Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.mft
File: g8bKhlGbVtTRhzr24lfefpfzyKw.mft (raw, json)
Hash identifier: YEkfQDA7/Gn/g8BMwXBtcneYB2Z+UYZNi5LrNIcYiKQ=
Subject key identifier: 3E:A8:3D:FC:11:6D:2F:2A:11:B9:57:BE:AB:F4:EF:5A:2E:2D:88:88
Authority key identifier: 83:C6:CA:86:51:9B:56:D4:D1:87:3A:F6:E2:57:DE:7E:97:F3:C8:AC
Certificate issuer: /CN=83c6ca86519b56d4d1873af6e257de7e97f3c8ac
Certificate serial: 019D37F6DC170D1658F4A3622F30BB5214EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g8bKhlGbVtTRhzr24lfefpfzyKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.mft
Manifest number: 0D89
Signing time: Sun 29 Mar 2026 05:00:18 +0000
Manifest this update: Sun 29 Mar 2026 05:00:18 +0000
Manifest next update: Mon 30 Mar 2026 05:00:18 +0000
Files and hashes: 1: fPLCcx5H4vWt-QPjiq-SI0ctgqs.roa (hash: rnGcIrJs7Q+bQMqz23kcZC8Vb081NJ16W91BEzEb8U4=)
2: g8bKhlGbVtTRhzr24lfefpfzyKw.crl (hash: hVTg7xh5l2XzK9yI5dI7f0/dRFqxz8MasLAo4aVqIyw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/g8bKhlGbVtTRhzr24lfefpfzyKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f6:dc:17:0d:16:58:f4:a3:62:2f:30:bb:52:14:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83c6ca86519b56d4d1873af6e257de7e97f3c8ac
Validity
Not Before: Mar 29 05:00:18 2026 GMT
Not After : Mar 30 05:00:18 2026 GMT
Subject: CN=3ea83dfc116d2f2a11b957beabf4ef5a2e2d8888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:9f:6f:dc:51:d6:da:fa:08:6b:95:d2:8b:0a:
6d:04:db:e6:22:85:f4:55:bb:df:56:59:9c:3e:cf:
b6:3c:e2:c6:03:f1:34:cd:b3:05:2a:3e:79:e2:19:
df:86:82:6a:be:b3:f0:a3:f7:c4:26:f8:5b:1a:82:
92:da:1e:3a:d9:7c:be:78:22:f3:7e:79:73:aa:96:
6f:00:f0:b3:8e:97:40:03:c0:be:22:7e:8c:cd:4a:
63:61:fe:6a:4c:63:9e:72:6e:0f:42:8e:67:ff:d5:
7e:90:46:25:48:ad:55:c7:ba:40:f4:15:4a:28:f9:
d2:be:f4:cf:3b:ae:e3:9e:f8:8d:8f:7a:05:3e:1b:
0a:e1:b0:d6:af:4a:a0:f3:c5:05:88:0a:d4:d9:09:
92:2b:fc:0a:b8:ab:8a:d2:ae:37:27:58:31:03:ff:
61:9b:14:87:45:a1:5a:23:51:c0:63:75:c6:d8:2d:
d8:c4:6c:e7:de:79:8c:b8:7c:18:a3:df:f8:56:8d:
c7:da:17:55:f9:27:05:f9:05:82:30:57:42:bf:1b:
37:ba:dc:8c:5d:23:c5:d4:af:a3:2a:4f:26:95:37:
43:06:05:9a:5c:97:c8:48:d5:7c:31:f3:0e:f0:b1:
bb:d3:cb:14:ba:f9:21:70:35:1e:94:60:4e:67:40:
f1:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:A8:3D:FC:11:6D:2F:2A:11:B9:57:BE:AB:F4:EF:5A:2E:2D:88:88
X509v3 Authority Key Identifier:
keyid:83:C6:CA:86:51:9B:56:D4:D1:87:3A:F6:E2:57:DE:7E:97:F3:C8:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g8bKhlGbVtTRhzr24lfefpfzyKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:5e:80:b4:ab:a4:3e:dd:35:48:96:7f:2b:0e:f2:da:f1:a8:
43:5b:d5:90:5e:0e:5d:d2:67:d0:dd:0e:18:df:bd:e3:26:87:
5f:e2:87:fa:6c:90:96:f7:66:c3:15:da:8d:b4:af:e9:a3:c1:
95:f4:90:96:9d:86:80:f2:94:9b:64:06:ff:e2:d3:da:db:1a:
9d:85:b6:7b:5f:59:68:49:0c:46:95:a1:f0:06:75:68:13:be:
ab:4d:22:90:f5:28:6e:fb:2c:57:21:ae:a6:34:e3:ae:ae:21:
d0:68:ef:96:0b:c3:01:8d:a9:53:0c:3c:98:e9:39:b9:1a:0a:
ad:38:58:54:df:3e:24:d3:62:0e:da:26:f1:4a:0b:49:a5:91:
db:8e:25:5a:97:17:f2:6e:6d:47:7a:b5:b9:26:61:9c:02:40:
81:5e:64:ac:40:2c:2b:9e:f7:b3:25:9d:b3:b8:77:89:0f:16:
a4:b2:da:2e:e6:ac:ad:14:57:41:7e:14:be:a6:e8:90:5d:e8:
aa:a8:29:4e:0c:8e:f6:49:6b:ee:66:77:58:f2:23:ea:8a:bd:
0d:79:01:66:e3:e8:a6:9b:af:5e:1d:57:40:73:3a:ff:83:f2:
2c:1b:1a:2c:03:af:f7:8c:1e:21:b0:ee:ed:ab:02:08:ec:1b:
e4:d3:c9:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:28:06 2026 by rpki-client