Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft
File: G7RXRKVBKF7qDk4E5d52apyCO1M.mft (raw, json)
Hash identifier: OjNdXwvu7lwCG1GKnlLjR+HianmnURV5whXGK6ivmFA=
Subject key identifier: 28:33:90:96:6A:DC:3B:A4:90:EC:0E:D9:C0:6D:4B:11:1F:23:93:6B
Authority key identifier: 1B:B4:57:44:A5:41:28:5E:EA:0E:4E:04:E5:DE:76:6A:9C:82:3B:53
Certificate issuer: /CN=1bb45744a541285eea0e4e04e5de766a9c823b53
Certificate serial: 019FACE3AA4541AE774768E1088B2FD674B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G7RXRKVBKF7qDk4E5d52apyCO1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft
Manifest number: 19D7
Signing time: Wed 29 Jul 2026 08:00:29 +0000
Manifest this update: Wed 29 Jul 2026 08:00:29 +0000
Manifest next update: Thu 30 Jul 2026 08:00:29 +0000
Files and hashes: 1: 68ijX6q-2nq8Xhg6uqOGZDuPsRc.roa (hash: QNHUQqt5EVQQNkIU2QQU5fl59vzcGBrnS9cGdUgjlSY=)
2: G7RXRKVBKF7qDk4E5d52apyCO1M.crl (hash: U5vKlzqGpeS52/4t7RITBh6+mI3mRjpyBfFYxWrnBJA=)
3: HAB9cuTsLde3XFXZY2Nbmq3GLUA.roa (hash: y8hO0Sxo2F3ybGp859zfrPy+Ge9PA0C88wBSkRBXGYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/G7RXRKVBKF7qDk4E5d52apyCO1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:e3:aa:45:41:ae:77:47:68:e1:08:8b:2f:d6:74:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bb45744a541285eea0e4e04e5de766a9c823b53
Validity
Not Before: Jul 29 08:00:29 2026 GMT
Not After : Jul 30 08:00:29 2026 GMT
Subject: CN=283390966adc3ba490ec0ed9c06d4b111f23936b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e4:cc:72:46:0e:0e:bb:4a:d0:2c:54:a7:68:
d5:67:f2:45:62:e2:0e:e7:5d:19:2b:df:51:0b:e2:
95:00:91:64:17:ba:c2:d1:26:54:bb:ac:77:66:34:
28:98:18:75:76:a4:ae:d9:f6:ba:26:0b:2d:b4:2e:
92:29:47:93:8f:93:37:c5:79:1d:cf:77:2a:30:f8:
4f:dd:f2:e1:2e:38:a3:ba:0c:a7:88:7d:00:a4:49:
9d:d6:ad:4e:3a:6d:c9:36:72:4e:dc:a5:ef:87:7d:
8e:b8:ba:4a:54:1f:18:2e:8d:91:4e:4d:f3:55:b8:
5d:19:91:de:c9:7c:d9:7d:2a:3e:fb:14:fd:0e:21:
70:4e:bc:10:80:28:3d:66:c9:e5:eb:ee:2d:9c:d6:
21:6e:3a:06:64:06:80:b1:cb:a4:ad:f9:ff:40:38:
28:a5:2a:70:0a:82:c4:0a:b4:6a:28:cc:1a:9e:48:
c9:8a:6e:65:66:a8:97:db:32:bb:02:36:54:31:52:
dc:94:7b:30:9a:84:07:93:73:c3:76:f4:b8:69:3d:
d7:a0:48:0e:5b:a5:ea:42:78:9e:f0:c8:21:7d:9c:
6c:6b:05:2e:90:2c:db:d4:2c:d5:ea:48:da:f8:5c:
4d:01:0f:c1:c7:d4:6e:70:2a:0f:bb:72:f5:16:74:
71:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:33:90:96:6A:DC:3B:A4:90:EC:0E:D9:C0:6D:4B:11:1F:23:93:6B
X509v3 Authority Key Identifier:
keyid:1B:B4:57:44:A5:41:28:5E:EA:0E:4E:04:E5:DE:76:6A:9C:82:3B:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G7RXRKVBKF7qDk4E5d52apyCO1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:89:6f:5f:4e:39:df:ff:b6:d2:c1:76:22:f5:83:38:fa:0d:
7e:d0:26:08:a1:6f:8b:93:b2:7c:45:65:88:95:ef:a2:25:66:
05:7c:99:5e:7e:28:50:a7:d5:8b:da:70:14:d8:1b:79:4b:3e:
08:26:bf:5b:3a:a2:3f:e1:6a:cc:74:4d:d1:20:92:b6:67:11:
c0:e6:80:64:36:4d:04:c2:31:44:9b:6f:9a:c7:cf:62:5e:ca:
ea:41:99:50:f6:3d:2a:de:17:1f:ae:77:26:8f:b9:42:3a:6d:
de:b9:d9:26:08:15:e8:c9:a9:73:25:22:5a:ea:5a:05:79:79:
b4:6e:1c:8f:61:12:89:03:1f:9a:dd:5f:dc:1c:ac:92:0c:19:
d8:d5:91:ee:f1:a5:84:11:08:c5:9c:8f:ad:a1:ef:b0:26:92:
37:a8:bd:7e:1c:96:3d:eb:9e:b2:d8:b1:c4:62:20:66:4a:36:
9d:30:23:7d:fe:fd:91:45:47:f0:19:8c:87:ec:19:34:08:db:
d1:9d:46:f5:b8:ea:34:03:85:23:4a:35:9e:a2:9b:85:45:d4:
b5:fc:47:b8:d8:5e:e6:44:1c:e5:a3:63:22:fe:3d:5f:f4:7e:
98:2c:f7:96:41:e2:b3:af:17:f2:8e:dd:ae:9b:e5:7c:34:1e:
67:00:df:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:27:47 2026 by rpki-client