Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/f97544-117e-4ae9-ae56-eb117aee2cc1/1/g8gpOpkAnTr5kBAwsYTa2gGwsps.mft
File: g8gpOpkAnTr5kBAwsYTa2gGwsps.mft (raw, json)
Hash identifier: OPx08fMx1+GdzevjgpdbF2CovVimwLf/Z8rLJbUE7Tg=
Subject key identifier: 63:6F:FE:25:31:09:88:1D:41:FF:8A:8B:B8:8B:D5:99:14:60:68:33
Authority key identifier: 83:C8:29:3A:99:00:9D:3A:F9:90:10:30:B1:84:DA:DA:01:B0:B2:9B
Certificate issuer: /CN=83c8293a99009d3af9901030b184dada01b0b29b
Certificate serial: 01A1803D8449DF097FD6215BF1942F11FE9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g8gpOpkAnTr5kBAwsYTa2gGwsps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/f97544-117e-4ae9-ae56-eb117aee2cc1/1/g8gpOpkAnTr5kBAwsYTa2gGwsps.mft
Manifest number: 02CD
Signing time: Wed 28 Oct 2026 02:01:17 +0000
Manifest this update: Wed 28 Oct 2026 02:01:17 +0000
Manifest next update: Thu 29 Oct 2026 02:01:17 +0000
Files and hashes: 1: F5dKrMVwvFBrfz8gk2Vz9w5CTV8.asa (hash: wN6U/2fEaT7W5CHB3z+oIBLa7QQY7S0jmGI+LDLotpo=)
2: g8gpOpkAnTr5kBAwsYTa2gGwsps.crl (hash: 9boVPdh8tY1NRrannBKGmdSp04hk+pz9lq5wLmvw+6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/f97544-117e-4ae9-ae56-eb117aee2cc1/1/g8gpOpkAnTr5kBAwsYTa2gGwsps.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/f97544-117e-4ae9-ae56-eb117aee2cc1/1/g8gpOpkAnTr5kBAwsYTa2gGwsps.mft
rsync://rpki.ripe.net/repository/DEFAULT/g8gpOpkAnTr5kBAwsYTa2gGwsps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:3d:84:49:df:09:7f:d6:21:5b:f1:94:2f:11:fe:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83c8293a99009d3af9901030b184dada01b0b29b
Validity
Not Before: Oct 28 02:01:17 2026 GMT
Not After : Oct 29 02:01:17 2026 GMT
Subject: CN=636ffe253109881d41ff8a8bb88bd59914606833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2d:86:c3:76:81:14:e5:ec:fb:25:68:9a:7c:
a5:4c:8e:2f:5b:97:45:82:6c:fb:49:7e:6b:54:13:
b7:00:f7:5f:a0:ee:da:3a:20:93:69:9e:c1:6a:83:
5c:9d:fd:df:5f:41:3e:88:60:f2:81:77:12:bb:6b:
ea:89:66:46:2f:20:16:7c:0b:76:6f:8c:43:f3:87:
62:25:7d:e4:b1:ce:d0:3a:66:81:5a:bc:c3:54:02:
14:0d:17:a9:35:c4:95:83:eb:11:74:1a:03:3a:db:
56:59:74:fc:66:81:1f:e6:de:f9:93:73:48:6a:e7:
8f:17:cb:0f:e2:c4:34:f5:c9:67:a2:c0:35:1f:06:
c0:f5:65:b3:e1:e0:7c:cc:d2:90:7d:af:82:62:dd:
ef:85:72:49:23:70:78:f1:15:d3:f1:df:00:7c:91:
96:a3:58:28:b3:e4:7e:a3:d6:8f:8b:19:1d:ad:f5:
e5:92:8b:c4:a3:85:52:dd:4c:52:3f:1e:3e:0c:bf:
d4:27:85:2c:e7:9e:16:a7:9e:3e:d3:31:5e:67:54:
9e:79:c5:7d:b3:40:2f:84:f5:98:61:df:d4:14:85:
b2:27:78:3a:f5:7a:7e:f5:b3:d0:15:d5:bf:f7:e1:
18:68:cf:2b:b9:7e:b9:c1:7c:2d:81:ed:bb:bc:88:
83:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:6F:FE:25:31:09:88:1D:41:FF:8A:8B:B8:8B:D5:99:14:60:68:33
X509v3 Authority Key Identifier:
keyid:83:C8:29:3A:99:00:9D:3A:F9:90:10:30:B1:84:DA:DA:01:B0:B2:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g8gpOpkAnTr5kBAwsYTa2gGwsps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/f97544-117e-4ae9-ae56-eb117aee2cc1/1/g8gpOpkAnTr5kBAwsYTa2gGwsps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/f97544-117e-4ae9-ae56-eb117aee2cc1/1/g8gpOpkAnTr5kBAwsYTa2gGwsps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:19:63:86:cd:12:fb:7f:bc:90:a8:dd:91:9b:f8:aa:72:dc:
2c:9e:fc:d9:29:47:5b:e0:f1:a7:32:40:8d:3d:d4:67:b4:c8:
76:5e:71:b0:6e:ef:73:41:a7:d7:27:9c:36:b6:83:b1:e5:0f:
9a:b3:d7:62:80:df:71:4d:a5:ef:d6:e4:02:de:9e:ee:54:b8:
9f:a2:70:02:de:db:bd:79:39:62:51:b4:1b:88:49:17:5b:52:
ea:9c:d2:44:6b:b2:b3:5f:73:21:92:cd:16:c7:e5:48:4d:fc:
b8:dc:3c:f7:cd:e9:25:80:6d:08:72:3a:46:a2:74:35:1e:b6:
bb:82:f7:34:cd:06:47:aa:0e:b3:71:47:5c:8d:ad:2c:81:c7:
75:23:fb:ba:06:ad:f5:21:94:94:d1:c8:55:ca:12:56:ec:e4:
67:23:0f:b2:fe:9a:02:20:78:df:cd:82:32:db:50:8b:51:f8:
d2:e7:0c:73:bf:a3:5a:0c:ed:01:16:57:60:64:c4:c6:cc:f1:
60:b2:f7:c6:d0:3b:9a:53:3a:0a:7f:70:84:1d:42:a2:13:e7:
9e:92:f6:87:fa:a9:a5:69:48:f2:4e:55:87:c1:c2:66:d4:ec:
c6:5e:63:dc:ea:29:24:ca:fa:af:04:a8:71:7f:1e:04:4e:4d:
77:75:8e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 06:14:33 2026 by rpki-client