Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/f97544-117e-4ae9-ae56-eb117aee2cc1/1/g8gpOpkAnTr5kBAwsYTa2gGwsps.mft
File: g8gpOpkAnTr5kBAwsYTa2gGwsps.mft (raw, json)
Hash identifier: 15p26N1QAOUTe+XrtMofiuXt19EfMrVz0+aUb5YvLmM=
Subject key identifier: D5:2B:55:24:D0:B7:CB:F5:EE:1B:22:AF:E6:9E:C9:CA:5A:78:79:08
Authority key identifier: 83:C8:29:3A:99:00:9D:3A:F9:90:10:30:B1:84:DA:DA:01:B0:B2:9B
Certificate issuer: /CN=83c8293a99009d3af9901030b184dada01b0b29b
Certificate serial: 019E1D228245E702F119F9A65F19869FBE31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g8gpOpkAnTr5kBAwsYTa2gGwsps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/f97544-117e-4ae9-ae56-eb117aee2cc1/1/g8gpOpkAnTr5kBAwsYTa2gGwsps.mft
Manifest number: 010C
Signing time: Tue 12 May 2026 17:01:01 +0000
Manifest this update: Tue 12 May 2026 17:01:01 +0000
Manifest next update: Wed 13 May 2026 17:01:01 +0000
Files and hashes: 1: F5dKrMVwvFBrfz8gk2Vz9w5CTV8.asa (hash: wN6U/2fEaT7W5CHB3z+oIBLa7QQY7S0jmGI+LDLotpo=)
2: g8gpOpkAnTr5kBAwsYTa2gGwsps.crl (hash: GvGmR7QIrb0ys5JCpKQCq6dHPjQWhG+TgE2Jk9toKzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/f97544-117e-4ae9-ae56-eb117aee2cc1/1/g8gpOpkAnTr5kBAwsYTa2gGwsps.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/f97544-117e-4ae9-ae56-eb117aee2cc1/1/g8gpOpkAnTr5kBAwsYTa2gGwsps.mft
rsync://rpki.ripe.net/repository/DEFAULT/g8gpOpkAnTr5kBAwsYTa2gGwsps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:82:45:e7:02:f1:19:f9:a6:5f:19:86:9f:be:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83c8293a99009d3af9901030b184dada01b0b29b
Validity
Not Before: May 12 17:01:01 2026 GMT
Not After : May 13 17:01:01 2026 GMT
Subject: CN=d52b5524d0b7cbf5ee1b22afe69ec9ca5a787908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:eb:66:50:9d:ac:f6:74:d1:a1:49:61:84:cf:
04:23:5b:56:08:5e:5d:59:1a:dc:62:44:85:d4:d7:
a1:52:72:02:61:16:c4:13:9b:47:59:b3:b8:90:69:
88:14:d7:5b:02:0f:98:8d:77:6d:75:1e:7d:22:1f:
f4:96:9f:e0:10:0c:87:97:79:77:2a:6c:ff:c7:75:
66:7b:24:5b:15:2b:a0:9f:d3:d5:9e:ec:6f:70:c0:
8b:e2:f4:f2:56:43:8e:db:e4:83:39:9e:ec:23:7d:
16:3d:21:c0:c3:62:b6:bb:72:99:c1:17:10:d4:7d:
0b:da:54:46:dc:59:82:4d:95:3e:fc:9f:66:05:ef:
20:bf:2a:eb:35:f8:3b:06:da:8d:8e:d5:bb:27:78:
c5:80:6d:51:da:a5:91:0e:45:67:21:8b:c3:fb:c2:
ff:29:7e:e5:a9:16:ad:73:ab:b0:b1:6a:b4:8d:3c:
42:a7:1d:4c:f5:68:c0:03:8a:d8:15:65:d2:b2:4a:
e4:8f:d3:39:2d:1c:b9:d1:fb:2c:d1:fe:a4:e8:75:
04:71:02:3c:9a:7b:16:67:8c:45:1b:1d:b9:fd:76:
cc:63:4e:ce:81:eb:38:1c:25:a1:c3:3b:ef:a7:06:
72:23:23:9d:6d:01:92:45:d6:a2:cf:c5:13:8f:48:
fe:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:2B:55:24:D0:B7:CB:F5:EE:1B:22:AF:E6:9E:C9:CA:5A:78:79:08
X509v3 Authority Key Identifier:
keyid:83:C8:29:3A:99:00:9D:3A:F9:90:10:30:B1:84:DA:DA:01:B0:B2:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g8gpOpkAnTr5kBAwsYTa2gGwsps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/f97544-117e-4ae9-ae56-eb117aee2cc1/1/g8gpOpkAnTr5kBAwsYTa2gGwsps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/f97544-117e-4ae9-ae56-eb117aee2cc1/1/g8gpOpkAnTr5kBAwsYTa2gGwsps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:49:8a:60:3a:1b:bf:3d:ae:79:f2:23:a0:dc:f2:8e:c3:05:
5a:6c:4a:4f:21:34:d8:f4:96:97:9f:50:31:ab:82:44:eb:d4:
1d:12:f0:19:7b:cc:91:98:7c:b1:a6:f0:4c:44:48:68:7c:18:
9a:8b:23:a4:6e:19:7d:8f:4b:23:8a:f7:2c:64:dc:c7:81:cf:
a4:24:59:38:98:7c:86:41:5d:67:a9:be:52:3a:99:c9:dc:5b:
c5:f7:5a:2c:c6:a1:04:2e:58:5a:d3:c9:e2:fc:ae:0a:f5:27:
83:99:2c:8d:0d:ba:9c:3b:ed:2c:f1:62:43:ba:92:c4:32:ee:
47:1a:de:96:07:02:74:7b:7d:8b:cb:8e:ba:b6:1c:27:58:9d:
68:c5:85:f7:66:be:99:98:bd:2c:d8:d3:94:d4:84:64:d3:6e:
cc:d8:77:24:d4:94:23:0a:5f:fd:2a:dd:96:05:48:ab:42:42:
4d:75:d4:51:57:c1:c9:df:8e:05:aa:ef:bf:12:a4:d3:4c:56:
17:2e:ee:61:ca:d3:b4:25:dc:58:56:03:ea:ee:30:5d:c4:22:
36:dc:ec:3e:2d:8b:92:36:90:da:c8:b7:3f:df:56:38:7a:8c:
04:3f:a3:b6:31:6e:dc:55:e7:4c:5c:b0:7d:42:af:52:51:88:
a8:e6:64:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:25:42 2026 by rpki-client