Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft
File: G7RXRKVBKF7qDk4E5d52apyCO1M.mft (raw, json)
Hash identifier: c44J1a2ICGW52mSFKKc9SgRiMbEolQN5QeNo1oZ26Po=
Subject key identifier: 74:41:39:D1:47:D7:CA:3A:60:42:8D:78:81:C4:33:7D:7B:B5:6E:AD
Authority key identifier: 1B:B4:57:44:A5:41:28:5E:EA:0E:4E:04:E5:DE:76:6A:9C:82:3B:53
Certificate issuer: /CN=1bb45744a541285eea0e4e04e5de766a9c823b53
Certificate serial: 019D29CE03F939D9ED23D70AA89C29C03927
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G7RXRKVBKF7qDk4E5d52apyCO1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 11:01:00 +0000
Manifest this update: Thu 26 Mar 2026 11:01:00 +0000
Manifest next update: Fri 27 Mar 2026 11:01:00 +0000
Files and hashes: 1: 68ijX6q-2nq8Xhg6uqOGZDuPsRc.roa (hash: QNHUQqt5EVQQNkIU2QQU5fl59vzcGBrnS9cGdUgjlSY=)
2: G7RXRKVBKF7qDk4E5d52apyCO1M.crl (hash: EG6SWAkoztOC5Iw+7jCeNjVnxgBj2/l8/yeZ2ZeCroo=)
3: HAB9cuTsLde3XFXZY2Nbmq3GLUA.roa (hash: y8hO0Sxo2F3ybGp859zfrPy+Ge9PA0C88wBSkRBXGYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/G7RXRKVBKF7qDk4E5d52apyCO1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:03:f9:39:d9:ed:23:d7:0a:a8:9c:29:c0:39:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bb45744a541285eea0e4e04e5de766a9c823b53
Validity
Not Before: Mar 26 11:01:00 2026 GMT
Not After : Mar 27 11:01:00 2026 GMT
Subject: CN=744139d147d7ca3a60428d7881c4337d7bb56ead
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:9d:e5:89:59:aa:2c:06:ec:1f:1b:c4:be:83:
5c:ff:94:78:88:26:a3:56:e5:ab:a8:5d:8f:f1:bb:
9c:9f:94:4e:70:4a:cc:c2:1d:5a:57:55:ba:4c:65:
ea:24:35:3e:80:b8:a1:94:94:4a:fa:6f:a3:b9:06:
33:46:1c:0f:32:07:c4:8c:ad:7b:8f:11:60:ce:d5:
4a:79:fe:4f:5b:03:1a:00:ff:64:cd:e5:20:d5:1d:
12:79:9c:03:9f:ab:88:82:fe:74:73:eb:7a:6c:21:
ce:77:1c:c2:dc:ae:b8:0c:78:cd:4c:61:35:71:9f:
3b:d5:c3:ce:ca:ed:b8:59:c4:4f:ea:db:b9:f6:8b:
04:33:ba:50:5f:c2:99:ef:a9:a1:3e:1f:b8:7c:7b:
e2:7a:56:ba:e2:4c:47:bb:e0:f8:ee:1e:8f:42:f7:
25:2f:cc:1e:61:09:49:ca:7a:96:35:ca:a8:41:20:
23:45:61:3f:4b:46:4d:3d:ae:32:1d:26:18:fa:a6:
8a:b0:dd:f7:11:98:71:8f:ef:40:1d:ea:fb:a4:94:
c2:9a:4f:48:e7:2e:13:13:c5:ea:55:1c:e7:5a:87:
12:de:28:36:1a:3a:eb:a7:eb:73:d5:ae:d9:68:8b:
02:9e:d6:b1:f4:8b:e5:34:91:74:d4:32:1c:0f:0d:
09:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:41:39:D1:47:D7:CA:3A:60:42:8D:78:81:C4:33:7D:7B:B5:6E:AD
X509v3 Authority Key Identifier:
keyid:1B:B4:57:44:A5:41:28:5E:EA:0E:4E:04:E5:DE:76:6A:9C:82:3B:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G7RXRKVBKF7qDk4E5d52apyCO1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:66:14:15:39:80:9d:1c:e4:d5:8e:af:5b:89:fe:6a:b9:f0:
d8:62:b0:d7:3b:83:fd:a3:ef:a6:50:8e:03:5f:a5:91:02:4f:
13:0a:19:bf:da:78:30:52:67:b9:39:a0:e9:cc:be:b8:a5:45:
c3:a2:95:9c:c6:4c:13:e0:ba:48:68:b9:e3:da:84:7d:22:82:
26:00:73:09:48:e9:7b:40:e1:fe:2c:20:ad:b2:fc:6c:23:d1:
11:62:9a:42:9a:b1:03:21:78:4f:2b:31:6c:8e:d5:de:b8:7d:
29:12:ee:05:22:61:90:60:0b:3b:ec:38:70:4b:35:23:3b:f3:
dd:12:29:03:ec:0c:44:9e:72:47:e4:74:d3:7e:c8:cd:1e:14:
8b:6c:e5:de:af:40:12:69:15:76:ba:68:98:10:25:bd:18:db:
d2:05:64:2b:f3:db:6d:f0:2a:5d:49:bd:71:4b:9f:6d:33:b1:
36:6f:81:27:72:0d:56:2a:3f:ab:d0:3c:39:c2:d4:3e:26:fa:
e2:36:34:13:d3:91:40:9a:37:3e:16:9d:5a:b7:d6:70:ee:cf:
45:c4:87:41:9b:42:3f:f4:e4:21:81:cb:c9:bc:37:74:13:2c:
e0:a7:e5:bc:3a:99:b8:28:83:6f:89:a9:56:75:0b:9c:cf:d9:
1f:7e:78:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:03:55 2026 by rpki-client