Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/bc94df-7259-42d1-822a-3d9810098703/1/G8PBvvFfS8zE50jAiVfswimg8e8.mft
File: G8PBvvFfS8zE50jAiVfswimg8e8.mft (raw, json)
Hash identifier: V0zSvdho9XwGLBT+b2PbU5mxN289nFnsAStgPwt2/J4=
Subject key identifier: 58:75:B1:F0:1D:7E:AD:32:B3:01:53:9A:BF:7B:4B:EB:58:AE:E0:C6
Authority key identifier: 1B:C3:C1:BE:F1:5F:4B:CC:C4:E7:48:C0:89:57:EC:C2:29:A0:F1:EF
Certificate issuer: /CN=1bc3c1bef15f4bccc4e748c08957ecc229a0f1ef
Certificate serial: 019D37C09C652A596019BCBE888CDDF69CF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G8PBvvFfS8zE50jAiVfswimg8e8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/bc94df-7259-42d1-822a-3d9810098703/1/G8PBvvFfS8zE50jAiVfswimg8e8.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 04:01:02 +0000
Manifest this update: Sun 29 Mar 2026 04:01:02 +0000
Manifest next update: Mon 30 Mar 2026 04:01:02 +0000
Files and hashes: 1: DlKyBrR63naawFqSxCcY5AiE7sc.roa (hash: WQjnV83H98zboyc2IgEVyNSA+r/DYppkxai3rL8VYRs=)
2: G8PBvvFfS8zE50jAiVfswimg8e8.crl (hash: 5LJrAvCkBQhQRz5R8qhpdN9rNeyNcBe02hk0Pp/3zDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/bc94df-7259-42d1-822a-3d9810098703/1/G8PBvvFfS8zE50jAiVfswimg8e8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/bc94df-7259-42d1-822a-3d9810098703/1/G8PBvvFfS8zE50jAiVfswimg8e8.mft
rsync://rpki.ripe.net/repository/DEFAULT/G8PBvvFfS8zE50jAiVfswimg8e8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:9c:65:2a:59:60:19:bc:be:88:8c:dd:f6:9c:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bc3c1bef15f4bccc4e748c08957ecc229a0f1ef
Validity
Not Before: Mar 29 04:01:02 2026 GMT
Not After : Mar 30 04:01:02 2026 GMT
Subject: CN=5875b1f01d7ead32b301539abf7b4beb58aee0c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:20:77:91:f8:b8:44:cf:f1:7b:da:68:fb:9a:
65:fe:16:19:b2:66:73:5f:53:75:f5:a9:d9:7c:5e:
94:52:d8:94:7b:fe:8b:98:df:c4:02:fa:ce:9b:a9:
9c:62:85:0d:bc:9d:37:db:6c:d3:31:3c:72:ce:5a:
01:df:f0:44:1d:1c:b2:ba:54:72:62:37:b7:23:4e:
77:a0:78:78:b5:e4:c7:eb:40:95:b2:52:f6:86:c1:
a2:3f:8e:ff:80:ce:a6:83:24:f6:ad:04:37:af:4d:
3d:0d:44:04:27:5e:2c:75:02:ed:9c:30:cc:c5:c6:
b8:a4:2b:70:6b:44:55:34:f5:ac:8c:72:71:86:55:
b0:3d:7b:64:53:13:ee:84:e2:c3:65:21:05:3a:50:
99:9f:ae:30:db:f1:1a:16:9b:c0:bf:d0:d7:c7:40:
be:9c:17:06:d9:26:e1:2c:0f:e9:bb:82:53:27:d5:
11:25:53:5c:63:6a:09:ab:d9:92:c5:65:32:a7:45:
df:ec:9a:28:27:11:4e:e7:58:5b:e3:ed:ba:30:84:
f9:54:3e:5b:ac:0b:f7:94:72:81:28:c1:7e:32:e3:
04:d1:48:1c:a8:43:c3:71:e0:ab:57:0c:d3:ec:28:
94:ef:a0:e1:2e:5e:95:2c:ec:34:4b:ee:64:6b:b1:
ca:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:75:B1:F0:1D:7E:AD:32:B3:01:53:9A:BF:7B:4B:EB:58:AE:E0:C6
X509v3 Authority Key Identifier:
keyid:1B:C3:C1:BE:F1:5F:4B:CC:C4:E7:48:C0:89:57:EC:C2:29:A0:F1:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G8PBvvFfS8zE50jAiVfswimg8e8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/bc94df-7259-42d1-822a-3d9810098703/1/G8PBvvFfS8zE50jAiVfswimg8e8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/bc94df-7259-42d1-822a-3d9810098703/1/G8PBvvFfS8zE50jAiVfswimg8e8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:ed:32:6a:b2:bd:fa:e5:03:e9:4c:31:7e:0e:5e:01:cb:1c:
72:28:0f:5f:2a:08:7c:93:58:31:ce:55:bc:3d:fa:80:ae:6e:
71:fc:bf:6f:55:f1:af:89:cb:09:88:50:13:b1:67:86:39:9c:
4a:e8:b2:73:dd:cc:9a:62:52:6e:7c:54:54:17:94:ec:90:81:
e7:a4:23:0a:19:e3:85:85:68:12:45:fb:f0:80:e1:39:28:21:
6e:c1:8d:e1:40:bf:a5:fd:8d:61:07:99:16:14:46:5f:a1:32:
97:b9:05:36:f8:a2:ec:3d:45:09:6b:2f:b9:de:33:c4:81:0a:
bb:ba:bb:30:33:3e:d6:da:93:e2:8d:d9:17:34:60:e3:6d:e5:
cc:3c:02:a9:85:43:8d:5c:95:7e:24:8e:c3:9c:dd:cc:84:31:
49:a3:32:7f:06:42:61:42:ec:d0:1c:63:7c:0f:2b:ba:0f:1b:
71:66:ac:fb:ae:77:b9:26:02:c1:da:5c:a5:31:9d:84:13:9f:
a3:e5:9e:b9:5f:1d:fd:0a:a0:af:be:77:97:35:c7:13:8f:82:
92:fe:67:4a:8f:f3:6c:c5:22:94:f7:d7:f4:bf:27:89:f8:17:
ed:11:1d:1f:2b:d0:f6:03:22:b9:63:86:72:8a:a5:e9:31:de:
3a:33:18:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:08:39 2026 by rpki-client