Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft
File: G7RXRKVBKF7qDk4E5d52apyCO1M.mft (raw, json)
Hash identifier: H8jcop/7tbiUZBmErcXsF1ML2MbxyAlTeTeYT1PKBNY=
Subject key identifier: 0C:C1:C4:9D:E7:14:57:38:74:54:6D:29:1C:9C:35:80:01:45:C6:73
Authority key identifier: 1B:B4:57:44:A5:41:28:5E:EA:0E:4E:04:E5:DE:76:6A:9C:82:3B:53
Certificate issuer: /CN=1bb45744a541285eea0e4e04e5de766a9c823b53
Certificate serial: 019F93C8A8DAAA3DBD7FEE2D6A7E47195415
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G7RXRKVBKF7qDk4E5d52apyCO1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft
Manifest number: 19CA
Signing time: Fri 24 Jul 2026 11:00:28 +0000
Manifest this update: Fri 24 Jul 2026 11:00:28 +0000
Manifest next update: Sat 25 Jul 2026 11:00:28 +0000
Files and hashes: 1: 68ijX6q-2nq8Xhg6uqOGZDuPsRc.roa (hash: QNHUQqt5EVQQNkIU2QQU5fl59vzcGBrnS9cGdUgjlSY=)
2: G7RXRKVBKF7qDk4E5d52apyCO1M.crl (hash: +yufCFoYX5mV5qWnZFIl8jhDc80x1pWOo2Fgb9Qw/Fc=)
3: HAB9cuTsLde3XFXZY2Nbmq3GLUA.roa (hash: y8hO0Sxo2F3ybGp859zfrPy+Ge9PA0C88wBSkRBXGYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/G7RXRKVBKF7qDk4E5d52apyCO1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c8:a8:da:aa:3d:bd:7f:ee:2d:6a:7e:47:19:54:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bb45744a541285eea0e4e04e5de766a9c823b53
Validity
Not Before: Jul 24 11:00:28 2026 GMT
Not After : Jul 25 11:00:28 2026 GMT
Subject: CN=0cc1c49de714573874546d291c9c35800145c673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:86:68:f7:28:02:b3:04:66:bd:08:c4:f7:86:
07:12:e2:3b:2d:b4:19:a5:5b:87:b2:8d:4a:9c:11:
03:de:3c:ba:65:ae:31:df:a3:35:c7:88:95:d6:b8:
73:ec:a9:1a:b6:a5:64:0f:12:0e:a1:aa:aa:e3:1c:
eb:14:fd:61:69:4f:e1:26:e5:96:fb:e8:6d:95:57:
f3:f5:86:33:ad:e3:68:96:bc:1a:a7:c3:cb:0d:45:
9d:36:5f:8c:4d:7b:69:c9:f0:44:2e:2c:ce:44:50:
46:3d:7f:13:42:2a:df:52:36:be:91:e0:b3:a4:fc:
c2:cb:0d:d6:c3:0d:62:19:6f:4e:3f:1e:e3:d5:2a:
15:d3:20:52:8f:97:b6:7c:6a:f2:e5:a5:d4:b4:fe:
a8:01:68:35:ac:7b:de:4a:91:e7:44:09:59:62:41:
53:bd:e6:6d:b4:86:7e:01:dc:1c:1a:3b:17:1b:ce:
d4:7a:f6:b3:e3:b1:d6:f3:f9:37:91:1a:3c:83:19:
fe:ea:2f:09:c4:1f:89:af:7d:e2:cd:57:d2:cb:3e:
e3:a3:08:12:be:fb:bb:75:98:67:55:87:d2:9e:ff:
a6:58:7b:81:18:c1:0b:64:d8:e5:4c:8c:a5:1b:2c:
3d:21:72:da:f0:e7:bb:ea:9b:15:47:3c:c9:b5:2e:
27:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:C1:C4:9D:E7:14:57:38:74:54:6D:29:1C:9C:35:80:01:45:C6:73
X509v3 Authority Key Identifier:
keyid:1B:B4:57:44:A5:41:28:5E:EA:0E:4E:04:E5:DE:76:6A:9C:82:3B:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G7RXRKVBKF7qDk4E5d52apyCO1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:d2:66:0e:01:59:3b:70:c6:78:92:23:13:0b:b1:5b:6c:de:
44:47:9e:92:62:4e:a6:d5:ce:3c:68:fb:58:6d:48:4f:9d:e0:
17:60:5e:2a:02:98:65:1c:fe:34:1c:a4:8a:30:84:da:8b:74:
ff:55:6a:52:f9:c3:dc:b3:6a:87:c2:29:e2:68:03:28:63:a7:
3f:48:d4:8c:e7:6d:d6:96:10:9a:1a:f7:8a:5a:4c:8a:d4:e0:
89:ae:24:47:7b:4a:6c:8b:ca:06:ef:98:63:fd:51:5f:de:c9:
d1:f6:dd:99:a1:07:19:32:b5:c3:04:41:95:b7:c2:f6:f4:4d:
48:1f:6b:d0:69:7c:b6:16:42:43:15:cf:2a:ea:5d:a1:da:4b:
f7:49:67:8d:5c:ba:a5:cf:28:ba:f6:78:08:84:59:a0:44:29:
9a:f7:82:14:25:93:e3:8c:23:f8:51:ab:be:b8:87:48:2a:f0:
7d:07:ef:42:7d:5d:20:74:d1:2c:05:3f:9f:90:15:1b:52:86:
e5:d9:26:98:ec:e3:ea:a7:69:2a:d1:b4:50:d5:f8:f7:e8:6d:
4a:a5:bf:a4:16:9b:41:ec:85:8c:c8:c8:28:6b:ea:a9:de:1f:
f7:f9:83:7d:26:39:d7:8f:03:c9:91:aa:ad:f6:43:d3:36:e9:
01:9d:1c:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:16:45 2026 by rpki-client