Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/cfa7c3-f0c8-4622-8a47-9ab26b266aa7/1/g8jQHK8rB1HQNcU3Vm9FYnkl5PY.mft
File: g8jQHK8rB1HQNcU3Vm9FYnkl5PY.mft (raw, json)
Hash identifier: w7ClVTkzsS35BM8DyqBeqsyOpqgECIrgU/vXJJ3BCqw=
Subject key identifier: 4C:68:5C:00:5E:5C:FC:01:B6:BD:6E:E1:1F:4A:DB:F9:49:46:1F:3D
Authority key identifier: 83:C8:D0:1C:AF:2B:07:51:D0:35:C5:37:56:6F:45:62:79:25:E4:F6
Certificate issuer: /CN=83c8d01caf2b0751d035c537566f45627925e4f6
Certificate serial: 019D2A724188F5A5B2315530BC1DFB0F7D09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g8jQHK8rB1HQNcU3Vm9FYnkl5PY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/cfa7c3-f0c8-4622-8a47-9ab26b266aa7/1/g8jQHK8rB1HQNcU3Vm9FYnkl5PY.mft
Manifest number: 13CD
Signing time: Thu 26 Mar 2026 14:00:23 +0000
Manifest this update: Thu 26 Mar 2026 14:00:23 +0000
Manifest next update: Fri 27 Mar 2026 14:00:23 +0000
Files and hashes: 1: g2p638fZZwCrnvRFqg9eTRpbiw4.roa (hash: qSK6pl1sLuO5L8q2M8N4Ull7ELILSQAIXlEcO8nJrKo=)
2: g8jQHK8rB1HQNcU3Vm9FYnkl5PY.crl (hash: MPxIBMZpgkdiCmYnCP8/B6KYMYLyXTlkSnYQ9goPQkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/cfa7c3-f0c8-4622-8a47-9ab26b266aa7/1/g8jQHK8rB1HQNcU3Vm9FYnkl5PY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/cfa7c3-f0c8-4622-8a47-9ab26b266aa7/1/g8jQHK8rB1HQNcU3Vm9FYnkl5PY.mft
rsync://rpki.ripe.net/repository/DEFAULT/g8jQHK8rB1HQNcU3Vm9FYnkl5PY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:41:88:f5:a5:b2:31:55:30:bc:1d:fb:0f:7d:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83c8d01caf2b0751d035c537566f45627925e4f6
Validity
Not Before: Mar 26 14:00:23 2026 GMT
Not After : Mar 27 14:00:23 2026 GMT
Subject: CN=4c685c005e5cfc01b6bd6ee11f4adbf949461f3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2e:37:9c:51:4a:1f:71:12:88:69:dd:d0:c5:
7f:ce:fb:93:00:59:34:71:c5:91:5b:3b:02:b2:7a:
ae:99:d3:d0:fb:01:77:d6:79:e2:b0:e3:20:5d:e7:
ea:b8:7f:1a:08:fd:c1:91:7d:86:6f:9e:2a:34:16:
7e:a1:3f:21:1f:7a:d6:3f:94:ad:90:dc:45:1b:22:
35:b2:0a:31:8e:d7:a2:04:39:c6:ec:fa:c8:92:97:
6b:99:47:70:16:e3:c2:79:45:96:98:0b:b6:88:3f:
5d:ef:5d:ea:ab:af:e2:76:ce:e9:e4:ef:71:54:ea:
3a:ce:71:12:e2:4f:60:f6:7c:e8:d5:0e:eb:b1:24:
41:31:f1:7b:84:d9:97:c9:1c:a8:cb:54:b7:60:f7:
3b:c5:66:91:f9:07:7b:ea:8e:64:7f:4d:02:79:5b:
e1:e7:57:4e:84:5f:3f:d4:83:d7:df:bd:b1:58:86:
e0:29:d4:b8:7a:ac:6d:a7:45:cd:3d:b4:15:b0:0f:
92:3e:cc:82:4a:cd:28:d3:e8:53:f5:1c:c0:f1:1a:
56:42:d0:fa:1b:53:ae:49:57:20:07:42:3f:2f:b1:
1f:df:31:bc:50:5d:19:1b:a5:c6:f8:cc:a4:b9:e8:
b3:81:6d:cd:b7:b6:d7:2e:ee:ec:6a:de:3b:aa:dc:
5c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:68:5C:00:5E:5C:FC:01:B6:BD:6E:E1:1F:4A:DB:F9:49:46:1F:3D
X509v3 Authority Key Identifier:
keyid:83:C8:D0:1C:AF:2B:07:51:D0:35:C5:37:56:6F:45:62:79:25:E4:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g8jQHK8rB1HQNcU3Vm9FYnkl5PY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/cfa7c3-f0c8-4622-8a47-9ab26b266aa7/1/g8jQHK8rB1HQNcU3Vm9FYnkl5PY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/cfa7c3-f0c8-4622-8a47-9ab26b266aa7/1/g8jQHK8rB1HQNcU3Vm9FYnkl5PY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:28:4a:13:47:d7:ac:26:fd:c3:5f:8a:8e:30:db:67:61:bc:
90:0b:40:8a:2a:56:b6:e2:33:8f:f6:10:f6:50:73:58:32:9e:
b2:a3:8d:2c:97:25:3b:bd:88:28:c8:9e:ce:c8:c9:c6:0a:35:
76:da:12:82:bf:b1:c9:37:83:3f:21:61:c3:30:63:de:88:5e:
15:f4:aa:cd:3d:d8:83:23:44:1a:5b:d7:38:bd:75:35:9b:d2:
d8:68:2a:5a:30:37:8c:a2:db:91:ec:85:2c:2b:73:49:95:f7:
31:f0:3a:b8:1e:7d:99:40:de:9a:aa:07:29:39:a6:a3:ac:21:
87:74:ae:1b:ae:7b:64:b6:19:f4:cf:ed:e3:08:68:fc:c2:6f:
f1:01:ab:be:27:de:1c:50:c9:dd:54:9a:86:75:ae:dd:89:f8:
0b:41:87:5f:3e:41:f9:78:c5:1e:8d:0a:33:b4:7e:49:8d:c2:
2d:6e:3f:ba:71:4b:14:15:35:e4:76:0f:af:17:b2:82:be:8b:
bf:41:4a:32:1f:78:56:71:ea:8b:92:fc:08:6f:a0:66:d0:e3:
b0:f5:f3:2d:80:02:57:2b:ab:ac:92:e0:f1:e1:5e:89:35:67:
fd:a3:2d:8f:4c:4d:df:74:6c:ea:67:cb:42:39:25:d5:c2:3c:
7e:f8:ce:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:55:41 2026 by rpki-client