Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/bc94df-7259-42d1-822a-3d9810098703/1/G8PBvvFfS8zE50jAiVfswimg8e8.mft
File: G8PBvvFfS8zE50jAiVfswimg8e8.mft (raw, json)
Hash identifier: FqeOtWn+a2v8/ysdVEXLOqoe/WcewJha5RIyoOzgvUI=
Subject key identifier: 03:6C:FC:70:22:82:66:96:03:9F:04:DD:11:21:BD:FA:9B:FF:82:CB
Authority key identifier: 1B:C3:C1:BE:F1:5F:4B:CC:C4:E7:48:C0:89:57:EC:C2:29:A0:F1:EF
Certificate issuer: /CN=1bc3c1bef15f4bccc4e748c08957ecc229a0f1ef
Certificate serial: 019FAD526AF4BA705E77FA9C08E7A599267B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G8PBvvFfS8zE50jAiVfswimg8e8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/bc94df-7259-42d1-822a-3d9810098703/1/G8PBvvFfS8zE50jAiVfswimg8e8.mft
Manifest number: 19D5
Signing time: Wed 29 Jul 2026 10:01:27 +0000
Manifest this update: Wed 29 Jul 2026 10:01:27 +0000
Manifest next update: Thu 30 Jul 2026 10:01:27 +0000
Files and hashes: 1: DlKyBrR63naawFqSxCcY5AiE7sc.roa (hash: WQjnV83H98zboyc2IgEVyNSA+r/DYppkxai3rL8VYRs=)
2: G8PBvvFfS8zE50jAiVfswimg8e8.crl (hash: WSH9Fc0ktiN2afFrNpVxXlfOGe0QIqy2zucaezewazk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/bc94df-7259-42d1-822a-3d9810098703/1/G8PBvvFfS8zE50jAiVfswimg8e8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/bc94df-7259-42d1-822a-3d9810098703/1/G8PBvvFfS8zE50jAiVfswimg8e8.mft
rsync://rpki.ripe.net/repository/DEFAULT/G8PBvvFfS8zE50jAiVfswimg8e8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:52:6a:f4:ba:70:5e:77:fa:9c:08:e7:a5:99:26:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bc3c1bef15f4bccc4e748c08957ecc229a0f1ef
Validity
Not Before: Jul 29 10:01:27 2026 GMT
Not After : Jul 30 10:01:27 2026 GMT
Subject: CN=036cfc7022826696039f04dd1121bdfa9bff82cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b3:67:4c:27:6b:e7:c2:a4:81:ad:bb:2b:69:
6a:21:3e:81:41:d7:93:ba:37:03:d5:eb:af:34:96:
58:06:63:5a:a9:9b:cd:9b:ac:13:d7:56:cf:7c:db:
f9:e0:4b:88:8a:ad:a9:bf:78:0b:6c:4d:39:fb:7f:
2e:a9:77:bd:ce:34:dd:82:33:dc:ca:22:af:c6:f0:
92:6d:c7:7c:a8:30:42:b0:b1:a7:f9:29:b0:36:e3:
0a:db:24:51:47:2a:32:96:ca:42:ab:b1:83:af:bb:
04:04:b1:20:e1:e7:65:a6:e7:7c:65:0e:51:25:e5:
85:46:b8:8b:1f:da:f3:66:d3:05:ab:b9:bc:26:96:
a1:79:29:3e:57:8c:16:77:ed:7a:0e:55:2d:45:c5:
12:02:d8:34:ef:d1:55:48:5d:5d:32:14:5d:a3:77:
38:7a:e1:95:8f:0b:0f:bf:93:ee:03:1c:e9:90:94:
fd:3d:e9:09:99:53:a3:ac:f7:ea:08:d4:36:f6:32:
f7:b0:d7:81:c7:b9:d1:c7:15:66:9e:dd:39:49:c8:
1f:c0:52:96:2a:f0:48:ae:da:14:07:6b:42:00:94:
aa:e4:dd:65:5b:27:77:98:f4:13:23:5c:b7:3b:a8:
42:69:cc:10:64:75:41:ed:f7:71:a7:df:6d:98:1c:
6a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:6C:FC:70:22:82:66:96:03:9F:04:DD:11:21:BD:FA:9B:FF:82:CB
X509v3 Authority Key Identifier:
keyid:1B:C3:C1:BE:F1:5F:4B:CC:C4:E7:48:C0:89:57:EC:C2:29:A0:F1:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G8PBvvFfS8zE50jAiVfswimg8e8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/bc94df-7259-42d1-822a-3d9810098703/1/G8PBvvFfS8zE50jAiVfswimg8e8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/bc94df-7259-42d1-822a-3d9810098703/1/G8PBvvFfS8zE50jAiVfswimg8e8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:8c:9a:08:04:74:f7:94:3e:d3:3e:37:7e:85:d5:f7:0a:48:
98:f6:b4:75:29:22:ee:a8:d2:82:e4:08:e5:eb:b6:0b:71:ed:
6a:2f:4a:ef:be:57:07:d1:a5:4c:6d:c3:e5:f0:46:67:e3:74:
46:cc:f5:3a:1e:2f:f0:3c:ab:b3:4f:ee:0f:80:3e:74:9f:f8:
d6:58:f4:a9:da:c4:d1:20:54:3e:fa:ce:a9:eb:6d:2f:75:d5:
fb:46:61:80:d2:e2:35:6e:b7:17:0b:6e:8e:da:71:0b:cd:04:
41:63:11:51:21:69:09:5a:5a:04:69:2a:10:22:cf:80:4a:3d:
0b:ac:a7:d7:4b:b8:05:2a:7d:08:56:b4:41:4f:65:d5:5a:90:
b3:7d:88:7f:0c:24:6f:4a:bd:39:74:c2:81:2d:8c:85:80:c5:
3f:05:7e:d6:68:fe:49:c2:fc:4c:42:20:76:43:3a:fc:88:26:
c4:eb:3a:63:07:86:64:f0:8d:65:85:6c:c8:78:e0:24:02:ab:
fa:64:d2:e8:d6:f1:47:4c:8a:dc:3a:16:4c:0e:64:04:ae:9c:
ff:f8:2a:41:75:4c:aa:e8:f9:a3:42:27:72:1d:21:0a:05:36:
c1:30:b5:0b:fc:e6:69:32:b6:11:b2:62:12:d9:9c:2e:46:96:
b2:e8:55:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:31:19 2026 by rpki-client