Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft
File: G7RXRKVBKF7qDk4E5d52apyCO1M.mft (raw, json)
Hash identifier: YfpSS1tNKCR5x1QRkCyP2+dttwSTn2W9cf1o718L0ds=
Subject key identifier: 3D:BC:BD:E9:3D:D2:6C:0C:E8:15:F2:26:30:94:42:63:5D:91:22:2C
Authority key identifier: 1B:B4:57:44:A5:41:28:5E:EA:0E:4E:04:E5:DE:76:6A:9C:82:3B:53
Certificate issuer: /CN=1bb45744a541285eea0e4e04e5de766a9c823b53
Certificate serial: 019D99CFB952E92D5AD2A2C12C53F1C38EC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G7RXRKVBKF7qDk4E5d52apyCO1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 05:00:20 +0000
Manifest this update: Fri 17 Apr 2026 05:00:20 +0000
Manifest next update: Sat 18 Apr 2026 05:00:20 +0000
Files and hashes: 1: 68ijX6q-2nq8Xhg6uqOGZDuPsRc.roa (hash: QNHUQqt5EVQQNkIU2QQU5fl59vzcGBrnS9cGdUgjlSY=)
2: G7RXRKVBKF7qDk4E5d52apyCO1M.crl (hash: p5CLmrQ6Dh36+MDPQgjFSoLyOLxaiZ5gtWweT3L03pE=)
3: HAB9cuTsLde3XFXZY2Nbmq3GLUA.roa (hash: y8hO0Sxo2F3ybGp859zfrPy+Ge9PA0C88wBSkRBXGYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/G7RXRKVBKF7qDk4E5d52apyCO1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:cf:b9:52:e9:2d:5a:d2:a2:c1:2c:53:f1:c3:8e:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bb45744a541285eea0e4e04e5de766a9c823b53
Validity
Not Before: Apr 17 05:00:20 2026 GMT
Not After : Apr 18 05:00:20 2026 GMT
Subject: CN=3dbcbde93dd26c0ce815f226309442635d91222c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:40:f1:c2:e7:4b:1d:20:14:ab:6b:e3:af:6d:
ee:5d:4e:02:9d:09:dd:6a:08:99:d3:14:b4:44:52:
5f:80:84:c6:52:ae:f7:fb:20:99:90:13:6a:05:37:
a3:54:7a:cb:95:f1:18:0c:6f:ea:d9:ff:d0:8d:7f:
d5:f7:57:a9:5e:03:90:90:8d:a1:25:5d:ed:be:07:
75:cc:21:95:a8:31:1d:a7:df:98:d0:df:ba:2c:be:
92:38:09:f4:e8:4c:e7:22:54:ba:f9:a2:0d:37:71:
12:75:9a:dc:db:f8:02:db:70:59:f4:1c:8c:d2:f8:
76:3c:29:8e:49:25:7a:9c:ad:1b:0d:b9:d1:24:e0:
9e:94:dc:08:47:4b:21:97:0e:74:2b:25:9e:28:1c:
d3:96:b1:17:e9:97:48:f1:8a:d1:ca:b3:ed:fe:2e:
a9:01:34:e2:f0:79:dc:14:7d:2f:bd:29:f9:9e:1b:
26:bc:f2:5d:dd:2d:9d:f1:50:85:aa:79:a1:d6:99:
f1:a5:d9:57:b5:2d:99:24:65:39:71:6e:ea:e6:a7:
38:bd:07:42:4f:ef:94:6d:69:0e:3b:a2:cd:ec:c7:
d2:5f:73:1c:b9:12:c9:e9:60:5a:4a:2f:be:41:b7:
6e:7a:6a:43:94:e9:02:0b:1d:b3:b7:9c:55:7f:85:
0a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:BC:BD:E9:3D:D2:6C:0C:E8:15:F2:26:30:94:42:63:5D:91:22:2C
X509v3 Authority Key Identifier:
keyid:1B:B4:57:44:A5:41:28:5E:EA:0E:4E:04:E5:DE:76:6A:9C:82:3B:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G7RXRKVBKF7qDk4E5d52apyCO1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:d4:4a:88:5a:25:6b:b0:e4:11:d1:17:59:72:53:16:03:95:
ee:91:79:3b:b1:8a:ee:00:45:5a:a7:87:3c:cd:18:1f:54:07:
2e:61:8a:a3:cc:4b:67:2f:08:e0:d9:49:b5:f1:2b:65:02:f9:
17:96:fe:d9:87:53:7a:c9:92:a4:c9:df:e5:c1:b8:d4:a0:b3:
1c:c9:01:45:5b:f7:e0:9d:64:2b:49:1a:33:1c:d8:fa:ee:4c:
32:f1:ff:a6:2a:e8:e0:5f:60:92:de:51:0c:e9:98:14:0d:f5:
1a:52:c7:f1:73:23:59:e5:b2:76:f2:9e:d7:6b:e0:6c:80:43:
49:62:e2:b4:09:a0:58:83:73:e1:50:6b:6d:1b:1a:d5:ea:28:
8e:48:12:3c:09:12:19:99:42:30:bb:5d:ca:03:c2:a5:f8:65:
da:ee:f1:2e:73:0d:8f:34:9f:f1:ea:42:a7:9b:1f:70:1f:e3:
65:c6:b6:33:c7:6c:e7:fd:ed:8f:63:54:5c:16:86:56:f5:29:
5c:16:a3:66:2f:ee:73:f2:da:c7:d4:19:1f:0a:15:1c:4d:ee:
4c:6c:d3:da:6a:e6:e7:bb:bf:91:b8:3c:ff:1f:d9:54:c3:59:
a2:6f:c8:0f:ca:17:0b:1f:2d:84:4d:3d:64:ca:f8:8a:98:98:
c3:7f:02:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:46:35 2026 by rpki-client