Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/f97544-117e-4ae9-ae56-eb117aee2cc1/1/g8gpOpkAnTr5kBAwsYTa2gGwsps.mft
File: g8gpOpkAnTr5kBAwsYTa2gGwsps.mft (raw, json)
Hash identifier: FSCvJr3OZnGsgZEhIjbaARlseEI3gmAju+2VK+9cUEE=
Subject key identifier: 8B:08:64:F7:EF:F8:A7:16:F7:CB:91:6A:92:25:6A:CF:CA:E6:CD:62
Authority key identifier: 83:C8:29:3A:99:00:9D:3A:F9:90:10:30:B1:84:DA:DA:01:B0:B2:9B
Certificate issuer: /CN=83c8293a99009d3af9901030b184dada01b0b29b
Certificate serial: 01A1069386C1EFEE69CC7D8CCB4CB4636394
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g8gpOpkAnTr5kBAwsYTa2gGwsps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/f97544-117e-4ae9-ae56-eb117aee2cc1/1/g8gpOpkAnTr5kBAwsYTa2gGwsps.mft
Manifest number: 028E
Signing time: Sun 04 Oct 2026 11:01:33 +0000
Manifest this update: Sun 04 Oct 2026 11:01:33 +0000
Manifest next update: Mon 05 Oct 2026 11:01:33 +0000
Files and hashes: 1: F5dKrMVwvFBrfz8gk2Vz9w5CTV8.asa (hash: wN6U/2fEaT7W5CHB3z+oIBLa7QQY7S0jmGI+LDLotpo=)
2: g8gpOpkAnTr5kBAwsYTa2gGwsps.crl (hash: VpbHoMnxYtx+Ie0Qf0xjOFrzBOYohFzkiIeDx0kHg60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/f97544-117e-4ae9-ae56-eb117aee2cc1/1/g8gpOpkAnTr5kBAwsYTa2gGwsps.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/f97544-117e-4ae9-ae56-eb117aee2cc1/1/g8gpOpkAnTr5kBAwsYTa2gGwsps.mft
rsync://rpki.ripe.net/repository/DEFAULT/g8gpOpkAnTr5kBAwsYTa2gGwsps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 11:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:06:93:86:c1:ef:ee:69:cc:7d:8c:cb:4c:b4:63:63:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83c8293a99009d3af9901030b184dada01b0b29b
Validity
Not Before: Oct 4 11:01:33 2026 GMT
Not After : Oct 5 11:01:33 2026 GMT
Subject: CN=8b0864f7eff8a716f7cb916a92256acfcae6cd62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:69:f9:d5:37:6e:f6:e1:f1:0b:64:9d:17:91:
d5:13:49:ad:61:38:93:a3:1e:78:9f:2c:60:28:87:
c6:73:33:cc:f9:6f:b1:bf:a3:0f:b5:88:27:1e:b9:
e1:1a:33:b2:a3:a7:d4:67:3b:5b:7a:8f:40:75:88:
b1:78:26:9b:6a:e0:01:16:29:2e:53:03:f9:56:04:
97:e8:8a:54:02:be:bf:92:aa:73:bc:97:54:d8:cd:
79:10:bc:f7:62:0e:aa:50:07:39:99:b9:7f:ee:64:
1f:ca:dc:2f:5b:73:db:eb:b7:b7:a7:82:f3:c3:f0:
02:42:95:c8:13:63:6f:4e:89:7d:a5:23:86:ed:28:
c6:1f:39:14:b6:7e:1f:74:a2:e3:b0:59:95:ed:88:
98:46:c7:51:4e:d1:ea:b6:a2:06:6d:40:41:f4:ef:
21:29:67:a7:14:95:f2:0d:ee:88:7e:cc:c5:4a:47:
ec:21:6b:d6:e5:ee:ea:ba:0d:f3:25:a0:cc:ae:12:
c2:cd:3c:63:1e:be:e4:40:74:08:25:6e:6a:9b:31:
04:30:4a:19:1f:3d:b2:3c:e8:b8:c1:9a:e7:a0:48:
80:0d:e1:1f:f5:99:dd:63:0b:b1:ab:fc:15:e6:f4:
d1:37:b9:dd:9a:46:e3:df:bd:df:09:44:4a:37:60:
20:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:08:64:F7:EF:F8:A7:16:F7:CB:91:6A:92:25:6A:CF:CA:E6:CD:62
X509v3 Authority Key Identifier:
keyid:83:C8:29:3A:99:00:9D:3A:F9:90:10:30:B1:84:DA:DA:01:B0:B2:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g8gpOpkAnTr5kBAwsYTa2gGwsps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/f97544-117e-4ae9-ae56-eb117aee2cc1/1/g8gpOpkAnTr5kBAwsYTa2gGwsps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/f97544-117e-4ae9-ae56-eb117aee2cc1/1/g8gpOpkAnTr5kBAwsYTa2gGwsps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:19:6c:52:a5:55:62:29:b9:5a:79:2b:11:0c:79:96:19:6b:
ac:5f:58:70:70:e2:c1:45:9c:fa:bd:aa:17:7a:ae:76:ec:5e:
a4:83:ce:7e:0e:a6:79:9d:a4:9d:c3:a7:25:50:a3:24:f6:35:
9a:49:12:f0:09:7a:07:40:df:ea:9b:a6:03:3e:57:9f:cb:6f:
ba:ec:ac:86:e7:61:94:6c:f5:66:95:5c:a6:f3:79:f7:44:e8:
83:a7:ec:ba:11:80:62:40:c2:25:13:21:8c:6c:5b:be:60:79:
02:36:42:91:05:1d:d8:d2:fa:17:91:db:82:2d:e2:d7:29:b4:
ba:e1:09:65:13:c2:34:97:31:89:ce:1c:dc:36:1e:db:d7:b1:
77:8a:92:7f:7f:14:23:30:a0:88:2c:2f:4a:a0:79:21:8f:c9:
ed:b3:49:46:59:70:8d:31:14:ae:b6:ec:3b:e8:a8:15:50:2d:
00:26:2f:ba:9b:1d:43:6d:04:97:a8:99:4a:48:45:9a:cf:93:
a0:92:33:91:cd:69:42:fb:b1:74:41:10:e0:fc:99:12:c3:d2:
0b:11:53:b0:f7:55:0d:4b:51:e2:1b:2d:41:05:67:ab:c4:ba:
21:5b:67:d5:0c:71:1c:c2:e0:21:24:44:b6:46:e2:95:9f:4b:
f2:c3:98:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:38:06 2026 by rpki-client