Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft
File: G7RXRKVBKF7qDk4E5d52apyCO1M.mft (raw, json)
Hash identifier: s9FilW/53xXQJex5dtpgWhLp2STXRJaBjXG1AITB4+g=
Subject key identifier: E0:05:08:BA:A9:95:1E:25:85:11:02:30:0B:06:DD:D8:7C:9A:28:03
Authority key identifier: 1B:B4:57:44:A5:41:28:5E:EA:0E:4E:04:E5:DE:76:6A:9C:82:3B:53
Certificate issuer: /CN=1bb45744a541285eea0e4e04e5de766a9c823b53
Certificate serial: 019F8FEBE3B1F41F519927F0FB844FEF227A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G7RXRKVBKF7qDk4E5d52apyCO1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft
Manifest number: 19C8
Signing time: Thu 23 Jul 2026 17:00:28 +0000
Manifest this update: Thu 23 Jul 2026 17:00:28 +0000
Manifest next update: Fri 24 Jul 2026 17:00:28 +0000
Files and hashes: 1: 68ijX6q-2nq8Xhg6uqOGZDuPsRc.roa (hash: QNHUQqt5EVQQNkIU2QQU5fl59vzcGBrnS9cGdUgjlSY=)
2: G7RXRKVBKF7qDk4E5d52apyCO1M.crl (hash: T+2b0UIFnbn3WJ4h5Wpn5G+GfiUlUSXrqAhV5Ir+SOk=)
3: HAB9cuTsLde3XFXZY2Nbmq3GLUA.roa (hash: y8hO0Sxo2F3ybGp859zfrPy+Ge9PA0C88wBSkRBXGYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/G7RXRKVBKF7qDk4E5d52apyCO1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 17:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:eb:e3:b1:f4:1f:51:99:27:f0:fb:84:4f:ef:22:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bb45744a541285eea0e4e04e5de766a9c823b53
Validity
Not Before: Jul 23 17:00:28 2026 GMT
Not After : Jul 24 17:00:28 2026 GMT
Subject: CN=e00508baa9951e25851102300b06ddd87c9a2803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:15:f6:2f:e3:85:61:57:79:ea:6c:95:48:c9:
ad:c8:b2:bf:2b:76:4d:1d:f0:49:7f:82:52:41:f5:
db:bc:c1:ad:ea:9a:0e:e5:27:ff:da:49:e6:31:e8:
92:52:9f:0f:5e:23:02:17:3f:2d:d8:54:31:b9:39:
73:d9:95:d5:07:ef:bd:e7:a4:40:54:1a:13:ac:55:
fe:0c:57:00:5e:e5:18:bd:97:e5:9d:8d:b6:74:77:
7c:6f:a4:be:05:77:1c:2a:98:78:cb:eb:b6:12:6e:
f3:04:9e:49:7c:b6:29:81:fe:12:ba:2c:18:d5:74:
af:eb:28:42:17:9f:80:91:53:11:ef:9f:4d:01:86:
8b:cc:2a:6c:58:46:7b:a8:7c:2a:ed:ed:4e:a4:c3:
62:80:ea:e0:5b:d6:1e:2c:af:1f:71:9c:a6:6e:02:
67:d0:59:8f:42:5b:e9:67:30:aa:9e:73:6b:1f:c7:
4f:1a:44:81:a9:08:77:ff:18:f6:81:b3:88:02:a9:
4c:2d:e9:e4:3c:c7:03:d3:c8:0b:1d:df:aa:51:a0:
a0:17:58:47:f9:8b:b5:42:5a:5f:36:69:ab:8a:65:
7d:3e:16:7b:13:61:d2:c4:5e:a0:2d:c5:4a:a7:ab:
c8:6a:0e:8e:9c:fa:38:97:29:c2:f5:7d:e0:c4:1c:
85:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:05:08:BA:A9:95:1E:25:85:11:02:30:0B:06:DD:D8:7C:9A:28:03
X509v3 Authority Key Identifier:
keyid:1B:B4:57:44:A5:41:28:5E:EA:0E:4E:04:E5:DE:76:6A:9C:82:3B:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G7RXRKVBKF7qDk4E5d52apyCO1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:dd:87:41:57:08:93:41:4a:d9:1b:bf:83:be:9e:05:33:0f:
7c:a3:ba:4f:21:28:14:03:b1:a4:f3:60:1f:f8:f9:24:47:4b:
0b:72:9f:1f:d5:a7:c8:94:c0:4d:0a:4c:4b:0e:2d:a7:a8:bd:
67:28:b2:dc:41:fb:2d:07:a8:63:07:eb:27:33:b5:59:6d:c0:
7e:4a:8c:3d:0a:7a:9c:10:a3:76:c9:b4:08:1b:ec:bf:91:4b:
dd:e7:19:7e:4f:7e:2a:df:da:43:38:78:38:40:80:c6:16:b5:
2a:c4:5d:2a:39:a7:79:03:1e:64:11:90:1f:53:f5:10:01:95:
f9:8f:2b:19:4c:91:3c:25:a7:70:01:95:b6:1c:b1:68:4c:a1:
9b:f4:e4:29:b1:03:7e:60:d4:a2:88:a8:fd:e3:ff:a4:7f:9d:
76:d3:0f:3a:93:d9:7f:1d:94:34:2a:b1:6f:73:21:03:88:9f:
9f:0d:9e:fe:9a:24:d6:d3:22:7f:83:f0:60:18:b2:cd:71:32:
59:c3:8f:13:9a:fb:7e:62:a1:19:87:4a:c1:5e:d4:33:08:08:
da:f4:45:b6:f4:77:ad:33:bb:d2:99:a6:d3:9b:2f:fc:30:6f:
67:8d:92:e3:6f:1f:03:6d:4a:ca:2b:b6:65:d1:da:b1:21:91:
36:a8:de:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:58:55 2026 by rpki-client