Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/f97544-117e-4ae9-ae56-eb117aee2cc1/1/g8gpOpkAnTr5kBAwsYTa2gGwsps.mft
File: g8gpOpkAnTr5kBAwsYTa2gGwsps.mft (raw, json)
Hash identifier: Hs86wvOmujtQOXmJe0rJ7wzD+en2JFgguXbtP55lAnA=
Subject key identifier: 05:93:DC:DB:00:58:BC:92:42:40:29:02:CE:3B:05:23:8B:86:EF:17
Authority key identifier: 83:C8:29:3A:99:00:9D:3A:F9:90:10:30:B1:84:DA:DA:01:B0:B2:9B
Certificate issuer: /CN=83c8293a99009d3af9901030b184dada01b0b29b
Certificate serial: 019D9DACBC28E387A31E389ED997BA1C1537
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g8gpOpkAnTr5kBAwsYTa2gGwsps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/f97544-117e-4ae9-ae56-eb117aee2cc1/1/g8gpOpkAnTr5kBAwsYTa2gGwsps.mft
Manifest number: CA
Signing time: Fri 17 Apr 2026 23:00:36 +0000
Manifest this update: Fri 17 Apr 2026 23:00:36 +0000
Manifest next update: Sat 18 Apr 2026 23:00:36 +0000
Files and hashes: 1: F5dKrMVwvFBrfz8gk2Vz9w5CTV8.asa (hash: wN6U/2fEaT7W5CHB3z+oIBLa7QQY7S0jmGI+LDLotpo=)
2: g8gpOpkAnTr5kBAwsYTa2gGwsps.crl (hash: PCPjFcycf4e1fnRyFVenpi940yB/Sw6yiSkVE9aUHpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/f97544-117e-4ae9-ae56-eb117aee2cc1/1/g8gpOpkAnTr5kBAwsYTa2gGwsps.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/f97544-117e-4ae9-ae56-eb117aee2cc1/1/g8gpOpkAnTr5kBAwsYTa2gGwsps.mft
rsync://rpki.ripe.net/repository/DEFAULT/g8gpOpkAnTr5kBAwsYTa2gGwsps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:ac:bc:28:e3:87:a3:1e:38:9e:d9:97:ba:1c:15:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83c8293a99009d3af9901030b184dada01b0b29b
Validity
Not Before: Apr 17 23:00:36 2026 GMT
Not After : Apr 18 23:00:36 2026 GMT
Subject: CN=0593dcdb0058bc9242402902ce3b05238b86ef17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:8f:16:0b:38:bf:db:f2:a4:1e:3c:bc:81:7e:
80:1c:16:5a:25:99:27:c8:7b:07:88:01:a0:a0:a6:
64:a3:7b:71:af:b4:14:bf:6b:93:2b:cc:00:95:3a:
8c:c1:c6:68:65:a0:e4:a8:c1:47:d3:52:bc:ff:46:
39:04:24:6a:f2:a9:b9:52:bf:8e:e4:9d:32:18:17:
a8:6d:e9:b5:55:2a:b3:9e:a6:d8:4b:33:86:11:77:
92:e3:bd:6c:a7:de:d6:1d:ac:fe:70:51:d6:01:b7:
91:f6:e2:3c:bb:60:36:ad:56:18:30:ea:02:91:02:
19:cd:b9:4b:29:8b:ee:48:bb:a8:a0:3a:7c:57:d1:
d2:63:c7:78:45:42:6a:75:9d:7e:4d:bd:1b:5c:4e:
1b:f8:f0:fb:68:40:d6:3a:3a:d0:68:da:c5:28:58:
55:0d:9a:e9:06:67:fa:23:00:9b:44:8a:1f:b7:bf:
4a:0a:aa:30:1a:8c:3f:b9:e3:40:5d:a0:bc:41:47:
26:a1:8d:ac:08:3d:6e:65:58:18:89:09:e1:7f:55:
25:ce:bf:7e:c2:8f:92:5f:91:f4:7f:d7:7c:4e:21:
c4:76:8a:39:d6:01:01:79:08:1f:61:9c:59:28:da:
c8:18:17:1a:39:20:2b:95:5a:01:e4:5d:8f:d6:7a:
06:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:93:DC:DB:00:58:BC:92:42:40:29:02:CE:3B:05:23:8B:86:EF:17
X509v3 Authority Key Identifier:
keyid:83:C8:29:3A:99:00:9D:3A:F9:90:10:30:B1:84:DA:DA:01:B0:B2:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g8gpOpkAnTr5kBAwsYTa2gGwsps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/f97544-117e-4ae9-ae56-eb117aee2cc1/1/g8gpOpkAnTr5kBAwsYTa2gGwsps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/f97544-117e-4ae9-ae56-eb117aee2cc1/1/g8gpOpkAnTr5kBAwsYTa2gGwsps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:7b:d0:6a:3a:7b:0c:53:d5:10:ca:30:76:03:4f:f8:9c:13:
49:1b:48:73:e7:b5:8e:cb:c7:9e:d4:1f:e4:32:fb:be:f4:dc:
cc:c8:02:17:aa:9f:21:01:87:38:45:f8:63:ab:f5:ed:7d:d1:
ed:6e:43:c0:d1:ea:d6:fe:55:36:16:b5:0a:07:db:46:05:ad:
ce:5b:b8:ad:b2:d8:67:2c:bb:e8:88:eb:76:73:6e:e5:ac:88:
97:a6:60:14:ba:24:19:4e:04:11:15:4e:67:f8:2a:48:b0:74:
5f:71:55:c1:d3:0a:c8:c6:20:f3:33:91:85:86:1d:2b:28:eb:
a1:b1:e4:58:5a:ed:17:99:5c:9e:f8:3a:47:9a:f4:38:12:e4:
d1:08:b8:37:2f:51:23:94:35:44:57:3e:7d:81:e3:a5:99:42:
3e:0d:b6:01:96:01:d3:6e:7b:c3:64:f3:c9:6a:ab:57:01:3e:
8f:ff:76:6c:fd:2d:33:b8:0d:0b:09:c1:19:c0:69:41:21:c2:
99:07:83:5f:7b:16:61:b6:fd:ed:e2:db:17:68:03:a4:88:87:
e2:13:d6:d8:58:fe:52:94:c1:19:bf:d1:57:bd:3d:5d:d4:8e:
30:e7:af:83:8b:1a:14:a4:58:c3:e6:b5:d3:ac:88:99:96:8b:
bf:0e:50:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2drLwo44ejHjie2Ze6HBU3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzYzgyOTNhOTkwMDlkM2FmOTkwMTAzMGIxODRkYWRhMDFi
MGIyOWIwHhcNMjYwNDE3MjMwMDM2WhcNMjYwNDE4MjMwMDM2WjAzMTEwLwYDVQQD
EygwNTkzZGNkYjAwNThiYzkyNDI0MDI5MDJjZTNiMDUyMzhiODZlZjE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl48WCzi/2/KkHjy8gX6AHBZaJZkn
yHsHiAGgoKZko3txr7QUv2uTK8wAlTqMwcZoZaDkqMFH01K8/0Y5BCRq8qm5Ur+O
5J0yGBeobem1VSqznqbYSzOGEXeS471sp97WHaz+cFHWAbeR9uI8u2A2rVYYMOoC
kQIZzblLKYvuSLuooDp8V9HSY8d4RUJqdZ1+Tb0bXE4b+PD7aEDWOjrQaNrFKFhV
DZrpBmf6IwCbRIoft79KCqowGow/ueNAXaC8QUcmoY2sCD1uZVgYiQnhf1Ulzr9+
wo+SX5H0f9d8TiHEdoo51gEBeQgfYZxZKNrIGBcaOSArlVoB5F2P1noGVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAWT3NsAWLySQkApAs47BSOLhu8XMB8GA1UdIwQY
MBaAFIPIKTqZAJ06+ZAQMLGE2toBsLKbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzhncE9wa0FuVHI1a0JBd3NZVGEyZ0d3c3BzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9mOTc1NDQtMTE3ZS00YWU5LWFlNTYt
ZWIxMTdhZWUyY2MxLzEvZzhncE9wa0FuVHI1a0JBd3NZVGEyZ0d3c3BzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9mOTc1NDQtMTE3ZS00YWU5LWFlNTYtZWIxMTdhZWUyY2Mx
LzEvZzhncE9wa0FuVHI1a0JBd3NZVGEyZ0d3c3BzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoHvQajp7
DFPVEMowdgNP+JwTSRtIc+e1jsvHntQf5DL7vvTczMgCF6qfIQGHOEX4Y6v17X3R
7W5DwNHq1v5VNha1CgfbRgWtzlu4rbLYZyy76IjrdnNu5ayIl6ZgFLokGU4EERVO
Z/gqSLB0X3FVwdMKyMYg8zORhYYdKyjrobHkWFrtF5lcnvg6R5r0OBLk0Qi4Ny9R
I5Q1RFc+fYHjpZlCPg22AZYB0257w2TzyWqrVwE+j/92bP0tM7gNCwnBGcBpQSHC
mQeDX3sWYbb97eLbF2gDpIiH4hPW2Fj+UpTBGb/RV709XdSOMOevg4saFKRYw+a1
06yImZaLvw5Qlw==
-----END CERTIFICATE-----
Generated at Sat Apr 18 05:07:48 2026 by rpki-client