Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/e56fbc-18cf-4765-8a4c-cd70138e6383/1/G8qoP8mkEL2z4P0thIcgE0dxvs8.mft
File: G8qoP8mkEL2z4P0thIcgE0dxvs8.mft (raw, json)
Hash identifier: rAr02G92AJlADeMnA+kIiKZTYlihgk+EGlj49676FbE=
Subject key identifier: B1:ED:2C:BD:02:5F:94:79:79:AB:C7:94:F5:AF:4B:C9:B9:36:E2:DF
Authority key identifier: 1B:CA:A8:3F:C9:A4:10:BD:B3:E0:FD:2D:84:87:20:13:47:71:BE:CF
Certificate issuer: /CN=1bcaa83fc9a410bdb3e0fd2d848720134771becf
Certificate serial: 019D37521E847EC2D9D9494565AE28225EF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G8qoP8mkEL2z4P0thIcgE0dxvs8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/e56fbc-18cf-4765-8a4c-cd70138e6383/1/G8qoP8mkEL2z4P0thIcgE0dxvs8.mft
Manifest number: 181C
Signing time: Sun 29 Mar 2026 02:00:21 +0000
Manifest this update: Sun 29 Mar 2026 02:00:21 +0000
Manifest next update: Mon 30 Mar 2026 02:00:21 +0000
Files and hashes: 1: G8qoP8mkEL2z4P0thIcgE0dxvs8.crl (hash: D/Cg9wa6fNJQzUACchI5qMl4FReKViXL4E2ko/wy15Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/e56fbc-18cf-4765-8a4c-cd70138e6383/1/G8qoP8mkEL2z4P0thIcgE0dxvs8.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/e56fbc-18cf-4765-8a4c-cd70138e6383/1/G8qoP8mkEL2z4P0thIcgE0dxvs8.mft
rsync://rpki.ripe.net/repository/DEFAULT/G8qoP8mkEL2z4P0thIcgE0dxvs8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:1e:84:7e:c2:d9:d9:49:45:65:ae:28:22:5e:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bcaa83fc9a410bdb3e0fd2d848720134771becf
Validity
Not Before: Mar 29 02:00:21 2026 GMT
Not After : Mar 30 02:00:21 2026 GMT
Subject: CN=b1ed2cbd025f947979abc794f5af4bc9b936e2df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ac:b4:14:87:a3:70:fb:a5:21:47:b8:85:c4:
30:18:a8:79:e4:3d:13:cd:f7:01:71:da:a2:33:53:
41:2b:ee:68:7b:19:b8:d6:80:1d:dc:d7:da:1c:d7:
6e:2d:2e:b7:c7:d2:f7:88:3d:ee:b1:f8:19:05:bc:
21:1b:3a:32:a7:17:a0:33:8e:6d:14:bf:11:df:0e:
4f:dd:cd:28:24:18:94:de:ab:c2:a3:ca:c7:d5:b0:
73:6d:ec:d7:e0:ce:3e:94:a0:89:8a:09:74:cf:72:
1d:d9:70:03:51:88:cf:d8:21:af:17:f7:ab:d7:fe:
a3:58:d0:f0:93:04:48:3d:57:24:12:fe:18:8d:dc:
67:3e:b1:36:81:a7:b7:35:f3:72:98:6c:db:2b:03:
aa:fc:94:9f:eb:09:fe:84:55:23:43:16:56:1b:85:
67:74:36:ed:49:9c:43:e6:56:3f:1d:e2:d3:d3:17:
7c:53:54:25:e3:11:cb:06:3f:67:b4:e7:75:34:2a:
14:f3:6f:e9:1e:a0:02:eb:aa:fb:29:7a:43:1c:d8:
32:06:dd:89:16:0c:a7:90:78:87:4b:f9:6a:72:5d:
35:13:4f:d0:bb:5e:eb:1a:df:27:36:b8:0b:ab:e1:
da:cf:4b:1f:84:54:d4:90:21:a0:07:08:44:42:f0:
fc:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:ED:2C:BD:02:5F:94:79:79:AB:C7:94:F5:AF:4B:C9:B9:36:E2:DF
X509v3 Authority Key Identifier:
keyid:1B:CA:A8:3F:C9:A4:10:BD:B3:E0:FD:2D:84:87:20:13:47:71:BE:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G8qoP8mkEL2z4P0thIcgE0dxvs8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e56fbc-18cf-4765-8a4c-cd70138e6383/1/G8qoP8mkEL2z4P0thIcgE0dxvs8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e56fbc-18cf-4765-8a4c-cd70138e6383/1/G8qoP8mkEL2z4P0thIcgE0dxvs8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:35:8b:35:09:b0:bf:4c:b9:ec:08:66:95:ce:b6:03:91:d7:
c6:a9:7c:2b:d7:8e:c1:50:75:11:02:8b:de:e6:45:8d:4e:12:
f7:1a:3f:a5:de:f6:35:4d:df:40:f9:b3:23:3f:6b:38:0e:bb:
8d:07:60:5b:f7:55:8d:e9:a5:c1:5c:b6:17:44:db:97:c2:bb:
ff:2c:d5:14:64:4b:05:8d:09:c2:7c:07:c2:f0:58:1a:76:b9:
7f:8f:de:c2:e6:39:1c:d9:2d:56:08:d4:bb:c7:24:b3:51:af:
c0:b4:fa:f7:9f:53:02:62:de:24:01:05:55:9a:ef:e9:ce:dd:
3c:22:5d:ca:81:0a:77:73:af:af:3b:b4:1e:99:e8:7a:57:f9:
d0:a7:f9:8d:cf:be:0b:f0:6d:b1:c7:d8:98:c5:49:4e:2d:a3:
91:1d:3f:48:b2:44:ef:63:ad:2b:98:fd:0e:e4:e5:10:5a:f6:
85:83:cf:33:41:9b:ee:e9:30:ed:b4:d7:3f:42:c0:7c:f0:5c:
c8:a8:88:33:bf:37:dc:0c:36:0d:e0:70:52:38:c4:dc:99:ad:
cc:31:64:14:3a:b9:d9:82:f8:53:85:b1:95:a1:e7:d0:e3:f2:
b6:45:89:45:a0:48:0a:b9:2a:67:64:bf:7c:68:bf:8e:12:26:
18:79:d2:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:34 2026 by rpki-client