Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/f97544-117e-4ae9-ae56-eb117aee2cc1/1/g8gpOpkAnTr5kBAwsYTa2gGwsps.mft
File: g8gpOpkAnTr5kBAwsYTa2gGwsps.mft (raw, json)
Hash identifier: +gYw4Ws3V1xczZsuD9ODwE1/+DNVY44YWi5Mhx/CBXE=
Subject key identifier: 37:4B:E7:46:D3:17:B3:6A:DB:15:02:A2:D4:22:6D:3F:8E:A7:C1:1D
Authority key identifier: 83:C8:29:3A:99:00:9D:3A:F9:90:10:30:B1:84:DA:DA:01:B0:B2:9B
Certificate issuer: /CN=83c8293a99009d3af9901030b184dada01b0b29b
Certificate serial: 019D38D3449403884A743DCA3039EC49219A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g8gpOpkAnTr5kBAwsYTa2gGwsps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/f97544-117e-4ae9-ae56-eb117aee2cc1/1/g8gpOpkAnTr5kBAwsYTa2gGwsps.mft
Manifest number: 95
Signing time: Sun 29 Mar 2026 09:01:02 +0000
Manifest this update: Sun 29 Mar 2026 09:01:02 +0000
Manifest next update: Mon 30 Mar 2026 09:01:02 +0000
Files and hashes: 1: ZCX1K491fuofD-KW-jb0pfq9nuw.asa (hash: 0g8X9qZdEwEVTUpjkYItWEgd8L4aVsf8OFtpGdhGrQI=)
2: g8gpOpkAnTr5kBAwsYTa2gGwsps.crl (hash: 2SywttSv8qK+7SWPnumQcyEMXe7TEXHK/TqjbwTUTAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/f97544-117e-4ae9-ae56-eb117aee2cc1/1/g8gpOpkAnTr5kBAwsYTa2gGwsps.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/f97544-117e-4ae9-ae56-eb117aee2cc1/1/g8gpOpkAnTr5kBAwsYTa2gGwsps.mft
rsync://rpki.ripe.net/repository/DEFAULT/g8gpOpkAnTr5kBAwsYTa2gGwsps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:44:94:03:88:4a:74:3d:ca:30:39:ec:49:21:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83c8293a99009d3af9901030b184dada01b0b29b
Validity
Not Before: Mar 29 09:01:02 2026 GMT
Not After : Mar 30 09:01:02 2026 GMT
Subject: CN=374be746d317b36adb1502a2d4226d3f8ea7c11d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b7:65:6d:14:3a:cd:09:cf:b4:44:d9:d3:30:
a4:7f:5d:f6:86:f7:0e:b6:6d:5b:77:95:29:5c:9f:
e2:38:fc:05:66:96:f4:b7:4d:89:bc:83:a3:7a:b7:
b9:20:11:be:7f:7f:d9:2e:a5:1e:e1:55:84:c2:6c:
76:f7:66:86:5a:20:97:1a:b2:e3:1f:81:4c:a2:17:
3f:4c:a1:fd:aa:74:af:ab:83:22:2a:1a:a2:cd:d6:
ef:6b:d9:d5:c5:6f:6c:d5:ca:a1:10:ae:6f:15:4b:
4a:d5:1f:6e:ef:ac:20:0f:cd:c0:11:15:99:0d:f0:
b4:e1:a4:26:48:7a:ef:6a:d3:0d:82:00:58:5d:9a:
c8:75:7f:5b:26:5e:cc:e8:ca:8b:06:2f:dd:f4:aa:
8b:87:94:34:03:9f:8e:88:60:09:86:b0:62:f5:9f:
35:c1:de:72:f2:2a:9e:91:64:8a:9d:1f:77:82:dc:
10:b4:68:0a:47:2b:94:e8:65:76:bb:3c:8e:61:d3:
65:dd:d4:32:32:14:6b:fe:77:47:76:dc:f7:aa:57:
3d:13:51:77:b1:6e:61:70:ea:75:44:52:b3:64:11:
22:72:d7:c2:59:06:5b:af:a5:2e:47:81:e9:ae:f5:
30:5b:e3:65:30:7b:dd:03:9e:96:f8:f4:7b:01:26:
2e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:4B:E7:46:D3:17:B3:6A:DB:15:02:A2:D4:22:6D:3F:8E:A7:C1:1D
X509v3 Authority Key Identifier:
keyid:83:C8:29:3A:99:00:9D:3A:F9:90:10:30:B1:84:DA:DA:01:B0:B2:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g8gpOpkAnTr5kBAwsYTa2gGwsps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/f97544-117e-4ae9-ae56-eb117aee2cc1/1/g8gpOpkAnTr5kBAwsYTa2gGwsps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/f97544-117e-4ae9-ae56-eb117aee2cc1/1/g8gpOpkAnTr5kBAwsYTa2gGwsps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:e4:aa:bc:99:29:68:44:8d:00:4f:7c:27:3c:5e:a2:5d:5b:
34:7c:98:28:ee:a1:62:66:22:07:c2:72:dd:42:f0:c2:8d:30:
c1:6c:10:f4:f0:dc:65:45:97:07:15:4d:8a:ce:19:e8:26:cf:
02:6f:f2:86:bf:56:67:9d:fd:79:40:da:9d:61:98:70:84:1c:
57:03:cb:26:af:f7:6c:d7:fb:d0:1e:a2:50:79:ca:28:b7:22:
3e:1f:d7:04:ad:92:97:e8:6f:d5:b9:bf:c4:40:3c:9f:83:cc:
d9:86:24:85:20:bf:f1:38:78:0b:70:a0:32:ce:4a:ac:1d:b9:
bf:1f:db:b6:d1:7a:48:f9:86:7a:3e:c0:b1:25:2e:d8:73:fe:
af:ff:fc:a0:f4:e4:47:d6:0d:0b:09:ea:56:c9:3d:7b:89:ea:
13:86:c1:02:74:00:13:87:31:bb:01:17:8b:60:27:8c:67:87:
8a:d0:48:40:7a:d0:e2:6b:35:a1:93:59:9d:4f:9a:ac:61:f9:
4a:82:af:89:2b:2e:c8:14:cc:86:de:94:38:d4:24:e6:a8:bc:
d1:a6:2e:78:07:df:1f:ae:7e:2c:00:97:34:f2:df:0a:b3:ec:
f1:0c:c5:0f:97:ec:90:5f:61:51:62:d1:c1:fd:30:03:5f:ff:
32:2f:6d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:05 2026 by rpki-client