0f:72:1d:9f:47:ac:00:
2b:14:99:c4:9b:d5:ac:12:77:b1:34:d4:e1:9a:b2:5c:19:e8:
13:8a:cd:69:66:9a:10:0b:48:fd:15:b7:b1:d9:04:1c:e6:8d:
e3:8f:fc:84:9c:25:b6:2d:b4:e7:86:ec:8c:39:8c:59:e3:05:
30:92:59:b3:fe:12:09:3d:2c:7f:2b:7f:75:3f:30:07:ec:d4:
4d:ac:9b:b2:6e:41:5e:e2:ea:62:88:98:c9:95:61:fc:1d:0b:
90:b7:cc:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:12:43 2026 by rpki-client