Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.mft
File: g5DhBCut2I6W5jnqoK0CMofqUH8.mft (raw, json)
Hash identifier: FFVtYDIAYKjBlHaO30ecnWdcMqBhvt33iCTM0jwcZqw=
Subject key identifier: B8:25:D1:47:FE:BD:7F:33:97:C6:EE:2C:54:94:68:A9:AD:1B:19:D7
Authority key identifier: 83:90:E1:04:2B:AD:D8:8E:96:E6:39:EA:A0:AD:02:32:87:EA:50:7F
Certificate issuer: /CN=8390e1042badd88e96e639eaa0ad023287ea507f
Certificate serial: 01A002B8F17BC3FEAB6DAC9D3B2352CEF9D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g5DhBCut2I6W5jnqoK0CMofqUH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.mft
Manifest number: 1A00
Signing time: Sat 15 Aug 2026 00:01:09 +0000
Manifest this update: Sat 15 Aug 2026 00:01:09 +0000
Manifest next update: Sun 16 Aug 2026 00:01:09 +0000
Files and hashes: 1: Cms4_2kxSzeRcRSIA9wB43-LvT4.roa (hash: NlxgHVdUZqUs6S+kYTnLVRbbSz1aQACOBdzclkEtqQE=)
2: g5DhBCut2I6W5jnqoK0CMofqUH8.crl (hash: AQqCKcYVp4LJ6yxiY/FOOCflxmiTDNfBmspZfG9RgK0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/g5DhBCut2I6W5jnqoK0CMofqUH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:b8:f1:7b:c3:fe:ab:6d:ac:9d:3b:23:52:ce:f9:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8390e1042badd88e96e639eaa0ad023287ea507f
Validity
Not Before: Aug 15 00:01:09 2026 GMT
Not After : Aug 16 00:01:09 2026 GMT
Subject: CN=b825d147febd7f3397c6ee2c549468a9ad1b19d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:c8:51:c5:93:e4:94:ab:d9:12:bd:50:9c:1e:
60:74:06:9d:20:f3:73:7c:c2:da:63:d4:78:1c:18:
e5:a1:86:33:fa:35:7a:62:09:5c:82:6b:87:49:a7:
e4:42:89:4a:2d:0f:70:7f:f3:d9:05:93:58:d3:b3:
5c:e1:55:b5:b2:73:d2:52:f3:b9:5a:ef:40:f3:d5:
63:52:08:d1:c3:66:a0:5a:76:80:6c:70:78:ca:cb:
af:78:39:bf:f2:e3:7d:a7:cd:3b:3c:c0:ef:a3:6b:
7b:9e:83:41:76:69:5d:2e:78:1b:86:63:c3:6b:04:
d1:f6:b2:e3:d9:9b:d9:de:9d:04:3f:dc:63:ff:0e:
49:9b:c8:d0:fe:95:e3:38:5f:42:07:dc:b8:77:69:
53:dc:22:f4:35:4a:93:1e:9d:94:aa:2b:48:2a:a7:
e7:98:eb:2f:69:6d:f8:f8:82:5d:a4:22:48:06:91:
34:cf:03:89:b8:5a:14:6d:3c:a2:e0:78:6c:9c:b1:
ee:bf:a0:11:5d:b1:f0:b2:88:98:10:a0:ef:59:c1:
b4:e2:a8:9d:5f:ea:b8:23:30:c4:07:cf:47:98:57:
f3:76:c5:b9:08:65:f8:93:1b:3d:7e:1a:85:e5:49:
11:ca:ad:3e:5e:cf:1a:37:dd:d2:4a:e0:a6:76:63:
8f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:25:D1:47:FE:BD:7F:33:97:C6:EE:2C:54:94:68:A9:AD:1B:19:D7
X509v3 Authority Key Identifier:
keyid:83:90:E1:04:2B:AD:D8:8E:96:E6:39:EA:A0:AD:02:32:87:EA:50:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5DhBCut2I6W5jnqoK0CMofqUH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d808c5-4064-4e8c-8766-49fa58fedff3/1/g5DhBCut2I6W5jnqoK0CMofqUH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:20:af:ce:65:a0:fb:f5:5a:cd:fc:ec:17:f0:90:f1:96:29:
80:ff:ae:8b:f1:d9:36:fd:f9:ea:ad:91:78:c0:c2:31:75:f4:
27:0b:a2:ff:50:38:54:63:9e:6a:d2:7a:03:39:8a:bb:3e:39:
40:d1:e2:98:55:df:6e:7d:ac:b4:6a:af:d8:85:42:7f:fa:f9:
4b:a5:24:4c:10:62:a3:d4:64:50:a0:bb:57:a3:ab:5d:f9:9d:
a9:d6:b6:e8:f6:73:8c:a5:08:06:51:10:f5:cb:98:df:b0:12:
38:1b:92:c8:5a:e3:f9:6b:2c:dc:e4:b5:ad:5d:8d:98:74:da:
29:d0:97:42:db:32:55:6c:3f:3d:ea:1c:5b:26:cc:37:6a:66:
b6:87:4b:ba:11:f7:d4:68:27:5b:51:6c:0b:8d:be:51:0f:48:
da:de:3a:2d:a4:48:b6:aa:55:13:89:4f:84:ee:a3:bd:4d:d3:
66:5c:2d:6d:c5:7c:e8:e5:e1:ce:22:03:2b:a7:58:27:de:39:
e7:e3:3a:cc:66:80:8e:27:8f:6a:a8:1f:13:85:1d:2b:c0:99:
c7:7b:c5:2b:ee:ec:f1:b9:7e:6d:bd:48:d3:10:18:89:58:2a:
bb:9b:29:7c:a4:ea:80:4f:49:ae:9f:03:44:cf:a9:64:e1:27:
6d:3d:9a:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:23:49 2026 by rpki-client