Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.mft
File: G28HR08S96M-XCG8L_uwdaF70T8.mft (raw, json)
Hash identifier: FivHzwW1zqN+ICQJL4GDuItPQM4c6aYIK1etPPaODvk=
Subject key identifier: 4C:76:DB:BA:AD:55:40:E7:FB:DB:D3:9F:D6:65:82:82:2F:FD:0C:04
Authority key identifier: 1B:6F:07:47:4F:12:F7:A3:3E:5C:21:BC:2F:FB:B0:75:A1:7B:D1:3F
Certificate issuer: /CN=1b6f07474f12f7a33e5c21bc2ffbb075a17bd13f
Certificate serial: 01A18FB042BBE849ACD854860F86578161F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G28HR08S96M-XCG8L_uwdaF70T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.mft
Manifest number: 1753
Signing time: Sat 31 Oct 2026 02:00:55 +0000
Manifest this update: Sat 31 Oct 2026 02:00:55 +0000
Manifest next update: Sun 01 Nov 2026 02:00:55 +0000
Files and hashes: 1: 0jmv6E6nQfihp67UOSMcz_xDPcw.roa (hash: LsnhLL47q0cgL81shTzaL8RIZARhHeGkiQjpcXf/BNY=)
2: G28HR08S96M-XCG8L_uwdaF70T8.crl (hash: nDW0d9SEJpNvpota/YI64VxC4501w9kaVGlNqBJI+iU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.mft
rsync://rpki.ripe.net/repository/DEFAULT/G28HR08S96M-XCG8L_uwdaF70T8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8f:b0:42:bb:e8:49:ac:d8:54:86:0f:86:57:81:61:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b6f07474f12f7a33e5c21bc2ffbb075a17bd13f
Validity
Not Before: Oct 31 02:00:55 2026 GMT
Not After : Nov 1 02:00:55 2026 GMT
Subject: CN=4c76dbbaad5540e7fbdbd39fd66582822ffd0c04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3d:91:45:8d:5b:12:ea:bb:b4:1b:2b:7e:ff:
a0:2c:33:0d:6a:2e:63:b2:39:18:9b:40:13:13:32:
d4:f1:ea:e7:9d:ce:93:7f:3b:40:9c:88:b4:e0:09:
33:74:f1:a4:0c:50:36:52:22:45:25:8a:26:6f:ed:
fd:a2:cd:0b:49:4c:09:34:fc:36:29:81:87:b0:de:
6d:68:28:70:44:71:ca:f0:30:75:c3:00:bc:ac:f2:
34:c5:e9:9f:08:14:92:9d:71:6c:5b:cd:e2:30:5d:
9d:41:37:be:0d:09:f7:37:3b:22:95:fc:37:04:18:
26:93:82:ca:cd:43:23:76:ab:14:a0:be:61:d6:6f:
fa:ed:b8:45:8f:e0:84:df:ce:df:3e:d2:bf:8d:9a:
ed:84:e3:f4:3c:59:25:5e:6c:10:34:89:68:c3:2e:
ec:21:5a:b3:d9:e2:72:46:10:00:10:ca:60:92:86:
da:bf:9a:00:d9:7d:8e:c8:dd:16:d4:03:79:2e:9f:
7f:70:13:be:86:52:72:e1:0f:64:41:e1:69:28:bd:
a4:0d:37:ea:d1:f1:2d:b4:a7:92:be:ed:cc:bf:5e:
e3:80:8f:72:ba:95:c8:b7:14:d3:be:38:88:37:1a:
dc:ff:fa:7b:cc:d4:9d:53:82:e3:76:c1:1b:db:4d:
27:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:76:DB:BA:AD:55:40:E7:FB:DB:D3:9F:D6:65:82:82:2F:FD:0C:04
X509v3 Authority Key Identifier:
keyid:1B:6F:07:47:4F:12:F7:A3:3E:5C:21:BC:2F:FB:B0:75:A1:7B:D1:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G28HR08S96M-XCG8L_uwdaF70T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/655006-6275-4d24-b3db-02c47b9ea49d/1/G28HR08S96M-XCG8L_uwdaF70T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e9:08:0b:7d:6e:1c:e3:99:48:6e:c4:67:8b:fc:1d:c1:6e:9d:
aa:63:b6:76:a0:f0:1f:45:9c:06:06:22:18:9d:16:20:98:26:
2f:4e:70:45:be:14:d1:f5:8a:0d:c8:e7:de:48:70:cf:b5:64:
3f:12:9d:c2:7c:4f:fa:b1:a1:f5:01:72:17:6c:b2:ab:93:9b:
ad:82:46:f9:6e:b5:83:0e:d1:cf:db:66:b3:02:22:5d:ff:9e:
11:5b:a2:09:3b:dd:d7:72:31:2f:6e:e0:4d:4f:01:a8:0f:09:
20:06:0e:0f:5e:65:f4:59:73:3c:f6:3e:2d:ca:e4:83:70:15:
ca:a5:87:5f:2d:07:5a:fc:47:3a:1c:07:13:a6:da:6d:32:2e:
e4:ad:f7:ea:ff:64:42:94:f6:72:07:e7:c6:2e:46:e7:a3:a3:
f3:7e:fe:0f:02:37:26:a9:1a:64:ad:4d:e7:f6:0d:47:13:1f:
5f:d5:10:34:20:d3:cf:1d:d1:7c:bb:47:fb:2f:fc:7f:b4:df:
ea:bd:b9:65:99:dd:bb:89:9b:0a:81:7a:ff:11:a2:fa:67:c6:
b3:c0:15:0e:82:a3:c2:0d:76:1f:3d:6a:05:62:7d:b8:34:52:
e4:39:92:72:75:02:42:f3:e8:cd:0a:17:0c:19:8d:df:b7:8f:
0c:f8:d3:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 09:41:18 2026 by rpki-client