Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft
File: G7RXRKVBKF7qDk4E5d52apyCO1M.mft (raw, json)
Hash identifier: PKSPTEzDlU8aERgC/cCNl65A0ORdR2GGKGuV+K3Fz3A=
Subject key identifier: 63:C5:0C:94:19:7B:D1:0D:E1:7B:79:E0:75:F4:DF:F5:EE:03:AF:5B
Authority key identifier: 1B:B4:57:44:A5:41:28:5E:EA:0E:4E:04:E5:DE:76:6A:9C:82:3B:53
Certificate issuer: /CN=1bb45744a541285eea0e4e04e5de766a9c823b53
Certificate serial: 019E1F10CEA82C12EFD8C60C68CC316E33E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G7RXRKVBKF7qDk4E5d52apyCO1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft
Manifest number: 1909
Signing time: Wed 13 May 2026 02:00:55 +0000
Manifest this update: Wed 13 May 2026 02:00:55 +0000
Manifest next update: Thu 14 May 2026 02:00:55 +0000
Files and hashes: 1: 68ijX6q-2nq8Xhg6uqOGZDuPsRc.roa (hash: QNHUQqt5EVQQNkIU2QQU5fl59vzcGBrnS9cGdUgjlSY=)
2: G7RXRKVBKF7qDk4E5d52apyCO1M.crl (hash: Ng35qdI71aPIGVL5RB2Hw6tcQH77S3mCpPkVJjDs80A=)
3: HAB9cuTsLde3XFXZY2Nbmq3GLUA.roa (hash: y8hO0Sxo2F3ybGp859zfrPy+Ge9PA0C88wBSkRBXGYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/G7RXRKVBKF7qDk4E5d52apyCO1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:10:ce:a8:2c:12:ef:d8:c6:0c:68:cc:31:6e:33:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bb45744a541285eea0e4e04e5de766a9c823b53
Validity
Not Before: May 13 02:00:55 2026 GMT
Not After : May 14 02:00:55 2026 GMT
Subject: CN=63c50c94197bd10de17b79e075f4dff5ee03af5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:76:5f:97:43:8d:80:5f:41:b9:b3:75:25:ca:
fe:77:a9:a4:78:62:35:02:5c:b1:e4:a5:b5:40:b1:
02:72:7b:60:f6:5d:07:e0:51:bc:4e:33:bc:f8:ef:
e4:90:05:db:ba:5d:fe:2f:35:20:0a:fe:2e:44:43:
45:9d:0a:43:bf:3d:5e:5f:46:16:3b:88:28:ea:67:
96:3a:1b:ce:8a:d3:7a:6b:16:5a:99:b0:04:c9:c4:
96:c2:b8:c9:47:db:44:09:2f:b2:6a:f7:b0:a0:81:
53:8a:5c:cf:e8:df:57:cf:fe:7a:84:49:41:1c:4f:
01:56:2c:b9:72:1e:5c:17:7a:39:a1:b5:96:4a:73:
1f:ea:7e:01:90:7b:4b:5b:8d:c4:b9:9e:98:51:6a:
71:d5:6b:c6:b3:85:4c:b0:3a:f8:b5:e1:e9:8a:38:
0b:67:a7:04:59:41:92:b5:1a:75:59:61:cb:07:ef:
4b:3f:88:52:46:89:48:97:e9:53:aa:c3:3d:cb:cd:
9c:f9:f4:e0:99:3b:b6:de:1e:66:4b:d5:e2:61:76:
53:68:74:7b:ec:f9:45:64:ec:01:69:a8:77:31:38:
30:d7:d1:29:d3:cd:d3:11:69:68:d9:fa:66:08:d7:
01:81:a7:27:51:7c:5a:f5:e1:c3:d7:e6:e0:3d:f3:
3d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:C5:0C:94:19:7B:D1:0D:E1:7B:79:E0:75:F4:DF:F5:EE:03:AF:5B
X509v3 Authority Key Identifier:
keyid:1B:B4:57:44:A5:41:28:5E:EA:0E:4E:04:E5:DE:76:6A:9C:82:3B:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G7RXRKVBKF7qDk4E5d52apyCO1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:95:38:80:90:5c:f2:23:fb:ab:eb:58:5f:39:50:f6:44:a8:
5b:b6:49:fe:aa:8f:1c:fc:a9:a1:34:f6:c7:a5:98:f9:31:2e:
82:ed:ff:ec:e4:af:24:44:85:15:4e:d9:0c:2c:2d:00:69:1e:
58:84:2d:d2:ef:d9:d4:32:0c:f8:bd:09:e1:0e:47:8b:70:da:
6b:23:9a:fc:ea:40:44:c0:9c:ed:a9:0e:f2:36:ef:e7:bb:c6:
48:c4:07:00:b9:e1:af:bb:71:b5:0a:7d:cf:f5:c8:52:0f:e2:
12:ba:46:07:78:ae:54:29:35:fe:a7:41:f5:9f:9a:70:c0:b1:
e2:54:41:2e:5f:77:4d:0e:75:49:72:0f:c3:df:bb:ac:c2:c6:
b4:a9:ce:e8:14:e2:7a:6d:77:f2:18:6c:b1:e0:27:f2:54:27:
20:37:08:67:44:68:da:8e:48:ca:b7:29:06:9c:fe:65:0b:07:
c9:50:6e:3c:c3:00:25:4d:48:70:6a:74:bc:9e:50:ae:aa:7e:
78:4c:a5:25:26:1e:42:c9:9a:64:dc:ff:fa:8b:16:9e:40:9a:
93:9e:40:f9:d6:21:44:51:af:0f:71:6b:45:11:43:26:77:32:
f7:96:0e:f8:11:cb:88:a9:72:4c:d4:94:14:75:17:c4:6c:ae:
ba:3e:57:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:23:17 2026 by rpki-client