Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/f97544-117e-4ae9-ae56-eb117aee2cc1/1/g8gpOpkAnTr5kBAwsYTa2gGwsps.mft
File: g8gpOpkAnTr5kBAwsYTa2gGwsps.mft (raw, json)
Hash identifier: LRdtGds0rJ3RrPjVcer+nVRaC9ouwnfFEkTjX86rSJI=
Subject key identifier: 82:54:2F:9A:45:04:27:1C:78:70:92:A5:83:9F:07:25:6B:DD:87:E3
Authority key identifier: 83:C8:29:3A:99:00:9D:3A:F9:90:10:30:B1:84:DA:DA:01:B0:B2:9B
Certificate issuer: /CN=83c8293a99009d3af9901030b184dada01b0b29b
Certificate serial: 01A0890B9696ACEBE7E5E23615ABAFEB9B78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g8gpOpkAnTr5kBAwsYTa2gGwsps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/f97544-117e-4ae9-ae56-eb117aee2cc1/1/g8gpOpkAnTr5kBAwsYTa2gGwsps.mft
Manifest number: 024D
Signing time: Thu 10 Sep 2026 02:00:32 +0000
Manifest this update: Thu 10 Sep 2026 02:00:32 +0000
Manifest next update: Fri 11 Sep 2026 02:00:32 +0000
Files and hashes: 1: F5dKrMVwvFBrfz8gk2Vz9w5CTV8.asa (hash: wN6U/2fEaT7W5CHB3z+oIBLa7QQY7S0jmGI+LDLotpo=)
2: g8gpOpkAnTr5kBAwsYTa2gGwsps.crl (hash: aLqetu5Iecq/C2UOUcNiPoToDvapGPkkvhIfAV+7YBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/f97544-117e-4ae9-ae56-eb117aee2cc1/1/g8gpOpkAnTr5kBAwsYTa2gGwsps.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/f97544-117e-4ae9-ae56-eb117aee2cc1/1/g8gpOpkAnTr5kBAwsYTa2gGwsps.mft
rsync://rpki.ripe.net/repository/DEFAULT/g8gpOpkAnTr5kBAwsYTa2gGwsps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:0b:96:96:ac:eb:e7:e5:e2:36:15:ab:af:eb:9b:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83c8293a99009d3af9901030b184dada01b0b29b
Validity
Not Before: Sep 10 02:00:32 2026 GMT
Not After : Sep 11 02:00:32 2026 GMT
Subject: CN=82542f9a4504271c787092a5839f07256bdd87e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:86:9a:79:63:ca:a7:31:d3:f7:eb:4d:78:f2:
6c:0f:44:46:b8:6d:bc:32:07:f8:36:cc:36:53:4f:
45:6d:5f:b0:77:c8:e9:25:bd:ca:92:f7:1a:06:54:
38:e1:4f:96:42:b6:42:bb:c0:24:ea:35:2b:76:31:
9a:2e:c6:da:ed:3c:ce:ab:96:95:2b:f7:e8:0a:03:
ad:ca:36:20:e2:96:14:de:9e:9d:cc:f3:3b:6d:3e:
e7:0f:35:e4:0d:25:2a:e7:e1:25:4b:cf:63:f8:c2:
53:3e:16:69:96:a5:cb:28:e7:dc:3e:c6:91:34:43:
fe:13:05:7d:55:4e:95:9b:48:87:ea:01:6d:b3:47:
0b:fa:86:21:21:63:42:0f:3e:86:a8:c3:b9:12:c0:
70:9d:d0:8d:27:63:b6:a8:18:2d:d1:21:e2:2c:e9:
dd:24:83:40:1d:c8:aa:c5:8a:83:6b:32:10:e0:45:
d7:06:7b:c2:c5:f8:f1:7f:27:24:fc:7d:50:a4:04:
65:44:79:c4:ad:ad:1c:e5:78:d7:c2:ef:a4:c5:e4:
55:31:3c:0c:de:c6:df:be:9b:7a:90:49:44:e7:4f:
61:90:c5:d9:b8:93:ac:53:5d:a4:41:2e:11:3e:64:
6e:33:bb:75:89:45:69:65:db:54:15:22:ad:59:3c:
7f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:54:2F:9A:45:04:27:1C:78:70:92:A5:83:9F:07:25:6B:DD:87:E3
X509v3 Authority Key Identifier:
keyid:83:C8:29:3A:99:00:9D:3A:F9:90:10:30:B1:84:DA:DA:01:B0:B2:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g8gpOpkAnTr5kBAwsYTa2gGwsps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/f97544-117e-4ae9-ae56-eb117aee2cc1/1/g8gpOpkAnTr5kBAwsYTa2gGwsps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/f97544-117e-4ae9-ae56-eb117aee2cc1/1/g8gpOpkAnTr5kBAwsYTa2gGwsps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:6e:52:6d:30:27:8f:93:1f:f9:20:b2:50:fd:62:e1:16:51:
fa:9a:47:27:c6:2e:4c:c0:e7:65:23:8f:ae:b4:d2:68:72:5c:
3c:4f:dc:d6:d3:57:05:8c:a9:c0:c4:8f:2d:0e:41:5c:98:11:
45:bb:34:2e:d8:6d:70:21:4e:32:a9:04:ea:c1:a7:9e:4b:ea:
7a:1c:d3:a4:79:cd:0c:48:28:67:1f:ef:e8:bb:36:4e:70:82:
6b:f6:0d:18:02:b6:43:70:b0:31:86:9f:34:8d:43:a0:7f:dd:
db:5c:77:40:dc:47:a0:22:ee:bd:4b:42:af:4d:91:09:5e:c8:
55:7f:94:9f:7d:c4:f0:f8:e0:42:2c:2f:06:48:8d:4e:7f:9e:
d8:da:0f:8d:73:71:1d:e1:d0:28:4e:3d:12:bb:2a:5e:0c:f2:
ff:88:b7:98:82:cf:c4:6b:d5:e8:47:07:0b:08:34:1e:04:10:
6f:e2:16:c5:d3:b9:73:57:0d:32:ee:ab:5e:f8:80:a7:bc:a4:
20:8e:87:e6:45:23:b5:c2:0b:e4:0c:35:4f:07:da:98:0e:1f:
de:35:f3:6d:82:80:2f:fb:f6:df:d7:ba:06:42:6f:ae:06:62:
c7:de:fd:83:5d:ab:29:ba:49:47:0c:60:af:3c:72:58:04:93:
4c:52:c1:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 08:59:52 2026 by rpki-client