Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.mft
File: G28HR08S96M-XCG8L_uwdaF70T8.mft (raw, json)
Hash identifier: Dh0eqteD3hssHrvi7f3dWSB3OfvHMZp8mirtyv8rizY=
Subject key identifier: A8:F3:F6:6F:2F:5F:77:24:55:FB:E8:2F:CF:61:E7:B6:16:53:3E:57
Authority key identifier: 1B:6F:07:47:4F:12:F7:A3:3E:5C:21:BC:2F:FB:B0:75:A1:7B:D1:3F
Certificate issuer: /CN=1b6f07474f12f7a33e5c21bc2ffbb075a17bd13f
Certificate serial: 01A187F6ABE8A4B4CED12B0C4368C2F4827B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G28HR08S96M-XCG8L_uwdaF70T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.mft
Manifest number: 174F
Signing time: Thu 29 Oct 2026 14:00:52 +0000
Manifest this update: Thu 29 Oct 2026 14:00:52 +0000
Manifest next update: Fri 30 Oct 2026 14:00:52 +0000
Files and hashes: 1: 0jmv6E6nQfihp67UOSMcz_xDPcw.roa (hash: LsnhLL47q0cgL81shTzaL8RIZARhHeGkiQjpcXf/BNY=)
2: G28HR08S96M-XCG8L_uwdaF70T8.crl (hash: L1a9IyTa/eUQ/89kiWzKF02gm0IC+ZEPpLAJESFjVUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.mft
rsync://rpki.ripe.net/repository/DEFAULT/G28HR08S96M-XCG8L_uwdaF70T8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 14:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:87:f6:ab:e8:a4:b4:ce:d1:2b:0c:43:68:c2:f4:82:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b6f07474f12f7a33e5c21bc2ffbb075a17bd13f
Validity
Not Before: Oct 29 14:00:52 2026 GMT
Not After : Oct 30 14:00:52 2026 GMT
Subject: CN=a8f3f66f2f5f772455fbe82fcf61e7b616533e57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e3:fe:bf:65:89:12:b1:b2:a9:0d:40:6a:67:
2b:48:5b:cf:a9:dc:40:3a:4d:7d:6d:5f:1f:71:27:
85:cf:ce:89:09:ab:44:c0:78:40:86:7b:35:24:f4:
57:50:b3:7d:85:ad:44:ad:41:25:49:f3:aa:97:5a:
34:e1:0f:27:83:13:14:4c:b5:f0:5e:59:d0:21:0f:
4c:a0:4a:d0:c7:e3:8e:98:93:63:a9:18:a8:87:e8:
9f:56:ae:43:0e:51:32:8d:37:36:f1:9d:c9:96:0e:
0d:b3:8c:21:21:31:07:37:d5:d4:b0:2e:bb:9e:27:
44:36:1b:91:0d:6c:97:01:65:d9:23:0e:91:96:b5:
c7:0c:f0:b7:10:74:3f:65:95:77:ab:31:b0:e9:96:
9b:99:e8:0e:ee:82:17:e7:bf:9a:f0:6d:a4:ea:f1:
cc:93:e9:8a:06:25:f5:22:0e:68:ef:29:7c:ec:3b:
6d:e1:c8:bd:3e:b7:00:71:1b:56:6a:9a:98:ca:f7:
89:62:2d:64:21:ee:06:17:fa:f8:7c:6b:c9:b0:b4:
d7:0d:c8:0d:fe:d6:b1:e1:aa:cd:90:66:24:1b:0e:
a0:6c:cd:f5:20:f7:f8:2f:b5:79:f9:be:2a:e0:46:
04:65:cc:6b:38:b6:e2:51:42:bd:11:8a:d6:c8:a6:
fc:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:F3:F6:6F:2F:5F:77:24:55:FB:E8:2F:CF:61:E7:B6:16:53:3E:57
X509v3 Authority Key Identifier:
keyid:1B:6F:07:47:4F:12:F7:A3:3E:5C:21:BC:2F:FB:B0:75:A1:7B:D1:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G28HR08S96M-XCG8L_uwdaF70T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:43:c8:6d:eb:af:2d:d1:4e:0c:5b:09:77:4a:32:44:56:ba:
a0:06:e9:f7:f5:27:7b:d4:9b:ec:c6:35:d4:aa:e8:9b:f0:96:
c1:95:0b:0c:2a:83:85:9c:af:9e:05:96:72:14:9d:0a:c8:c4:
36:2d:fb:78:24:dd:81:bb:a5:40:7c:b8:5c:f3:d5:5d:e8:26:
ed:3d:57:91:16:0e:13:f8:95:bd:28:54:4f:92:c3:d2:86:bf:
80:15:e8:e4:06:17:9c:90:bc:e4:69:16:9f:db:4b:b4:66:c1:
d0:d5:2b:52:ef:2d:c4:96:4f:f1:81:8d:89:16:4d:2c:ba:84:
3f:62:ea:7e:ac:b5:f5:e7:e7:65:79:4d:0b:7a:4d:91:26:12:
3b:d7:a3:44:e4:9b:c7:46:2c:a3:56:34:e8:ec:12:56:9d:0a:
5f:fa:d4:b2:2e:c2:69:66:40:c6:e5:d1:5c:8e:95:4c:82:89:
06:c5:d9:ab:84:e8:29:a9:96:a0:ef:c3:64:35:32:f3:83:27:
18:3c:0e:85:09:28:ca:58:fa:20:95:ce:32:74:96:73:c3:ee:
2c:11:0e:dd:a8:76:be:39:9a:0b:3c:8d:c4:2e:4b:1a:81:1c:
99:13:76:77:dc:ca:eb:36:11:ef:d3:4a:9a:52:c8:9b:16:1c:
45:51:df:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 17:04:34 2026 by rpki-client