Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/f97544-117e-4ae9-ae56-eb117aee2cc1/1/g8gpOpkAnTr5kBAwsYTa2gGwsps.mft
File: g8gpOpkAnTr5kBAwsYTa2gGwsps.mft (raw, json)
Hash identifier: 5UDL6HeKp+uTiHOWSvC9/0Z5knpMV8P0Z3EwP8+e3C4=
Subject key identifier: 63:48:21:08:1F:2D:41:A3:A1:4C:59:64:49:75:49:8F:EB:71:65:C7
Authority key identifier: 83:C8:29:3A:99:00:9D:3A:F9:90:10:30:B1:84:DA:DA:01:B0:B2:9B
Certificate issuer: /CN=83c8293a99009d3af9901030b184dada01b0b29b
Certificate serial: 019EB7A19592DFDD9D702D35E70381FA3BBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g8gpOpkAnTr5kBAwsYTa2gGwsps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/f97544-117e-4ae9-ae56-eb117aee2cc1/1/g8gpOpkAnTr5kBAwsYTa2gGwsps.mft
Manifest number: 015C
Signing time: Thu 11 Jun 2026 17:01:20 +0000
Manifest this update: Thu 11 Jun 2026 17:01:20 +0000
Manifest next update: Fri 12 Jun 2026 17:01:20 +0000
Files and hashes: 1: F5dKrMVwvFBrfz8gk2Vz9w5CTV8.asa (hash: wN6U/2fEaT7W5CHB3z+oIBLa7QQY7S0jmGI+LDLotpo=)
2: g8gpOpkAnTr5kBAwsYTa2gGwsps.crl (hash: BZMwt2ebDIL28EcyMycRiPQl43gjwHCFtRIrUZpwyUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/f97544-117e-4ae9-ae56-eb117aee2cc1/1/g8gpOpkAnTr5kBAwsYTa2gGwsps.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/f97544-117e-4ae9-ae56-eb117aee2cc1/1/g8gpOpkAnTr5kBAwsYTa2gGwsps.mft
rsync://rpki.ripe.net/repository/DEFAULT/g8gpOpkAnTr5kBAwsYTa2gGwsps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:a1:95:92:df:dd:9d:70:2d:35:e7:03:81:fa:3b:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83c8293a99009d3af9901030b184dada01b0b29b
Validity
Not Before: Jun 11 17:01:20 2026 GMT
Not After : Jun 12 17:01:20 2026 GMT
Subject: CN=634821081f2d41a3a14c59644975498feb7165c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5f:aa:e4:e8:68:b7:4c:cc:ff:59:3a:ad:5e:
b3:e9:76:48:09:ce:ef:77:8d:61:e5:b7:16:c8:f3:
5a:c5:2a:9d:5c:53:51:06:c2:45:5a:e4:83:8c:f7:
a2:30:e0:1a:8b:fb:c8:5f:0b:29:85:ac:84:75:8a:
a8:43:41:b3:b8:eb:c5:99:c4:72:21:a8:e2:00:71:
c0:a1:e2:db:d1:01:fb:f2:92:ed:96:c3:1f:29:5a:
1c:ab:23:9d:93:72:c5:e4:2e:68:b8:89:ea:21:fa:
3f:e2:c1:ba:34:35:42:d8:9d:13:be:6a:99:c4:49:
28:c9:35:a5:78:29:c4:2d:5f:59:16:b9:2e:57:b8:
ac:83:73:43:ff:60:b1:aa:58:27:9b:c2:5d:33:1a:
65:a8:38:f6:c8:64:de:66:56:3e:0b:a8:84:76:62:
4f:56:f7:2c:85:ca:f4:23:62:c6:df:ff:be:d7:da:
96:87:ae:69:b1:55:c8:c9:12:0f:be:ba:d4:62:b5:
88:7a:2d:b3:d2:d0:8c:11:fe:3d:d4:a4:71:79:1b:
28:44:86:49:f6:bf:11:e0:b5:52:b9:21:1c:72:78:
a8:df:fd:46:2e:73:26:f7:93:68:10:d4:1f:21:d3:
67:39:2c:30:de:12:c4:cd:93:f7:24:db:d7:82:5e:
f2:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:48:21:08:1F:2D:41:A3:A1:4C:59:64:49:75:49:8F:EB:71:65:C7
X509v3 Authority Key Identifier:
keyid:83:C8:29:3A:99:00:9D:3A:F9:90:10:30:B1:84:DA:DA:01:B0:B2:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g8gpOpkAnTr5kBAwsYTa2gGwsps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/f97544-117e-4ae9-ae56-eb117aee2cc1/1/g8gpOpkAnTr5kBAwsYTa2gGwsps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/f97544-117e-4ae9-ae56-eb117aee2cc1/1/g8gpOpkAnTr5kBAwsYTa2gGwsps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:39:b5:2d:e5:d6:44:b4:f4:01:6a:2c:47:6e:57:c4:59:df:
8f:de:42:7a:69:0e:3e:85:e7:59:a4:97:97:fb:9a:22:ca:f7:
6c:ba:54:27:ff:09:36:4f:b9:93:86:d3:6e:1f:00:a6:4d:b0:
34:64:fc:ba:ad:0d:a4:c6:f1:9b:ef:10:27:a7:4c:fe:2c:aa:
4b:fd:e6:09:3e:16:3a:70:86:f3:92:07:94:78:67:1c:32:c5:
c9:fb:86:10:68:42:7a:8f:ee:c6:99:c0:00:dc:ce:6d:b5:0b:
dc:92:60:f1:44:cb:8c:b5:1c:08:3d:b3:39:56:3d:ed:4b:ef:
26:02:02:27:4e:fa:ab:f9:2a:fe:38:68:77:fa:18:00:23:32:
35:14:2e:8b:a6:78:be:9f:1f:d7:34:c2:3e:e0:00:1b:ee:81:
16:ad:b7:01:40:f9:af:72:76:d3:a3:d7:cb:32:14:c0:33:0d:
87:2f:e6:c3:c4:b8:56:f8:e4:58:6f:30:5b:ff:8a:d4:b4:5a:
b5:e0:5e:fc:9f:1f:20:df:86:13:33:5b:75:c8:c6:9f:07:7e:
f3:aa:53:5b:3f:d6:f8:10:9c:c6:9b:73:0d:bf:e2:79:c9:9d:
ba:47:9a:70:fd:54:28:3b:04:99:6c:d7:53:9d:d0:e4:04:f5:
a0:b6:93:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ63oZWS392dcC015wOB+ju7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzYzgyOTNhOTkwMDlkM2FmOTkwMTAzMGIxODRkYWRhMDFi
MGIyOWIwHhcNMjYwNjExMTcwMTIwWhcNMjYwNjEyMTcwMTIwWjAzMTEwLwYDVQQD
Eyg2MzQ4MjEwODFmMmQ0MWEzYTE0YzU5NjQ0OTc1NDk4ZmViNzE2NWM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1+q5Ohot0zM/1k6rV6z6XZICc7v
d41h5bcWyPNaxSqdXFNRBsJFWuSDjPeiMOAai/vIXwsphayEdYqoQ0GzuOvFmcRy
IajiAHHAoeLb0QH78pLtlsMfKVocqyOdk3LF5C5ouInqIfo/4sG6NDVC2J0TvmqZ
xEkoyTWleCnELV9ZFrkuV7isg3ND/2Cxqlgnm8JdMxplqDj2yGTeZlY+C6iEdmJP
Vvcshcr0I2LG3/++19qWh65psVXIyRIPvrrUYrWIei2z0tCMEf491KRxeRsoRIZJ
9r8R4LVSuSEccnio3/1GLnMm95NoENQfIdNnOSww3hLEzZP3JNvXgl7ysQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGNIIQgfLUGjoUxZZEl1SY/rcWXHMB8GA1UdIwQY
MBaAFIPIKTqZAJ06+ZAQMLGE2toBsLKbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzhncE9wa0FuVHI1a0JBd3NZVGEyZ0d3c3BzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9mOTc1NDQtMTE3ZS00YWU5LWFlNTYt
ZWIxMTdhZWUyY2MxLzEvZzhncE9wa0FuVHI1a0JBd3NZVGEyZ0d3c3BzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9mOTc1NDQtMTE3ZS00YWU5LWFlNTYtZWIxMTdhZWUyY2Mx
LzEvZzhncE9wa0FuVHI1a0JBd3NZVGEyZ0d3c3BzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEjm1LeXW
RLT0AWosR25XxFnfj95CemkOPoXnWaSXl/uaIsr3bLpUJ/8JNk+5k4bTbh8Apk2w
NGT8uq0NpMbxm+8QJ6dM/iyqS/3mCT4WOnCG85IHlHhnHDLFyfuGEGhCeo/uxpnA
ANzObbUL3JJg8UTLjLUcCD2zOVY97UvvJgICJ076q/kq/jhod/oYACMyNRQui6Z4
vp8f1zTCPuAAG+6BFq23AUD5r3J206PXyzIUwDMNhy/mw8S4VvjkWG8wW/+K1LRa
teBe/J8fIN+GEzNbdcjGnwd+86pTWz/W+BCcxptzDb/iecmdukeacP1UKDsEmWzX
U53Q5AT1oLaTdA==
-----END CERTIFICATE-----
Generated at Thu Jun 11 22:40:02 2026 by rpki-client