Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft
File: G7RXRKVBKF7qDk4E5d52apyCO1M.mft (raw, json)
Hash identifier: HJ/voAV44QmsOjgToQ19UNHAMXYYypg24UjAuc86GvE=
Subject key identifier: 70:16:7F:F1:77:5A:18:13:F8:56:3A:0A:B5:B1:A3:05:9B:61:6B:31
Authority key identifier: 1B:B4:57:44:A5:41:28:5E:EA:0E:4E:04:E5:DE:76:6A:9C:82:3B:53
Certificate issuer: /CN=1bb45744a541285eea0e4e04e5de766a9c823b53
Certificate serial: 01A0E1E284608A5A07650CD9F0B8EC62E826
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G7RXRKVBKF7qDk4E5d52apyCO1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft
Manifest number: 1A77
Signing time: Sun 27 Sep 2026 08:01:53 +0000
Manifest this update: Sun 27 Sep 2026 08:01:53 +0000
Manifest next update: Mon 28 Sep 2026 08:01:53 +0000
Files and hashes: 1: 68ijX6q-2nq8Xhg6uqOGZDuPsRc.roa (hash: QNHUQqt5EVQQNkIU2QQU5fl59vzcGBrnS9cGdUgjlSY=)
2: G7RXRKVBKF7qDk4E5d52apyCO1M.crl (hash: +z9ozgXj4VuaPYGwhy+v4tzETw37gn0B8YCrHCUD58Y=)
3: HAB9cuTsLde3XFXZY2Nbmq3GLUA.roa (hash: y8hO0Sxo2F3ybGp859zfrPy+Ge9PA0C88wBSkRBXGYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/G7RXRKVBKF7qDk4E5d52apyCO1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:e2:84:60:8a:5a:07:65:0c:d9:f0:b8:ec:62:e8:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bb45744a541285eea0e4e04e5de766a9c823b53
Validity
Not Before: Sep 27 08:01:53 2026 GMT
Not After : Sep 28 08:01:53 2026 GMT
Subject: CN=70167ff1775a1813f8563a0ab5b1a3059b616b31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:60:61:76:77:a0:16:15:77:15:ed:30:6a:58:
9b:44:9c:0d:b7:d5:da:e1:fc:83:b3:ce:5e:2f:3b:
37:0c:b1:80:8b:50:3f:2c:28:f9:1c:93:da:a7:fb:
9a:9c:88:51:80:f7:e5:7f:8a:fc:0d:ea:6d:15:67:
cd:9a:e6:89:72:52:83:44:ef:e0:43:5a:b8:88:9c:
32:3f:68:e0:4c:5d:27:a3:e3:66:da:43:8b:33:f5:
09:29:ca:ea:31:af:8e:fc:6d:af:cd:4e:59:35:fe:
73:a3:7d:37:97:30:28:e4:17:2e:ee:0c:12:c2:ae:
13:a5:c4:fc:ee:06:be:1f:21:88:10:8b:f9:52:ac:
38:14:40:7e:f6:81:48:0d:a9:02:a2:62:3c:a0:f6:
db:04:78:c6:65:bf:06:29:b3:6d:c3:47:a5:79:8c:
9c:7b:0d:36:02:4a:19:89:c6:6b:fe:57:67:aa:9a:
c5:52:16:41:8a:59:08:dc:43:7b:db:db:3f:cb:6c:
6d:10:96:98:a7:83:67:f7:06:2f:e0:6a:2f:d4:3b:
36:02:6f:fb:bf:1e:9d:32:c6:3d:94:5c:0f:e4:11:
76:e3:d8:19:7a:9a:e2:93:cc:c4:d5:c3:e3:d7:0b:
5f:89:de:68:2c:fb:e6:c3:ee:58:0d:aa:63:b4:a0:
b0:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:16:7F:F1:77:5A:18:13:F8:56:3A:0A:B5:B1:A3:05:9B:61:6B:31
X509v3 Authority Key Identifier:
keyid:1B:B4:57:44:A5:41:28:5E:EA:0E:4E:04:E5:DE:76:6A:9C:82:3B:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G7RXRKVBKF7qDk4E5d52apyCO1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:ac:fe:3f:a8:58:f0:dc:ff:94:aa:56:00:32:22:d3:8f:ee:
00:d0:13:0d:f3:f2:79:b1:97:0f:14:ce:8c:33:c6:88:7c:b5:
e2:8b:52:c8:52:54:de:e8:c8:6f:64:3b:26:12:da:66:9a:1e:
ff:d8:5a:0d:3f:90:73:f7:ce:b1:2a:4a:63:f3:73:99:06:05:
d8:6c:5b:57:ed:2a:4d:1e:35:fe:66:eb:15:5e:b1:f4:9a:42:
f5:cc:77:6a:70:e5:d2:56:c2:d9:2c:67:78:ad:99:82:ca:81:
98:34:69:f6:c0:4c:ed:35:76:96:61:e2:d6:b4:1c:5c:65:22:
85:fb:73:05:63:1e:19:4f:15:53:45:de:f4:b3:7d:6f:85:00:
ad:d2:df:48:30:ba:7e:f7:a9:47:3a:3b:8c:db:c9:51:a0:c8:
b0:46:0a:52:d8:c2:4d:70:8e:c9:72:8a:14:df:7c:28:06:31:
c8:2e:5b:eb:3a:67:5c:e4:75:80:a0:f9:20:05:82:24:e8:84:
a4:df:36:0a:58:dd:e2:85:c9:c2:1b:e0:f6:b8:c7:da:1e:05:
dc:71:a9:0a:b0:8b:dd:f9:42:78:37:89:b0:bf:e5:e3:7a:ca:
84:2c:a5:72:8c:70:76:1d:b8:83:9d:54:38:2d:28:0e:9e:fb:
a2:43:59:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:09:53 2026 by rpki-client