Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.mft
File: g8bKhlGbVtTRhzr24lfefpfzyKw.mft (raw, json)
Hash identifier: 2We1VhWsLFiWZ1FHlmMEcbXV/rUvmkiEavZv92xTy5Y=
Subject key identifier: 31:7F:FA:A5:D9:0B:69:5D:D7:A7:40:C5:75:4E:5A:9F:16:12:2C:25
Authority key identifier: 83:C6:CA:86:51:9B:56:D4:D1:87:3A:F6:E2:57:DE:7E:97:F3:C8:AC
Certificate issuer: /CN=83c6ca86519b56d4d1873af6e257de7e97f3c8ac
Certificate serial: 019CACEBB28CD39FC7194BF75A834738C0EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g8bKhlGbVtTRhzr24lfefpfzyKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.mft
Manifest number: 0D41
Signing time: Mon 02 Mar 2026 05:00:53 +0000
Manifest this update: Mon 02 Mar 2026 05:00:53 +0000
Manifest next update: Tue 03 Mar 2026 05:00:53 +0000
Files and hashes: 1: fPLCcx5H4vWt-QPjiq-SI0ctgqs.roa (hash: rnGcIrJs7Q+bQMqz23kcZC8Vb081NJ16W91BEzEb8U4=)
2: g8bKhlGbVtTRhzr24lfefpfzyKw.crl (hash: 9Mzuwl0no7bEo4Y75ynHkCx0O4EUFdATjrEja++3MfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/g8bKhlGbVtTRhzr24lfefpfzyKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 05:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:b2:8c:d3:9f:c7:19:4b:f7:5a:83:47:38:c0:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83c6ca86519b56d4d1873af6e257de7e97f3c8ac
Validity
Not Before: Mar 2 05:00:53 2026 GMT
Not After : Mar 3 05:00:53 2026 GMT
Subject: CN=317ffaa5d90b695dd7a740c5754e5a9f16122c25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:60:3b:f8:e9:f7:f1:9f:1f:dc:09:36:f6:5c:
ba:0e:f0:ed:16:ef:77:f3:47:5d:d5:91:c0:7f:8a:
2e:05:46:d2:96:a2:bd:27:bf:3f:47:bf:f8:58:eb:
c0:48:63:26:02:c3:43:dd:d8:ff:12:92:ea:ec:22:
1c:b1:3e:2e:a5:a7:c5:bd:8d:af:cd:39:9c:2a:68:
14:9a:e3:af:7b:a8:60:91:71:d8:b6:05:92:b3:0b:
1e:39:40:82:85:2c:fa:51:e8:1e:f4:10:1f:75:73:
14:b6:a4:3f:a4:4c:95:12:55:32:20:64:66:c7:ea:
9c:ad:fd:c3:e2:5d:6e:16:1b:e4:9c:f3:a1:7c:2c:
98:b4:c6:f3:c3:9f:9c:ef:b0:34:ea:ea:5c:2f:77:
72:7e:ca:1e:1b:d1:22:44:3d:49:f6:7a:9f:82:70:
74:3e:d9:38:dd:13:1c:dc:35:15:d6:89:0a:75:6e:
df:9b:88:35:b1:86:fc:f8:e3:6f:07:8d:7b:ff:f4:
1f:ec:e4:5a:d3:93:44:ef:1c:13:db:fc:0d:95:bd:
9d:c3:86:e6:95:a8:b4:80:1f:35:68:08:f7:02:4b:
a0:2b:52:b2:f4:6b:ad:61:32:6b:02:69:07:75:06:
ba:0c:99:c1:3d:9d:33:0e:6b:4c:96:27:fb:00:49:
ca:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:7F:FA:A5:D9:0B:69:5D:D7:A7:40:C5:75:4E:5A:9F:16:12:2C:25
X509v3 Authority Key Identifier:
keyid:83:C6:CA:86:51:9B:56:D4:D1:87:3A:F6:E2:57:DE:7E:97:F3:C8:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g8bKhlGbVtTRhzr24lfefpfzyKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:5c:12:1f:6a:e5:00:37:4f:d7:d5:61:5f:d2:10:a2:c1:d7:
88:f8:e5:04:0b:c4:19:aa:7b:c6:20:95:7a:61:9e:72:10:e0:
f8:fd:ff:40:96:dd:c9:e1:91:a1:c5:fd:60:75:88:1e:b0:79:
ac:7f:aa:65:50:05:ca:c5:a3:99:0c:c3:35:54:03:7f:3b:36:
55:7f:23:05:21:84:0b:bb:ba:94:f3:fb:5a:4a:bd:63:c5:b5:
c5:ce:e4:c2:2a:94:10:93:db:11:f6:37:9a:f2:d1:9e:3c:de:
18:5e:0c:24:00:5f:97:4b:af:da:e3:d6:97:e4:df:ba:b6:c0:
a7:93:8e:73:54:89:5a:79:f9:1e:be:72:61:cb:f4:25:56:db:
cf:bc:10:ef:80:33:5a:6d:07:02:66:0d:63:eb:ea:b6:e6:b5:
89:4a:06:99:fc:14:35:30:47:2a:0b:da:4d:3b:d3:9b:ae:f8:
77:6f:0a:de:1b:3c:47:08:e6:de:52:bc:50:02:97:57:a7:83:
4b:64:fb:26:2b:29:b3:38:35:7a:fe:02:e6:c2:9f:f4:fa:53:
1c:58:b8:02:06:8b:97:97:ba:66:72:37:ed:e7:58:e1:31:e0:
7c:a6:e4:e8:b9:c0:33:83:2e:3d:1d:07:32:a2:53:2e:81:88:
9a:a3:a0:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:24:41 2026 by rpki-client