Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/bc94df-7259-42d1-822a-3d9810098703/1/G8PBvvFfS8zE50jAiVfswimg8e8.mft
File: G8PBvvFfS8zE50jAiVfswimg8e8.mft (raw, json)
Hash identifier: wSkO9D3k9grqCFvIxDPE0DLZiMOFAjGWMVEFlUHvHaQ=
Subject key identifier: 04:78:23:88:E8:BF:18:D3:DE:04:B8:43:E5:79:02:81:D7:F6:31:2C
Authority key identifier: 1B:C3:C1:BE:F1:5F:4B:CC:C4:E7:48:C0:89:57:EC:C2:29:A0:F1:EF
Certificate issuer: /CN=1bc3c1bef15f4bccc4e748c08957ecc229a0f1ef
Certificate serial: 01A1201C0C21916C88966157073F5F13F6D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G8PBvvFfS8zE50jAiVfswimg8e8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/bc94df-7259-42d1-822a-3d9810098703/1/G8PBvvFfS8zE50jAiVfswimg8e8.mft
Manifest number: 1A95
Signing time: Fri 09 Oct 2026 10:01:11 +0000
Manifest this update: Fri 09 Oct 2026 10:01:11 +0000
Manifest next update: Sat 10 Oct 2026 10:01:11 +0000
Files and hashes: 1: DlKyBrR63naawFqSxCcY5AiE7sc.roa (hash: WQjnV83H98zboyc2IgEVyNSA+r/DYppkxai3rL8VYRs=)
2: G8PBvvFfS8zE50jAiVfswimg8e8.crl (hash: 1UH8P2jU3CrduGs4i7jcK/Ssi1WF4A9AbG72qEEhugk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/bc94df-7259-42d1-822a-3d9810098703/1/G8PBvvFfS8zE50jAiVfswimg8e8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/bc94df-7259-42d1-822a-3d9810098703/1/G8PBvvFfS8zE50jAiVfswimg8e8.mft
rsync://rpki.ripe.net/repository/DEFAULT/G8PBvvFfS8zE50jAiVfswimg8e8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:20:1c:0c:21:91:6c:88:96:61:57:07:3f:5f:13:f6:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bc3c1bef15f4bccc4e748c08957ecc229a0f1ef
Validity
Not Before: Oct 9 10:01:11 2026 GMT
Not After : Oct 10 10:01:11 2026 GMT
Subject: CN=04782388e8bf18d3de04b843e5790281d7f6312c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:09:a7:10:c5:c4:8c:59:7f:1a:01:fa:5c:bb:
ac:ff:31:77:ff:64:59:ce:63:cf:5b:da:6c:dd:c8:
80:9c:49:b9:7d:f3:8a:bc:9a:ef:8f:93:30:a7:d6:
24:bd:5c:8e:67:ca:bb:6c:ff:0a:24:9c:86:df:95:
c3:08:33:f7:50:fb:38:a3:1c:17:15:e0:9e:5e:66:
49:7b:f6:6d:66:19:1c:3e:d4:9d:45:c4:78:0f:e6:
89:ad:39:98:a5:ac:6d:21:ee:ad:aa:6d:a8:54:3e:
43:d7:10:73:db:89:f4:89:2b:ab:6b:fe:11:ab:fb:
a8:61:63:10:d6:f0:7a:2b:3c:e2:9d:0a:c2:6d:20:
d1:98:0f:03:3b:24:ad:19:cc:4b:a4:55:a8:3b:66:
53:9e:43:ec:30:4a:f8:e2:dd:92:41:0f:88:a7:ed:
e0:5c:43:9b:48:9c:9b:d0:d4:e6:75:53:82:4a:7b:
93:9f:5f:c1:c0:3e:5e:68:eb:33:b6:d5:4f:0a:f2:
6b:be:52:d0:9a:71:e5:54:43:a1:fe:2f:04:15:0b:
16:56:85:0f:97:d9:a4:6e:d2:42:32:c0:8d:9a:49:
fa:d8:11:8c:9c:40:ac:a7:a8:b7:39:2d:62:50:9d:
71:72:6f:5c:9d:32:91:8b:e4:5c:01:41:50:5d:ba:
6d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:78:23:88:E8:BF:18:D3:DE:04:B8:43:E5:79:02:81:D7:F6:31:2C
X509v3 Authority Key Identifier:
keyid:1B:C3:C1:BE:F1:5F:4B:CC:C4:E7:48:C0:89:57:EC:C2:29:A0:F1:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G8PBvvFfS8zE50jAiVfswimg8e8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/bc94df-7259-42d1-822a-3d9810098703/1/G8PBvvFfS8zE50jAiVfswimg8e8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/bc94df-7259-42d1-822a-3d9810098703/1/G8PBvvFfS8zE50jAiVfswimg8e8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:12:11:12:66:43:62:e1:cb:e4:b2:db:5e:03:32:88:51:f8:
05:7e:7e:b9:92:2b:9c:d1:84:44:6d:ac:c1:b7:8f:4e:fa:25:
63:fe:66:86:05:0b:9a:fd:55:36:3b:6c:99:b1:5a:a1:92:50:
02:a1:0d:d2:78:ec:e3:d8:29:dd:1a:e6:ee:a9:c7:fa:86:01:
cc:69:b2:eb:5f:93:0d:32:02:53:bf:68:52:91:c4:e4:b1:83:
f4:b8:09:b8:13:ae:24:e9:e0:1d:f9:da:5f:19:f9:14:d9:23:
d8:95:9d:81:2f:5e:ad:24:b4:d8:d2:a8:49:ef:c1:69:72:94:
cb:f9:83:fa:90:46:d6:66:03:66:61:26:0e:30:e9:72:c8:de:
84:bf:01:c4:14:4e:2f:a1:b2:62:b0:3c:85:c6:82:76:81:2b:
0b:42:ae:90:9b:ef:97:f2:d0:09:d7:72:1c:43:e0:7d:1e:7f:
c2:62:21:33:b9:2f:47:ef:1c:8f:72:76:0f:1d:84:1d:ba:42:
d8:cf:35:0d:e4:0f:16:b9:18:d6:de:c5:c9:80:30:f1:a9:75:
7a:4e:aa:17:fe:e8:97:5d:35:61:21:35:51:09:d5:84:33:13:
1c:b8:f0:ee:7d:15:c4:60:62:b3:61:80:ac:ee:bf:02:d8:fb:
4e:5a:6a:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 18:32:16 2026 by rpki-client