Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.mft
File: g8bKhlGbVtTRhzr24lfefpfzyKw.mft (raw, json)
Hash identifier: BD/aftfnJ13/JIV4zmb5Vv+KMwmmRUoPDrAL+LDtfCM=
Subject key identifier: B9:AE:8C:58:CF:94:78:8C:E8:02:12:D4:D9:22:F4:DD:D4:54:0D:55
Authority key identifier: 83:C6:CA:86:51:9B:56:D4:D1:87:3A:F6:E2:57:DE:7E:97:F3:C8:AC
Certificate issuer: /CN=83c6ca86519b56d4d1873af6e257de7e97f3c8ac
Certificate serial: 019D9C638FF57B264D98C5453F185E78E26F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g8bKhlGbVtTRhzr24lfefpfzyKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.mft
Manifest number: 0DBD
Signing time: Fri 17 Apr 2026 17:01:03 +0000
Manifest this update: Fri 17 Apr 2026 17:01:03 +0000
Manifest next update: Sat 18 Apr 2026 17:01:03 +0000
Files and hashes: 1: fPLCcx5H4vWt-QPjiq-SI0ctgqs.roa (hash: rnGcIrJs7Q+bQMqz23kcZC8Vb081NJ16W91BEzEb8U4=)
2: g8bKhlGbVtTRhzr24lfefpfzyKw.crl (hash: ytDKSLDk5zbjbftYoJqgnRNRkYQMa0DTROrJr2G8SUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/g8bKhlGbVtTRhzr24lfefpfzyKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:63:8f:f5:7b:26:4d:98:c5:45:3f:18:5e:78:e2:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83c6ca86519b56d4d1873af6e257de7e97f3c8ac
Validity
Not Before: Apr 17 17:01:03 2026 GMT
Not After : Apr 18 17:01:03 2026 GMT
Subject: CN=b9ae8c58cf94788ce80212d4d922f4ddd4540d55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a6:e2:38:96:98:c5:96:1a:37:09:b6:8c:77:
6e:43:3a:48:52:57:c8:29:b1:07:89:1a:c5:63:b3:
8e:cc:e8:d0:c8:bc:2b:69:33:c5:cf:b7:08:89:da:
c1:f5:d3:17:66:cf:39:dd:0b:d4:cc:1e:9b:84:c9:
6e:08:13:e0:26:57:b9:52:d2:06:2a:e2:c7:dd:6d:
72:1b:90:3d:40:35:83:8f:ca:5a:2c:7b:3b:23:cf:
27:7a:37:81:26:fc:de:52:82:c0:4b:a1:30:c1:28:
3b:2f:77:71:eb:4a:76:01:11:ac:3e:ea:93:ea:59:
ce:86:cb:7f:dd:33:a6:8b:74:db:a3:10:cc:9c:19:
b9:f3:e8:f4:5a:b0:f3:7d:a9:9f:0d:30:89:8c:52:
b9:03:eb:23:22:4e:a8:6a:3c:c9:64:87:04:62:84:
31:cd:dd:49:cd:a5:33:6f:d7:24:1e:0a:9b:41:41:
96:7b:5b:31:f9:ad:2c:6f:60:ef:66:28:48:56:91:
9c:2e:70:1e:07:4c:f6:47:ab:03:de:04:af:0b:69:
26:75:3a:dc:c3:03:25:4f:c6:d6:6c:3d:b7:47:da:
6d:b1:5c:04:71:36:ea:ed:57:20:36:40:1f:b8:9e:
b1:dc:43:a5:31:b6:d6:33:59:63:05:c6:87:87:a6:
16:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:AE:8C:58:CF:94:78:8C:E8:02:12:D4:D9:22:F4:DD:D4:54:0D:55
X509v3 Authority Key Identifier:
keyid:83:C6:CA:86:51:9B:56:D4:D1:87:3A:F6:E2:57:DE:7E:97:F3:C8:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g8bKhlGbVtTRhzr24lfefpfzyKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:95:d0:37:e0:fc:7b:cd:d8:21:73:4a:19:98:65:36:ce:81:
44:ad:01:09:5f:74:07:08:5e:77:d8:48:61:e0:25:8a:1e:69:
a4:71:68:0c:a0:d1:42:5a:be:60:d6:d6:32:81:1e:38:22:07:
63:73:62:e9:88:29:8c:b8:65:f9:ad:a7:32:84:2a:fd:f1:ee:
cd:af:be:4b:06:4f:d6:5f:f5:8b:93:ff:cd:42:d1:8d:d5:64:
3a:a7:89:69:ad:cd:d1:16:e2:6c:70:90:29:0e:b9:a3:44:8b:
8b:8b:8c:77:0a:df:62:ca:38:25:7c:c7:55:20:fe:d7:08:c1:
6c:90:f8:35:1f:62:53:69:69:a4:08:22:57:f7:45:31:e8:70:
f3:ea:15:bc:04:37:08:42:4e:b0:25:89:c9:f0:15:24:f1:0a:
e5:dc:79:98:13:b2:96:4d:5d:98:a3:ed:c8:84:04:e4:0c:13:
34:75:57:9a:de:1d:74:74:8c:96:d7:37:6e:d2:73:1c:00:67:
d1:18:bc:a5:f9:61:c1:ee:9d:84:6c:5f:07:5d:d1:aa:7f:92:
3f:94:5e:6d:28:df:ec:46:9b:c3:a8:90:d3:1d:a3:35:e8:18:
05:98:83:3b:8f:62:fa:3b:25:76:18:69:b9:b3:6e:ba:dc:ed:
34:1f:06:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:04:41 2026 by rpki-client