Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/bc94df-7259-42d1-822a-3d9810098703/1/G8PBvvFfS8zE50jAiVfswimg8e8.mft
File: G8PBvvFfS8zE50jAiVfswimg8e8.mft (raw, json)
Hash identifier: 9s93IXdMVD27aYKL1jpmvALmeP/CkHm+s6c9tLj3rW8=
Subject key identifier: FF:2A:67:A7:E7:E0:4C:35:6F:D3:3F:B2:6C:0C:1F:6E:18:AD:0B:98
Authority key identifier: 1B:C3:C1:BE:F1:5F:4B:CC:C4:E7:48:C0:89:57:EC:C2:29:A0:F1:EF
Certificate issuer: /CN=1bc3c1bef15f4bccc4e748c08957ecc229a0f1ef
Certificate serial: 019CAAC686F7004FC7605181B34A398DAB0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G8PBvvFfS8zE50jAiVfswimg8e8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/bc94df-7259-42d1-822a-3d9810098703/1/G8PBvvFfS8zE50jAiVfswimg8e8.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 19:01:03 +0000
Manifest this update: Sun 01 Mar 2026 19:01:03 +0000
Manifest next update: Mon 02 Mar 2026 19:01:03 +0000
Files and hashes: 1: DlKyBrR63naawFqSxCcY5AiE7sc.roa (hash: WQjnV83H98zboyc2IgEVyNSA+r/DYppkxai3rL8VYRs=)
2: G8PBvvFfS8zE50jAiVfswimg8e8.crl (hash: Zc9waRCiRQpguot8hhtFdCMOnT5ihNUDEjhYH8ltDs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/bc94df-7259-42d1-822a-3d9810098703/1/G8PBvvFfS8zE50jAiVfswimg8e8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/bc94df-7259-42d1-822a-3d9810098703/1/G8PBvvFfS8zE50jAiVfswimg8e8.mft
rsync://rpki.ripe.net/repository/DEFAULT/G8PBvvFfS8zE50jAiVfswimg8e8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:86:f7:00:4f:c7:60:51:81:b3:4a:39:8d:ab:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bc3c1bef15f4bccc4e748c08957ecc229a0f1ef
Validity
Not Before: Mar 1 19:01:03 2026 GMT
Not After : Mar 2 19:01:03 2026 GMT
Subject: CN=ff2a67a7e7e04c356fd33fb26c0c1f6e18ad0b98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:19:f4:db:5a:59:bd:9c:fd:8d:c0:3f:6f:f5:
87:60:28:c6:ed:94:93:f9:bc:9d:a7:52:a2:18:3a:
a3:fe:b5:b4:4b:40:ec:71:9c:88:02:cc:4f:e8:d7:
ae:28:b3:e5:63:89:8b:28:9e:8f:0d:dc:d7:5b:8d:
d6:c7:b8:de:b4:09:35:f4:8b:66:e5:7d:47:22:11:
cf:36:06:97:27:b8:85:9c:85:f5:72:47:41:6b:97:
9b:af:42:d3:59:9d:05:96:1a:53:b7:07:97:3d:98:
70:e2:e7:6f:cb:25:f3:0f:e9:25:da:85:d8:80:6a:
1d:f9:4a:b0:e1:93:cc:13:d2:a7:f2:fe:49:62:e2:
38:d4:b9:37:48:5e:99:36:72:93:e7:ab:bb:3a:06:
1f:79:84:51:7b:a4:cf:ab:2c:af:b5:3d:a8:fe:fa:
17:4b:b5:5b:aa:0e:df:d3:3a:3f:8d:42:9a:e3:b5:
28:10:74:9c:52:02:82:df:77:cf:1c:45:d6:64:39:
53:4f:4a:a6:9a:96:b7:c9:56:a2:f5:56:1a:fc:f2:
9e:6d:c1:03:7c:ac:3a:75:7e:29:f2:d3:fe:f8:c4:
91:11:98:bb:fc:cf:7b:8c:78:6a:85:7d:37:4c:36:
83:b5:28:94:68:25:37:e3:4c:cd:3d:3e:39:c4:7f:
b5:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:2A:67:A7:E7:E0:4C:35:6F:D3:3F:B2:6C:0C:1F:6E:18:AD:0B:98
X509v3 Authority Key Identifier:
keyid:1B:C3:C1:BE:F1:5F:4B:CC:C4:E7:48:C0:89:57:EC:C2:29:A0:F1:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G8PBvvFfS8zE50jAiVfswimg8e8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/bc94df-7259-42d1-822a-3d9810098703/1/G8PBvvFfS8zE50jAiVfswimg8e8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/bc94df-7259-42d1-822a-3d9810098703/1/G8PBvvFfS8zE50jAiVfswimg8e8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:2a:09:a6:5f:56:fe:65:10:76:77:a6:6a:de:e3:07:d3:cc:
52:05:f3:0d:46:77:b2:73:06:8c:0e:ea:64:f2:1a:70:4a:fe:
d9:48:d8:c2:c1:d0:37:e1:da:e8:d7:2c:3a:c7:bd:3f:ce:e4:
bd:6b:5c:70:a7:63:98:75:11:87:88:7d:b4:af:ee:a9:a6:be:
39:f8:52:65:c7:1d:80:39:8f:b1:41:79:5d:0f:10:2b:34:6a:
ed:28:be:20:9a:36:6a:49:94:5d:80:32:e2:f9:2c:98:9f:ce:
5b:87:0a:11:c9:c1:e1:c6:26:fd:e2:0f:6d:20:21:08:e9:32:
47:50:f7:74:c3:96:0b:e2:5b:fa:37:b2:43:79:62:f4:57:2b:
44:b0:d1:ab:b2:9a:31:07:6d:db:9a:96:09:a4:b0:51:45:4b:
5d:b9:c2:21:92:1a:c9:c9:41:37:ed:f3:c2:fb:b4:8b:39:60:
bd:5e:c4:a3:20:05:0d:d2:5d:c3:d8:ac:5a:3d:07:5a:d6:9d:
2e:2c:2b:56:e1:38:f4:f2:65:e4:09:cf:48:72:57:79:67:bd:
a6:fd:ec:f6:e0:b5:2f:90:45:f2:a6:46:b2:ed:a5:42:a9:bb:
38:ac:1a:74:fe:d0:93:60:45:c0:20:79:07:13:cf:4b:e6:96:
27:d2:a4:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:55:03 2026 by rpki-client