Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/f97544-117e-4ae9-ae56-eb117aee2cc1/1/g8gpOpkAnTr5kBAwsYTa2gGwsps.mft
File: g8gpOpkAnTr5kBAwsYTa2gGwsps.mft (raw, json)
Hash identifier: TlCOECc4VgxM+aS51XrQmqkJNNmB5daGd/VewunqPBM=
Subject key identifier: 6E:F1:36:4F:A6:5A:CA:53:BE:88:13:F0:3B:1A:B1:2C:A2:7B:A5:68
Authority key identifier: 83:C8:29:3A:99:00:9D:3A:F9:90:10:30:B1:84:DA:DA:01:B0:B2:9B
Certificate issuer: /CN=83c8293a99009d3af9901030b184dada01b0b29b
Certificate serial: 019FA718CF7482D8347321C5C982A4907C66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g8gpOpkAnTr5kBAwsYTa2gGwsps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/f97544-117e-4ae9-ae56-eb117aee2cc1/1/g8gpOpkAnTr5kBAwsYTa2gGwsps.mft
Manifest number: 01D8
Signing time: Tue 28 Jul 2026 05:00:48 +0000
Manifest this update: Tue 28 Jul 2026 05:00:48 +0000
Manifest next update: Wed 29 Jul 2026 05:00:48 +0000
Files and hashes: 1: F5dKrMVwvFBrfz8gk2Vz9w5CTV8.asa (hash: wN6U/2fEaT7W5CHB3z+oIBLa7QQY7S0jmGI+LDLotpo=)
2: g8gpOpkAnTr5kBAwsYTa2gGwsps.crl (hash: jinlShq7+XjQLXBvEZGCANpJtvs2yb/UXcaps1bFlnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/f97544-117e-4ae9-ae56-eb117aee2cc1/1/g8gpOpkAnTr5kBAwsYTa2gGwsps.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/f97544-117e-4ae9-ae56-eb117aee2cc1/1/g8gpOpkAnTr5kBAwsYTa2gGwsps.mft
rsync://rpki.ripe.net/repository/DEFAULT/g8gpOpkAnTr5kBAwsYTa2gGwsps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 05:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:18:cf:74:82:d8:34:73:21:c5:c9:82:a4:90:7c:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83c8293a99009d3af9901030b184dada01b0b29b
Validity
Not Before: Jul 28 05:00:48 2026 GMT
Not After : Jul 29 05:00:48 2026 GMT
Subject: CN=6ef1364fa65aca53be8813f03b1ab12ca27ba568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:bf:2f:c7:58:39:b6:8c:37:56:84:59:34:7e:
94:da:6d:75:8c:e7:65:8f:f5:19:67:fe:4a:c5:42:
78:3a:7f:8f:de:1d:d6:cb:99:1a:f3:11:d0:a7:87:
07:16:db:20:c2:47:d5:f1:c5:1e:1d:a2:14:0e:5d:
d5:b1:e8:14:00:65:29:ed:7a:67:ab:d8:cb:b9:7f:
d2:fb:bc:dd:14:f6:d6:c4:a7:95:fa:55:1f:b1:bf:
86:3c:b0:9e:00:1e:11:50:18:d9:67:72:bc:d5:62:
01:65:e9:91:4c:02:01:1a:2b:d5:a8:86:a6:e9:f9:
0d:9e:c1:69:83:d2:bb:f0:aa:92:fa:3b:3f:a9:fb:
bd:02:94:7d:fa:7c:64:2d:78:75:0b:df:f9:9d:44:
dc:6a:46:4c:5e:fb:15:35:c3:9b:d8:61:95:f5:61:
f7:01:b7:54:ba:13:12:50:e7:c4:12:9a:05:7d:13:
48:d9:f0:1d:9b:5e:b1:7e:be:b5:22:0f:90:9a:96:
99:b5:2c:67:66:d5:3a:71:b3:36:7d:53:b4:0b:9f:
1d:0f:f0:18:47:94:81:9b:be:71:8e:9d:d5:4b:b7:
b8:32:5b:d4:8a:f9:3c:7c:a3:ca:e8:37:78:46:df:
53:b4:8c:5c:a6:7e:61:b6:0a:3d:b5:29:d4:03:9b:
18:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:F1:36:4F:A6:5A:CA:53:BE:88:13:F0:3B:1A:B1:2C:A2:7B:A5:68
X509v3 Authority Key Identifier:
keyid:83:C8:29:3A:99:00:9D:3A:F9:90:10:30:B1:84:DA:DA:01:B0:B2:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g8gpOpkAnTr5kBAwsYTa2gGwsps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/f97544-117e-4ae9-ae56-eb117aee2cc1/1/g8gpOpkAnTr5kBAwsYTa2gGwsps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/f97544-117e-4ae9-ae56-eb117aee2cc1/1/g8gpOpkAnTr5kBAwsYTa2gGwsps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:ca:d6:1c:56:57:75:d5:00:93:7c:43:84:0a:bf:44:52:cc:
c4:82:cb:f1:6a:3b:89:79:79:82:e4:65:44:20:1b:77:96:53:
0c:c0:ed:00:0e:b7:28:22:94:32:e1:41:b7:4b:5c:d9:71:0d:
5a:b2:b2:77:39:2a:24:91:02:6d:e2:9f:c6:5a:fc:4a:2c:c0:
fe:f0:bc:3d:be:1f:26:aa:cd:a3:a3:29:1b:a2:12:87:95:97:
da:7e:67:c1:7e:1d:2a:3e:e7:6a:35:85:3c:d0:59:d9:04:7a:
a6:79:14:7a:e2:07:d1:a0:4a:d5:38:cd:1d:20:ef:48:42:b1:
8f:79:01:e7:05:3f:10:46:24:f6:81:e9:af:da:bb:68:c4:e3:
ee:f3:b8:0e:e9:43:58:3e:15:cc:8d:fa:73:2c:f2:15:58:d7:
f6:04:cc:d8:6d:3c:dd:b5:d9:db:bd:76:18:b3:f3:11:a8:e4:
e1:b7:f5:aa:6d:67:c4:d5:d7:86:92:06:f8:56:9b:a4:9a:97:
04:99:cf:ac:ab:0f:f9:0f:9f:89:1c:7c:99:a8:dc:f8:47:e1:
8e:c1:d4:1c:8b:2b:44:4f:cc:a6:ad:6a:b2:f3:f8:50:c4:c1:
2e:ba:3c:32:6c:24:35:8e:33:c0:0c:e7:89:a8:d5:83:c1:ed:
bb:21:6c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 14:50:31 2026 by rpki-client