Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/f8be9b-58f0-4544-b23f-6354ef0771c9/1/g2elJH2fTpT3vVcc8T01q0iwHSQ.mft
File: g2elJH2fTpT3vVcc8T01q0iwHSQ.mft (raw, json)
Hash identifier: kXzMzdZpIYCdj9wx+cfum4WG7muqUhTiNcV7smvF8rY=
Subject key identifier: 44:8A:BE:73:16:F3:9E:56:43:13:3A:1D:46:AB:3B:EA:FF:A6:66:13
Authority key identifier: 83:67:A5:24:7D:9F:4E:94:F7:BD:57:1C:F1:3D:35:AB:48:B0:1D:24
Certificate issuer: /CN=8367a5247d9f4e94f7bd571cf13d35ab48b01d24
Certificate serial: 019FA862416072F7A74CB5742ECA936CFAE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2elJH2fTpT3vVcc8T01q0iwHSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/f8be9b-58f0-4544-b23f-6354ef0771c9/1/g2elJH2fTpT3vVcc8T01q0iwHSQ.mft
Manifest number: 0963
Signing time: Tue 28 Jul 2026 11:00:39 +0000
Manifest this update: Tue 28 Jul 2026 11:00:39 +0000
Manifest next update: Wed 29 Jul 2026 11:00:39 +0000
Files and hashes: 1: LoYQyBr4YJ5ITZr2_fcC3dmO_KA.asa (hash: zpgidiPNOSMW/wwxutmy+pYEFABRXk9mKUJiu/1ReKw=)
2: g2elJH2fTpT3vVcc8T01q0iwHSQ.crl (hash: 3LLuWBCG7BYH37ojOJbScJ2Mi60McQwkbhuNnHN1mro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/f8be9b-58f0-4544-b23f-6354ef0771c9/1/g2elJH2fTpT3vVcc8T01q0iwHSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/f8be9b-58f0-4544-b23f-6354ef0771c9/1/g2elJH2fTpT3vVcc8T01q0iwHSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/g2elJH2fTpT3vVcc8T01q0iwHSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 11:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:62:41:60:72:f7:a7:4c:b5:74:2e:ca:93:6c:fa:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8367a5247d9f4e94f7bd571cf13d35ab48b01d24
Validity
Not Before: Jul 28 11:00:39 2026 GMT
Not After : Jul 29 11:00:39 2026 GMT
Subject: CN=448abe7316f39e5643133a1d46ab3beaffa66613
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ad:d6:32:78:ec:72:8e:7c:44:47:34:13:e1:
23:6d:91:02:06:72:d6:9a:e5:8b:7f:21:70:2b:fb:
5d:8d:43:4e:f8:f8:2d:de:48:4a:f3:70:b4:d9:c7:
6e:64:67:6d:f8:8a:c0:2f:67:8a:9c:0a:09:7a:0f:
80:72:df:1c:c2:f7:c3:bd:c4:b0:7e:29:2a:13:e6:
ae:d9:1b:dc:85:a3:12:6a:be:d2:0f:72:77:f4:6a:
7d:e4:95:f0:17:34:18:24:31:06:4d:9a:64:d8:a7:
9b:a9:d6:a3:69:03:fc:8b:7b:27:04:50:49:f7:8f:
96:91:54:b5:dd:23:7f:27:21:d6:89:37:c6:b9:51:
89:35:d4:20:36:31:ae:6b:5d:70:5b:7e:2e:fc:63:
15:e0:d1:b7:14:e9:12:db:63:48:d8:1a:25:01:6e:
75:f5:f2:25:04:ed:b8:46:77:40:2a:8e:b9:f6:36:
a1:70:52:d3:a3:78:4f:8f:51:88:76:0d:47:fa:7f:
26:29:b6:e1:1c:17:8e:14:c3:e7:3b:bd:8e:99:d2:
c3:39:e0:60:fb:98:5e:ef:62:85:0e:f6:aa:9a:a9:
31:ce:61:de:02:49:94:40:87:6a:5e:1e:c9:49:65:
4e:2b:b7:a0:62:8d:af:60:02:2c:9f:f8:cc:c9:76:
bf:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:8A:BE:73:16:F3:9E:56:43:13:3A:1D:46:AB:3B:EA:FF:A6:66:13
X509v3 Authority Key Identifier:
keyid:83:67:A5:24:7D:9F:4E:94:F7:BD:57:1C:F1:3D:35:AB:48:B0:1D:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2elJH2fTpT3vVcc8T01q0iwHSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f8be9b-58f0-4544-b23f-6354ef0771c9/1/g2elJH2fTpT3vVcc8T01q0iwHSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f8be9b-58f0-4544-b23f-6354ef0771c9/1/g2elJH2fTpT3vVcc8T01q0iwHSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:64:28:64:b1:b4:01:09:94:20:b1:37:82:80:f9:20:b9:37:
3f:ef:3d:38:48:e9:43:80:06:94:6a:77:c2:5f:76:66:71:9d:
6f:94:ad:7e:d3:90:84:da:88:7a:3c:f7:65:6f:8c:b2:d8:ac:
e2:11:a5:24:11:e7:03:87:3e:3f:5f:93:65:47:03:59:f5:05:
c6:41:28:e3:14:7b:95:0d:38:72:e8:4b:33:a7:18:3d:d3:91:
b0:87:2b:a3:51:dd:28:fa:fe:16:3e:ad:e9:3a:41:f1:b4:eb:
8f:d0:5b:be:ae:27:1f:dd:53:c3:e9:7f:ed:45:48:87:f2:ad:
d3:92:99:7d:7d:af:f3:ef:b6:73:06:e9:d7:4c:fb:ed:40:30:
79:c5:06:53:6d:85:50:11:7f:c7:be:88:05:cc:b5:61:61:8d:
e9:28:f6:70:36:c1:c0:d7:f1:d0:6e:ba:6d:6a:b3:b1:90:70:
c8:92:1c:de:e5:a8:9e:78:43:d4:72:d1:89:3d:93:a7:c0:2e:
0e:f5:01:22:8c:23:53:83:14:ca:7b:83:bc:bf:11:11:c4:1a:
2f:26:51:a7:88:66:b4:f9:0e:80:e3:44:fe:ab:0a:60:1a:0c:
3a:c6:48:76:9a:48:c3:55:aa:60:6c:c6:27:ee:95:fc:e2:43:
c5:0b:54:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:37:29 2026 by rpki-client