Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft
File: G7RXRKVBKF7qDk4E5d52apyCO1M.mft (raw, json)
Hash identifier: ky/DroQZ3jtSN2kjYimwhKcQjGh6CtbqP3Fvmwr2kQE=
Subject key identifier: 96:21:6E:B1:A4:E0:45:F3:A3:52:38:8E:76:FC:29:82:7E:C3:3A:9B
Authority key identifier: 1B:B4:57:44:A5:41:28:5E:EA:0E:4E:04:E5:DE:76:6A:9C:82:3B:53
Certificate issuer: /CN=1bb45744a541285eea0e4e04e5de766a9c823b53
Certificate serial: 01A0D45DBE4869CA949417ACC6261EBE7FE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G7RXRKVBKF7qDk4E5d52apyCO1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft
Manifest number: 1A70
Signing time: Thu 24 Sep 2026 17:01:48 +0000
Manifest this update: Thu 24 Sep 2026 17:01:48 +0000
Manifest next update: Fri 25 Sep 2026 17:01:48 +0000
Files and hashes: 1: 68ijX6q-2nq8Xhg6uqOGZDuPsRc.roa (hash: QNHUQqt5EVQQNkIU2QQU5fl59vzcGBrnS9cGdUgjlSY=)
2: G7RXRKVBKF7qDk4E5d52apyCO1M.crl (hash: aFL9nnJhdiKLkK1FroSK7x5+6xRCxG9TZOBPtuyd7UE=)
3: HAB9cuTsLde3XFXZY2Nbmq3GLUA.roa (hash: y8hO0Sxo2F3ybGp859zfrPy+Ge9PA0C88wBSkRBXGYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/G7RXRKVBKF7qDk4E5d52apyCO1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:5d:be:48:69:ca:94:94:17:ac:c6:26:1e:be:7f:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bb45744a541285eea0e4e04e5de766a9c823b53
Validity
Not Before: Sep 24 17:01:48 2026 GMT
Not After : Sep 25 17:01:48 2026 GMT
Subject: CN=96216eb1a4e045f3a352388e76fc29827ec33a9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ff:85:f7:39:da:c3:7c:4e:d6:e8:ab:4f:9a:
f6:c2:b6:f6:1d:42:d4:25:e7:7f:02:25:d9:ef:94:
14:30:dc:ae:1e:a0:f2:6a:b5:07:24:08:2b:05:33:
49:03:bc:38:80:78:d0:40:2d:33:f0:ad:11:f2:d3:
6b:bd:28:de:b0:20:18:eb:c9:3a:5c:b9:fb:8c:a1:
95:8b:20:2a:83:15:54:33:0a:58:7f:04:cb:1f:8f:
1f:64:27:ba:36:8e:a2:43:8a:09:ef:63:09:6f:49:
f5:d0:c2:a8:89:a6:78:f7:67:ee:24:38:9a:04:82:
c5:3f:83:13:94:dc:14:22:db:9a:68:86:00:94:e3:
6c:15:1c:93:34:ba:fa:19:da:00:42:a0:59:ea:57:
f1:63:2a:54:fb:0c:cd:e6:41:61:4e:a8:0c:db:7f:
fc:91:c7:30:93:0d:29:4c:72:fa:fc:0d:7d:b5:95:
7a:53:b2:b4:b2:80:3e:51:14:ac:79:00:2d:85:b4:
58:a0:24:8b:20:cb:f4:52:16:70:e1:94:03:fb:33:
15:9e:77:52:99:95:79:5e:39:51:08:20:7f:4a:74:
2d:bd:f4:81:60:e3:1f:ff:ea:3e:17:c3:f4:6f:34:
80:89:ee:68:0f:c9:a3:79:e9:f3:62:e6:85:7f:3a:
0a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:21:6E:B1:A4:E0:45:F3:A3:52:38:8E:76:FC:29:82:7E:C3:3A:9B
X509v3 Authority Key Identifier:
keyid:1B:B4:57:44:A5:41:28:5E:EA:0E:4E:04:E5:DE:76:6A:9C:82:3B:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G7RXRKVBKF7qDk4E5d52apyCO1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:91:24:2f:5a:f9:d5:4a:d9:d6:dc:46:fd:84:51:08:32:09:
b6:43:7e:63:85:20:e0:f9:06:c9:19:c2:15:12:45:46:37:6b:
cc:fb:b9:c9:f1:c9:2e:3b:f1:50:b2:a6:1e:1e:da:f6:40:bc:
26:64:f0:7e:4a:3b:ab:b9:74:fd:0a:eb:e7:fc:23:2d:38:fe:
2d:e6:b3:00:28:a9:1e:5f:bd:4a:34:cc:8d:ef:88:7e:34:6a:
0e:4b:3a:83:4b:33:ad:d2:8f:2c:f2:ff:60:71:16:89:b3:62:
51:d3:f6:c6:e2:a9:d9:16:b0:04:64:d9:1f:8c:85:70:c7:f6:
57:c5:df:8d:a1:c5:8d:59:3d:a3:46:c7:44:b8:26:7d:1d:ee:
7c:7a:44:4c:fb:58:e4:59:e8:42:9b:36:5f:fe:b5:30:9e:30:
8a:c0:91:01:01:45:2a:9d:24:ba:8c:15:b3:f9:de:8f:d6:26:
04:d4:22:9b:41:b7:ab:e2:a9:a2:15:4a:3c:ca:da:1d:5a:6c:
d7:d4:dd:4a:cc:3a:0a:ba:de:e3:77:cb:da:fe:bd:56:05:c2:
cb:61:23:7a:72:d6:5d:71:d8:ee:38:7c:2b:1b:aa:6e:86:1c:
b6:ce:ea:c3:d6:19:0f:65:74:cc:c3:4f:57:84:86:8f:94:d3:
26:a4:32:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 00:11:25 2026 by rpki-client