Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/f8be9b-58f0-4544-b23f-6354ef0771c9/1/g2elJH2fTpT3vVcc8T01q0iwHSQ.mft
File: g2elJH2fTpT3vVcc8T01q0iwHSQ.mft (raw, json)
Hash identifier: 07dmDDV6WGPJOhb7TxyHmPNQH21QI4kyz+HwJIY+4R4=
Subject key identifier: D8:09:3A:82:BC:D3:19:47:DC:02:02:0D:B2:D5:25:4E:21:AC:B3:A8
Authority key identifier: 83:67:A5:24:7D:9F:4E:94:F7:BD:57:1C:F1:3D:35:AB:48:B0:1D:24
Certificate issuer: /CN=8367a5247d9f4e94f7bd571cf13d35ab48b01d24
Certificate serial: 01A0F0B0DC1488EADD69B16EE797AAFE5134
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2elJH2fTpT3vVcc8T01q0iwHSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/f8be9b-58f0-4544-b23f-6354ef0771c9/1/g2elJH2fTpT3vVcc8T01q0iwHSQ.mft
Manifest number: 0A0D
Signing time: Wed 30 Sep 2026 05:01:57 +0000
Manifest this update: Wed 30 Sep 2026 05:01:57 +0000
Manifest next update: Thu 01 Oct 2026 05:01:57 +0000
Files and hashes: 1: LoYQyBr4YJ5ITZr2_fcC3dmO_KA.asa (hash: zpgidiPNOSMW/wwxutmy+pYEFABRXk9mKUJiu/1ReKw=)
2: g2elJH2fTpT3vVcc8T01q0iwHSQ.crl (hash: Q8v3G2o8SbtXd3L3daG3KrRYXQRGCkBO9YPz1PdEO+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/f8be9b-58f0-4544-b23f-6354ef0771c9/1/g2elJH2fTpT3vVcc8T01q0iwHSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/f8be9b-58f0-4544-b23f-6354ef0771c9/1/g2elJH2fTpT3vVcc8T01q0iwHSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/g2elJH2fTpT3vVcc8T01q0iwHSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 05:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f0:b0:dc:14:88:ea:dd:69:b1:6e:e7:97:aa:fe:51:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8367a5247d9f4e94f7bd571cf13d35ab48b01d24
Validity
Not Before: Sep 30 05:01:57 2026 GMT
Not After : Oct 1 05:01:57 2026 GMT
Subject: CN=d8093a82bcd31947dc02020db2d5254e21acb3a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:21:80:03:04:eb:7a:8c:f5:db:d9:f9:72:a7:
38:73:83:9c:88:e0:59:29:66:08:fa:af:5f:f5:79:
95:19:0e:2e:28:17:01:77:87:6c:54:a2:35:22:fa:
6e:8e:af:58:c4:44:47:ac:3c:4b:82:1c:06:74:09:
1d:d4:3d:88:53:c5:ce:43:9f:28:33:80:ec:78:c2:
21:93:a1:bd:22:c4:36:14:e4:62:b8:dd:1a:71:84:
aa:ad:9d:24:ea:fb:90:7f:7b:52:08:6e:4f:65:ab:
54:26:6c:98:d5:aa:36:f1:5e:3f:5e:f9:40:76:39:
fd:6c:32:21:ee:56:3e:a0:69:e2:0b:34:d1:b5:46:
a4:43:03:db:14:e8:95:c0:83:f1:ff:69:33:bd:02:
49:bf:69:7a:f7:38:2c:ce:49:c6:5c:ea:95:0e:ba:
f9:e8:3f:3d:2b:38:47:82:3e:b4:d5:b6:c7:04:ae:
ec:56:2a:fe:9b:eb:c6:6e:e0:8e:a2:15:45:77:8c:
b5:08:64:60:53:c7:60:7e:af:0a:af:8a:67:34:22:
55:ef:7a:21:0c:22:b0:73:f6:53:c4:57:8e:1b:09:
1c:1c:5d:ab:c6:81:76:ca:cc:c7:7d:96:7c:98:7b:
7b:6a:9f:9e:2d:df:4e:fd:be:fb:f4:68:cc:25:0a:
97:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:09:3A:82:BC:D3:19:47:DC:02:02:0D:B2:D5:25:4E:21:AC:B3:A8
X509v3 Authority Key Identifier:
keyid:83:67:A5:24:7D:9F:4E:94:F7:BD:57:1C:F1:3D:35:AB:48:B0:1D:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2elJH2fTpT3vVcc8T01q0iwHSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f8be9b-58f0-4544-b23f-6354ef0771c9/1/g2elJH2fTpT3vVcc8T01q0iwHSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f8be9b-58f0-4544-b23f-6354ef0771c9/1/g2elJH2fTpT3vVcc8T01q0iwHSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:00:4e:5c:71:ac:88:31:3a:29:34:0d:35:60:17:bd:03:e0:
1d:0a:4b:a5:3e:07:c1:54:97:d4:d3:9f:6c:0a:cc:c7:65:b3:
20:08:ba:16:ef:32:b0:60:71:21:06:7a:22:5a:ce:2f:84:cd:
fd:a9:f3:ed:44:2f:4c:e9:01:64:04:2d:d1:27:98:c5:cc:23:
3c:f5:48:98:ea:5a:66:ff:4f:f3:ed:a0:0d:17:bc:fb:c6:67:
de:39:41:48:c7:82:1c:19:39:62:60:3d:8e:ec:c6:8a:f4:87:
ad:1a:00:f0:ae:e3:13:04:a9:fe:f2:fe:e1:b0:53:45:aa:6c:
41:27:05:d8:8a:6f:91:87:bc:91:5d:04:c2:8c:8c:f9:ee:51:
62:9b:38:80:69:a9:1a:98:49:bb:d6:26:f3:28:41:6b:12:9b:
91:de:d9:80:a1:d0:25:81:c7:91:ef:c0:c3:5a:b8:89:f2:a8:
98:38:d7:75:61:f7:97:de:55:85:37:d0:c0:02:90:16:4c:69:
81:d7:19:14:79:6a:f6:1d:db:55:0b:79:40:99:71:df:08:de:
d1:43:00:74:74:c1:6a:70:79:ed:49:a6:c7:dd:fc:27:d8:da:
fe:9f:7a:39:c1:a0:16:bf:25:88:9a:0e:3b:e8:d8:b2:32:d5:
8b:08:e6:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 17:10:45 2026 by rpki-client