Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/8s_gx-1SqZoyXlBNN5nls5HbDfs.mft
File: 8s_gx-1SqZoyXlBNN5nls5HbDfs.mft (raw, json)
Hash identifier: CWePuenIuqZF60Ds+Ri03yyPXWPH7aP1/hvEbUkcTPw=
Subject key identifier: 16:2B:CA:AE:E3:34:17:17:88:67:BC:71:C0:0D:56:AB:B8:2A:FF:A6
Authority key identifier: F2:CF:E0:C7:ED:52:A9:9A:32:5E:50:4D:37:99:E5:B3:91:DB:0D:FB
Certificate issuer: /CN=f2cfe0c7ed52a99a325e504d3799e5b391db0dfb
Certificate serial: 019FA2CE3920FBAB89F5982C05D4ADE1F1D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8s_gx-1SqZoyXlBNN5nls5HbDfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/8s_gx-1SqZoyXlBNN5nls5HbDfs.mft
Manifest number: 49
Signing time: Mon 27 Jul 2026 09:00:51 +0000
Manifest this update: Mon 27 Jul 2026 09:00:51 +0000
Manifest next update: Tue 28 Jul 2026 09:00:51 +0000
Files and hashes: 1: 8s_gx-1SqZoyXlBNN5nls5HbDfs.crl (hash: MYvuxDs5JqLJKw0tgay3E/aIUX436WdxWmU2ZirYg4A=)
2: uhdCZBM6YTqjUjLBXnIpIR-OZBc.roa (hash: xnmUIesa/su266lF+u7BctDrkkI/AWYCj+Ji+myJrrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/8s_gx-1SqZoyXlBNN5nls5HbDfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/8s_gx-1SqZoyXlBNN5nls5HbDfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8s_gx-1SqZoyXlBNN5nls5HbDfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:ce:39:20:fb:ab:89:f5:98:2c:05:d4:ad:e1:f1:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2cfe0c7ed52a99a325e504d3799e5b391db0dfb
Validity
Not Before: Jul 27 09:00:51 2026 GMT
Not After : Jul 28 09:00:51 2026 GMT
Subject: CN=162bcaaee33417178867bc71c00d56abb82affa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:85:ae:4e:07:63:7e:44:43:20:66:2f:66:99:
2b:55:26:30:65:01:c5:42:e2:07:3f:75:d1:4d:6e:
b3:5a:c6:15:96:97:ff:2a:41:1d:2c:a3:a6:6f:0d:
70:0e:ec:78:92:05:f9:67:fd:80:84:70:ad:86:30:
da:7d:f8:cb:d2:85:0f:4d:99:6e:06:82:cf:b7:10:
d3:1b:1c:bc:1f:af:8a:f8:f0:7b:18:cc:0c:82:92:
73:ff:94:fc:34:5c:ac:a9:8c:1f:76:04:dc:5f:0f:
12:88:9c:76:0f:ef:a9:72:e7:45:b1:00:06:22:95:
a8:ae:69:29:8f:d5:fb:dd:95:a1:b5:bd:c7:16:81:
be:ce:f3:01:7c:44:e5:66:a3:2d:eb:6d:73:58:d5:
64:e5:67:36:87:ef:53:31:7b:b1:30:93:61:1e:cc:
1b:5d:a7:c4:ec:e8:94:4b:d6:3c:6d:05:ac:26:16:
b3:8b:9e:28:4a:6b:a1:45:89:32:d4:e9:64:ef:5a:
aa:70:d8:cd:90:3a:e1:e8:5a:4c:88:84:47:6e:8e:
bc:7a:d8:16:14:cf:af:5c:35:56:5f:47:b6:b7:33:
ac:7d:11:c7:84:91:7f:5b:63:02:23:78:8d:7f:99:
69:87:92:37:5b:85:b0:1b:3f:fe:bc:51:77:d4:c5:
99:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:2B:CA:AE:E3:34:17:17:88:67:BC:71:C0:0D:56:AB:B8:2A:FF:A6
X509v3 Authority Key Identifier:
keyid:F2:CF:E0:C7:ED:52:A9:9A:32:5E:50:4D:37:99:E5:B3:91:DB:0D:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8s_gx-1SqZoyXlBNN5nls5HbDfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/8s_gx-1SqZoyXlBNN5nls5HbDfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/8s_gx-1SqZoyXlBNN5nls5HbDfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:e9:16:93:4c:2b:2c:ec:ca:92:4c:d1:66:05:02:93:ef:84:
8d:f5:c5:a0:b9:89:74:c1:e3:78:ec:88:33:fd:55:5f:08:41:
2f:7a:82:ef:dc:5c:c0:99:18:2c:e4:f2:bb:12:82:a4:1e:7c:
d5:71:6a:d3:f3:f9:9b:1e:b8:81:4b:7f:4f:8e:0d:56:66:b3:
60:89:fc:21:39:cf:7d:03:ad:91:7f:a1:97:38:7c:7a:0e:ac:
3d:7d:e4:bb:18:9e:bb:49:88:66:ea:cc:ca:23:02:5d:a0:5e:
25:7a:99:2b:e9:b6:65:81:01:74:2c:76:6a:5d:a4:6f:ea:9a:
f0:d7:8e:fb:20:8e:d6:bc:d6:b2:e2:c6:01:ca:43:a5:53:2b:
02:31:c8:80:ba:90:29:1b:91:2b:7d:32:3d:15:61:41:b2:ac:
99:96:44:7e:ce:8a:fd:5b:1f:b6:6a:ad:d7:5a:6c:1b:b9:96:
59:91:3a:c1:60:f1:88:4c:a2:63:f7:bf:7b:21:09:95:43:ad:
aa:0d:2e:4d:bb:2c:ca:d8:b5:fc:63:13:e8:96:7e:d6:cf:19:
00:03:d8:4c:45:70:d0:7e:07:f3:c6:46:03:a3:d9:8c:09:78:
69:9b:c0:24:e1:d2:c5:1e:14:0d:0e:b8:cc:28:66:59:9a:05:
e4:e3:f5:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:27:55 2026 by rpki-client