Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.mft
File: G8GZTqY9UNvItDrOytKEK03BV1k.mft (raw, json)
Hash identifier: beKu8cY7XCTL9lKq2RlKM/l959ZwMZ/KJp89PAm29yY=
Subject key identifier: 7F:7D:03:2D:FE:99:7F:85:18:78:3B:41:EE:5F:07:2E:16:7E:AF:6E
Authority key identifier: 1B:C1:99:4E:A6:3D:50:DB:C8:B4:3A:CE:CA:D2:84:2B:4D:C1:57:59
Certificate issuer: /CN=1bc1994ea63d50dbc8b43acecad2842b4dc15759
Certificate serial: 01A0F568B6AAF9F76064F4D14A57BAECBE77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G8GZTqY9UNvItDrOytKEK03BV1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.mft
Manifest number: 17C5
Signing time: Thu 01 Oct 2026 03:01:15 +0000
Manifest this update: Thu 01 Oct 2026 03:01:15 +0000
Manifest next update: Fri 02 Oct 2026 03:01:15 +0000
Files and hashes: 1: G8GZTqY9UNvItDrOytKEK03BV1k.crl (hash: IJSUdiB7gwT/S7DEynaIDwqN0bLChY9GZRGblXEuTnY=)
2: lEqsPfJ-qWwA6TQd-ohXS0Li1gU.roa (hash: hs8ieBVGRJNin3fquHZxIlGRfOUPqdHhIELx12VmaoE=)
3: rkV3SDP19OQE0LF_g47eoLW0kdQ.roa (hash: WeYDPKsZ8dv4/mxbMaGVfQRu6h+w3pCGRVmTTR7BPpE=)
4: xG_Z_AN9TZQ2gJ2PV0YaepCBTsQ.roa (hash: nKSNO2Ekt5+NEphgm5cEzzq+4O/tpyRO5FtPgeeUWyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/G8GZTqY9UNvItDrOytKEK03BV1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f5:68:b6:aa:f9:f7:60:64:f4:d1:4a:57:ba:ec:be:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bc1994ea63d50dbc8b43acecad2842b4dc15759
Validity
Not Before: Oct 1 03:01:15 2026 GMT
Not After : Oct 2 03:01:15 2026 GMT
Subject: CN=7f7d032dfe997f8518783b41ee5f072e167eaf6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ae:47:23:4b:93:6a:5e:0b:a7:ab:e3:7a:60:
39:0f:97:c8:e8:11:b2:9f:f2:22:3e:d2:16:0a:cc:
32:86:39:e3:d9:c9:d2:9e:11:cc:38:7a:f5:e6:71:
3a:71:6e:30:1f:87:90:25:6b:b8:7c:2f:18:13:e6:
eb:50:25:a2:71:42:f7:0b:e4:33:60:96:f1:ad:20:
a7:f7:5d:66:ba:21:af:4a:1e:78:a1:99:5f:c9:5c:
42:36:46:80:62:14:ef:7c:96:31:d1:93:3a:8c:42:
4a:03:0f:5e:18:99:52:6e:81:ed:92:f3:eb:78:9e:
d0:7d:7f:ac:5e:97:0b:0b:1c:58:7c:08:80:e3:53:
6f:ad:29:89:bd:f5:ed:a4:ce:c4:82:bb:2b:f2:84:
bc:6e:23:fb:f7:c5:b0:94:19:a9:5a:bc:ee:18:07:
e4:86:87:0a:af:32:ef:d0:66:0b:1c:17:41:56:14:
d5:74:d8:1d:94:59:4c:e6:1b:e8:89:82:e6:c4:37:
ae:df:b5:c9:99:01:08:fd:7a:bf:d9:f0:b5:2a:a0:
5e:b6:0f:29:88:df:af:81:37:f7:fa:75:d2:c7:c4:
d2:80:2e:ab:d7:fc:4c:7d:2c:50:db:37:66:ad:40:
69:74:92:73:e1:4d:ad:ee:f6:44:fd:8e:22:39:25:
fe:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:7D:03:2D:FE:99:7F:85:18:78:3B:41:EE:5F:07:2E:16:7E:AF:6E
X509v3 Authority Key Identifier:
keyid:1B:C1:99:4E:A6:3D:50:DB:C8:B4:3A:CE:CA:D2:84:2B:4D:C1:57:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G8GZTqY9UNvItDrOytKEK03BV1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:49:92:60:cf:10:84:22:e6:19:40:58:cc:3d:ff:9f:ce:a7:
30:0a:14:95:c7:e6:62:f3:a3:68:d9:bb:f2:e6:c2:0c:b5:f8:
5d:ed:29:34:94:96:a7:21:08:c6:45:a8:4d:a2:ee:c1:48:56:
42:4d:4b:ef:cd:ba:fe:8e:16:55:52:1e:33:50:49:bc:8d:8f:
1a:89:c0:60:24:49:c0:ff:32:92:3c:1b:ce:90:90:17:f3:00:
0d:7e:a9:0d:a5:13:e7:ad:51:e0:73:76:71:62:78:54:26:a1:
90:cf:b3:50:28:01:e6:e1:bc:a5:65:2a:15:4f:3c:6f:07:a9:
23:c4:a0:b2:88:59:32:74:72:81:24:45:72:85:a9:f6:d0:f6:
82:81:29:6c:3f:bc:c7:bc:51:aa:0e:01:31:4d:0e:19:14:bf:
07:ab:59:42:ea:a6:66:49:4e:97:c6:cf:ff:26:f9:4b:1b:b6:
64:44:d6:0c:7f:1e:93:e4:60:cb:3c:39:4c:ab:c7:f0:4d:a6:
78:c7:6e:6e:b8:ec:d4:3b:d0:eb:b7:e0:78:c0:78:29:10:e1:
55:8d:d5:91:e9:c4:74:24:00:14:b6:da:3c:5c:98:0c:bc:d4:
ed:cb:63:7d:46:3e:a1:f7:15:35:ab:1c:d6:35:12:6e:69:f8:
4b:7f:44:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 05:32:46 2026 by rpki-client