Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/60447d-d305-4dea-9daa-26837038c688/1/G7yEG3eaK7LCio2u4rLRDVp8NNU.mft
File: G7yEG3eaK7LCio2u4rLRDVp8NNU.mft (raw, json)
Hash identifier: Tx2j6XHZQr42SOKb4j7pWP6YnccTf21AbaqZeF3/dAw=
Subject key identifier: DD:99:9F:72:39:C2:E7:72:07:84:3B:14:5D:BB:A4:AA:CA:AB:10:36
Authority key identifier: 1B:BC:84:1B:77:9A:2B:B2:C2:8A:8D:AE:E2:B2:D1:0D:5A:7C:34:D5
Certificate issuer: /CN=1bbc841b779a2bb2c28a8daee2b2d10d5a7c34d5
Certificate serial: 019D9AABF23D1F6CBE309366519712AC5E7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G7yEG3eaK7LCio2u4rLRDVp8NNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/60447d-d305-4dea-9daa-26837038c688/1/G7yEG3eaK7LCio2u4rLRDVp8NNU.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 09:00:53 +0000
Manifest this update: Fri 17 Apr 2026 09:00:53 +0000
Manifest next update: Sat 18 Apr 2026 09:00:53 +0000
Files and hashes: 1: G7yEG3eaK7LCio2u4rLRDVp8NNU.crl (hash: 1n/X7IO7j1OABfeI7fjAgebnS60KC+qD0pxM1CTRcPA=)
2: deE75SevBPoLBBV-kYApKEjzkBY.roa (hash: iHy3btB3fLg5S2KEubTWq3Yf0aElaQLO6vxuJIQCC3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/60447d-d305-4dea-9daa-26837038c688/1/G7yEG3eaK7LCio2u4rLRDVp8NNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/60447d-d305-4dea-9daa-26837038c688/1/G7yEG3eaK7LCio2u4rLRDVp8NNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/G7yEG3eaK7LCio2u4rLRDVp8NNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:f2:3d:1f:6c:be:30:93:66:51:97:12:ac:5e:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bbc841b779a2bb2c28a8daee2b2d10d5a7c34d5
Validity
Not Before: Apr 17 09:00:53 2026 GMT
Not After : Apr 18 09:00:53 2026 GMT
Subject: CN=dd999f7239c2e77207843b145dbba4aacaab1036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4c:66:87:34:68:ef:d7:e4:95:44:5f:ca:18:
3e:a6:7b:53:c7:ef:41:36:75:b8:11:46:ce:35:a9:
af:a2:72:9a:ce:82:7e:65:df:1c:4b:de:7b:61:6a:
d4:38:48:36:35:02:f0:bd:35:ba:d3:83:07:83:63:
8c:a5:92:8f:6b:85:0f:89:f7:a2:cb:a0:14:bc:f5:
55:bc:b5:36:20:79:c6:34:b8:04:14:d4:af:b5:df:
bc:64:23:cd:0c:2f:43:fa:73:af:cb:78:3e:39:93:
6e:f9:2b:9b:6c:d5:cc:ba:ad:30:7c:bc:9f:e0:aa:
d3:e6:90:70:22:8e:0b:40:cc:d4:79:08:e7:96:b8:
44:21:c6:05:79:6f:4b:c8:aa:96:89:c2:b5:b9:78:
fc:56:18:a8:f3:11:9c:72:69:ab:4a:f9:73:70:77:
02:a7:83:d4:04:32:5d:7e:a4:fb:06:fa:e0:aa:b3:
28:3d:c0:ea:10:95:95:25:ef:e7:ca:ab:22:6d:e2:
e1:62:c7:a3:ee:d8:10:3a:25:78:df:e2:49:de:16:
4b:b6:a8:e7:0c:2e:ad:da:f2:b2:05:34:b1:3b:5d:
be:4b:5c:80:9a:a5:79:5e:c9:06:98:b0:c6:67:04:
f6:8d:aa:26:a9:3b:4d:65:ce:ed:b4:f0:f3:a6:86:
9a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:99:9F:72:39:C2:E7:72:07:84:3B:14:5D:BB:A4:AA:CA:AB:10:36
X509v3 Authority Key Identifier:
keyid:1B:BC:84:1B:77:9A:2B:B2:C2:8A:8D:AE:E2:B2:D1:0D:5A:7C:34:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G7yEG3eaK7LCio2u4rLRDVp8NNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/60447d-d305-4dea-9daa-26837038c688/1/G7yEG3eaK7LCio2u4rLRDVp8NNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/60447d-d305-4dea-9daa-26837038c688/1/G7yEG3eaK7LCio2u4rLRDVp8NNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:67:98:f1:67:ad:f7:53:03:10:2c:7a:d7:c8:2f:e7:5b:91:
dd:f1:05:83:48:9b:de:32:3f:35:8b:c4:13:9c:da:99:cc:74:
94:96:4c:ad:1e:45:42:f2:db:36:fd:7a:ac:1b:69:98:3d:bf:
1e:78:87:08:a5:f2:fc:af:38:96:74:89:9a:33:8d:69:8e:19:
75:66:b9:67:81:76:65:b2:17:32:84:a7:b5:71:fb:96:e9:b8:
91:30:64:b2:13:7c:9e:2f:c6:5a:4b:69:7e:00:32:88:b5:c2:
36:15:13:db:53:05:fe:1b:33:6e:3b:2e:5c:d0:d3:ac:df:3d:
a2:52:67:d4:4c:a0:be:a7:b8:c5:08:e9:2b:7e:7f:ed:6f:64:
ba:4c:86:71:2f:ac:88:d7:35:f5:b8:fb:69:b5:dc:f1:68:95:
3a:88:a3:89:83:57:75:2f:0b:57:46:ef:6d:70:c2:64:c2:39:
9a:db:8c:34:77:74:46:ea:e2:b9:88:c3:7e:00:d9:fc:e9:89:
8b:1d:88:a7:0c:cc:4a:8a:26:2b:0f:63:31:59:a1:ae:61:ea:
65:62:cc:1c:56:2b:c9:74:cc:3f:54:41:7e:4b:2e:06:7c:72:
c2:91:7a:d5:b5:c1:8a:17:6e:0a:06:91:c3:e6:35:96:a0:d1:
55:91:86:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aq/I9H2y+MJNmUZcSrF5+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiYmM4NDFiNzc5YTJiYjJjMjhhOGRhZWUyYjJkMTBkNWE3
YzM0ZDUwHhcNMjYwNDE3MDkwMDUzWhcNMjYwNDE4MDkwMDUzWjAzMTEwLwYDVQQD
EyhkZDk5OWY3MjM5YzJlNzcyMDc4NDNiMTQ1ZGJiYTRhYWNhYWIxMDM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkxmhzRo79fklURfyhg+pntTx+9B
NnW4EUbONamvonKazoJ+Zd8cS957YWrUOEg2NQLwvTW604MHg2OMpZKPa4UPifei
y6AUvPVVvLU2IHnGNLgEFNSvtd+8ZCPNDC9D+nOvy3g+OZNu+SubbNXMuq0wfLyf
4KrT5pBwIo4LQMzUeQjnlrhEIcYFeW9LyKqWicK1uXj8Vhio8xGccmmrSvlzcHcC
p4PUBDJdfqT7BvrgqrMoPcDqEJWVJe/nyqsibeLhYsej7tgQOiV43+JJ3hZLtqjn
DC6t2vKyBTSxO12+S1yAmqV5XskGmLDGZwT2jaomqTtNZc7ttPDzpoaabQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN2Zn3I5wudyB4Q7FF27pKrKqxA2MB8GA1UdIwQY
MBaAFBu8hBt3miuywoqNruKy0Q1afDTVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzd5RUczZWFLN0xDaW8ydTRyTFJEVnA4Tk5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS82MDQ0N2QtZDMwNS00ZGVhLTlkYWEt
MjY4MzcwMzhjNjg4LzEvRzd5RUczZWFLN0xDaW8ydTRyTFJEVnA4Tk5VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS82MDQ0N2QtZDMwNS00ZGVhLTlkYWEtMjY4MzcwMzhjNjg4
LzEvRzd5RUczZWFLN0xDaW8ydTRyTFJEVnA4Tk5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUmeY8Wet
91MDECx618gv51uR3fEFg0ib3jI/NYvEE5zamcx0lJZMrR5FQvLbNv16rBtpmD2/
HniHCKXy/K84lnSJmjONaY4ZdWa5Z4F2ZbIXMoSntXH7lum4kTBkshN8ni/GWktp
fgAyiLXCNhUT21MF/hszbjsuXNDTrN89olJn1Eygvqe4xQjpK35/7W9kukyGcS+s
iNc19bj7abXc8WiVOoijiYNXdS8LV0bvbXDCZMI5mtuMNHd0RuriuYjDfgDZ/OmJ
ix2IpwzMSoomKw9jMVmhrmHqZWLMHFYryXTMP1RBfksuBnxywpF61bXBihduCgaR
w+Y1lqDRVZGG2g==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:07:13 2026 by rpki-client