Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft
File: G7RXRKVBKF7qDk4E5d52apyCO1M.mft (raw, json)
Hash identifier: yH/L1dh+uAyUunlV+EEofYRagCBSbb4kRhDqiUAhXgc=
Subject key identifier: 68:52:74:A4:E4:19:F0:66:46:C6:31:87:2A:17:37:04:D6:C5:AE:A8
Authority key identifier: 1B:B4:57:44:A5:41:28:5E:EA:0E:4E:04:E5:DE:76:6A:9C:82:3B:53
Certificate issuer: /CN=1bb45744a541285eea0e4e04e5de766a9c823b53
Certificate serial: 019CAC470EAD80BAA782ED7DCB2D62A4C449
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G7RXRKVBKF7qDk4E5d52apyCO1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 02:01:03 +0000
Manifest this update: Mon 02 Mar 2026 02:01:03 +0000
Manifest next update: Tue 03 Mar 2026 02:01:03 +0000
Files and hashes: 1: 68ijX6q-2nq8Xhg6uqOGZDuPsRc.roa (hash: QNHUQqt5EVQQNkIU2QQU5fl59vzcGBrnS9cGdUgjlSY=)
2: G7RXRKVBKF7qDk4E5d52apyCO1M.crl (hash: xkJhM6vYPz0rcrsZ5+BKOT/D30HAd+dTtNecM+DFnwU=)
3: HAB9cuTsLde3XFXZY2Nbmq3GLUA.roa (hash: y8hO0Sxo2F3ybGp859zfrPy+Ge9PA0C88wBSkRBXGYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/G7RXRKVBKF7qDk4E5d52apyCO1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:0e:ad:80:ba:a7:82:ed:7d:cb:2d:62:a4:c4:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bb45744a541285eea0e4e04e5de766a9c823b53
Validity
Not Before: Mar 2 02:01:03 2026 GMT
Not After : Mar 3 02:01:03 2026 GMT
Subject: CN=685274a4e419f06646c631872a173704d6c5aea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f2:93:91:61:51:ac:3b:b8:03:14:87:98:58:
82:d2:30:83:b8:f7:4a:d2:3d:37:8d:56:eb:cd:0c:
4f:ca:97:df:c9:ba:95:92:c5:7f:77:2f:2b:c2:38:
cc:6c:3c:60:5c:e5:38:24:e0:e0:50:6f:81:71:72:
05:f9:60:ba:36:aa:6e:82:b1:36:38:47:9a:83:bc:
8c:a9:1d:f4:73:77:85:8e:5f:12:ed:1f:47:8b:b8:
ad:c2:eb:6e:a0:d5:3b:37:24:0c:d6:60:76:47:e3:
da:f1:fd:3f:dc:02:3d:b2:5d:8d:f1:77:21:ca:95:
28:70:b9:33:c1:a9:55:53:0b:61:60:89:95:4a:a9:
cf:06:55:3d:b7:18:64:06:d3:1a:37:8b:25:59:6a:
ff:da:bb:1c:57:b8:5e:ab:47:1e:43:f7:07:da:49:
63:09:e2:66:93:37:e5:36:0a:33:0b:96:29:fd:15:
39:df:00:d9:b2:2f:89:1a:3d:c0:16:36:00:f2:96:
26:05:83:bd:57:7e:b8:47:57:f9:0b:55:25:74:94:
6e:5f:89:97:b1:bb:9a:03:39:a8:8e:ea:ae:13:3d:
12:55:38:54:49:01:bc:d4:ef:c8:1c:38:45:72:7b:
6c:3a:aa:d3:d5:f4:6a:7d:fc:6a:db:5e:96:62:07:
31:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:52:74:A4:E4:19:F0:66:46:C6:31:87:2A:17:37:04:D6:C5:AE:A8
X509v3 Authority Key Identifier:
keyid:1B:B4:57:44:A5:41:28:5E:EA:0E:4E:04:E5:DE:76:6A:9C:82:3B:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G7RXRKVBKF7qDk4E5d52apyCO1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:1a:ef:a2:65:ec:33:4a:d0:92:35:1d:74:89:2c:a3:ed:f8:
44:73:59:47:e9:7a:92:83:16:cd:6b:64:0a:05:2f:f4:62:c5:
02:7d:32:df:75:b2:f2:30:e1:57:17:39:85:17:db:fc:c9:52:
92:fd:d9:db:73:2b:be:27:69:8c:f1:ae:22:3b:8f:a4:dc:96:
32:11:3b:ec:fb:8d:93:62:6d:77:4b:54:5d:4a:0b:c0:55:58:
6e:56:ba:d3:ae:75:1f:33:25:a8:e8:f9:45:ad:71:d1:3c:56:
5f:c7:1c:5a:a1:12:97:62:3b:e0:4d:e1:4d:7e:bc:60:69:50:
86:e0:d7:52:eb:30:2c:ec:3b:85:ed:b6:c4:c5:c6:84:06:3f:
f6:2f:56:e4:5e:44:2b:a0:58:24:a6:43:b0:a2:8f:fc:45:9e:
40:a1:03:cd:90:ad:a3:c7:78:48:5c:02:68:60:0b:1b:4c:ea:
53:22:07:ad:3e:c9:1a:aa:e7:f3:15:cb:dd:50:45:1c:6b:24:
cd:7e:98:ec:0e:86:39:fd:c1:b4:d6:60:35:ab:c1:44:7f:a0:
8d:89:f4:a2:b3:fe:bc:93:1f:80:5a:8d:0f:cc:d4:9a:70:e5:
02:c6:e0:a6:5d:a1:10:8a:9b:9c:7c:a4:80:b7:64:92:70:3e:
85:4e:3e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:14:23 2026 by rpki-client