Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/bc94df-7259-42d1-822a-3d9810098703/1/G8PBvvFfS8zE50jAiVfswimg8e8.mft
File: G8PBvvFfS8zE50jAiVfswimg8e8.mft (raw, json)
Hash identifier: Y8Ha1SOAm8yMBntGfYpU8wsWKIBLO4QGMEmlJRQsn74=
Subject key identifier: 06:F1:8A:84:6B:32:9D:B6:1F:7E:01:1C:F9:1D:F2:46:F2:D3:B9:D1
Authority key identifier: 1B:C3:C1:BE:F1:5F:4B:CC:C4:E7:48:C0:89:57:EC:C2:29:A0:F1:EF
Certificate issuer: /CN=1bc3c1bef15f4bccc4e748c08957ecc229a0f1ef
Certificate serial: 019D9A3DF704C0E3EABBEB87DABAB0582864
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G8PBvvFfS8zE50jAiVfswimg8e8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/bc94df-7259-42d1-822a-3d9810098703/1/G8PBvvFfS8zE50jAiVfswimg8e8.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 07:00:45 +0000
Manifest this update: Fri 17 Apr 2026 07:00:45 +0000
Manifest next update: Sat 18 Apr 2026 07:00:45 +0000
Files and hashes: 1: DlKyBrR63naawFqSxCcY5AiE7sc.roa (hash: WQjnV83H98zboyc2IgEVyNSA+r/DYppkxai3rL8VYRs=)
2: G8PBvvFfS8zE50jAiVfswimg8e8.crl (hash: Vn7W0/ih73eYWoTz8n4KFfDLd0IrFlCWhiWfszh+LNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/bc94df-7259-42d1-822a-3d9810098703/1/G8PBvvFfS8zE50jAiVfswimg8e8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/bc94df-7259-42d1-822a-3d9810098703/1/G8PBvvFfS8zE50jAiVfswimg8e8.mft
rsync://rpki.ripe.net/repository/DEFAULT/G8PBvvFfS8zE50jAiVfswimg8e8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3d:f7:04:c0:e3:ea:bb:eb:87:da:ba:b0:58:28:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bc3c1bef15f4bccc4e748c08957ecc229a0f1ef
Validity
Not Before: Apr 17 07:00:45 2026 GMT
Not After : Apr 18 07:00:45 2026 GMT
Subject: CN=06f18a846b329db61f7e011cf91df246f2d3b9d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:54:c2:ed:09:38:9b:a7:82:cd:8b:1c:07:e3:
be:1f:75:25:fd:bf:de:b2:af:9d:65:91:5a:bb:fe:
67:3e:af:cd:26:0b:a8:1a:9d:31:93:93:8e:8c:66:
90:5b:ef:cd:34:3b:16:19:d4:dc:b1:3b:f9:a3:29:
48:43:28:c9:26:ec:fb:60:e4:6d:ce:a3:cb:16:48:
c2:77:67:41:d2:bb:fe:7b:b9:6c:dd:e1:45:ab:b6:
8b:5f:88:66:17:d6:4f:70:52:e2:f3:b8:f0:61:51:
ff:c5:2d:9c:e0:1a:74:44:3e:f5:a8:0f:1f:8b:af:
27:a7:f5:ae:8d:96:35:0d:3f:ae:a8:d1:87:46:17:
bd:21:18:e1:c7:2c:1c:81:09:da:b2:55:39:37:39:
56:09:7d:95:2e:a0:a4:04:e7:1a:31:16:8e:00:d0:
04:7b:06:1a:ba:1c:1f:60:df:81:43:51:ae:70:90:
c3:fe:ab:9c:32:ff:d6:7f:82:54:33:aa:9c:cb:a5:
2e:df:11:66:95:55:5f:51:04:8e:8c:69:94:11:7f:
7e:e7:e4:84:c5:88:47:9f:60:78:87:02:8a:b0:f4:
0a:c0:fd:c5:06:11:1a:ca:2f:85:8b:64:7d:0f:35:
63:46:41:38:ce:27:c7:2e:60:79:8d:cd:60:7c:53:
07:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:F1:8A:84:6B:32:9D:B6:1F:7E:01:1C:F9:1D:F2:46:F2:D3:B9:D1
X509v3 Authority Key Identifier:
keyid:1B:C3:C1:BE:F1:5F:4B:CC:C4:E7:48:C0:89:57:EC:C2:29:A0:F1:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G8PBvvFfS8zE50jAiVfswimg8e8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/bc94df-7259-42d1-822a-3d9810098703/1/G8PBvvFfS8zE50jAiVfswimg8e8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/bc94df-7259-42d1-822a-3d9810098703/1/G8PBvvFfS8zE50jAiVfswimg8e8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:db:b0:d8:c6:5a:c6:1e:dd:f8:f1:ae:fc:1b:c4:9c:9c:52:
85:38:f3:d6:55:4c:00:36:5b:19:13:5d:7a:c2:4d:ce:4e:a5:
b5:80:2c:3f:77:a2:a4:22:c2:f1:bd:7b:34:66:dc:1a:55:6d:
ab:b1:cd:e8:06:18:57:0d:20:8e:e6:a9:eb:89:2f:51:bb:f7:
52:f8:ce:b9:a1:39:3f:ce:1c:ec:b4:e5:ab:56:24:12:71:58:
ca:ec:f3:14:9b:31:e4:4c:00:45:60:cc:e1:c3:85:84:e1:e8:
53:61:84:08:68:f0:88:ec:1c:00:ea:72:a0:74:83:15:81:43:
56:5b:d1:e1:3b:2f:28:d5:b8:d3:1b:d0:ad:65:3d:49:93:86:
74:33:12:82:b9:dc:85:f3:a7:d1:66:c6:5b:c5:b6:70:33:95:
8e:49:5e:40:43:67:c0:cc:78:b2:ea:7d:40:1a:e5:8b:69:62:
01:29:1f:fb:27:69:8d:b1:30:f3:0c:e7:5f:e3:18:e6:b9:28:
b3:e2:f5:16:89:29:5e:f9:db:06:48:59:9c:5d:0d:89:c4:99:
25:8f:28:66:ae:4c:ab:99:38:76:ce:54:28:e9:3e:93:ac:b7:
28:14:d0:e2:a5:89:62:ac:11:f0:ea:99:43:bf:a3:d7:e0:24:
54:b5:26:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPfcEwOPqu+uH2rqwWChkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiYzNjMWJlZjE1ZjRiY2NjNGU3NDhjMDg5NTdlY2MyMjlh
MGYxZWYwHhcNMjYwNDE3MDcwMDQ1WhcNMjYwNDE4MDcwMDQ1WjAzMTEwLwYDVQQD
EygwNmYxOGE4NDZiMzI5ZGI2MWY3ZTAxMWNmOTFkZjI0NmYyZDNiOWQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFTC7Qk4m6eCzYscB+O+H3Ul/b/e
sq+dZZFau/5nPq/NJguoGp0xk5OOjGaQW+/NNDsWGdTcsTv5oylIQyjJJuz7YORt
zqPLFkjCd2dB0rv+e7ls3eFFq7aLX4hmF9ZPcFLi87jwYVH/xS2c4Bp0RD71qA8f
i68np/WujZY1DT+uqNGHRhe9IRjhxywcgQnaslU5NzlWCX2VLqCkBOcaMRaOANAE
ewYauhwfYN+BQ1GucJDD/qucMv/Wf4JUM6qcy6Uu3xFmlVVfUQSOjGmUEX9+5+SE
xYhHn2B4hwKKsPQKwP3FBhEayi+Fi2R9DzVjRkE4zifHLmB5jc1gfFMHzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAbxioRrMp22H34BHPkd8kby07nRMB8GA1UdIwQY
MBaAFBvDwb7xX0vMxOdIwIlX7MIpoPHvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzhQQnZ2RmZTOHpFNTBqQWlWZnN3aW1nOGU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9iYzk0ZGYtNzI1OS00MmQxLTgyMmEt
M2Q5ODEwMDk4NzAzLzEvRzhQQnZ2RmZTOHpFNTBqQWlWZnN3aW1nOGU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9iYzk0ZGYtNzI1OS00MmQxLTgyMmEtM2Q5ODEwMDk4NzAz
LzEvRzhQQnZ2RmZTOHpFNTBqQWlWZnN3aW1nOGU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAINuw2MZa
xh7d+PGu/BvEnJxShTjz1lVMADZbGRNdesJNzk6ltYAsP3eipCLC8b17NGbcGlVt
q7HN6AYYVw0gjuap64kvUbv3UvjOuaE5P84c7LTlq1YkEnFYyuzzFJsx5EwARWDM
4cOFhOHoU2GECGjwiOwcAOpyoHSDFYFDVlvR4TsvKNW40xvQrWU9SZOGdDMSgrnc
hfOn0WbGW8W2cDOVjkleQENnwMx4sup9QBrli2liASkf+ydpjbEw8wznX+MY5rko
s+L1FokpXvnbBkhZnF0NicSZJY8oZq5Mq5k4ds5UKOk+k6y3KBTQ4qWJYqwR8OqZ
Q7+j1+AkVLUmRg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:23:10 2026 by rpki-client