Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/e56fbc-18cf-4765-8a4c-cd70138e6383/1/G8qoP8mkEL2z4P0thIcgE0dxvs8.mft
File: G8qoP8mkEL2z4P0thIcgE0dxvs8.mft (raw, json)
Hash identifier: dXFMl1R45kvXAN6Pk0xqUD7AoBGxj4chhfiqvQ2+lXM=
Subject key identifier: 06:2D:E3:F8:D4:7B:3C:1D:44:29:89:12:A3:19:33:D1:C4:92:79:43
Authority key identifier: 1B:CA:A8:3F:C9:A4:10:BD:B3:E0:FD:2D:84:87:20:13:47:71:BE:CF
Certificate issuer: /CN=1bcaa83fc9a410bdb3e0fd2d848720134771becf
Certificate serial: 019D29CDD2858B4DA1CB6E991FE7FE8B4ABD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G8qoP8mkEL2z4P0thIcgE0dxvs8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/e56fbc-18cf-4765-8a4c-cd70138e6383/1/G8qoP8mkEL2z4P0thIcgE0dxvs8.mft
Manifest number: 1815
Signing time: Thu 26 Mar 2026 11:00:47 +0000
Manifest this update: Thu 26 Mar 2026 11:00:47 +0000
Manifest next update: Fri 27 Mar 2026 11:00:47 +0000
Files and hashes: 1: G8qoP8mkEL2z4P0thIcgE0dxvs8.crl (hash: 9L3uRZS/m345SNHWlVr0vlNI8BBmC761g+3ql7WIdO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/e56fbc-18cf-4765-8a4c-cd70138e6383/1/G8qoP8mkEL2z4P0thIcgE0dxvs8.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/e56fbc-18cf-4765-8a4c-cd70138e6383/1/G8qoP8mkEL2z4P0thIcgE0dxvs8.mft
rsync://rpki.ripe.net/repository/DEFAULT/G8qoP8mkEL2z4P0thIcgE0dxvs8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:cd:d2:85:8b:4d:a1:cb:6e:99:1f:e7:fe:8b:4a:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bcaa83fc9a410bdb3e0fd2d848720134771becf
Validity
Not Before: Mar 26 11:00:47 2026 GMT
Not After : Mar 27 11:00:47 2026 GMT
Subject: CN=062de3f8d47b3c1d44298912a31933d1c4927943
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a1:73:00:4f:14:8b:d5:bf:37:4f:6b:93:6d:
62:12:67:6d:3f:ba:e1:8c:01:60:82:82:f5:fa:ca:
41:54:ba:d3:99:57:df:77:bb:cc:0a:b4:f2:a4:92:
90:f8:8b:67:bb:a1:39:eb:d7:c1:20:4f:33:fe:a7:
f2:0b:c1:fe:74:19:6c:83:2d:8e:e7:bd:7f:1f:68:
ad:08:56:cb:e1:e9:3a:73:fa:a7:8e:4d:df:4a:93:
ec:3e:2b:3d:74:14:16:76:d9:72:15:1f:8b:ce:9a:
3e:9e:1a:34:5a:7b:8b:ec:38:55:b6:2b:e0:19:3a:
86:22:3c:ab:78:e9:24:e6:0d:f3:f1:4f:41:1b:31:
27:25:60:09:8d:d9:97:73:18:20:d8:a6:98:9b:0a:
6c:d6:c2:d5:aa:82:7d:9d:71:46:c7:ae:2d:4e:e9:
0f:3a:29:26:5e:91:0c:dd:f2:72:24:14:9d:c9:66:
2b:76:88:19:2c:e0:f0:04:de:5b:e7:71:33:ec:ae:
6b:28:22:51:41:26:05:f4:b9:f2:24:a4:e4:1f:2c:
43:dd:ed:ac:81:81:cc:e3:4f:9d:94:1e:22:a2:65:
5e:50:6f:80:2a:39:2a:6d:ea:22:f5:39:ae:12:b6:
0e:4b:f0:a3:64:bf:00:97:bd:02:00:19:38:2b:95:
27:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:2D:E3:F8:D4:7B:3C:1D:44:29:89:12:A3:19:33:D1:C4:92:79:43
X509v3 Authority Key Identifier:
keyid:1B:CA:A8:3F:C9:A4:10:BD:B3:E0:FD:2D:84:87:20:13:47:71:BE:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G8qoP8mkEL2z4P0thIcgE0dxvs8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e56fbc-18cf-4765-8a4c-cd70138e6383/1/G8qoP8mkEL2z4P0thIcgE0dxvs8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e56fbc-18cf-4765-8a4c-cd70138e6383/1/G8qoP8mkEL2z4P0thIcgE0dxvs8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:89:16:c9:27:b9:6c:32:55:7a:ec:3c:23:40:89:76:c1:63:
61:2b:50:e5:26:be:86:9b:1d:8e:2f:4f:61:ee:64:73:88:ab:
5e:16:08:6d:97:f2:67:8e:a3:1b:43:b2:5f:11:fc:1e:75:18:
85:d1:05:f4:d1:e0:d4:8f:02:92:a0:0e:e6:88:b3:52:4b:21:
56:b5:d3:5f:e3:1a:2e:5a:18:f7:f7:f0:a6:28:a3:67:b1:c7:
72:2f:84:74:39:0f:f2:8e:a7:e3:ec:0f:75:81:79:1a:dd:9b:
5a:ee:24:ed:a3:9b:aa:4f:bd:d1:8d:58:23:05:4e:15:cd:02:
b9:7f:e5:66:cd:9d:20:4f:74:7f:25:93:9e:1d:c8:13:28:75:
af:a1:90:d6:20:b2:1f:f7:c9:4a:7e:8c:5b:9b:2e:af:ef:22:
35:95:dd:3c:bf:eb:74:7b:a8:7c:ea:3c:e6:ac:5f:ae:9a:26:
f3:b2:b6:ca:65:93:8e:33:a8:06:24:fe:44:78:94:00:f1:f0:
19:2b:74:a2:33:ae:70:ac:b7:b0:c0:1f:97:69:df:0b:a9:6d:
85:7f:8e:87:60:8c:1f:0a:65:72:b3:d0:b7:09:85:f0:66:ad:
fb:5c:5b:cf:2b:b6:0e:b4:ff:21:76:ac:40:68:3c:3a:d7:a0:
18:a4:fc:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:14:43 2026 by rpki-client