Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/8s_gx-1SqZoyXlBNN5nls5HbDfs.mft
File: 8s_gx-1SqZoyXlBNN5nls5HbDfs.mft (raw, json)
Hash identifier: n67/IgupIW2x0XPQZ1v93NsL4SMfbqXQPpNAITMQa7g=
Subject key identifier: AD:9F:8E:1C:2F:45:80:F4:06:14:E2:48:48:59:DD:F6:60:C4:53:56
Authority key identifier: F2:CF:E0:C7:ED:52:A9:9A:32:5E:50:4D:37:99:E5:B3:91:DB:0D:FB
Certificate issuer: /CN=f2cfe0c7ed52a99a325e504d3799e5b391db0dfb
Certificate serial: 01A0E1745D998D1BF6E9B106F7AD198B6A27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8s_gx-1SqZoyXlBNN5nls5HbDfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/8s_gx-1SqZoyXlBNN5nls5HbDfs.mft
Manifest number: EE
Signing time: Sun 27 Sep 2026 06:01:34 +0000
Manifest this update: Sun 27 Sep 2026 06:01:34 +0000
Manifest next update: Mon 28 Sep 2026 06:01:34 +0000
Files and hashes: 1: 8s_gx-1SqZoyXlBNN5nls5HbDfs.crl (hash: K1wWqQYNUwcoiSS0W+tATfFPLt2lhnBYlzVeCiVO1Y4=)
2: uhdCZBM6YTqjUjLBXnIpIR-OZBc.roa (hash: xnmUIesa/su266lF+u7BctDrkkI/AWYCj+Ji+myJrrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/8s_gx-1SqZoyXlBNN5nls5HbDfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/8s_gx-1SqZoyXlBNN5nls5HbDfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8s_gx-1SqZoyXlBNN5nls5HbDfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:74:5d:99:8d:1b:f6:e9:b1:06:f7:ad:19:8b:6a:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2cfe0c7ed52a99a325e504d3799e5b391db0dfb
Validity
Not Before: Sep 27 06:01:34 2026 GMT
Not After : Sep 28 06:01:34 2026 GMT
Subject: CN=ad9f8e1c2f4580f40614e2484859ddf660c45356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a5:75:5b:43:61:c5:d3:dd:07:cb:cd:10:a0:
bf:a4:b8:4d:62:31:c4:b3:14:52:cf:09:5e:80:4c:
fd:21:c2:94:c3:77:30:9d:c4:d4:91:1e:f9:13:8d:
e1:0e:51:56:18:84:45:29:27:57:6b:ef:96:4d:d9:
0e:ec:ff:2c:8d:f9:05:ce:4e:07:44:e3:71:a3:e9:
88:1d:ca:61:81:43:48:83:c7:b8:b7:e6:66:af:d4:
52:cb:75:b4:a7:4e:d8:7d:00:c5:ce:70:6e:02:1a:
bb:93:e6:0c:35:6b:54:b2:bd:01:92:d0:e5:dc:15:
d2:bc:7c:2d:fb:f9:ac:05:87:26:2d:1a:80:5e:fb:
ca:cf:c9:48:96:16:35:df:1a:70:79:30:47:8d:c0:
05:76:b8:9d:7a:17:61:ef:a9:b4:86:5a:97:c0:3e:
45:20:31:6f:df:54:20:21:56:c6:f4:46:45:6c:7f:
48:ee:fb:5d:da:29:55:95:ff:ce:20:b6:83:dc:22:
91:d7:dc:da:0e:c4:d5:d7:4f:9b:d6:31:69:ff:08:
cd:a1:c7:4c:45:df:9e:21:c1:ce:7d:f0:9e:ed:76:
0a:03:1a:ea:7f:8c:1b:50:d2:da:87:5b:05:fc:58:
41:43:46:ce:b9:9a:3d:3c:6e:cc:7a:83:5a:66:65:
78:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:9F:8E:1C:2F:45:80:F4:06:14:E2:48:48:59:DD:F6:60:C4:53:56
X509v3 Authority Key Identifier:
keyid:F2:CF:E0:C7:ED:52:A9:9A:32:5E:50:4D:37:99:E5:B3:91:DB:0D:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8s_gx-1SqZoyXlBNN5nls5HbDfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/8s_gx-1SqZoyXlBNN5nls5HbDfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/8s_gx-1SqZoyXlBNN5nls5HbDfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:7f:8e:63:a9:c8:25:be:f6:f9:b1:ad:bc:74:47:d0:0a:a5:
ab:05:2b:de:03:7c:14:2c:d6:ab:68:86:75:3a:5f:51:6e:2c:
a7:42:e9:65:11:c5:f0:16:17:43:49:e4:bb:5a:d7:75:cf:30:
b1:25:ad:aa:f4:a5:4f:45:ed:ad:b3:e2:0c:40:6b:98:92:3c:
11:da:63:71:61:1d:d2:20:f6:aa:3c:f6:b3:56:53:5d:44:11:
be:f6:08:f6:ec:b5:29:9a:e1:f2:53:ff:05:1c:5d:6a:75:97:
42:3f:bc:89:74:65:75:ef:8e:e7:8d:85:20:85:1b:fa:ab:0f:
ec:47:d7:2a:41:19:64:0e:28:45:b2:25:14:b6:59:91:52:c3:
81:e6:25:09:20:88:0b:36:14:9d:04:23:e1:34:5f:70:cb:4b:
53:29:d8:e1:d7:41:98:cf:c4:47:a4:8e:80:2c:91:a1:97:28:
9a:ad:73:c0:b2:96:02:fe:b2:4b:44:55:f8:2b:5b:ba:5e:ce:
a9:00:45:96:7d:b9:51:6f:45:ec:9e:aa:1e:26:a8:ff:40:73:
1c:ce:25:14:df:7b:82:cf:ae:6f:96:e4:ec:8e:76:be:be:9b:
8a:dc:22:b2:10:e2:ce:a9:d4:13:f1:36:aa:93:ef:24:da:be:
cc:74:e4:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:17:47 2026 by rpki-client