Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/f8be9b-58f0-4544-b23f-6354ef0771c9/1/g2elJH2fTpT3vVcc8T01q0iwHSQ.mft
File: g2elJH2fTpT3vVcc8T01q0iwHSQ.mft (raw, json)
Hash identifier: LeXywDVzO4N+HINkhV6aXtNc1g8OhZKbyy9DCA0ZgCI=
Subject key identifier: 31:8F:03:72:73:C8:15:8B:E2:22:19:FD:2D:8D:0A:DA:E1:3E:EA:5D
Authority key identifier: 83:67:A5:24:7D:9F:4E:94:F7:BD:57:1C:F1:3D:35:AB:48:B0:1D:24
Certificate issuer: /CN=8367a5247d9f4e94f7bd571cf13d35ab48b01d24
Certificate serial: 01A1DE39D4E05AAAEF191FA7AF3565F2BA2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2elJH2fTpT3vVcc8T01q0iwHSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/f8be9b-58f0-4544-b23f-6354ef0771c9/1/g2elJH2fTpT3vVcc8T01q0iwHSQ.mft
Manifest number: 0A88
Signing time: Sun 15 Nov 2026 08:01:34 +0000
Manifest this update: Sun 15 Nov 2026 08:01:34 +0000
Manifest next update: Mon 16 Nov 2026 08:01:34 +0000
Files and hashes: 1: LoYQyBr4YJ5ITZr2_fcC3dmO_KA.asa (hash: zpgidiPNOSMW/wwxutmy+pYEFABRXk9mKUJiu/1ReKw=)
2: g2elJH2fTpT3vVcc8T01q0iwHSQ.crl (hash: 71d+z2o1gI37vYHHJRaCOenEg8O0Ay4GnXDgCRWecg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/f8be9b-58f0-4544-b23f-6354ef0771c9/1/g2elJH2fTpT3vVcc8T01q0iwHSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/f8be9b-58f0-4544-b23f-6354ef0771c9/1/g2elJH2fTpT3vVcc8T01q0iwHSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/g2elJH2fTpT3vVcc8T01q0iwHSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:39:d4:e0:5a:aa:ef:19:1f:a7:af:35:65:f2:ba:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8367a5247d9f4e94f7bd571cf13d35ab48b01d24
Validity
Not Before: Nov 15 08:01:34 2026 GMT
Not After : Nov 16 08:01:34 2026 GMT
Subject: CN=318f037273c8158be22219fd2d8d0adae13eea5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6d:cf:f5:ce:cf:b0:22:c0:0f:a3:85:5f:8a:
9f:d2:bf:7f:15:bb:eb:be:42:62:c7:8d:7e:85:a8:
f5:fa:d4:d4:14:e2:92:b2:43:a2:73:0d:c3:73:c3:
dd:cd:4f:3a:bd:b4:ff:73:40:0d:49:ce:51:96:3f:
d4:ab:c2:f1:34:1d:88:b2:6a:8c:2b:1f:23:d8:cc:
24:85:9f:41:8f:20:0b:03:09:07:c8:bd:b0:c8:96:
82:e9:49:2b:aa:3b:df:41:4a:e8:04:36:9f:9c:b7:
a2:64:68:dd:50:e2:92:47:9c:bd:99:d0:a4:18:d7:
91:ff:f3:ca:d0:43:f7:2f:74:23:bc:32:33:28:9b:
20:35:fe:86:93:a2:1c:29:be:06:a0:74:e4:09:a1:
e8:70:8f:9b:21:aa:25:48:13:07:9c:01:ba:36:6d:
b6:bb:e9:c0:c2:25:54:5f:e7:ea:d1:14:2f:11:61:
50:2f:d6:36:a5:c9:19:03:2e:6c:c6:55:97:d7:3b:
19:7d:48:df:42:d6:2e:5c:77:51:56:9c:9e:fd:54:
e3:9b:18:7d:ee:af:d0:ee:3c:53:68:72:63:e3:c0:
c0:44:5a:83:ed:e0:9a:55:17:49:ae:eb:75:3c:11:
3b:2d:f2:a3:57:d4:d9:86:88:18:59:87:c8:c4:10:
e7:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:8F:03:72:73:C8:15:8B:E2:22:19:FD:2D:8D:0A:DA:E1:3E:EA:5D
X509v3 Authority Key Identifier:
keyid:83:67:A5:24:7D:9F:4E:94:F7:BD:57:1C:F1:3D:35:AB:48:B0:1D:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2elJH2fTpT3vVcc8T01q0iwHSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f8be9b-58f0-4544-b23f-6354ef0771c9/1/g2elJH2fTpT3vVcc8T01q0iwHSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f8be9b-58f0-4544-b23f-6354ef0771c9/1/g2elJH2fTpT3vVcc8T01q0iwHSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:67:1c:7c:19:52:aa:2b:33:de:fe:74:10:86:0e:68:d5:d0:
16:49:33:d6:7c:15:6b:ae:65:cd:18:11:37:4f:ab:d3:25:af:
db:e8:26:b5:82:01:23:8b:1b:e5:b9:64:21:4c:d8:17:90:40:
5d:5e:25:e9:62:94:63:29:8d:71:41:64:da:9e:fa:68:95:c0:
ae:e4:14:04:08:41:a2:b7:71:e0:be:39:5b:9f:00:1b:65:86:
69:9b:b2:cf:c6:da:48:6d:60:17:3c:a1:74:81:73:bb:9f:d6:
37:f2:07:8d:5d:93:03:ca:26:75:fb:3e:fa:a3:7d:79:b3:b4:
94:86:bc:f4:02:38:47:7b:0f:d3:36:cf:1b:28:cb:40:b5:20:
b6:84:2b:a6:9b:b1:f1:9f:84:52:61:95:9e:d8:24:d5:58:8c:
5f:fe:19:84:a8:e4:c6:fd:42:4b:99:1b:ca:1d:26:4e:ba:ac:
a8:af:fa:c9:3d:44:b5:87:ba:ac:6e:e9:37:ae:33:c5:6e:fc:
54:79:6b:7d:47:71:94:2c:92:4a:1c:21:06:b4:1d:f9:9f:85:
77:60:25:78:47:b9:85:09:46:b3:f7:46:0f:f3:3a:40:78:24:
e4:8e:c7:3c:31:7a:fd:40:4c:55:01:9e:e8:e1:4c:84:0c:0d:
f5:bf:77:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:32:49 2026 by rpki-client