Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.mft
File: G8GZTqY9UNvItDrOytKEK03BV1k.mft (raw, json)
Hash identifier: 20SPFPT8NhHhLMg6F3MDPdv32aOoWpkuYd7SI4ZGob0=
Subject key identifier: 07:3F:D4:F5:E1:CE:BD:54:BE:9F:63:F9:FF:66:93:2B:43:51:05:17
Authority key identifier: 1B:C1:99:4E:A6:3D:50:DB:C8:B4:3A:CE:CA:D2:84:2B:4D:C1:57:59
Certificate issuer: /CN=1bc1994ea63d50dbc8b43acecad2842b4dc15759
Certificate serial: 01A108B8AB4082EDE3286BD1F1FE92187E18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G8GZTqY9UNvItDrOytKEK03BV1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.mft
Manifest number: 17CF
Signing time: Sun 04 Oct 2026 21:01:22 +0000
Manifest this update: Sun 04 Oct 2026 21:01:22 +0000
Manifest next update: Mon 05 Oct 2026 21:01:22 +0000
Files and hashes: 1: G8GZTqY9UNvItDrOytKEK03BV1k.crl (hash: etYh+M+t3OfEpl8GZ54tE6buKdSaoUFaVsS/iGsFrCY=)
2: lEqsPfJ-qWwA6TQd-ohXS0Li1gU.roa (hash: hs8ieBVGRJNin3fquHZxIlGRfOUPqdHhIELx12VmaoE=)
3: rkV3SDP19OQE0LF_g47eoLW0kdQ.roa (hash: WeYDPKsZ8dv4/mxbMaGVfQRu6h+w3pCGRVmTTR7BPpE=)
4: xG_Z_AN9TZQ2gJ2PV0YaepCBTsQ.roa (hash: nKSNO2Ekt5+NEphgm5cEzzq+4O/tpyRO5FtPgeeUWyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/G8GZTqY9UNvItDrOytKEK03BV1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 21:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:08:b8:ab:40:82:ed:e3:28:6b:d1:f1:fe:92:18:7e:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bc1994ea63d50dbc8b43acecad2842b4dc15759
Validity
Not Before: Oct 4 21:01:22 2026 GMT
Not After : Oct 5 21:01:22 2026 GMT
Subject: CN=073fd4f5e1cebd54be9f63f9ff66932b43510517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:3c:c0:8c:46:64:6e:e5:b6:44:62:59:0c:6b:
57:1a:bf:99:17:60:9f:2c:0f:cf:0e:cd:5f:15:1c:
2a:2a:d6:e7:43:db:0e:04:3a:19:d1:09:0e:30:f4:
01:11:c3:4f:df:40:92:56:64:d7:94:38:4e:a9:41:
e5:1b:71:e7:fb:c1:7c:47:73:af:6f:a1:ec:45:c0:
9b:58:d9:35:35:66:1d:5d:ea:d4:be:a4:5a:8f:ad:
dd:af:c5:af:3b:a5:2e:65:5f:36:d3:1d:01:e4:d6:
7c:8f:ee:1d:0c:f0:4f:60:1a:78:47:79:e3:a1:d7:
82:32:68:b8:f8:df:60:19:b6:cf:49:93:7e:66:5f:
57:63:82:03:01:88:a5:5b:d5:9b:ac:96:2e:06:8f:
18:6a:8a:a6:b4:81:2e:87:0d:3e:d5:c2:1d:6a:fe:
c4:e6:88:9c:16:55:80:96:d9:9b:48:c7:7c:32:0f:
2d:ad:1a:bd:e9:40:3e:f3:72:6e:4d:f0:fc:e5:a5:
3a:ea:9b:ba:53:12:f4:d5:50:b1:46:ad:9e:05:d0:
d4:4d:ca:e3:84:44:6a:cf:9e:bb:4d:ce:a9:cb:0c:
eb:74:18:51:00:1c:02:72:d4:90:a9:c3:b9:a9:b5:
79:82:3c:7f:e8:04:38:a2:30:6c:a3:1c:82:2f:21:
dc:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:3F:D4:F5:E1:CE:BD:54:BE:9F:63:F9:FF:66:93:2B:43:51:05:17
X509v3 Authority Key Identifier:
keyid:1B:C1:99:4E:A6:3D:50:DB:C8:B4:3A:CE:CA:D2:84:2B:4D:C1:57:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G8GZTqY9UNvItDrOytKEK03BV1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:c2:07:91:36:14:6f:25:4c:9c:ef:b3:fa:11:40:db:db:3f:
8a:c5:3d:78:9d:26:2f:d7:a2:6f:1d:1b:e8:bf:a3:88:ef:68:
e5:13:c7:85:db:6d:3f:5e:f5:93:b8:fa:2d:b0:50:5a:58:51:
0d:3d:14:2e:68:eb:84:57:bb:ef:36:04:96:e9:5d:20:f0:95:
e8:df:bd:2b:8e:73:8b:2b:f9:67:bb:62:ef:46:88:d7:f6:ec:
e9:9d:bc:18:63:e7:a5:77:2a:f4:b7:71:dc:b7:76:f5:1c:6b:
67:fe:29:43:69:cd:5c:22:9c:a4:84:4d:cc:b6:8a:1d:33:9c:
5b:f3:89:70:c5:63:53:c3:6d:0f:3d:2a:64:fe:3f:d3:1d:91:
3f:20:5a:10:67:9f:45:90:d9:2e:94:21:50:a8:53:7b:31:46:
c0:2f:98:f9:c8:19:e6:74:f0:5f:55:d2:aa:6c:4b:46:85:65:
b2:49:d6:5b:92:a0:93:63:67:7d:ca:ab:63:11:26:8a:d8:e3:
ef:b2:6d:e5:6c:f7:ee:e1:2c:6c:48:29:15:07:58:bb:88:16:
18:5f:e8:d4:e2:55:82:3f:83:9c:21:74:c6:0a:80:64:e3:e4:
f3:8e:20:09:a4:11:41:96:24:d7:1d:4d:f3:f4:3a:6a:32:db:
36:c1:f7:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 06:52:45 2026 by rpki-client