Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/8s_gx-1SqZoyXlBNN5nls5HbDfs.mft
File: 8s_gx-1SqZoyXlBNN5nls5HbDfs.mft (raw, json)
Hash identifier: Bd1csL9BK8i+azPQjQf+c4ifa2u9ZiL4tQ4I5hQe0u8=
Subject key identifier: 9A:AB:75:98:E0:8D:9E:84:18:B5:FC:C7:AA:1B:65:D9:17:75:AD:58
Authority key identifier: F2:CF:E0:C7:ED:52:A9:9A:32:5E:50:4D:37:99:E5:B3:91:DB:0D:FB
Certificate issuer: /CN=f2cfe0c7ed52a99a325e504d3799e5b391db0dfb
Certificate serial: 019F8F7F136856A89172B0EB26C86FFB2522
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8s_gx-1SqZoyXlBNN5nls5HbDfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/8s_gx-1SqZoyXlBNN5nls5HbDfs.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:01:37 +0000
Manifest this update: Thu 23 Jul 2026 15:01:37 +0000
Manifest next update: Fri 24 Jul 2026 15:01:37 +0000
Files and hashes: 1: 8s_gx-1SqZoyXlBNN5nls5HbDfs.crl (hash: BTwyAOjJAngfYxaWww5xDAU884xXCM1Joo3uGFxq7QU=)
2: uhdCZBM6YTqjUjLBXnIpIR-OZBc.roa (hash: xnmUIesa/su266lF+u7BctDrkkI/AWYCj+Ji+myJrrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/8s_gx-1SqZoyXlBNN5nls5HbDfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/8s_gx-1SqZoyXlBNN5nls5HbDfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8s_gx-1SqZoyXlBNN5nls5HbDfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7f:13:68:56:a8:91:72:b0:eb:26:c8:6f:fb:25:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2cfe0c7ed52a99a325e504d3799e5b391db0dfb
Validity
Not Before: Jul 23 15:01:37 2026 GMT
Not After : Jul 24 15:01:37 2026 GMT
Subject: CN=9aab7598e08d9e8418b5fcc7aa1b65d91775ad58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:86:9a:ae:c7:ac:c0:37:17:ab:94:90:47:50:
c6:57:cb:f8:ee:0b:cb:5f:92:9d:d1:c2:cc:43:13:
c6:4c:38:e6:5b:d1:93:c4:07:86:d0:b6:49:03:fb:
b5:a0:15:0a:5d:31:35:73:d1:b1:59:9a:cc:66:93:
1c:f0:e7:ff:fa:a1:06:4a:1b:66:c2:18:c0:6d:fb:
ba:62:7b:ad:f4:c1:96:24:19:02:2b:d6:1e:86:ba:
db:6a:98:55:bd:a6:1d:f1:ac:0d:53:7a:f3:2e:2f:
60:e2:51:e4:5f:94:ef:a7:ee:41:ab:24:5d:a2:ce:
c1:bf:fe:9f:b3:d2:23:4c:4a:8f:89:68:af:8e:ad:
29:27:d9:05:79:c5:3c:c8:63:dc:e6:6b:45:d9:14:
8d:fa:52:04:9f:3a:14:a3:a7:ff:9c:b5:06:86:e3:
51:db:ee:b4:24:ad:eb:f3:e1:d7:8a:e1:54:e8:fc:
dc:55:17:19:4b:c3:4f:4d:58:fa:9d:32:42:78:f1:
bd:17:3c:f9:ce:ff:52:b7:e4:fb:21:bb:f8:e3:4d:
8f:62:28:a4:9d:ca:85:5f:1a:04:57:6c:29:60:bc:
5a:b1:24:63:12:6c:7a:ec:de:bd:9d:a4:f6:91:ad:
99:89:96:13:44:18:c5:a4:2d:64:09:bf:c9:ad:42:
b8:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:AB:75:98:E0:8D:9E:84:18:B5:FC:C7:AA:1B:65:D9:17:75:AD:58
X509v3 Authority Key Identifier:
keyid:F2:CF:E0:C7:ED:52:A9:9A:32:5E:50:4D:37:99:E5:B3:91:DB:0D:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8s_gx-1SqZoyXlBNN5nls5HbDfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/8s_gx-1SqZoyXlBNN5nls5HbDfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/8s_gx-1SqZoyXlBNN5nls5HbDfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:82:e1:e2:3c:0e:a8:5a:d2:da:5d:fa:49:e8:f6:e2:80:92:
7a:98:87:57:c3:a1:7a:0f:13:c9:14:e8:36:d4:f1:f3:ce:91:
6d:fa:a3:50:57:69:03:a1:9d:bd:39:ba:f0:9e:74:e4:a6:07:
dd:0c:b4:09:6c:94:49:2e:aa:36:3f:ac:36:3a:eb:aa:33:ae:
db:47:be:dc:ba:2f:ec:15:e9:5c:79:2d:64:67:e7:f3:28:4e:
33:a0:cf:e5:94:98:58:da:8c:a3:fc:69:3b:ae:d7:f4:83:d9:
cd:9d:45:6a:dd:9a:c2:f1:c3:52:2a:79:06:62:f2:e5:d7:c5:
59:4a:b6:f9:d3:70:44:1a:e9:ee:20:a3:0b:2b:b5:e4:13:15:
20:c6:16:d3:9c:c0:d1:0f:c8:9d:5a:eb:eb:83:88:93:7e:04:
52:04:77:52:3f:73:02:bb:e7:f1:ce:36:6c:99:d1:a5:a5:e0:
60:fb:c6:5b:57:ed:4d:66:2a:24:ad:ed:52:d8:90:57:f6:11:
49:61:6f:6a:d2:b2:18:77:27:4c:63:1d:a7:67:10:38:a2:ef:
5d:fc:d1:2b:ba:7d:7c:41:da:76:29:35:11:db:db:b8:b8:47:
1c:41:bb:28:96:36:12:19:f8:46:01:02:e7:6e:4f:68:49:a3:
29:cb:50:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:34:20 2026 by rpki-client