Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.mft
File: G8GZTqY9UNvItDrOytKEK03BV1k.mft (raw, json)
Hash identifier: XiXh7y7F09daoR/dYysjoiRzFvm/K9g417A9NdROfjs=
Subject key identifier: 0B:0C:C6:D3:C8:F7:DE:F9:C8:09:87:EB:83:73:D5:DB:73:40:BC:29
Authority key identifier: 1B:C1:99:4E:A6:3D:50:DB:C8:B4:3A:CE:CA:D2:84:2B:4D:C1:57:59
Certificate issuer: /CN=1bc1994ea63d50dbc8b43acecad2842b4dc15759
Certificate serial: 019CAE6C5C3FFF6530213E3794B1FE90A0BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G8GZTqY9UNvItDrOytKEK03BV1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.mft
Manifest number: 158E
Signing time: Mon 02 Mar 2026 12:01:02 +0000
Manifest this update: Mon 02 Mar 2026 12:01:02 +0000
Manifest next update: Tue 03 Mar 2026 12:01:02 +0000
Files and hashes: 1: G8GZTqY9UNvItDrOytKEK03BV1k.crl (hash: 35qxxF1a7oIbQ2FZJuefKjqt4iD+eCcQ6ZzbqZTBKXY=)
2: lEqsPfJ-qWwA6TQd-ohXS0Li1gU.roa (hash: hs8ieBVGRJNin3fquHZxIlGRfOUPqdHhIELx12VmaoE=)
3: rkV3SDP19OQE0LF_g47eoLW0kdQ.roa (hash: WeYDPKsZ8dv4/mxbMaGVfQRu6h+w3pCGRVmTTR7BPpE=)
4: xG_Z_AN9TZQ2gJ2PV0YaepCBTsQ.roa (hash: nKSNO2Ekt5+NEphgm5cEzzq+4O/tpyRO5FtPgeeUWyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/G8GZTqY9UNvItDrOytKEK03BV1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 12:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:6c:5c:3f:ff:65:30:21:3e:37:94:b1:fe:90:a0:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bc1994ea63d50dbc8b43acecad2842b4dc15759
Validity
Not Before: Mar 2 12:01:02 2026 GMT
Not After : Mar 3 12:01:02 2026 GMT
Subject: CN=0b0cc6d3c8f7def9c80987eb8373d5db7340bc29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6e:4e:ce:48:83:b6:78:39:30:b5:1a:af:3b:
2f:a5:2b:79:b3:8c:a3:2b:e1:3c:7d:3c:dd:65:4d:
8f:1b:3c:77:80:69:96:ce:5f:89:df:63:07:93:6c:
4b:54:2d:d8:42:8f:3e:22:d3:0e:8e:0f:c4:4c:26:
72:05:da:c6:ed:56:65:f7:67:5f:cb:96:49:12:4d:
c8:18:d8:ce:2d:dc:8f:94:f4:76:a7:2b:7a:cf:51:
61:be:05:17:30:0f:9e:05:21:0f:aa:a3:9b:ef:68:
ad:0c:1a:f4:6d:fc:48:6a:9c:5c:75:35:c0:f7:44:
0b:7d:62:f2:29:37:4d:23:22:79:0d:40:f9:56:50:
68:62:b3:b5:10:3d:b9:ac:87:4f:dc:e7:5c:6f:92:
9b:37:ff:89:82:09:77:48:3a:18:14:2a:a9:01:05:
a6:a0:c1:4d:d8:71:bf:39:59:f0:16:92:cf:27:46:
80:e4:b9:97:5f:8e:c4:ac:db:d3:17:92:16:bc:54:
0c:fc:e5:a9:87:56:44:e3:f7:0a:48:ed:f8:a7:ba:
e3:8a:b2:84:89:cb:f7:75:a6:ae:f5:63:cd:5c:16:
3e:dc:04:0f:8c:83:55:29:95:2e:22:f0:9d:17:cb:
0f:5e:b0:d4:1b:4e:13:2d:58:9d:5a:53:2f:b7:c5:
c7:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:0C:C6:D3:C8:F7:DE:F9:C8:09:87:EB:83:73:D5:DB:73:40:BC:29
X509v3 Authority Key Identifier:
keyid:1B:C1:99:4E:A6:3D:50:DB:C8:B4:3A:CE:CA:D2:84:2B:4D:C1:57:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G8GZTqY9UNvItDrOytKEK03BV1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:81:67:37:db:c0:14:98:b1:ec:8a:ca:a2:88:b2:ff:32:4f:
b3:af:3e:ec:0a:d2:7a:61:8f:40:ba:e1:05:f7:f7:d0:3b:05:
81:35:b9:51:b6:3e:c8:f1:83:5e:07:73:18:90:52:1f:9c:c9:
b0:89:b6:74:60:56:95:78:b6:88:07:26:d4:27:08:f5:da:f4:
bb:1b:c0:42:f3:1c:bd:89:6c:3e:91:d0:53:5e:f7:78:18:7c:
cc:7a:d8:af:d2:9b:99:7d:25:49:e3:14:65:40:d5:09:20:24:
22:a3:f6:e8:5c:8e:0e:88:e9:b3:0d:f6:03:d2:4a:15:a9:fa:
5f:ee:c1:81:26:5f:d5:6a:58:e8:f2:5c:29:d0:72:56:93:cf:
b0:7f:e6:38:85:e4:3d:62:b4:0c:a9:0e:16:6c:b1:9d:85:23:
1a:7d:45:fc:c7:ea:24:1d:50:c3:0f:cb:9b:38:27:d0:35:af:
66:00:1e:38:36:04:70:df:58:04:a3:61:79:f1:cb:ae:81:7d:
79:58:b0:18:6e:4d:20:5d:6a:dd:83:1d:9c:a6:48:de:ce:8f:
72:4f:0d:60:db:ce:dc:b4:1c:fd:db:b5:08:6f:10:ce:d2:2f:
a2:8f:eb:cf:3b:06:ec:31:99:b3:59:0c:7b:c6:b0:66:e8:fb:
f9:48:46:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:27:42 2026 by rpki-client