Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/8GGl-jflzRAVCFJj7AKeGv95ONc.mft
File: 8GGl-jflzRAVCFJj7AKeGv95ONc.mft (raw, json)
Hash identifier: jN1s9KxuW55JkQOP5jNjnKHRpQ11/CIyxtX+oYNeppg=
Subject key identifier: 2B:5C:D8:E3:C7:79:07:78:E3:14:35:BA:90:05:0B:C9:15:9E:A1:8F
Authority key identifier: F0:61:A5:FA:37:E5:CD:10:15:08:52:63:EC:02:9E:1A:FF:79:38:D7
Certificate issuer: /CN=f061a5fa37e5cd1015085263ec029e1aff7938d7
Certificate serial: 019D38D3A1D4DBF8AD60EEEF10A2EBD7D843
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8GGl-jflzRAVCFJj7AKeGv95ONc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/8GGl-jflzRAVCFJj7AKeGv95ONc.mft
Manifest number: 0827
Signing time: Sun 29 Mar 2026 09:01:26 +0000
Manifest this update: Sun 29 Mar 2026 09:01:26 +0000
Manifest next update: Mon 30 Mar 2026 09:01:26 +0000
Files and hashes: 1: 8GGl-jflzRAVCFJj7AKeGv95ONc.crl (hash: echAuG5iNiK3GGvpcBgILwc+SFI0Brwc7Y1KVqqsFvk=)
2: y_SCanDgj_MM1S_IDo64t6KWr_s.roa (hash: c0z1Y3wg26X0Siv87LHdyGq71I3TjKiIOT/D8Eaa0Ck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/8GGl-jflzRAVCFJj7AKeGv95ONc.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/8GGl-jflzRAVCFJj7AKeGv95ONc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8GGl-jflzRAVCFJj7AKeGv95ONc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:a1:d4:db:f8:ad:60:ee:ef:10:a2:eb:d7:d8:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f061a5fa37e5cd1015085263ec029e1aff7938d7
Validity
Not Before: Mar 29 09:01:26 2026 GMT
Not After : Mar 30 09:01:26 2026 GMT
Subject: CN=2b5cd8e3c7790778e31435ba90050bc9159ea18f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:53:46:5e:9a:2f:84:78:84:b9:de:cf:4e:27:
fa:98:04:fc:32:bb:82:18:4e:d1:12:33:d9:c4:c9:
e3:c1:ae:ba:16:8c:88:3c:55:b7:d3:12:b5:be:a9:
85:71:e2:00:a6:51:33:14:03:97:90:b7:20:ac:8a:
43:6a:dc:f2:f3:ec:27:b9:ea:b1:35:cf:c0:88:8c:
31:4e:06:b0:2d:32:32:f5:fd:d2:cb:96:10:94:5c:
94:b7:df:75:39:88:24:df:b6:a4:6f:8c:cc:4a:a0:
45:c1:b9:65:13:53:d2:6c:e9:2b:02:a3:f4:23:d3:
d1:2c:41:e6:c1:d4:b0:9e:9a:78:9b:4f:ec:12:28:
8a:ce:1a:bc:ba:e5:42:e2:26:41:30:06:08:6b:eb:
8e:c4:d4:9f:e0:79:d2:4e:32:ea:c2:d3:97:13:a9:
b8:9a:2d:4e:98:a1:26:93:8b:60:f1:d4:44:96:bb:
2b:71:91:99:2d:4f:26:56:27:be:e9:06:c4:46:a7:
b4:f2:2b:20:02:26:3a:52:3b:4c:14:56:90:26:b1:
74:98:5b:d9:4e:08:da:24:91:67:02:2b:51:a2:d4:
5b:b0:43:ac:bf:a7:fa:d7:06:f2:d2:04:9e:ee:fa:
40:34:87:ac:38:a2:46:90:09:c4:67:95:60:d6:53:
45:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:5C:D8:E3:C7:79:07:78:E3:14:35:BA:90:05:0B:C9:15:9E:A1:8F
X509v3 Authority Key Identifier:
keyid:F0:61:A5:FA:37:E5:CD:10:15:08:52:63:EC:02:9E:1A:FF:79:38:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8GGl-jflzRAVCFJj7AKeGv95ONc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/8GGl-jflzRAVCFJj7AKeGv95ONc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c79095-8c2b-42a3-946f-18b128c8b486/1/8GGl-jflzRAVCFJj7AKeGv95ONc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:16:b9:05:70:39:dc:68:61:60:93:81:f5:ad:8a:80:cf:39:
52:7d:b2:05:b6:e9:83:a2:56:76:b2:50:56:99:05:91:19:2c:
35:93:2c:fa:2d:34:d5:3d:37:be:31:c4:6f:9e:29:37:11:aa:
40:64:30:f1:5b:58:5c:2f:f1:b0:95:b1:ef:b4:eb:eb:25:b3:
95:2d:d4:79:9a:8f:a2:f9:84:6a:34:e5:c8:16:bc:4e:53:6d:
50:ef:f5:30:75:b1:ad:cf:74:f8:98:d6:a9:dd:3e:6a:12:8f:
51:ae:e5:9a:de:94:02:07:9e:4d:60:d7:d5:ee:22:e0:3b:89:
c4:7b:ac:84:dd:c2:ab:a0:d0:62:4e:ae:9e:e2:61:41:0a:11:
ca:0b:27:6c:cf:9c:b0:6c:7e:fd:b5:b4:40:ca:02:df:dd:e7:
b8:7e:56:27:34:51:10:11:da:21:42:cb:2f:b8:16:d1:98:72:
9f:87:3d:eb:de:b6:ea:61:d3:2a:df:e2:7a:02:66:f5:3d:1b:
19:bf:17:8a:2d:9c:36:4a:be:95:81:dd:55:ef:58:d2:41:c8:
c4:18:ab:f1:07:44:8d:39:9a:87:c2:fb:f2:61:77:37:14:df:
aa:5a:a4:c0:d5:81:92:ee:ea:b7:70:6a:4e:d3:8c:19:89:0f:
56:61:e1:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:37:36 2026 by rpki-client