Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.mft
File: G28HR08S96M-XCG8L_uwdaF70T8.mft (raw, json)
Hash identifier: Fvjluv4xDaFQag3W2wq76W8zl5jng1NVXF8enf1Y5/M=
Subject key identifier: D5:DF:84:BC:4B:30:7F:B4:79:DB:C1:2E:BC:02:A9:B8:F5:9C:48:5A
Authority key identifier: 1B:6F:07:47:4F:12:F7:A3:3E:5C:21:BC:2F:FB:B0:75:A1:7B:D1:3F
Certificate issuer: /CN=1b6f07474f12f7a33e5c21bc2ffbb075a17bd13f
Certificate serial: 01A08AFACDF3789366CEBB0C35BF95C108F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G28HR08S96M-XCG8L_uwdaF70T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.mft
Manifest number: 16CC
Signing time: Thu 10 Sep 2026 11:01:27 +0000
Manifest this update: Thu 10 Sep 2026 11:01:27 +0000
Manifest next update: Fri 11 Sep 2026 11:01:27 +0000
Files and hashes: 1: 0jmv6E6nQfihp67UOSMcz_xDPcw.roa (hash: LsnhLL47q0cgL81shTzaL8RIZARhHeGkiQjpcXf/BNY=)
2: G28HR08S96M-XCG8L_uwdaF70T8.crl (hash: VZSZJsG9DI2ac5O2Yb2MtNc3ncBSPxSLtXt3IMKIbcc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.mft
rsync://rpki.ripe.net/repository/DEFAULT/G28HR08S96M-XCG8L_uwdaF70T8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 11:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:fa:cd:f3:78:93:66:ce:bb:0c:35:bf:95:c1:08:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b6f07474f12f7a33e5c21bc2ffbb075a17bd13f
Validity
Not Before: Sep 10 11:01:27 2026 GMT
Not After : Sep 11 11:01:27 2026 GMT
Subject: CN=d5df84bc4b307fb479dbc12ebc02a9b8f59c485a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d9:c7:c0:bd:19:8e:ef:db:1a:54:d6:bd:9a:
45:fe:69:28:1b:3d:c6:33:bc:3b:c9:95:86:5e:4b:
89:2e:8a:b8:38:c1:6a:98:92:71:2b:4c:94:e1:a8:
87:10:ba:7d:07:6e:fe:97:6a:37:eb:78:f6:db:36:
d5:b6:e8:44:92:17:56:23:08:36:5b:ec:b5:2c:80:
b4:9e:cc:f4:3f:07:cc:8d:a8:c8:93:89:2d:64:62:
4b:c9:09:c9:bc:a9:b1:7e:f6:2c:f9:97:79:d6:1b:
24:fa:0a:57:5c:60:af:68:82:76:63:d9:6e:37:b2:
24:ab:44:7e:69:fb:a0:83:6a:6a:c4:cf:80:99:3a:
e3:8b:c5:e0:cc:5d:3f:2f:9f:1a:b7:13:51:c2:9a:
8e:3c:44:ca:b1:2a:ff:a1:0b:2d:25:c8:e7:79:7b:
f2:c6:d7:1f:3f:cb:96:33:87:15:2a:3c:69:66:9b:
6c:3b:25:fa:8d:d9:ea:2f:d4:40:ef:61:47:89:09:
31:cf:65:d1:7d:5d:1f:fe:64:dc:cb:73:e3:c3:87:
8e:51:ef:6c:94:e4:65:ef:5c:1a:42:91:6e:41:b2:
d2:54:7e:6c:27:0b:ff:be:27:35:59:19:a4:ea:59:
e0:7c:75:51:d7:93:18:41:09:bb:b5:6e:1d:a6:52:
14:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:DF:84:BC:4B:30:7F:B4:79:DB:C1:2E:BC:02:A9:B8:F5:9C:48:5A
X509v3 Authority Key Identifier:
keyid:1B:6F:07:47:4F:12:F7:A3:3E:5C:21:BC:2F:FB:B0:75:A1:7B:D1:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G28HR08S96M-XCG8L_uwdaF70T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:5c:64:0f:29:77:0d:f2:08:3e:99:53:49:60:fa:b4:17:f8:
67:12:e4:46:5b:89:d7:b2:51:cd:cc:da:8d:6c:48:50:12:08:
8b:89:24:d8:a5:01:6d:b9:a8:92:82:12:bc:e7:9b:e5:60:67:
d3:f2:e6:cb:08:4a:fa:8a:88:85:b6:ad:f4:46:ce:08:00:a7:
7a:31:46:e8:7d:2f:20:28:43:e9:9b:42:8a:a0:a7:08:ec:f0:
4e:84:1f:6f:44:05:ee:ae:a7:a7:95:bb:7d:48:d4:6d:b6:ae:
80:09:87:5f:d1:84:3c:54:92:75:de:4f:a2:85:b9:67:6a:31:
55:1b:e8:ea:19:18:8c:5a:f2:9c:8a:5b:37:f1:94:16:a4:43:
ce:d8:b1:e3:56:61:d8:78:0b:ff:f9:73:c7:9a:e9:8e:ae:95:
53:18:f4:be:e6:04:46:5c:c4:07:ac:5e:16:cc:b7:2b:63:17:
42:ec:32:6a:13:6d:99:86:d2:87:14:17:6e:b3:90:b6:87:93:
fb:c2:20:72:6e:50:ae:f9:33:d2:ef:b4:37:e6:67:79:ca:22:
90:9c:51:d8:14:87:4b:4f:39:21:4b:e3:09:42:06:4d:55:14:
0a:55:bd:05:0a:7c:b5:96:4e:08:41:e1:7b:b5:42:09:67:b9:
bc:8d:32:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:03:16 2026 by rpki-client