Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.mft
File: G8GZTqY9UNvItDrOytKEK03BV1k.mft (raw, json)
Hash identifier: jo8atUo0q9oJViI6b1Nboe95jtxfQupC20/WUIYJ6gk=
Subject key identifier: 25:56:62:5B:AA:72:5A:6B:57:C0:C5:3E:96:2D:4B:18:FC:DA:EA:3D
Authority key identifier: 1B:C1:99:4E:A6:3D:50:DB:C8:B4:3A:CE:CA:D2:84:2B:4D:C1:57:59
Certificate issuer: /CN=1bc1994ea63d50dbc8b43acecad2842b4dc15759
Certificate serial: 019D39776969A0C86EACBDC77518FE41C8F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G8GZTqY9UNvItDrOytKEK03BV1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.mft
Manifest number: 15D6
Signing time: Sun 29 Mar 2026 12:00:20 +0000
Manifest this update: Sun 29 Mar 2026 12:00:20 +0000
Manifest next update: Mon 30 Mar 2026 12:00:20 +0000
Files and hashes: 1: G8GZTqY9UNvItDrOytKEK03BV1k.crl (hash: UEaLmfLWQTbCsxaNPbN4WyOnt8iu7bThIAsiDGZwJPc=)
2: lEqsPfJ-qWwA6TQd-ohXS0Li1gU.roa (hash: hs8ieBVGRJNin3fquHZxIlGRfOUPqdHhIELx12VmaoE=)
3: rkV3SDP19OQE0LF_g47eoLW0kdQ.roa (hash: WeYDPKsZ8dv4/mxbMaGVfQRu6h+w3pCGRVmTTR7BPpE=)
4: xG_Z_AN9TZQ2gJ2PV0YaepCBTsQ.roa (hash: nKSNO2Ekt5+NEphgm5cEzzq+4O/tpyRO5FtPgeeUWyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/G8GZTqY9UNvItDrOytKEK03BV1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:69:69:a0:c8:6e:ac:bd:c7:75:18:fe:41:c8:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bc1994ea63d50dbc8b43acecad2842b4dc15759
Validity
Not Before: Mar 29 12:00:20 2026 GMT
Not After : Mar 30 12:00:20 2026 GMT
Subject: CN=2556625baa725a6b57c0c53e962d4b18fcdaea3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:68:6b:24:65:54:bb:23:b3:f6:7b:78:cb:fb:
eb:18:63:48:f1:a5:7c:51:88:29:31:b0:fc:cb:a2:
df:cd:a9:51:e9:cc:58:b5:c3:ad:ab:10:82:68:d1:
78:3e:fe:27:05:70:63:d5:e5:b8:0c:d0:11:ce:13:
38:f0:3c:99:5c:ab:76:be:62:84:61:35:d6:23:e5:
30:67:32:4e:af:f6:36:1a:06:2f:74:ff:5a:f4:a4:
f0:3e:99:7d:3e:05:db:67:51:04:c6:aa:e8:1d:e3:
ae:2e:ff:dc:75:59:40:ed:b6:bd:40:c8:57:57:25:
9b:c6:d8:3f:14:1d:b1:54:86:a5:64:92:95:5d:f5:
65:46:d3:ae:5f:2e:1a:9a:42:da:a8:37:ab:59:43:
ae:40:ba:11:a6:a3:5b:f4:17:00:58:20:fe:6a:73:
59:08:fc:2a:e2:e2:94:c8:c2:58:a4:67:e0:8e:b3:
2a:1e:89:48:2e:75:1b:a8:f1:19:0d:18:b5:5b:03:
0d:fe:82:98:f0:1f:e0:70:71:55:e1:74:2a:21:a9:
2a:a8:0e:bb:5c:13:47:44:d7:81:18:fe:ea:38:c7:
b5:a9:4b:d7:0b:f8:51:85:7d:00:d7:3e:71:e5:84:
fc:ec:9f:7f:24:45:65:38:cd:08:7c:0a:3c:a5:c5:
d3:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:56:62:5B:AA:72:5A:6B:57:C0:C5:3E:96:2D:4B:18:FC:DA:EA:3D
X509v3 Authority Key Identifier:
keyid:1B:C1:99:4E:A6:3D:50:DB:C8:B4:3A:CE:CA:D2:84:2B:4D:C1:57:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G8GZTqY9UNvItDrOytKEK03BV1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:7c:5e:59:d0:cf:b9:4e:d9:f4:6a:c4:54:10:9e:d1:d1:b8:
42:b2:b5:09:b5:8d:8c:09:3b:53:75:49:d8:44:94:22:d3:bb:
8c:10:e4:ba:6d:34:f4:35:dd:b7:41:60:34:ad:c9:30:67:cc:
2e:6c:db:13:0e:3d:e9:0a:85:f6:0a:50:f0:56:fc:29:db:3f:
04:e6:06:8e:74:f5:7c:e1:d3:81:4d:64:33:96:12:54:b9:f4:
98:0a:27:70:6e:f3:be:f5:77:51:6f:1d:1b:da:e6:1f:00:f8:
12:e4:6e:9d:37:6d:87:6e:de:86:b6:ee:c0:94:90:0c:e9:de:
2e:19:79:c2:b0:2d:18:fb:b2:13:25:19:d3:52:8a:30:74:87:
26:50:2e:84:08:2c:26:e1:df:41:74:21:22:94:3d:79:bf:93:
a1:98:10:0d:ef:e4:26:b3:fc:b9:0d:41:f3:1b:b4:4f:87:09:
e3:48:55:64:03:10:d2:ad:f0:8a:25:19:83:b6:e7:bc:cc:cc:
af:5f:84:ab:10:3f:c7:fe:ae:79:ec:fd:9e:09:1c:89:81:73:
ea:42:88:6f:a3:8a:34:2a:3e:39:7a:09:24:c3:7e:af:df:05:
c3:9d:cf:ec:fe:db:c0:a8:05:f6:fd:78:d5:6e:21:a3:49:97:
e7:1f:26:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:10:29 2026 by rpki-client