Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/f97544-117e-4ae9-ae56-eb117aee2cc1/1/g8gpOpkAnTr5kBAwsYTa2gGwsps.mft
File: g8gpOpkAnTr5kBAwsYTa2gGwsps.mft (raw, json)
Hash identifier: NqK9J9ConSJcoshx5gbM6re3bwLLvjIPPIAXtYfl6nQ=
Subject key identifier: 9C:BF:01:24:A7:E6:DF:80:16:E3:5C:93:B8:62:06:7C:F8:18:05:5E
Authority key identifier: 83:C8:29:3A:99:00:9D:3A:F9:90:10:30:B1:84:DA:DA:01:B0:B2:9B
Certificate issuer: /CN=83c8293a99009d3af9901030b184dada01b0b29b
Certificate serial: 019F9F5EFA5E909DDA536C8F24C746745B5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g8gpOpkAnTr5kBAwsYTa2gGwsps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/f97544-117e-4ae9-ae56-eb117aee2cc1/1/g8gpOpkAnTr5kBAwsYTa2gGwsps.mft
Manifest number: 01D4
Signing time: Sun 26 Jul 2026 17:00:29 +0000
Manifest this update: Sun 26 Jul 2026 17:00:29 +0000
Manifest next update: Mon 27 Jul 2026 17:00:29 +0000
Files and hashes: 1: F5dKrMVwvFBrfz8gk2Vz9w5CTV8.asa (hash: wN6U/2fEaT7W5CHB3z+oIBLa7QQY7S0jmGI+LDLotpo=)
2: g8gpOpkAnTr5kBAwsYTa2gGwsps.crl (hash: TyCtEiy60lefHZjaTn7rIFmey481VbW2p26egs/04s8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/f97544-117e-4ae9-ae56-eb117aee2cc1/1/g8gpOpkAnTr5kBAwsYTa2gGwsps.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/f97544-117e-4ae9-ae56-eb117aee2cc1/1/g8gpOpkAnTr5kBAwsYTa2gGwsps.mft
rsync://rpki.ripe.net/repository/DEFAULT/g8gpOpkAnTr5kBAwsYTa2gGwsps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 17:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9f:5e:fa:5e:90:9d:da:53:6c:8f:24:c7:46:74:5b:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83c8293a99009d3af9901030b184dada01b0b29b
Validity
Not Before: Jul 26 17:00:29 2026 GMT
Not After : Jul 27 17:00:29 2026 GMT
Subject: CN=9cbf0124a7e6df8016e35c93b862067cf818055e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a2:ce:92:f2:14:cc:6c:50:a3:76:6b:50:eb:
73:63:80:99:7d:a6:f6:f6:de:29:18:37:55:10:a6:
9a:70:41:b2:f2:ad:1b:6c:59:20:7c:6b:e4:d8:e6:
fa:b2:cb:44:f1:91:78:b9:e4:2e:d0:d5:9f:2f:4c:
55:b7:0d:00:1f:7c:37:1d:97:2f:71:f5:9f:b4:41:
50:4f:0c:cd:11:6e:8e:ac:ef:a0:8a:f4:04:74:96:
eb:dd:84:12:12:43:76:57:a8:b4:da:ec:98:b0:0d:
e4:94:a3:98:8c:92:d5:c3:58:dc:5d:9c:0b:64:14:
64:8a:f3:b5:f5:d5:86:1d:b4:26:5f:81:8e:8c:40:
51:77:66:5e:4a:04:5f:3e:44:24:44:11:26:44:ff:
40:34:98:a4:38:c9:9f:7f:08:ea:df:35:45:eb:8f:
6d:d5:d4:0c:5d:ce:a5:27:5d:39:e0:73:2d:ef:de:
4e:32:ce:9b:ae:df:a6:5e:e9:a3:d8:55:a1:ec:83:
1e:63:8e:4c:23:85:48:82:b9:94:b3:b6:41:39:aa:
8b:66:e0:73:db:2b:1b:d3:f9:96:12:61:5c:c6:ff:
26:38:14:4f:3e:77:6c:62:44:74:87:31:a2:bc:08:
2b:c9:63:cd:20:d5:75:ce:69:6a:90:90:80:c0:50:
a7:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:BF:01:24:A7:E6:DF:80:16:E3:5C:93:B8:62:06:7C:F8:18:05:5E
X509v3 Authority Key Identifier:
keyid:83:C8:29:3A:99:00:9D:3A:F9:90:10:30:B1:84:DA:DA:01:B0:B2:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g8gpOpkAnTr5kBAwsYTa2gGwsps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/f97544-117e-4ae9-ae56-eb117aee2cc1/1/g8gpOpkAnTr5kBAwsYTa2gGwsps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/f97544-117e-4ae9-ae56-eb117aee2cc1/1/g8gpOpkAnTr5kBAwsYTa2gGwsps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:a7:7f:46:bc:b7:bc:83:55:88:85:fd:ad:91:89:32:a7:8f:
97:2b:09:1a:a2:33:71:ed:72:58:4f:d6:44:49:ab:3b:d0:a6:
1f:87:25:ff:0d:11:e5:56:2a:d5:1b:75:01:7a:f5:79:c9:8b:
12:81:98:fc:23:a4:bf:a9:19:45:57:9a:ef:e7:4f:9a:e7:0c:
17:f4:af:32:33:e0:0d:e1:f7:a4:c6:74:43:c3:20:a5:7c:92:
60:e8:0e:4a:4d:3b:89:b7:39:fb:f4:5e:4b:e3:f2:94:0f:fd:
94:42:1e:b2:39:0a:88:b6:e6:2d:75:b0:e0:30:61:f0:e5:77:
3f:54:38:61:0c:cc:99:1e:06:a1:73:cd:f5:6c:6c:68:cd:4e:
e8:88:03:66:60:89:ff:0e:48:9c:89:03:aa:6a:c5:af:17:3d:
c1:08:d8:b8:ab:2f:61:33:9d:33:0b:a2:65:ad:e0:1c:43:32:
aa:89:f0:0d:42:2b:35:37:a7:a2:41:f3:e0:59:73:d3:3a:31:
dd:b8:8f:8a:6b:b4:6d:69:3d:12:b3:0d:0c:ae:93:10:ce:11:
e8:fe:4c:58:fa:34:7f:6f:a4:0c:d7:8f:c9:51:91:07:e8:ef:
20:98:22:0a:af:e3:31:b4:6d:f5:74:26:86:fe:ec:83:3a:72:
a3:df:e2:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 01:59:03 2026 by rpki-client