Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft
File: G7RXRKVBKF7qDk4E5d52apyCO1M.mft (raw, json)
Hash identifier: ZRBLY0rENwLJ+RNZRZILSfmq9jqbLzwW154+W30mLmw=
Subject key identifier: 21:95:F5:D4:3F:32:B2:B0:51:B7:82:2D:9A:9E:E9:C2:E9:F5:E8:CD
Authority key identifier: 1B:B4:57:44:A5:41:28:5E:EA:0E:4E:04:E5:DE:76:6A:9C:82:3B:53
Certificate issuer: /CN=1bb45744a541285eea0e4e04e5de766a9c823b53
Certificate serial: 019D27DF96870DC520A809F489F02C8F3DA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G7RXRKVBKF7qDk4E5d52apyCO1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 02:00:57 +0000
Manifest this update: Thu 26 Mar 2026 02:00:57 +0000
Manifest next update: Fri 27 Mar 2026 02:00:57 +0000
Files and hashes: 1: 68ijX6q-2nq8Xhg6uqOGZDuPsRc.roa (hash: QNHUQqt5EVQQNkIU2QQU5fl59vzcGBrnS9cGdUgjlSY=)
2: G7RXRKVBKF7qDk4E5d52apyCO1M.crl (hash: +5fVyTA96prDDLA51p7/azu0VmmKa2Wpq5gU/V+tKzU=)
3: HAB9cuTsLde3XFXZY2Nbmq3GLUA.roa (hash: y8hO0Sxo2F3ybGp859zfrPy+Ge9PA0C88wBSkRBXGYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/G7RXRKVBKF7qDk4E5d52apyCO1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:96:87:0d:c5:20:a8:09:f4:89:f0:2c:8f:3d:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bb45744a541285eea0e4e04e5de766a9c823b53
Validity
Not Before: Mar 26 02:00:57 2026 GMT
Not After : Mar 27 02:00:57 2026 GMT
Subject: CN=2195f5d43f32b2b051b7822d9a9ee9c2e9f5e8cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a8:71:93:c5:48:bf:cd:f1:2b:1f:19:f5:25:
74:d6:32:66:cb:f1:74:46:16:40:0f:3b:8a:c2:92:
f8:17:3d:43:f3:86:4a:66:19:e8:5e:e8:1b:e6:20:
1e:a3:ff:d1:03:e3:42:21:53:3e:c6:50:14:80:6d:
da:0d:db:f3:5e:f9:58:62:4e:3c:eb:38:79:29:dd:
b0:83:6b:29:67:d9:ed:e2:12:e9:c6:2d:32:98:b6:
2d:13:3b:23:ac:54:f8:15:73:f6:d4:27:19:78:1c:
9f:e4:8e:84:df:da:66:62:77:c1:33:93:7a:a7:ca:
66:0c:63:2d:55:cc:54:06:36:b5:a7:58:e3:7d:f2:
83:fa:b1:8a:61:a0:10:a8:ae:00:e6:81:6f:5f:6f:
76:72:25:ce:7b:3c:6c:5a:22:de:06:4e:62:40:7a:
9f:5d:46:69:d7:e1:c7:7a:b4:46:1c:bf:15:5b:ca:
7b:bc:38:82:34:7f:c6:67:95:f3:98:b6:90:8e:43:
63:8e:a2:02:bd:b9:29:95:79:cd:06:bf:2e:4f:ea:
b6:a0:88:45:48:0a:75:2b:7b:8e:82:7f:69:a5:d8:
a5:d6:dc:83:0e:70:a6:b7:6a:08:ab:fc:8c:16:b2:
1f:50:ab:cd:da:2d:36:1d:4d:b2:57:e0:0a:9a:bd:
89:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:95:F5:D4:3F:32:B2:B0:51:B7:82:2D:9A:9E:E9:C2:E9:F5:E8:CD
X509v3 Authority Key Identifier:
keyid:1B:B4:57:44:A5:41:28:5E:EA:0E:4E:04:E5:DE:76:6A:9C:82:3B:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G7RXRKVBKF7qDk4E5d52apyCO1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:9d:af:99:8e:5f:9d:e5:fc:ec:68:bb:7d:25:c2:4a:1c:0d:
7b:6b:45:81:fc:54:fd:73:68:80:de:22:bd:8a:0c:1a:7e:e1:
78:cf:d1:52:a8:97:ae:b8:bf:a9:12:f5:c4:48:b0:f0:6d:31:
01:f9:d0:3c:a1:9d:78:77:f6:4d:51:5e:bb:3a:0c:29:b6:bc:
46:e1:67:f1:22:91:56:32:87:bf:72:28:20:4b:7b:cd:c3:38:
2c:e8:e7:88:03:02:80:39:7f:de:83:a2:eb:d8:62:03:a8:c9:
0c:bf:44:86:e5:e4:fc:e3:55:ab:70:db:75:c3:92:28:9b:65:
b6:a8:f7:cd:bf:32:93:9e:16:47:2d:ea:bb:fb:5e:60:e4:4c:
5c:80:66:5a:46:a5:9b:b7:ec:a4:26:f8:20:cb:68:89:f1:db:
21:b1:6b:b6:60:1a:5c:b1:1b:e8:9a:5b:87:ce:da:c0:66:a5:
83:5e:70:b4:02:81:5d:22:8e:4e:e3:80:23:a3:ff:88:e3:23:
1b:d6:c1:0d:d5:14:3d:fc:77:fe:a1:ad:19:bd:71:dc:15:c3:
64:64:43:2d:a6:5e:ce:9a:43:72:98:31:84:8d:0f:0e:e4:c6:
aa:a3:91:36:ae:da:8a:14:a3:a0:f4:04:e8:88:f7:48:88:b2:
32:39:e4:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n35aHDcUgqAn0ifAsjz2mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiYjQ1NzQ0YTU0MTI4NWVlYTBlNGUwNGU1ZGU3NjZhOWM4
MjNiNTMwHhcNMjYwMzI2MDIwMDU3WhcNMjYwMzI3MDIwMDU3WjAzMTEwLwYDVQQD
EygyMTk1ZjVkNDNmMzJiMmIwNTFiNzgyMmQ5YTllZTljMmU5ZjVlOGNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKhxk8VIv83xKx8Z9SV01jJmy/F0
RhZADzuKwpL4Fz1D84ZKZhnoXugb5iAeo//RA+NCIVM+xlAUgG3aDdvzXvlYYk48
6zh5Kd2wg2spZ9nt4hLpxi0ymLYtEzsjrFT4FXP21CcZeByf5I6E39pmYnfBM5N6
p8pmDGMtVcxUBja1p1jjffKD+rGKYaAQqK4A5oFvX292ciXOezxsWiLeBk5iQHqf
XUZp1+HHerRGHL8VW8p7vDiCNH/GZ5XzmLaQjkNjjqICvbkplXnNBr8uT+q2oIhF
SAp1K3uOgn9ppdil1tyDDnCmt2oIq/yMFrIfUKvN2i02HU2yV+AKmr2J0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCGV9dQ/MrKwUbeCLZqe6cLp9ejNMB8GA1UdIwQY
MBaAFBu0V0SlQShe6g5OBOXedmqcgjtTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzdSWFJLVkJLRjdxRGs0RTVkNTJhcHlDTzFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9jNjNmOWUtOWU3Yi00NmRjLWE0MDIt
ODc5OTc5ZDI5ZTFlLzEvRzdSWFJLVkJLRjdxRGs0RTVkNTJhcHlDTzFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi9jNjNmOWUtOWU3Yi00NmRjLWE0MDItODc5OTc5ZDI5ZTFl
LzEvRzdSWFJLVkJLRjdxRGs0RTVkNTJhcHlDTzFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArJ2vmY5f
neX87Gi7fSXCShwNe2tFgfxU/XNogN4ivYoMGn7heM/RUqiXrri/qRL1xEiw8G0x
AfnQPKGdeHf2TVFeuzoMKba8RuFn8SKRVjKHv3IoIEt7zcM4LOjniAMCgDl/3oOi
69hiA6jJDL9EhuXk/ONVq3DbdcOSKJtltqj3zb8yk54WRy3qu/teYORMXIBmWkal
m7fspCb4IMtoifHbIbFrtmAaXLEb6Jpbh87awGalg15wtAKBXSKOTuOAI6P/iOMj
G9bBDdUUPfx3/qGtGb1x3BXDZGRDLaZezppDcpgxhI0PDuTGqqORNq7aihSjoPQE
6Ij3SIiyMjnk9A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:07:39 2026 by rpki-client