Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/8s_gx-1SqZoyXlBNN5nls5HbDfs.mft
File: 8s_gx-1SqZoyXlBNN5nls5HbDfs.mft (raw, json)
Hash identifier: dBipfsbYzosCCMQPyIqdAdbQpXnkuGPL2GogywD+8D0=
Subject key identifier: DF:0E:45:F1:B3:10:7C:DE:26:FC:36:6A:88:71:9F:0D:3B:BB:1C:FD
Authority key identifier: F2:CF:E0:C7:ED:52:A9:9A:32:5E:50:4D:37:99:E5:B3:91:DB:0D:FB
Certificate issuer: /CN=f2cfe0c7ed52a99a325e504d3799e5b391db0dfb
Certificate serial: 01A08E6962D3C01949E396F53F1BEBA80333
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8s_gx-1SqZoyXlBNN5nls5HbDfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/8s_gx-1SqZoyXlBNN5nls5HbDfs.mft
Manifest number: C3
Signing time: Fri 11 Sep 2026 03:01:06 +0000
Manifest this update: Fri 11 Sep 2026 03:01:06 +0000
Manifest next update: Sat 12 Sep 2026 03:01:06 +0000
Files and hashes: 1: 8s_gx-1SqZoyXlBNN5nls5HbDfs.crl (hash: AG8LMPHbvD3B2NzgDxmzJ9KyjyTg0oI8FzM8aR5iGuw=)
2: uhdCZBM6YTqjUjLBXnIpIR-OZBc.roa (hash: xnmUIesa/su266lF+u7BctDrkkI/AWYCj+Ji+myJrrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/8s_gx-1SqZoyXlBNN5nls5HbDfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/8s_gx-1SqZoyXlBNN5nls5HbDfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8s_gx-1SqZoyXlBNN5nls5HbDfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8e:69:62:d3:c0:19:49:e3:96:f5:3f:1b:eb:a8:03:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2cfe0c7ed52a99a325e504d3799e5b391db0dfb
Validity
Not Before: Sep 11 03:01:06 2026 GMT
Not After : Sep 12 03:01:06 2026 GMT
Subject: CN=df0e45f1b3107cde26fc366a88719f0d3bbb1cfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:73:93:c9:01:1a:ac:90:3d:7e:31:68:df:e4:
52:06:dc:18:2b:99:3e:a7:91:b1:47:ff:a5:af:2b:
56:8a:05:9f:18:34:e3:ee:bd:94:1e:b5:ca:30:6e:
6c:ee:28:2e:05:73:77:64:12:0f:1a:4a:17:93:99:
7d:fd:ad:d0:bf:0a:57:53:f0:e0:98:36:8b:a0:29:
55:69:ae:a9:da:60:51:f0:7f:8c:45:1a:45:53:da:
80:d5:73:16:ad:30:fa:be:69:4b:77:ce:f4:86:99:
0f:b1:29:cf:10:0f:8b:14:d5:99:b9:6c:17:3e:a6:
7b:c9:07:0b:8c:e8:bc:e3:00:6b:60:07:2d:d2:8c:
44:aa:cd:08:38:45:21:7d:54:e0:42:4e:ca:d9:c5:
13:92:4d:e3:64:94:e9:d9:a1:0b:50:12:9e:d0:fa:
cf:6a:d3:11:09:ad:b8:1d:e4:de:32:4d:99:43:b0:
9e:51:df:8d:e3:5b:7c:6b:51:c2:a3:1a:1e:aa:d7:
ae:52:c0:38:92:4e:5c:be:82:de:02:94:cd:0a:e2:
e6:62:ba:3e:f0:33:e0:f9:25:ab:b4:ba:22:61:be:
65:b9:13:c1:b7:b4:a3:8c:87:1b:70:73:49:95:38:
09:a0:5e:ad:3f:46:c4:0a:0a:a2:10:14:0a:84:76:
5d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:0E:45:F1:B3:10:7C:DE:26:FC:36:6A:88:71:9F:0D:3B:BB:1C:FD
X509v3 Authority Key Identifier:
keyid:F2:CF:E0:C7:ED:52:A9:9A:32:5E:50:4D:37:99:E5:B3:91:DB:0D:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8s_gx-1SqZoyXlBNN5nls5HbDfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/8s_gx-1SqZoyXlBNN5nls5HbDfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/8s_gx-1SqZoyXlBNN5nls5HbDfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:fb:47:08:2b:4e:e8:ff:46:8b:7d:92:8e:de:51:36:45:56:
1c:da:bb:fd:62:e4:b8:71:e8:41:bb:46:a6:a1:fd:92:9c:8f:
30:49:30:46:30:25:a3:04:11:b6:26:d7:d4:ec:09:5d:f1:ab:
71:bd:a1:0b:6c:94:62:0d:80:eb:f7:88:cf:ba:8a:0f:04:a0:
85:46:dc:65:78:15:45:8a:44:24:9d:ad:17:a6:16:1a:5a:9b:
d7:4c:73:54:c2:52:12:86:32:28:a7:f6:16:54:1d:ea:39:3b:
a4:5d:a9:c5:d7:f2:b1:bf:df:4f:88:0b:41:21:b4:66:f8:78:
38:e0:82:91:86:77:3e:98:95:77:73:45:c9:80:84:28:47:c9:
2f:6f:76:08:c8:32:85:e8:74:94:97:4b:9e:16:7f:f7:50:4a:
5b:a4:26:85:81:c6:7b:4e:37:6b:1c:68:7a:b2:c2:72:00:ad:
93:a8:ff:3c:73:40:c2:90:7b:13:62:9f:3e:6c:a4:5a:4b:ef:
78:e9:5e:46:32:10:2c:50:f2:7d:4d:25:60:54:a6:ed:3b:2f:
f0:c7:ca:99:db:dc:69:9c:bc:ce:66:a4:ea:a4:71:af:4a:8a:
57:fe:51:ad:fe:50:bc:6d:5d:df:fe:75:ca:a2:9b:4c:97:16:
50:e9:ac:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 05:58:50 2026 by rpki-client