Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/459396-de90-4cc8-a542-3e6e7cdef73e/1/G7Qd9-pn1O3-D60S99XOzYPhjZo.mft
File: G7Qd9-pn1O3-D60S99XOzYPhjZo.mft (raw, json)
Hash identifier: HbK3m5eCC4tXkoKB411U9JXCXVEc8Aj9yfDhIOnbxJA=
Subject key identifier: A9:28:1E:A9:2B:F1:F6:F8:81:21:FF:AE:58:19:2F:13:E6:B1:1F:54
Authority key identifier: 1B:B4:1D:F7:EA:67:D4:ED:FE:0F:AD:12:F7:D5:CE:CD:83:E1:8D:9A
Certificate issuer: /CN=1bb41df7ea67d4edfe0fad12f7d5cecd83e18d9a
Certificate serial: 019D9B1964E851BE5F94B4DBAA25AE53071D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G7Qd9-pn1O3-D60S99XOzYPhjZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/459396-de90-4cc8-a542-3e6e7cdef73e/1/G7Qd9-pn1O3-D60S99XOzYPhjZo.mft
Manifest number: 069F
Signing time: Fri 17 Apr 2026 11:00:25 +0000
Manifest this update: Fri 17 Apr 2026 11:00:25 +0000
Manifest next update: Sat 18 Apr 2026 11:00:25 +0000
Files and hashes: 1: G7Qd9-pn1O3-D60S99XOzYPhjZo.crl (hash: C50jM36E4wazuvLqSGr+eeEXg0VPwSU9s5nfdEVluIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/459396-de90-4cc8-a542-3e6e7cdef73e/1/G7Qd9-pn1O3-D60S99XOzYPhjZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/459396-de90-4cc8-a542-3e6e7cdef73e/1/G7Qd9-pn1O3-D60S99XOzYPhjZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/G7Qd9-pn1O3-D60S99XOzYPhjZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:64:e8:51:be:5f:94:b4:db:aa:25:ae:53:07:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bb41df7ea67d4edfe0fad12f7d5cecd83e18d9a
Validity
Not Before: Apr 17 11:00:25 2026 GMT
Not After : Apr 18 11:00:25 2026 GMT
Subject: CN=a9281ea92bf1f6f88121ffae58192f13e6b11f54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a9:ff:43:a8:7c:d8:51:3f:79:11:65:2b:c7:
44:f0:04:c2:b1:d4:e7:f3:8c:c2:9d:ad:af:7e:cf:
23:c3:74:ac:cf:58:d4:2e:b6:a8:7e:de:b5:0c:32:
76:38:93:f8:34:67:38:8e:77:ec:a1:66:77:b5:35:
17:01:49:a1:ba:03:b2:8e:d6:83:30:71:1d:79:2c:
30:cb:2a:1c:16:8c:3e:65:13:de:5a:5c:7d:5f:15:
e5:4b:f8:00:05:79:45:a0:c1:6b:52:61:92:b0:1e:
7a:0b:21:e6:ba:66:d9:51:31:da:54:d9:5b:a4:70:
61:8a:b3:d8:db:73:53:0b:2c:4c:b2:51:c4:85:06:
15:94:21:5c:e9:f8:75:1e:dd:89:db:9e:d5:df:86:
e4:17:ed:99:9a:39:d3:fd:8d:a2:51:0b:90:17:02:
80:42:22:c0:cf:19:be:ac:9d:3d:f9:1d:8a:b1:80:
1a:0b:da:6a:d7:74:62:96:30:0b:34:a1:06:43:ce:
f6:6f:76:19:dd:42:9b:16:5f:7a:61:52:19:03:0c:
44:8a:c1:95:03:db:73:e8:a5:d2:98:23:ef:22:2f:
d4:62:28:48:be:db:9c:1f:05:9d:78:b0:ab:fb:33:
ab:d6:6b:ed:e5:b6:82:8e:e6:66:97:04:08:62:58:
e7:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:28:1E:A9:2B:F1:F6:F8:81:21:FF:AE:58:19:2F:13:E6:B1:1F:54
X509v3 Authority Key Identifier:
keyid:1B:B4:1D:F7:EA:67:D4:ED:FE:0F:AD:12:F7:D5:CE:CD:83:E1:8D:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G7Qd9-pn1O3-D60S99XOzYPhjZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/459396-de90-4cc8-a542-3e6e7cdef73e/1/G7Qd9-pn1O3-D60S99XOzYPhjZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/459396-de90-4cc8-a542-3e6e7cdef73e/1/G7Qd9-pn1O3-D60S99XOzYPhjZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:19:01:b4:51:56:0e:dd:1d:00:b1:f4:53:d5:1a:dc:fa:a1:
c0:be:ea:25:7c:4d:70:38:81:cf:7c:95:ca:4e:16:74:10:84:
c0:bb:2d:85:51:08:36:76:44:31:22:4b:11:7d:a9:13:7f:d1:
1c:18:5b:98:99:c5:e9:e5:75:b6:e2:b8:5e:02:61:6e:fe:78:
ed:db:c8:6e:4f:db:6d:ba:4c:b9:24:4c:02:1c:e7:1b:7d:be:
56:ae:4f:76:2f:49:66:11:47:25:e9:8a:5c:d3:e3:41:4a:14:
b5:5e:33:b5:dd:38:e9:8c:e2:7f:7c:ac:13:f0:1e:26:a2:8b:
fa:51:0e:60:b1:ca:79:76:e6:69:4d:27:26:37:41:a5:df:3e:
97:fd:0c:f8:e0:31:eb:71:35:e0:fd:69:6f:06:be:d2:e8:bc:
cf:92:2a:92:9e:d5:78:01:9d:26:d1:7a:8a:a7:5b:1d:17:65:
7a:f5:4e:4e:94:b1:50:80:d8:6d:79:99:84:53:c4:a9:56:ac:
86:d1:97:c5:76:77:68:8e:cd:3f:56:d2:2e:af:cf:f0:a0:3f:
86:48:75:8d:8d:65:db:54:cc:1b:30:7f:80:33:38:66:41:4a:
fb:b5:35:e3:b7:e6:d2:08:3d:0f:a1:d9:70:e7:ae:8a:51:69:
25:9d:af:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:34:46 2026 by rpki-client