Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/f97544-117e-4ae9-ae56-eb117aee2cc1/1/g8gpOpkAnTr5kBAwsYTa2gGwsps.mft
File: g8gpOpkAnTr5kBAwsYTa2gGwsps.mft (raw, json)
Hash identifier: 8XVe6maxIZ+lCpysiHT/KBteoOXT3Jjq8nEN5rTE8ro=
Subject key identifier: 80:5C:BD:B8:55:2E:0F:2D:2E:EE:C1:01:5B:CE:41:C5:2B:A2:09:52
Authority key identifier: 83:C8:29:3A:99:00:9D:3A:F9:90:10:30:B1:84:DA:DA:01:B0:B2:9B
Certificate issuer: /CN=83c8293a99009d3af9901030b184dada01b0b29b
Certificate serial: 019D25840D9F4AA66C58018EE36E87916FA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g8gpOpkAnTr5kBAwsYTa2gGwsps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/f97544-117e-4ae9-ae56-eb117aee2cc1/1/g8gpOpkAnTr5kBAwsYTa2gGwsps.mft
Manifest number: 8B
Signing time: Wed 25 Mar 2026 15:01:44 +0000
Manifest this update: Wed 25 Mar 2026 15:01:44 +0000
Manifest next update: Thu 26 Mar 2026 15:01:44 +0000
Files and hashes: 1: ZCX1K491fuofD-KW-jb0pfq9nuw.asa (hash: 0g8X9qZdEwEVTUpjkYItWEgd8L4aVsf8OFtpGdhGrQI=)
2: g8gpOpkAnTr5kBAwsYTa2gGwsps.crl (hash: qXp4k/BNjXYznmjpT8QcjhcolIVMIeIzGcKwe85aY0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/f97544-117e-4ae9-ae56-eb117aee2cc1/1/g8gpOpkAnTr5kBAwsYTa2gGwsps.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/f97544-117e-4ae9-ae56-eb117aee2cc1/1/g8gpOpkAnTr5kBAwsYTa2gGwsps.mft
rsync://rpki.ripe.net/repository/DEFAULT/g8gpOpkAnTr5kBAwsYTa2gGwsps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:84:0d:9f:4a:a6:6c:58:01:8e:e3:6e:87:91:6f:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83c8293a99009d3af9901030b184dada01b0b29b
Validity
Not Before: Mar 25 15:01:44 2026 GMT
Not After : Mar 26 15:01:44 2026 GMT
Subject: CN=805cbdb8552e0f2d2eeec1015bce41c52ba20952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:16:3c:e4:de:95:b1:7c:83:fa:96:39:f1:dd:
c3:7e:37:eb:5d:a4:bc:14:a7:e1:86:96:ca:f4:14:
4c:5d:97:0a:32:e6:38:69:8a:14:0d:40:32:b5:f2:
bb:97:84:04:84:7f:7d:01:b3:dc:cb:95:7b:f7:47:
0f:93:19:bd:7d:8e:c4:38:9b:60:88:c4:12:f6:9c:
e1:db:75:f0:a6:e4:fb:69:be:d9:8d:55:34:ac:11:
3c:b7:a7:6e:df:de:c7:44:9c:1a:8e:94:61:6f:b7:
b3:19:72:26:bc:7e:82:4e:2b:24:6a:ff:a0:4a:e2:
f3:22:1c:0d:f8:c4:30:62:8c:f1:13:9d:c6:25:a9:
0b:82:e8:de:97:2b:fc:94:32:45:af:5e:9f:aa:3e:
16:a9:69:a4:92:4d:d4:d2:73:47:9d:10:b8:c8:ef:
f1:cf:a4:07:d0:46:d3:9e:ac:29:d0:35:c3:c8:0e:
26:df:28:e1:cf:a9:ef:5e:e0:16:de:de:32:b1:04:
b8:80:f7:bb:52:53:49:51:c9:4c:a8:ea:58:56:97:
22:ef:70:7b:86:cb:a0:72:46:ab:53:14:d7:9b:bb:
1a:0c:db:01:71:6b:3b:9c:07:ce:0d:51:df:cc:b4:
38:85:0a:48:f0:15:5e:76:51:bd:c5:3c:f5:dd:da:
09:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:5C:BD:B8:55:2E:0F:2D:2E:EE:C1:01:5B:CE:41:C5:2B:A2:09:52
X509v3 Authority Key Identifier:
keyid:83:C8:29:3A:99:00:9D:3A:F9:90:10:30:B1:84:DA:DA:01:B0:B2:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g8gpOpkAnTr5kBAwsYTa2gGwsps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/f97544-117e-4ae9-ae56-eb117aee2cc1/1/g8gpOpkAnTr5kBAwsYTa2gGwsps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/f97544-117e-4ae9-ae56-eb117aee2cc1/1/g8gpOpkAnTr5kBAwsYTa2gGwsps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:df:6a:d3:33:d3:af:91:ae:e8:17:f4:cd:1d:f0:28:12:a1:
fc:59:68:5b:97:ce:5e:18:82:57:92:b8:16:6f:0a:ca:5c:fe:
d2:71:1b:7d:fa:8a:4a:1b:1e:f7:1a:5e:48:32:40:3f:2b:0e:
f3:3c:33:2e:e3:2a:81:d7:09:0a:3c:1c:a8:9e:9c:99:f2:89:
a1:3b:df:bf:a3:2f:04:42:71:b2:12:70:b4:da:04:53:8d:b5:
9e:ec:10:b2:8a:12:58:f1:5d:00:48:37:0c:5d:c1:a4:90:24:
bd:66:8e:e1:ca:65:2c:8d:44:1a:f3:dd:94:22:91:b6:27:ae:
d6:0c:e7:a9:96:f6:a9:2a:5a:27:97:a2:8d:61:6d:ca:18:46:
3b:0f:4c:f9:4b:59:56:ad:97:5b:42:0f:a5:38:9f:42:15:f7:
8f:81:e3:27:ec:ea:d5:18:8a:0d:94:d2:2e:f7:1a:35:f9:ef:
d8:3e:b4:03:01:ab:30:f9:9b:ee:5c:29:78:71:59:b6:6c:8d:
62:ba:72:64:f7:2a:66:ba:59:90:49:64:f2:e5:38:3f:ba:d0:
6a:d2:11:23:e8:35:75:7f:81:fd:df:a2:97:ae:72:3e:dd:61:
d4:7e:77:c8:ba:9e:bf:9c:12:cd:a8:4e:09:c2:4f:4f:68:71:
c9:bb:1b:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:16:42 2026 by rpki-client