Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/c8a404-5e76-4ef4-bb07-026c26b5d395/1/G04-M_1PbZy08TyiI3HjCzbPp3Y.mft
File: G04-M_1PbZy08TyiI3HjCzbPp3Y.mft (raw, json)
Hash identifier: 0x/EpbBgjTnkeBfaEg0RXliRbBzmkS6TyzEjc85dwnA=
Subject key identifier: A8:A2:A7:39:9F:6E:75:B2:A0:81:F3:FA:9C:AE:29:13:45:55:9D:34
Authority key identifier: 1B:4E:3E:33:FD:4F:6D:9C:B4:F1:3C:A2:23:71:E3:0B:36:CF:A7:76
Certificate issuer: /CN=1b4e3e33fd4f6d9cb4f13ca22371e30b36cfa776
Certificate serial: 019D99625BC88D640B66E46C55638474AE9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G04-M_1PbZy08TyiI3HjCzbPp3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/c8a404-5e76-4ef4-bb07-026c26b5d395/1/G04-M_1PbZy08TyiI3HjCzbPp3Y.mft
Manifest number: 18BD
Signing time: Fri 17 Apr 2026 03:00:53 +0000
Manifest this update: Fri 17 Apr 2026 03:00:53 +0000
Manifest next update: Sat 18 Apr 2026 03:00:53 +0000
Files and hashes: 1: G04-M_1PbZy08TyiI3HjCzbPp3Y.crl (hash: G/KViKsiqtYzFp6aAT6koFIgNUXUQ5XhMS27wsBpkLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/c8a404-5e76-4ef4-bb07-026c26b5d395/1/G04-M_1PbZy08TyiI3HjCzbPp3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/c8a404-5e76-4ef4-bb07-026c26b5d395/1/G04-M_1PbZy08TyiI3HjCzbPp3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/G04-M_1PbZy08TyiI3HjCzbPp3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:5b:c8:8d:64:0b:66:e4:6c:55:63:84:74:ae:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b4e3e33fd4f6d9cb4f13ca22371e30b36cfa776
Validity
Not Before: Apr 17 03:00:53 2026 GMT
Not After : Apr 18 03:00:53 2026 GMT
Subject: CN=a8a2a7399f6e75b2a081f3fa9cae291345559d34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:5f:64:ba:fc:d7:fb:fb:a9:18:60:f0:b0:33:
57:0d:e2:da:cd:56:68:bd:40:69:ea:b2:82:c7:e3:
db:dc:9b:62:b1:4f:94:03:c2:4d:4b:7e:e1:69:56:
5e:4c:16:a6:c4:7e:a4:85:34:d5:39:3b:3f:8a:18:
53:39:20:79:19:47:ad:7c:1f:f8:a4:3d:2f:5c:92:
c7:7d:48:ee:f9:83:83:c5:40:51:26:03:9a:7a:87:
b4:35:d0:2a:c4:4e:d1:f3:24:58:1e:4e:fc:06:d1:
ea:48:6f:79:b0:d5:24:86:a9:bc:20:34:8c:98:9f:
43:a9:62:53:a1:b8:f3:48:ce:7c:38:05:e6:c6:3c:
da:b5:b2:b4:f0:f4:ec:32:f9:e3:2a:d2:57:63:c4:
46:04:29:0a:70:38:36:94:b3:46:d9:0d:df:a9:41:
f1:c9:49:ce:48:5e:d8:fa:93:6e:bb:17:bf:aa:d5:
78:82:27:14:9f:fb:ad:82:0d:16:0e:43:06:be:ca:
cb:23:47:2c:15:50:b6:81:78:3d:72:10:55:3a:ed:
8b:57:11:4e:c0:94:ec:f7:dd:72:53:e7:33:5e:6c:
5d:b8:f8:42:e3:9b:95:c0:37:ab:ae:b5:45:69:2f:
9a:43:fd:8e:12:9f:d1:48:01:8a:6e:6c:f9:e6:e0:
d7:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:A2:A7:39:9F:6E:75:B2:A0:81:F3:FA:9C:AE:29:13:45:55:9D:34
X509v3 Authority Key Identifier:
keyid:1B:4E:3E:33:FD:4F:6D:9C:B4:F1:3C:A2:23:71:E3:0B:36:CF:A7:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G04-M_1PbZy08TyiI3HjCzbPp3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c8a404-5e76-4ef4-bb07-026c26b5d395/1/G04-M_1PbZy08TyiI3HjCzbPp3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c8a404-5e76-4ef4-bb07-026c26b5d395/1/G04-M_1PbZy08TyiI3HjCzbPp3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:4d:f1:6c:39:ce:d3:cc:a0:f9:34:b9:63:0f:77:92:db:45:
18:8a:5d:9b:e2:76:08:5d:93:38:64:8c:96:32:d7:24:ec:48:
fa:ff:73:2c:18:1c:6a:c5:13:38:ef:f6:8e:94:f3:1d:eb:b8:
8b:5b:d1:ce:36:7e:6d:c6:03:3c:d0:1f:68:57:c4:e2:08:40:
c0:4d:2c:d2:ae:1d:4a:9e:bf:c4:a5:3c:0a:55:72:e4:f9:24:
90:1a:23:1e:dc:8a:48:1f:94:a1:9f:01:21:4c:7f:a7:83:70:
70:de:5c:0b:ef:f3:23:ae:7b:ad:75:05:be:94:9c:27:62:b9:
68:5b:14:4b:81:de:13:ed:b4:34:1d:03:d5:73:05:1d:30:86:
b3:fc:2f:78:be:e4:51:01:85:56:b8:22:97:8b:cd:5c:48:9c:
38:2f:5b:54:28:65:1e:c4:cf:a6:f2:56:a2:74:72:31:5e:a3:
23:c2:a9:22:8b:ff:01:54:18:fa:e9:46:1e:36:ef:df:8c:cd:
b6:5f:b3:cf:07:8e:48:7f:32:65:76:40:70:e1:4f:43:be:ae:
d9:30:59:51:dd:b1:5a:0a:86:8e:14:cd:27:18:c5:67:64:c8:
b9:a2:3a:a3:ee:58:c5:0a:c1:ff:58:27:9b:14:d5:c2:e3:f3:
95:6e:4a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:48:46 2026 by rpki-client