Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/f97544-117e-4ae9-ae56-eb117aee2cc1/1/g8gpOpkAnTr5kBAwsYTa2gGwsps.mft
File: g8gpOpkAnTr5kBAwsYTa2gGwsps.mft (raw, json)
Hash identifier: TJxW064hL5RtsLhjcEEn8LO7/OQXcLcWqtmcLjSleJs=
Subject key identifier: 31:F6:12:B5:72:61:0B:BE:93:99:0E:6D:A9:8B:45:8C:C1:EA:D9:ED
Authority key identifier: 83:C8:29:3A:99:00:9D:3A:F9:90:10:30:B1:84:DA:DA:01:B0:B2:9B
Certificate issuer: /CN=83c8293a99009d3af9901030b184dada01b0b29b
Certificate serial: 019CA7FC75EBEDE6DE3AA78057EC8E19CE7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g8gpOpkAnTr5kBAwsYTa2gGwsps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/f97544-117e-4ae9-ae56-eb117aee2cc1/1/g8gpOpkAnTr5kBAwsYTa2gGwsps.mft
Manifest number: 4A
Signing time: Sun 01 Mar 2026 06:01:05 +0000
Manifest this update: Sun 01 Mar 2026 06:01:05 +0000
Manifest next update: Mon 02 Mar 2026 06:01:05 +0000
Files and hashes: 1: ZCX1K491fuofD-KW-jb0pfq9nuw.asa (hash: 0g8X9qZdEwEVTUpjkYItWEgd8L4aVsf8OFtpGdhGrQI=)
2: g8gpOpkAnTr5kBAwsYTa2gGwsps.crl (hash: 5DUw5JjXmk1Brh3EZkTBKnd05G4rmdvwUrkCj2I7Ilg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/f97544-117e-4ae9-ae56-eb117aee2cc1/1/g8gpOpkAnTr5kBAwsYTa2gGwsps.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/f97544-117e-4ae9-ae56-eb117aee2cc1/1/g8gpOpkAnTr5kBAwsYTa2gGwsps.mft
rsync://rpki.ripe.net/repository/DEFAULT/g8gpOpkAnTr5kBAwsYTa2gGwsps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a7:fc:75:eb:ed:e6:de:3a:a7:80:57:ec:8e:19:ce:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83c8293a99009d3af9901030b184dada01b0b29b
Validity
Not Before: Mar 1 06:01:05 2026 GMT
Not After : Mar 2 06:01:05 2026 GMT
Subject: CN=31f612b572610bbe93990e6da98b458cc1ead9ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9d:36:06:03:73:cf:66:83:b3:1e:2d:6d:58:
e3:b1:85:c7:59:73:34:10:27:b3:e1:2f:d5:e0:d8:
16:6d:17:88:19:40:eb:dd:ce:6e:9e:63:05:7b:98:
46:7d:e2:bb:a1:b1:58:c1:23:03:3a:27:23:ff:03:
da:60:6e:e8:04:75:0a:bc:25:0b:27:5e:54:51:27:
35:af:13:e7:c0:54:e6:09:09:03:01:7e:6a:c1:22:
c8:70:4c:71:b7:60:4e:42:d2:72:06:13:17:8e:f5:
b7:90:3b:14:59:15:46:6e:5c:e9:99:c9:33:30:63:
c9:ea:84:c9:75:23:fc:e4:3c:fa:cd:4d:3b:2a:6d:
99:f4:88:e2:7f:26:f9:a9:1c:77:e1:51:06:3a:a0:
72:10:6e:08:39:91:f6:b6:ae:d9:a5:2c:55:89:6c:
fe:4e:1b:5a:df:ab:da:8c:cb:f3:cd:cb:5d:a1:93:
29:8a:75:66:fa:15:92:27:4d:4e:57:ca:a2:fe:96:
52:3c:cc:00:e3:92:3b:bf:b4:10:79:c9:e6:60:e9:
b3:34:c7:41:38:bd:58:78:44:50:c4:e1:3c:38:58:
cc:27:21:1b:35:e9:33:4c:98:d5:fa:fa:1a:75:b4:
f3:6c:87:e3:87:0b:fb:ca:80:fa:8e:d8:34:66:b1:
87:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:F6:12:B5:72:61:0B:BE:93:99:0E:6D:A9:8B:45:8C:C1:EA:D9:ED
X509v3 Authority Key Identifier:
keyid:83:C8:29:3A:99:00:9D:3A:F9:90:10:30:B1:84:DA:DA:01:B0:B2:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g8gpOpkAnTr5kBAwsYTa2gGwsps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/f97544-117e-4ae9-ae56-eb117aee2cc1/1/g8gpOpkAnTr5kBAwsYTa2gGwsps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/f97544-117e-4ae9-ae56-eb117aee2cc1/1/g8gpOpkAnTr5kBAwsYTa2gGwsps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:5a:c5:3d:d3:83:a8:57:b6:e5:61:d5:36:14:51:30:87:76:
8a:10:c4:91:ec:a5:c1:32:5d:bb:19:8b:df:f1:ad:34:d1:79:
58:fa:b3:5a:af:dc:00:bd:e5:54:88:e8:29:ef:91:d6:68:92:
0a:b8:01:1a:ae:cb:13:e2:b8:53:c6:0d:7e:5e:20:4f:9a:05:
2f:c1:db:f8:ad:a9:67:b2:f1:a1:d4:78:75:26:71:ae:1c:ca:
e8:0e:c6:66:6f:21:c8:b9:ff:dc:1e:ad:05:76:cf:1f:b2:ea:
55:72:b3:18:56:49:1c:21:ed:42:96:c1:ee:b5:6e:40:e3:fb:
f2:1a:db:64:2e:be:b5:ed:8f:95:a1:87:68:ed:9b:95:70:2f:
39:21:6c:d1:21:17:0c:fc:6f:df:b3:87:52:b3:3d:7f:8c:23:
2d:5c:e5:fa:f7:3e:04:e3:3e:3f:eb:02:c6:82:35:ad:10:40:
38:e0:ad:aa:40:1c:9e:98:ae:5d:07:85:f0:66:45:1e:be:9e:
6d:bc:10:bc:67:34:84:ec:34:d9:26:85:14:94:39:23:65:11:
13:2a:92:0d:c4:9a:d8:12:2d:e5:da:13:c3:93:ce:05:f8:1b:
23:d6:be:36:ed:c3:25:80:d8:91:bf:1e:1b:63:89:30:71:ab:
b5:a9:53:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:40:33 2026 by rpki-client