Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/bc94df-7259-42d1-822a-3d9810098703/1/G8PBvvFfS8zE50jAiVfswimg8e8.mft
File: G8PBvvFfS8zE50jAiVfswimg8e8.mft (raw, json)
Hash identifier: IMCNtjdDv3+7CPTXJq6gUl3EfS3fKUq94vRrnjVYpkk=
Subject key identifier: 80:20:97:B7:7E:D5:17:F9:A7:BB:5B:41:70:DB:EA:E2:FB:C2:34:0C
Authority key identifier: 1B:C3:C1:BE:F1:5F:4B:CC:C4:E7:48:C0:89:57:EC:C2:29:A0:F1:EF
Certificate issuer: /CN=1bc3c1bef15f4bccc4e748c08957ecc229a0f1ef
Certificate serial: 019FAB63A4E758183D489E674DE8FED9D760
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G8PBvvFfS8zE50jAiVfswimg8e8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/bc94df-7259-42d1-822a-3d9810098703/1/G8PBvvFfS8zE50jAiVfswimg8e8.mft
Manifest number: 19D4
Signing time: Wed 29 Jul 2026 01:01:01 +0000
Manifest this update: Wed 29 Jul 2026 01:01:01 +0000
Manifest next update: Thu 30 Jul 2026 01:01:01 +0000
Files and hashes: 1: DlKyBrR63naawFqSxCcY5AiE7sc.roa (hash: WQjnV83H98zboyc2IgEVyNSA+r/DYppkxai3rL8VYRs=)
2: G8PBvvFfS8zE50jAiVfswimg8e8.crl (hash: 2z0hsP2uFhvLdDB9frEODsje69QRhPAg6qjLhDbqFqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/bc94df-7259-42d1-822a-3d9810098703/1/G8PBvvFfS8zE50jAiVfswimg8e8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/bc94df-7259-42d1-822a-3d9810098703/1/G8PBvvFfS8zE50jAiVfswimg8e8.mft
rsync://rpki.ripe.net/repository/DEFAULT/G8PBvvFfS8zE50jAiVfswimg8e8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 01:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:a4:e7:58:18:3d:48:9e:67:4d:e8:fe:d9:d7:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bc3c1bef15f4bccc4e748c08957ecc229a0f1ef
Validity
Not Before: Jul 29 01:01:01 2026 GMT
Not After : Jul 30 01:01:01 2026 GMT
Subject: CN=802097b77ed517f9a7bb5b4170dbeae2fbc2340c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c5:e8:71:9a:46:52:02:56:ba:bb:0b:ec:17:
42:21:fb:5b:5d:34:b7:01:8d:40:33:f6:f3:d9:4f:
93:97:83:86:3d:98:d5:5e:53:f7:1a:2f:22:a4:ce:
9b:b6:c9:a7:0a:25:3f:7a:e7:50:76:6f:57:25:94:
b9:68:52:c1:e6:0b:be:30:97:da:59:a0:18:04:c2:
10:f7:c3:56:9a:64:08:51:eb:28:90:03:ff:84:8b:
39:17:86:ee:3a:2c:9a:53:31:b6:2e:2c:72:48:cf:
51:c6:44:db:53:48:5b:60:fd:a8:33:bc:bc:48:d2:
d3:57:69:d6:2f:8f:da:9f:0e:0a:71:1b:d9:60:80:
e5:3c:9b:5c:75:dd:ac:ae:dc:d6:51:57:4f:48:e4:
52:49:e0:d3:86:3f:37:59:2f:85:6f:9e:99:42:8f:
de:59:bc:69:0e:0f:5a:86:64:2c:2c:fd:10:64:7a:
f7:f9:49:ae:e9:af:5d:85:ed:fc:e5:d2:92:1a:5f:
64:71:23:81:d0:88:65:62:d9:26:9a:94:38:43:fb:
e7:cf:e2:bd:92:75:9a:fa:6a:4d:4d:2e:08:8b:8c:
1d:c6:27:89:79:17:2e:fe:3e:95:31:ed:fa:c1:9c:
47:9a:5f:49:1c:bd:46:1b:bf:84:35:a7:b2:99:99:
dd:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:20:97:B7:7E:D5:17:F9:A7:BB:5B:41:70:DB:EA:E2:FB:C2:34:0C
X509v3 Authority Key Identifier:
keyid:1B:C3:C1:BE:F1:5F:4B:CC:C4:E7:48:C0:89:57:EC:C2:29:A0:F1:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G8PBvvFfS8zE50jAiVfswimg8e8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/bc94df-7259-42d1-822a-3d9810098703/1/G8PBvvFfS8zE50jAiVfswimg8e8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/bc94df-7259-42d1-822a-3d9810098703/1/G8PBvvFfS8zE50jAiVfswimg8e8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:e2:d5:f4:04:d2:2d:ae:5b:e2:2f:d9:a3:67:df:33:86:48:
b1:3d:f4:2d:ac:cc:c8:1b:c6:1e:99:73:64:2c:75:73:b5:63:
56:3a:98:ba:bb:e3:e1:c9:ff:64:d4:29:8a:8d:07:44:cb:1c:
d2:e6:77:bf:f8:35:b9:ee:58:09:87:d5:14:57:a7:3c:fc:0f:
1a:11:f9:85:18:0d:5b:49:63:b1:82:15:84:d7:13:76:cf:e0:
2e:18:bb:d7:72:fb:72:c4:ac:7c:fd:d9:c4:39:c6:0e:ad:fd:
c9:be:7c:29:76:fd:71:af:3f:87:ee:e4:83:4b:c9:23:97:ee:
2c:d5:7b:01:f1:06:0e:5d:f2:f6:57:18:a1:e1:5a:e3:44:81:
0a:87:bb:7c:30:63:3b:a3:80:49:0a:9a:50:6d:71:40:1b:7a:
ea:cf:81:82:20:55:78:d7:04:71:60:3f:2f:c1:ee:ed:ab:9c:
28:6b:58:3c:2d:f1:1d:50:8d:2a:69:38:0a:1a:fe:f0:d3:c6:
42:97:40:1b:73:93:c8:7a:f5:d3:39:4e:25:44:c4:f1:79:53:
dd:1d:0f:77:7a:b2:6b:94:48:fd:b1:66:9e:44:9a:cd:db:56:
45:05:dd:e7:04:aa:f4:0a:c8:e6:0b:8f:97:b2:0b:04:c6:93:
80:b8:91:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:14:20 2026 by rpki-client