
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.mft
File: g8bKhlGbVtTRhzr24lfefpfzyKw.mft (raw, json)
Hash identifier: Rs2lMGvIEOj8VMeOWFAizFrI9kRoVlcaWkwDYWPjmgY=
Subject key identifier: 03:FD:2A:AB:0E:85:D0:A2:05:54:9D:1C:40:2F:EA:6C:79:37:CF:DF
Authority key identifier: 83:C6:CA:86:51:9B:56:D4:D1:87:3A:F6:E2:57:DE:7E:97:F3:C8:AC
Certificate issuer: /CN=83c6ca86519b56d4d1873af6e257de7e97f3c8ac
Certificate serial: 01A1509A0921AD4D281779490773753F7BDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g8bKhlGbVtTRhzr24lfefpfzyKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.mft
Manifest number: 0FA8
Signing time: Sun 18 Oct 2026 20:00:34 +0000
Manifest this update: Sun 18 Oct 2026 20:00:34 +0000
Manifest next update: Mon 19 Oct 2026 20:00:34 +0000
Files and hashes: 1: fPLCcx5H4vWt-QPjiq-SI0ctgqs.roa (hash: rnGcIrJs7Q+bQMqz23kcZC8Vb081NJ16W91BEzEb8U4=)
2: g8bKhlGbVtTRhzr24lfefpfzyKw.crl (hash: 6DZIlObSDXjtYMmYmthWOTxzPfTdmWIRnU/D3I9Kmhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/g8bKhlGbVtTRhzr24lfefpfzyKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:50:9a:09:21:ad:4d:28:17:79:49:07:73:75:3f:7b:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83c6ca86519b56d4d1873af6e257de7e97f3c8ac
Validity
Not Before: Oct 18 20:00:34 2026 GMT
Not After : Oct 19 20:00:34 2026 GMT
Subject: CN=03fd2aab0e85d0a205549d1c402fea6c7937cfdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:19:b4:d0:0c:69:7e:82:bf:72:61:bf:7f:81:
aa:88:03:a1:b2:ee:d0:39:6c:b9:b6:07:a8:cd:61:
8f:0f:17:91:15:b4:17:63:d0:60:35:49:39:ff:08:
1a:5a:58:81:09:9c:d0:ec:e5:bd:bf:71:42:c8:5e:
9e:a8:6f:1a:af:70:55:f2:59:90:e0:1a:9e:40:d7:
24:bd:05:03:b6:70:dd:8e:00:60:94:9e:3b:9c:12:
db:e2:1f:52:ba:54:b4:59:44:b1:c8:e6:0f:2b:d6:
6e:23:7d:24:24:62:76:af:9a:ff:0b:0b:3f:1e:67:
d2:92:b8:f7:37:7e:d8:15:8a:fb:65:0d:5a:45:a3:
e5:f2:25:e8:73:7f:68:6a:5d:d6:9d:68:91:5f:10:
9b:7c:a6:df:d2:cf:29:5d:8a:68:85:f3:32:62:36:
ed:b2:6b:84:77:fc:08:34:05:94:29:01:0c:3e:e3:
f1:1e:09:f4:ba:bc:4a:10:09:7e:78:15:16:8b:47:
a8:ce:99:b4:5c:1c:0d:66:79:db:59:2d:7f:f8:c9:
30:cf:e2:4a:b6:3c:cd:6e:31:42:eb:7d:1e:ee:11:
8a:bc:b3:a4:9f:c8:96:51:bf:23:da:85:68:39:fb:
96:8b:d0:4e:b0:b5:d1:5a:0f:1e:93:06:f0:89:bc:
7e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:FD:2A:AB:0E:85:D0:A2:05:54:9D:1C:40:2F:EA:6C:79:37:CF:DF
X509v3 Authority Key Identifier:
keyid:83:C6:CA:86:51:9B:56:D4:D1:87:3A:F6:E2:57:DE:7E:97:F3:C8:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g8bKhlGbVtTRhzr24lfefpfzyKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/998296-9464-4fb2-98e6-ca8af4f5356c/1/g8bKhlGbVtTRhzr24lfefpfzyKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:f5:59:1c:63:08:98:3d:73:d5:1d:84:c3:95:db:fd:94:c6:
2c:2c:46:ac:3f:c5:65:47:5a:75:7c:6f:5c:37:69:87:ad:42:
6b:98:09:5d:82:b3:c8:90:20:48:b6:af:71:9c:46:96:74:03:
bc:96:69:05:a0:d4:4b:48:eb:eb:dd:fa:00:5b:cc:2b:80:f4:
fe:db:29:00:70:57:a8:29:6e:1b:f5:39:f8:a7:4d:e2:1d:c6:
4c:8f:46:ed:10:32:93:5b:d5:37:19:98:c9:8e:21:87:2f:45:
64:2f:74:b8:8f:c4:7f:6f:09:81:94:21:54:0f:94:be:f9:25:
96:53:e6:ec:87:5c:5b:c4:c7:8b:74:9a:84:e6:dc:84:a3:bd:
9e:d1:5f:73:5b:f4:7d:7e:98:6c:2a:b7:82:6c:be:30:5f:1d:
a1:99:5a:50:67:8e:25:6e:81:33:ef:b7:5e:cd:8e:fb:6f:78:
f0:a1:f1:50:98:13:82:01:0b:35:0d:a5:1f:67:01:97:8c:3a:
b6:0a:b3:0b:92:a9:62:57:60:66:50:3e:c1:ca:47:30:48:1a:
96:d9:0f:3e:1a:e3:da:95:70:3b:1b:83:d3:cc:5c:6e:19:66:
43:95:33:07:5c:55:6f:e7:be:78:62:3d:ff:f4:2b:f4:b0:c9:
fc:26:8e:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 02:01:42 2026 by rpki-client