Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft
File: G7RXRKVBKF7qDk4E5d52apyCO1M.mft (raw, json)
Hash identifier: 3N2NOiVBEARSI8Vlswiew2qcP85I/TgwmTcGhuWT4Jw=
Subject key identifier: 6B:09:E7:6B:50:B8:FF:20:B9:D1:13:6E:73:0E:48:93:AD:2C:6A:63
Authority key identifier: 1B:B4:57:44:A5:41:28:5E:EA:0E:4E:04:E5:DE:76:6A:9C:82:3B:53
Certificate issuer: /CN=1bb45744a541285eea0e4e04e5de766a9c823b53
Certificate serial: 019DFA5F66ED909D03388ADA0BB69A63B5F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G7RXRKVBKF7qDk4E5d52apyCO1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft
Manifest number: 18F6
Signing time: Tue 05 May 2026 23:00:49 +0000
Manifest this update: Tue 05 May 2026 23:00:49 +0000
Manifest next update: Wed 06 May 2026 23:00:49 +0000
Files and hashes: 1: 68ijX6q-2nq8Xhg6uqOGZDuPsRc.roa (hash: QNHUQqt5EVQQNkIU2QQU5fl59vzcGBrnS9cGdUgjlSY=)
2: G7RXRKVBKF7qDk4E5d52apyCO1M.crl (hash: vONschctrih5cjg9H8mhkbPwunGxuXSnYYlS8MBPyWg=)
3: HAB9cuTsLde3XFXZY2Nbmq3GLUA.roa (hash: y8hO0Sxo2F3ybGp859zfrPy+Ge9PA0C88wBSkRBXGYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/G7RXRKVBKF7qDk4E5d52apyCO1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 18:48:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fa:5f:66:ed:90:9d:03:38:8a:da:0b:b6:9a:63:b5:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bb45744a541285eea0e4e04e5de766a9c823b53
Validity
Not Before: May 5 23:00:49 2026 GMT
Not After : May 6 23:00:49 2026 GMT
Subject: CN=6b09e76b50b8ff20b9d1136e730e4893ad2c6a63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ad:40:6d:6f:79:93:9e:e1:db:66:89:aa:75:
03:82:06:ff:ab:ed:4e:d1:8a:37:37:39:57:99:d5:
20:3b:67:16:5f:a6:9b:db:bb:2b:81:6b:f9:d8:5c:
28:84:34:dc:f2:f6:4e:05:73:bb:ff:fa:79:ed:5a:
d3:34:97:dc:d2:df:3b:8f:5d:1a:1d:64:7e:cc:11:
0b:2f:6e:b6:05:5c:ca:dd:ed:43:ce:c3:51:7d:a4:
e1:42:e3:3f:ad:53:35:aa:49:39:c5:3f:75:7d:2b:
da:c7:08:c1:26:4c:ed:34:1b:f1:70:b0:e3:d6:3f:
d3:38:20:30:31:0e:00:09:f3:95:60:6c:45:04:11:
61:8d:92:1c:a7:fe:03:11:37:80:2b:41:e4:d2:06:
43:ff:e4:2e:fe:ce:78:31:ae:3d:7e:6b:94:6b:f3:
31:85:5f:2c:46:0e:79:25:d8:aa:1a:3f:a9:71:d1:
3a:33:2f:33:28:71:92:86:b2:0b:d6:26:ee:6b:f3:
56:71:ed:2e:a6:e8:42:e0:ee:35:aa:60:9d:e8:15:
f8:49:31:7d:59:df:24:8a:10:1b:a7:30:b9:e7:40:
29:f6:98:56:2f:80:6d:74:d6:6a:89:98:b4:1f:3a:
06:24:9e:32:69:c2:3a:c3:74:85:2b:2b:73:fc:c7:
52:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:09:E7:6B:50:B8:FF:20:B9:D1:13:6E:73:0E:48:93:AD:2C:6A:63
X509v3 Authority Key Identifier:
keyid:1B:B4:57:44:A5:41:28:5E:EA:0E:4E:04:E5:DE:76:6A:9C:82:3B:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G7RXRKVBKF7qDk4E5d52apyCO1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:bf:64:5d:32:6b:0c:73:7a:1b:75:07:4c:d1:01:b6:28:97:
6e:9c:3f:8b:25:49:22:a7:58:77:8d:5c:52:e8:51:bd:b4:a7:
e6:32:6a:f3:cf:6d:91:be:8e:c5:bf:17:b0:45:c0:4f:f2:d2:
ff:05:1e:45:0c:7c:0e:ba:bd:78:a6:ab:dc:99:75:bb:ee:1f:
e8:e7:7e:23:e0:46:f6:30:27:e4:37:92:8a:38:cb:4a:52:54:
8e:c9:3c:f6:b3:1b:1c:d2:18:ee:5e:9c:ee:d5:b4:aa:7e:a8:
34:75:2b:a2:27:db:80:1a:d2:1f:64:75:05:57:6b:41:a4:17:
85:0f:99:1a:8f:d6:b7:84:c1:6e:4a:27:46:cb:82:e8:65:8e:
61:75:7c:f0:1f:73:17:4c:da:84:ea:59:6b:1e:fc:97:4f:b2:
b2:6e:1f:79:f8:78:ac:ea:c6:ad:d3:d4:4e:1a:f8:0d:e1:03:
d3:b3:97:38:63:d3:7c:21:f2:3a:6d:17:12:2b:d6:22:c4:81:
42:a6:0f:28:5e:50:15:a0:7c:3d:67:e4:1d:04:f2:1c:18:4d:
c9:a3:0d:e5:e9:42:8b:f1:03:8a:bc:0a:48:4d:13:ff:25:a2:
68:94:49:74:78:39:2c:a7:84:d4:9f:c5:ef:49:00:3a:22:6e:
d0:a7:39:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 03:26:38 2026 by rpki-client