Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.mft
File: g8bKhlGbVtTRhzr24lfefpfzyKw.mft (raw, json)
Hash identifier: ULt+/mkRHMj4w9ATwhzEIVNBXVDDUK38n5zNxiY0eMI=
Subject key identifier: 42:DE:A0:FA:8D:AE:6D:02:D3:02:8C:C4:03:A3:0A:77:05:C6:48:CD
Authority key identifier: 83:C6:CA:86:51:9B:56:D4:D1:87:3A:F6:E2:57:DE:7E:97:F3:C8:AC
Certificate issuer: /CN=83c6ca86519b56d4d1873af6e257de7e97f3c8ac
Certificate serial: 019F927F01DC175CCFC3786A17C99F99A91C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g8bKhlGbVtTRhzr24lfefpfzyKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.mft
Manifest number: 0EC1
Signing time: Fri 24 Jul 2026 05:00:24 +0000
Manifest this update: Fri 24 Jul 2026 05:00:24 +0000
Manifest next update: Sat 25 Jul 2026 05:00:24 +0000
Files and hashes: 1: fPLCcx5H4vWt-QPjiq-SI0ctgqs.roa (hash: rnGcIrJs7Q+bQMqz23kcZC8Vb081NJ16W91BEzEb8U4=)
2: g8bKhlGbVtTRhzr24lfefpfzyKw.crl (hash: LLm9YcG+Zg0PYSMrFvKRnk8ImiWrqyEP7HlsQbl25mo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/g8bKhlGbVtTRhzr24lfefpfzyKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:01:dc:17:5c:cf:c3:78:6a:17:c9:9f:99:a9:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83c6ca86519b56d4d1873af6e257de7e97f3c8ac
Validity
Not Before: Jul 24 05:00:24 2026 GMT
Not After : Jul 25 05:00:24 2026 GMT
Subject: CN=42dea0fa8dae6d02d3028cc403a30a7705c648cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c4:20:1a:6d:97:3e:ac:fb:a1:06:e0:42:d2:
5a:86:d8:8c:a4:da:7e:b7:0d:01:c7:b2:82:29:2a:
97:e6:c8:97:dc:3d:de:ff:83:9a:ee:46:60:8f:11:
3d:f6:aa:62:3a:8c:93:f9:7b:e4:a8:ce:f1:eb:cf:
e1:7a:af:0f:6b:52:b4:5c:e2:55:42:b6:4f:b4:1f:
ab:82:fe:0a:69:de:82:c5:17:74:30:f6:d0:96:2b:
ed:84:45:2c:02:27:8f:78:17:5c:2e:2e:0d:5e:d8:
72:16:af:ba:d1:d7:fc:1b:23:ba:f9:f7:91:36:15:
2c:af:fb:4e:af:89:67:fb:e3:f7:35:7a:58:84:fe:
46:b1:26:3c:2a:fe:05:ea:01:91:85:6f:57:9e:e6:
53:55:80:b3:76:5e:c0:1e:08:26:f6:e4:64:73:76:
42:ca:7f:d0:3d:39:a1:96:44:ee:ed:c6:96:fe:92:
96:70:fe:90:15:20:b4:ec:c6:26:2f:16:93:b8:de:
87:92:e2:c3:08:6f:28:51:8e:ca:5d:6f:cc:d1:d7:
1e:bd:36:c2:7a:39:e7:d8:b9:3c:ed:c6:08:ff:a5:
ff:bf:26:89:53:29:67:fc:47:66:30:c4:0e:79:aa:
39:a0:7d:a4:a3:33:81:81:15:05:38:55:06:d5:a2:
fb:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:DE:A0:FA:8D:AE:6D:02:D3:02:8C:C4:03:A3:0A:77:05:C6:48:CD
X509v3 Authority Key Identifier:
keyid:83:C6:CA:86:51:9B:56:D4:D1:87:3A:F6:E2:57:DE:7E:97:F3:C8:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g8bKhlGbVtTRhzr24lfefpfzyKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:eb:8a:7d:90:29:b5:db:53:c7:00:10:37:83:28:a4:62:b4:
d9:6c:ea:bf:c7:db:1e:c8:80:aa:f9:3e:1f:e4:63:28:98:08:
62:d0:86:d7:2b:74:c1:e4:0f:fb:9c:94:eb:63:aa:bf:cd:c6:
75:94:0a:06:44:05:33:80:51:fb:f3:14:81:db:26:5d:3e:5d:
98:70:89:28:3a:1e:67:8d:f7:12:ca:28:74:25:57:ea:f6:31:
74:93:4a:f0:b0:a0:df:82:27:74:19:20:45:e3:96:4d:1d:45:
1e:bc:94:7b:db:aa:55:08:f9:1a:df:a9:ef:e2:80:44:ce:ce:
e0:08:e3:ae:49:a9:41:81:dc:e0:d1:f3:53:67:2f:b0:06:ed:
d7:b8:d8:7f:41:f2:ec:25:48:82:84:74:f2:49:7c:06:fe:c2:
c2:47:f4:2a:d8:50:f9:7f:7d:23:44:a2:b3:85:3a:8d:1f:33:
5f:f3:fb:fd:10:1c:85:76:57:a7:7a:12:f0:f7:29:5f:c0:bb:
53:ff:35:00:3e:bb:47:0b:3a:54:38:8b:cd:af:c9:78:21:ba:
68:37:2a:5a:f3:e2:a8:0e:53:f0:c5:84:07:6d:94:24:9d:d5:
00:89:4b:fe:bc:07:d4:58:29:ff:c3:06:f2:ff:88:09:b2:3c:
d5:f8:68:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:55:59 2026 by rpki-client