Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/f97544-117e-4ae9-ae56-eb117aee2cc1/1/g8gpOpkAnTr5kBAwsYTa2gGwsps.mft
File: g8gpOpkAnTr5kBAwsYTa2gGwsps.mft (raw, json)
Hash identifier: KAKSBXQb372K9Dg7lYLDQfgzsfSJQRyHcMSqpIe0Cfs=
Subject key identifier: 45:85:39:36:69:34:D0:2E:70:0F:D5:2D:41:8C:04:09:40:A1:68:0A
Authority key identifier: 83:C8:29:3A:99:00:9D:3A:F9:90:10:30:B1:84:DA:DA:01:B0:B2:9B
Certificate issuer: /CN=83c8293a99009d3af9901030b184dada01b0b29b
Certificate serial: 019F8FEC33E5098FA67BD6117F2B0032B2BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g8gpOpkAnTr5kBAwsYTa2gGwsps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/f97544-117e-4ae9-ae56-eb117aee2cc1/1/g8gpOpkAnTr5kBAwsYTa2gGwsps.mft
Manifest number: 01CC
Signing time: Thu 23 Jul 2026 17:00:49 +0000
Manifest this update: Thu 23 Jul 2026 17:00:49 +0000
Manifest next update: Fri 24 Jul 2026 17:00:49 +0000
Files and hashes: 1: F5dKrMVwvFBrfz8gk2Vz9w5CTV8.asa (hash: wN6U/2fEaT7W5CHB3z+oIBLa7QQY7S0jmGI+LDLotpo=)
2: g8gpOpkAnTr5kBAwsYTa2gGwsps.crl (hash: Hl/GpZzDFd28ZX5pquqoh97kZ/vbVkCj4wifrutGHNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/f97544-117e-4ae9-ae56-eb117aee2cc1/1/g8gpOpkAnTr5kBAwsYTa2gGwsps.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/f97544-117e-4ae9-ae56-eb117aee2cc1/1/g8gpOpkAnTr5kBAwsYTa2gGwsps.mft
rsync://rpki.ripe.net/repository/DEFAULT/g8gpOpkAnTr5kBAwsYTa2gGwsps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:33:e5:09:8f:a6:7b:d6:11:7f:2b:00:32:b2:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83c8293a99009d3af9901030b184dada01b0b29b
Validity
Not Before: Jul 23 17:00:49 2026 GMT
Not After : Jul 24 17:00:49 2026 GMT
Subject: CN=458539366934d02e700fd52d418c040940a1680a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c7:59:36:cb:0e:63:47:41:00:72:23:fb:13:
af:7c:f4:e6:c6:87:17:05:01:0f:d7:3b:a3:5c:2d:
27:fc:6e:16:4c:39:a6:df:90:ac:87:33:86:20:c1:
9c:d8:95:df:96:34:af:31:bf:40:cc:94:24:6e:61:
0e:f0:96:43:02:b1:1c:39:96:e9:33:98:33:e3:94:
f2:20:2a:b8:82:fb:50:49:b9:a7:91:0f:b6:2d:d0:
16:ed:f9:44:38:22:bf:2f:98:70:c9:b7:3d:89:6e:
03:e1:08:8a:e5:22:c6:08:94:c1:77:73:c0:8b:0d:
15:ab:d5:e4:6a:c7:d5:fa:b0:99:f5:39:56:7d:24:
a6:5f:f2:ca:0b:2c:6d:44:ec:08:c7:45:87:35:92:
b6:8b:b7:3d:35:b1:56:22:20:30:fe:fb:6f:fd:be:
54:bf:8a:d2:69:7b:f6:78:28:27:2f:b6:36:17:e5:
da:4c:9f:75:d8:c9:a5:d2:e1:6e:9d:ff:ea:e6:92:
ca:b0:e8:f3:4e:2e:59:4f:6c:05:de:34:46:07:6c:
b0:e3:ef:96:0d:cb:a8:a2:a7:a7:1a:bd:2c:9c:70:
da:cf:67:88:e7:73:9e:7a:2b:cd:75:f1:bf:8e:75:
97:08:97:0b:85:72:11:3b:fc:2c:3d:3c:4d:fc:a3:
40:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:85:39:36:69:34:D0:2E:70:0F:D5:2D:41:8C:04:09:40:A1:68:0A
X509v3 Authority Key Identifier:
keyid:83:C8:29:3A:99:00:9D:3A:F9:90:10:30:B1:84:DA:DA:01:B0:B2:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g8gpOpkAnTr5kBAwsYTa2gGwsps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/f97544-117e-4ae9-ae56-eb117aee2cc1/1/g8gpOpkAnTr5kBAwsYTa2gGwsps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/f97544-117e-4ae9-ae56-eb117aee2cc1/1/g8gpOpkAnTr5kBAwsYTa2gGwsps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:cc:17:8c:8e:87:fe:ca:35:3f:87:7e:e5:b1:1e:da:f1:b1:
b1:f7:54:98:72:59:93:3b:55:81:f5:70:10:0f:bf:1f:4e:fb:
2d:12:91:1d:92:f4:68:c0:c2:4d:2a:d6:34:c1:7b:3f:f8:94:
68:ee:1a:05:ba:dc:98:42:71:96:fb:a4:27:4f:25:45:9b:80:
80:f3:36:da:6d:60:03:72:a1:d4:19:28:87:5b:c1:75:4f:46:
c8:d6:3d:91:05:1d:6d:85:87:e3:49:95:10:7e:8a:2d:4e:4c:
12:38:ff:38:4a:aa:2e:36:56:cf:f1:61:5e:47:85:a5:78:69:
ac:2b:43:96:bb:8e:4c:16:00:79:f8:4d:c8:0f:d1:01:5d:c7:
ec:b9:7c:22:46:a7:f9:23:8a:9b:2a:8e:06:98:45:c6:64:b5:
8a:80:40:3c:30:bd:37:41:a5:b1:b5:29:a2:fa:d8:56:88:4d:
60:cc:56:d3:63:ae:0c:cc:61:12:f4:ab:e7:60:3b:34:4d:21:
1d:96:26:8d:d8:d9:b6:3b:06:6b:13:fd:58:3d:51:1b:23:d8:
9b:86:61:72:1d:bc:1e:f1:c3:45:27:0b:df:60:a0:e1:5a:91:
1f:b0:3e:5e:6c:8b:da:46:c7:e0:45:2f:f9:8e:8d:8c:09:21:
ad:e3:4c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:06:51 2026 by rpki-client