Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.mft
File: G8GZTqY9UNvItDrOytKEK03BV1k.mft (raw, json)
Hash identifier: 6k/esMDYADcg7UJ//dnzxo+jy5f9Qxda53P7f2XuMjE=
Subject key identifier: 2E:E2:8F:21:8C:EC:CC:B0:EB:80:F6:5D:25:46:48:66:39:2A:7B:FF
Authority key identifier: 1B:C1:99:4E:A6:3D:50:DB:C8:B4:3A:CE:CA:D2:84:2B:4D:C1:57:59
Certificate issuer: /CN=1bc1994ea63d50dbc8b43acecad2842b4dc15759
Certificate serial: 019D262880CE1F27A47CDA56B27B6356CCBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G8GZTqY9UNvItDrOytKEK03BV1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.mft
Manifest number: 15CC
Signing time: Wed 25 Mar 2026 18:01:21 +0000
Manifest this update: Wed 25 Mar 2026 18:01:21 +0000
Manifest next update: Thu 26 Mar 2026 18:01:21 +0000
Files and hashes: 1: G8GZTqY9UNvItDrOytKEK03BV1k.crl (hash: z4+eZZSTqFPpS/w7jHg9tmf8+JiG2S5E+VNqgrki2Tg=)
2: lEqsPfJ-qWwA6TQd-ohXS0Li1gU.roa (hash: hs8ieBVGRJNin3fquHZxIlGRfOUPqdHhIELx12VmaoE=)
3: rkV3SDP19OQE0LF_g47eoLW0kdQ.roa (hash: WeYDPKsZ8dv4/mxbMaGVfQRu6h+w3pCGRVmTTR7BPpE=)
4: xG_Z_AN9TZQ2gJ2PV0YaepCBTsQ.roa (hash: nKSNO2Ekt5+NEphgm5cEzzq+4O/tpyRO5FtPgeeUWyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/G8GZTqY9UNvItDrOytKEK03BV1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:80:ce:1f:27:a4:7c:da:56:b2:7b:63:56:cc:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bc1994ea63d50dbc8b43acecad2842b4dc15759
Validity
Not Before: Mar 25 18:01:21 2026 GMT
Not After : Mar 26 18:01:21 2026 GMT
Subject: CN=2ee28f218cecccb0eb80f65d25464866392a7bff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:87:03:42:b7:5d:0e:a1:6b:e7:98:a0:9b:ed:
03:b5:91:6d:e6:e5:8b:15:d4:ee:53:8d:e4:ab:fc:
c1:8e:84:fa:81:e7:63:c6:1e:43:67:2e:a0:7d:58:
89:49:c2:5a:03:d5:44:a9:d4:93:a8:76:0c:9f:e3:
85:44:6a:09:34:66:7f:6a:eb:b5:47:bb:ce:5a:8f:
9f:10:11:6b:f9:51:c8:5c:85:09:08:91:0f:da:e9:
1f:05:87:e7:83:d4:d8:e4:bb:d3:ea:1c:c3:4f:0e:
91:dc:4f:80:90:9f:95:33:d3:0a:2e:24:36:76:cd:
b2:cb:91:37:1c:22:b2:97:ed:4f:88:6f:d4:ba:1b:
99:e5:9b:27:d8:fa:9b:c7:3d:20:a5:88:3d:f4:c3:
28:c0:b6:d4:67:84:51:d0:6e:0c:08:92:9e:be:4a:
c5:94:d5:e5:26:3b:1c:be:20:2b:89:bf:8d:94:b1:
17:e8:32:91:df:ec:a6:51:28:e2:ae:fb:3a:40:d2:
07:eb:f0:a4:51:90:bc:be:12:06:9b:73:70:3f:14:
d7:a7:89:02:35:58:2c:1c:e1:a5:c4:79:1d:ca:6d:
9b:f5:e7:e2:35:b5:f4:37:cf:eb:e9:6c:ef:1a:b2:
12:8c:50:a6:83:ca:47:68:e0:9d:48:31:7f:71:eb:
7e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:E2:8F:21:8C:EC:CC:B0:EB:80:F6:5D:25:46:48:66:39:2A:7B:FF
X509v3 Authority Key Identifier:
keyid:1B:C1:99:4E:A6:3D:50:DB:C8:B4:3A:CE:CA:D2:84:2B:4D:C1:57:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G8GZTqY9UNvItDrOytKEK03BV1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:78:2a:38:04:64:29:96:95:45:ac:09:5c:44:9e:5a:8f:d3:
f1:39:76:5b:40:6e:7f:5a:a3:77:f7:1b:5b:61:55:78:f4:31:
1a:40:8c:bc:78:e7:67:e2:b1:ce:16:44:49:95:2f:2d:55:63:
1e:fd:cd:20:95:84:64:f9:4e:ed:dd:6a:40:12:cb:68:03:de:
cb:d7:e8:f6:18:b3:24:53:4e:05:24:ce:9f:76:6b:fc:b2:de:
7a:6a:da:f0:18:ad:6a:7b:66:64:d6:47:96:89:44:e7:10:52:
26:7d:1b:5f:52:e5:44:4d:42:d0:d6:98:50:b3:f5:b1:18:cf:
01:93:df:bc:35:73:7a:1e:2a:63:24:51:d5:ba:20:55:da:85:
c3:1b:c8:e8:d6:75:a8:bd:ce:d5:f3:2e:e2:b9:a0:40:eb:46:
43:b6:48:56:63:4c:5a:e2:07:3b:8f:79:56:52:bc:4b:22:c2:
f3:e1:91:b2:a3:d6:2d:d8:74:80:25:f9:e5:9b:31:94:b0:17:
4f:43:76:96:ba:f3:5f:e7:13:91:b2:f5:6c:68:5c:9d:05:05:
48:9a:30:5e:fd:f1:d9:46:eb:84:9d:33:21:fe:94:28:39:fa:
df:c3:10:3e:80:5f:7c:9a:4a:e3:ce:b4:e5:c7:c0:e6:51:7a:
fe:6b:41:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:13 2026 by rpki-client