Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.mft
File: G8GZTqY9UNvItDrOytKEK03BV1k.mft (raw, json)
Hash identifier: gscIBtFYBRJ1GZ5tT2EpWGBzp1pk1ocOzv9MkFpoE3o=
Subject key identifier: 94:8C:B6:1D:D9:DD:DE:02:B4:B0:AD:49:EC:6E:06:FB:F9:3B:D9:82
Authority key identifier: 1B:C1:99:4E:A6:3D:50:DB:C8:B4:3A:CE:CA:D2:84:2B:4D:C1:57:59
Certificate issuer: /CN=1bc1994ea63d50dbc8b43acecad2842b4dc15759
Certificate serial: 019CAC7E3DB0729D93FD2C34876CB6E2EF8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G8GZTqY9UNvItDrOytKEK03BV1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.mft
Manifest number: 158D
Signing time: Mon 02 Mar 2026 03:01:20 +0000
Manifest this update: Mon 02 Mar 2026 03:01:20 +0000
Manifest next update: Tue 03 Mar 2026 03:01:20 +0000
Files and hashes: 1: G8GZTqY9UNvItDrOytKEK03BV1k.crl (hash: 57vqX/sZqnkqa0Ahh7i7nWQwiVSE6mJZVKkwmSEMGOw=)
2: lEqsPfJ-qWwA6TQd-ohXS0Li1gU.roa (hash: hs8ieBVGRJNin3fquHZxIlGRfOUPqdHhIELx12VmaoE=)
3: rkV3SDP19OQE0LF_g47eoLW0kdQ.roa (hash: WeYDPKsZ8dv4/mxbMaGVfQRu6h+w3pCGRVmTTR7BPpE=)
4: xG_Z_AN9TZQ2gJ2PV0YaepCBTsQ.roa (hash: nKSNO2Ekt5+NEphgm5cEzzq+4O/tpyRO5FtPgeeUWyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/G8GZTqY9UNvItDrOytKEK03BV1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 03:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:3d:b0:72:9d:93:fd:2c:34:87:6c:b6:e2:ef:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bc1994ea63d50dbc8b43acecad2842b4dc15759
Validity
Not Before: Mar 2 03:01:20 2026 GMT
Not After : Mar 3 03:01:20 2026 GMT
Subject: CN=948cb61dd9ddde02b4b0ad49ec6e06fbf93bd982
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:55:92:5f:64:fc:54:bf:9f:85:84:ce:9f:47:
aa:27:2c:31:75:b6:3f:a2:c8:98:28:cb:0a:45:60:
3e:84:84:7b:e2:d6:58:fd:f2:68:e5:78:3a:e6:63:
3b:b8:61:26:22:59:46:63:b8:8a:01:0c:0b:31:17:
64:0d:ef:c9:97:2a:ac:7d:9f:e1:77:64:15:c7:b4:
be:51:78:c3:db:68:5f:4b:77:28:2f:b8:b2:37:4d:
fc:ce:4f:0d:d4:29:0a:0e:32:93:8a:25:15:72:13:
9c:71:39:13:96:c1:ad:93:d2:d7:41:d8:8a:fc:0a:
3a:9e:ab:05:5c:e5:c6:da:6c:c8:a1:1e:ac:d0:1c:
0c:93:65:01:a6:a5:71:71:c3:61:47:5c:85:f6:62:
25:cf:41:ac:2f:3a:15:da:ce:51:49:24:dd:88:f3:
40:89:2c:75:7d:b0:55:02:f3:9a:34:61:ca:e7:48:
f0:b4:a8:3b:1e:ec:28:67:f5:01:09:5c:ec:cc:2d:
fd:1d:52:f7:50:fd:0b:42:1a:2a:1f:3e:c7:fd:e0:
a2:8b:b0:b8:e1:8b:82:cd:ec:df:35:5a:40:e8:a8:
f4:f2:a9:13:e2:b8:4c:d0:6d:10:b0:16:f7:00:2d:
19:8a:db:a1:ec:37:9c:bb:81:0e:be:84:f9:26:7e:
ce:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:8C:B6:1D:D9:DD:DE:02:B4:B0:AD:49:EC:6E:06:FB:F9:3B:D9:82
X509v3 Authority Key Identifier:
keyid:1B:C1:99:4E:A6:3D:50:DB:C8:B4:3A:CE:CA:D2:84:2B:4D:C1:57:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G8GZTqY9UNvItDrOytKEK03BV1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:0c:97:42:50:95:30:0d:f1:86:27:5a:b8:82:c5:95:b4:51:
2c:56:b6:4b:42:43:2a:99:2a:59:50:4c:f4:31:97:14:d1:84:
0d:62:97:9e:1d:d2:45:1c:f5:b3:04:37:e2:73:db:a0:53:55:
3e:cf:40:8e:f3:0a:6e:22:e2:63:a7:c7:9f:8e:c8:b1:f8:52:
ce:41:4b:e6:97:6f:f5:49:1d:6b:c4:8b:c6:75:42:88:b9:c1:
eb:10:f4:e2:bf:84:1e:35:57:72:d2:a6:50:ab:6d:b2:49:52:
67:06:a7:26:2c:94:28:5e:d1:b5:71:93:b5:70:ae:55:f7:32:
25:0d:d1:20:c4:83:e5:2a:c1:32:d9:b9:4a:e1:83:ee:90:01:
a1:c4:6b:5c:fe:34:c2:ce:b3:f1:a2:52:bf:d6:52:f7:12:2d:
4a:51:48:56:67:01:28:16:18:86:ae:38:02:b4:65:a9:64:ff:
f2:99:78:09:45:20:fa:c5:fa:04:74:02:4c:ae:ba:02:9b:cf:
60:45:0e:d6:af:af:8d:cf:63:46:66:6e:c3:bc:68:86:2d:40:
d9:24:77:88:78:36:81:02:cd:f7:47:42:a2:15:45:d9:4e:6d:
2a:07:80:dd:2b:a5:05:4d:59:70:05:1a:c9:49:a6:96:21:16:
69:35:69:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:50:38 2026 by rpki-client