Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.mft
File: G8GZTqY9UNvItDrOytKEK03BV1k.mft (raw, json)
Hash identifier: 4nwubWoOYJBIGAvNvsMxepp5aJuKy6wNoH5X9bOxUBg=
Subject key identifier: 8E:6C:F5:B8:9E:C0:E2:EB:DD:92:FF:C7:45:A7:5A:FE:29:A8:95:78
Authority key identifier: 1B:C1:99:4E:A6:3D:50:DB:C8:B4:3A:CE:CA:D2:84:2B:4D:C1:57:59
Certificate issuer: /CN=1bc1994ea63d50dbc8b43acecad2842b4dc15759
Certificate serial: 019D9BF53484441C5A8BA8BB650709EC9D7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G8GZTqY9UNvItDrOytKEK03BV1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.mft
Manifest number: 1609
Signing time: Fri 17 Apr 2026 15:00:31 +0000
Manifest this update: Fri 17 Apr 2026 15:00:31 +0000
Manifest next update: Sat 18 Apr 2026 15:00:31 +0000
Files and hashes: 1: G8GZTqY9UNvItDrOytKEK03BV1k.crl (hash: OJ0huQrtMNGYRahMbZy/LVuB+dlxteNnDX438ROFo3M=)
2: lEqsPfJ-qWwA6TQd-ohXS0Li1gU.roa (hash: hs8ieBVGRJNin3fquHZxIlGRfOUPqdHhIELx12VmaoE=)
3: rkV3SDP19OQE0LF_g47eoLW0kdQ.roa (hash: WeYDPKsZ8dv4/mxbMaGVfQRu6h+w3pCGRVmTTR7BPpE=)
4: xG_Z_AN9TZQ2gJ2PV0YaepCBTsQ.roa (hash: nKSNO2Ekt5+NEphgm5cEzzq+4O/tpyRO5FtPgeeUWyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/G8GZTqY9UNvItDrOytKEK03BV1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 15:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:f5:34:84:44:1c:5a:8b:a8:bb:65:07:09:ec:9d:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bc1994ea63d50dbc8b43acecad2842b4dc15759
Validity
Not Before: Apr 17 15:00:31 2026 GMT
Not After : Apr 18 15:00:31 2026 GMT
Subject: CN=8e6cf5b89ec0e2ebdd92ffc745a75afe29a89578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:03:d0:62:85:a0:f7:31:93:5f:83:a9:c8:30:
91:ee:6f:62:b6:62:6a:18:3f:1c:8c:c3:57:9c:fe:
70:55:e1:09:af:92:66:54:19:85:f1:54:5a:3d:d1:
ab:42:13:26:2c:5a:81:1f:79:24:be:24:29:40:61:
c7:61:31:18:10:78:0e:a5:e8:2a:52:64:5e:5c:8a:
a7:dd:a3:e7:e2:13:a4:e3:1f:59:6f:ba:58:9e:60:
da:c8:92:5e:56:32:75:fa:8a:68:10:6b:77:02:fb:
65:31:52:22:4a:b8:3c:e6:74:ad:50:be:d5:5d:44:
db:e7:c1:a5:75:6a:84:f0:47:15:ff:6c:ac:e0:fc:
96:e3:10:05:64:d7:10:1c:f3:a2:78:78:8b:63:a2:
50:5a:91:5c:d4:4b:84:65:a3:f1:07:d8:f9:a5:d2:
ce:18:ce:c9:6f:f2:05:ee:e4:2c:47:40:d2:a7:68:
f3:2f:a0:4d:ca:5a:ef:79:ec:40:6e:e3:2f:ab:6f:
22:97:a7:f4:b4:cd:6c:93:d5:fa:9c:ad:3f:d3:81:
0e:4f:8e:ae:21:f5:79:e0:3e:f0:11:b8:5b:31:ee:
be:e2:ec:90:00:25:a5:3c:a0:3b:fa:62:f8:66:f3:
c4:6c:36:ea:c3:fb:87:1d:db:90:e3:c4:74:43:db:
9c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:6C:F5:B8:9E:C0:E2:EB:DD:92:FF:C7:45:A7:5A:FE:29:A8:95:78
X509v3 Authority Key Identifier:
keyid:1B:C1:99:4E:A6:3D:50:DB:C8:B4:3A:CE:CA:D2:84:2B:4D:C1:57:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G8GZTqY9UNvItDrOytKEK03BV1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e3:83:9c:5b:62:dc:81:86:15:49:a0:df:16:d4:36:03:05:ff:
d7:f8:dd:09:be:0d:fc:a2:3b:0f:87:ba:1a:ae:ef:18:7b:0b:
0c:69:3c:10:79:a4:5d:5b:67:7c:ef:6f:db:8a:06:4d:eb:e5:
9b:eb:4c:40:da:2f:1d:67:58:ca:a1:23:a2:1f:3f:3a:26:1d:
a3:54:ea:f5:b1:f3:ae:d0:1e:16:5b:4a:09:9b:02:f1:55:3b:
59:ff:fe:9d:bd:4f:77:41:c8:66:f0:01:72:da:95:62:f1:c5:
9b:f6:c0:3d:70:4e:c8:07:4a:06:d2:96:09:4b:38:b9:5a:09:
6a:3f:1c:c8:dc:be:48:e4:b4:c7:10:d7:bc:02:63:bb:00:b0:
50:f5:11:4d:c4:a3:56:bd:12:85:e3:9c:86:eb:98:a7:40:9c:
c3:74:a6:d2:ac:81:f1:e8:07:e2:63:90:54:c0:0a:89:6e:70:
40:a5:49:cd:b5:dd:37:fd:c4:75:f0:6d:cf:94:7d:8e:bc:67:
bf:3c:dc:a1:2d:33:09:f6:af:83:75:ff:38:6d:54:d2:77:d4:
3a:0e:82:68:86:dd:8b:cc:dc:12:86:ee:ae:0b:5f:32:df:96:
1d:cc:da:f8:42:c8:88:c3:06:e3:32:40:c7:4f:fb:28:d9:94:
ba:65:1e:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:29:13 2026 by rpki-client