Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/8s_gx-1SqZoyXlBNN5nls5HbDfs.mft
File: 8s_gx-1SqZoyXlBNN5nls5HbDfs.mft (raw, json)
Hash identifier: +LKUMVbU2H7mHZKajw1EMO3RoMi8wyKTDpFj6Gf+fKg=
Subject key identifier: A3:94:26:DB:D3:46:1C:6F:C2:DA:43:56:00:11:98:C0:34:1A:A4:58
Authority key identifier: F2:CF:E0:C7:ED:52:A9:9A:32:5E:50:4D:37:99:E5:B3:91:DB:0D:FB
Certificate issuer: /CN=f2cfe0c7ed52a99a325e504d3799e5b391db0dfb
Certificate serial: 01A181BEA0215016FB871B86D78D81505307
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8s_gx-1SqZoyXlBNN5nls5HbDfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/8s_gx-1SqZoyXlBNN5nls5HbDfs.mft
Manifest number: 0141
Signing time: Wed 28 Oct 2026 09:01:55 +0000
Manifest this update: Wed 28 Oct 2026 09:01:55 +0000
Manifest next update: Thu 29 Oct 2026 09:01:55 +0000
Files and hashes: 1: 8s_gx-1SqZoyXlBNN5nls5HbDfs.crl (hash: w4YULuAWXHlcmwD6+L8US7fxeqr0A3ktbB62gqr5tgQ=)
2: uhdCZBM6YTqjUjLBXnIpIR-OZBc.roa (hash: xnmUIesa/su266lF+u7BctDrkkI/AWYCj+Ji+myJrrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/8s_gx-1SqZoyXlBNN5nls5HbDfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/8s_gx-1SqZoyXlBNN5nls5HbDfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8s_gx-1SqZoyXlBNN5nls5HbDfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:be:a0:21:50:16:fb:87:1b:86:d7:8d:81:50:53:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2cfe0c7ed52a99a325e504d3799e5b391db0dfb
Validity
Not Before: Oct 28 09:01:55 2026 GMT
Not After : Oct 29 09:01:55 2026 GMT
Subject: CN=a39426dbd3461c6fc2da4356001198c0341aa458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5f:83:a1:74:9b:68:92:79:61:13:ab:3d:3b:
ad:5d:2e:12:52:77:bc:60:4e:55:9d:d9:98:2b:fc:
2c:2e:45:8c:6f:52:d8:7e:38:95:8b:45:e9:cf:c9:
23:9f:bf:39:e7:60:5c:b7:02:f5:ef:d6:47:6e:66:
ee:7d:e5:36:21:0f:d7:12:b0:5f:17:c5:08:3f:78:
c9:61:d0:23:57:b6:ab:17:41:27:8a:f6:be:ff:a0:
01:56:c4:14:f9:d5:f3:fe:25:05:b6:27:e3:7d:79:
a2:74:09:f2:1b:4c:0d:98:c3:49:b0:aa:0f:5b:03:
e6:89:75:3f:55:e2:b2:7a:d4:7c:8e:ab:97:61:9c:
a3:2d:30:95:35:39:19:80:59:0c:f1:84:79:3b:4e:
b4:64:01:8d:37:ec:b6:23:4e:5f:c3:c4:94:cf:61:
d0:fd:2f:82:02:de:f0:0c:8c:42:81:d7:76:f4:c8:
19:bd:d8:eb:89:3f:85:cc:39:bf:23:6d:0d:75:08:
a8:52:f1:06:e3:35:81:ee:ae:73:82:a6:5b:26:61:
81:af:91:42:bc:62:db:b3:cb:53:20:c4:cd:aa:4d:
84:09:86:4a:0c:da:11:b3:02:7c:45:88:9c:82:61:
c0:25:84:74:6a:87:b9:7f:53:1b:86:86:5e:22:28:
6f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:94:26:DB:D3:46:1C:6F:C2:DA:43:56:00:11:98:C0:34:1A:A4:58
X509v3 Authority Key Identifier:
keyid:F2:CF:E0:C7:ED:52:A9:9A:32:5E:50:4D:37:99:E5:B3:91:DB:0D:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8s_gx-1SqZoyXlBNN5nls5HbDfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/8s_gx-1SqZoyXlBNN5nls5HbDfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/8s_gx-1SqZoyXlBNN5nls5HbDfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:96:4a:6c:3a:3f:89:73:ad:85:c3:a5:0c:8e:9b:57:db:83:
ca:40:c2:94:c0:d2:65:28:03:25:a0:94:f3:e0:ed:85:d7:e6:
fb:0e:b2:d9:4d:81:7c:68:56:62:4f:43:5a:da:81:69:b7:a0:
2a:65:cd:0f:e7:30:87:26:fb:6e:18:f2:83:d5:2d:14:7c:63:
f2:9b:83:c5:b9:36:f6:65:83:49:6c:c6:70:c9:a9:fe:53:a6:
86:6d:9c:c1:82:38:10:aa:db:a6:6a:70:04:35:1f:07:94:79:
12:c6:2c:e2:f3:c8:a3:42:b6:54:0b:48:d3:c3:64:a5:58:27:
a1:49:bc:ff:6d:d2:55:98:f5:52:66:b2:50:1d:9f:51:87:60:
5e:ff:4c:1d:71:fe:30:4a:a4:68:91:0d:bc:c2:d1:94:66:9c:
d2:ca:8c:04:a1:16:fc:cb:f5:e1:51:a6:25:6d:f7:de:c3:5a:
80:9e:5a:ad:b5:fb:ff:33:b1:29:a4:b5:b8:f6:ba:5b:71:1c:
2f:e9:88:71:f9:4e:88:d2:a8:49:57:5f:46:75:e5:6d:29:25:
3a:62:54:96:ff:7e:32:c3:c7:67:27:33:ad:da:3a:3a:a2:ca:
96:4f:ce:dd:23:2a:eb:20:f8:74:59:69:6a:0e:65:60:44:d2:
ed:2c:2c:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 11:37:32 2026 by rpki-client