Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft
File: G7RXRKVBKF7qDk4E5d52apyCO1M.mft (raw, json)
Hash identifier: NaTbkrk5GNF2mrk1Y097L85gx59rBe5hCEHEvG/98p8=
Subject key identifier: 6B:7C:1F:BA:8E:E5:B3:21:D5:66:0B:8B:94:D5:89:0C:CB:66:32:0E
Authority key identifier: 1B:B4:57:44:A5:41:28:5E:EA:0E:4E:04:E5:DE:76:6A:9C:82:3B:53
Certificate issuer: /CN=1bb45744a541285eea0e4e04e5de766a9c823b53
Certificate serial: 01A0B5769E3E4239CBD190082D07183C7A3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G7RXRKVBKF7qDk4E5d52apyCO1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft
Manifest number: 1A60
Signing time: Fri 18 Sep 2026 17:00:44 +0000
Manifest this update: Fri 18 Sep 2026 17:00:44 +0000
Manifest next update: Sat 19 Sep 2026 17:00:44 +0000
Files and hashes: 1: 68ijX6q-2nq8Xhg6uqOGZDuPsRc.roa (hash: QNHUQqt5EVQQNkIU2QQU5fl59vzcGBrnS9cGdUgjlSY=)
2: G7RXRKVBKF7qDk4E5d52apyCO1M.crl (hash: OEKzldbVgztqtD6T5SO/IpvMceQXIIGTSpIX2drQL7s=)
3: HAB9cuTsLde3XFXZY2Nbmq3GLUA.roa (hash: y8hO0Sxo2F3ybGp859zfrPy+Ge9PA0C88wBSkRBXGYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/G7RXRKVBKF7qDk4E5d52apyCO1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 16:24:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b5:76:9e:3e:42:39:cb:d1:90:08:2d:07:18:3c:7a:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bb45744a541285eea0e4e04e5de766a9c823b53
Validity
Not Before: Sep 18 17:00:44 2026 GMT
Not After : Sep 19 17:00:44 2026 GMT
Subject: CN=6b7c1fba8ee5b321d5660b8b94d5890ccb66320e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:64:ce:1e:4d:7d:4d:cd:4e:f9:b4:0c:1d:94:
8e:22:b4:f5:9e:b8:86:31:e5:50:7d:ed:b1:2d:ec:
a0:dc:92:9e:8d:7f:48:f9:c5:28:34:e6:d6:60:a5:
b6:6b:14:9a:c4:c5:c2:16:d8:ea:c2:63:a4:32:48:
f2:ff:b7:25:56:63:99:fe:45:8d:d4:e2:bc:d7:25:
c2:c2:0d:2b:0a:de:f7:d5:77:6c:7d:d7:68:0d:70:
88:1d:53:33:be:f9:5d:00:04:68:7e:c7:b2:80:24:
b3:ec:89:52:88:59:45:f5:66:dc:e4:2a:81:dd:64:
dd:76:5a:bc:f4:e8:17:72:b5:01:ae:66:6b:d2:b5:
dc:16:59:cb:0f:e2:09:db:2e:d7:ed:73:90:6e:6c:
45:32:83:38:76:f7:f2:40:ea:ab:58:2f:b8:60:da:
dd:d2:69:be:0d:ab:6e:52:d3:2d:e6:3f:c0:b5:82:
27:b7:b5:9d:ea:11:fc:a0:a9:45:86:3d:7c:ab:ef:
11:e1:e9:bc:33:db:12:b3:f6:e0:9a:5e:63:46:dd:
a7:fc:59:84:13:58:bf:90:3e:fa:c9:f4:48:5d:b2:
aa:11:37:90:1e:d7:ee:43:0b:3f:0c:29:21:87:bf:
a1:7b:2c:9f:4b:75:b9:0a:ef:3b:15:4c:c6:2e:76:
0d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:7C:1F:BA:8E:E5:B3:21:D5:66:0B:8B:94:D5:89:0C:CB:66:32:0E
X509v3 Authority Key Identifier:
keyid:1B:B4:57:44:A5:41:28:5E:EA:0E:4E:04:E5:DE:76:6A:9C:82:3B:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G7RXRKVBKF7qDk4E5d52apyCO1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:ff:ea:f9:f5:d4:3d:84:1e:e7:d1:2f:1a:c2:ef:05:1e:d7:
4e:2e:f6:ee:9e:96:8c:42:64:19:df:54:4d:17:54:ae:d5:30:
8b:0b:f3:93:6d:ce:5e:cf:9c:f2:17:c9:f3:4a:68:53:e9:2b:
39:28:0c:fb:03:e9:9c:3b:62:9d:db:f5:b3:ce:53:9e:27:50:
8d:ba:c5:9e:f1:ff:ac:a7:36:20:b9:d7:a1:2e:fe:bf:3a:7e:
3c:4a:83:fb:40:25:81:10:11:3b:1e:78:c8:d8:cb:97:64:08:
48:f6:69:19:29:0f:dd:c8:12:b1:c9:70:41:af:18:f9:17:b0:
65:0f:3f:63:fe:ba:75:75:d6:6d:8c:1d:d9:c1:bc:7a:9e:7e:
6c:55:f6:7a:50:ed:b0:38:bd:ba:da:e5:4e:f4:cd:8d:72:b3:
38:95:4d:25:4b:5e:01:1b:2b:7d:11:76:85:d8:47:ed:ad:18:
75:4d:c4:01:07:14:98:b9:4c:a4:cf:4a:66:15:6c:c6:cc:04:
20:5d:9c:dc:91:33:4e:71:53:3d:ef:1e:1d:c4:4b:00:f2:71:
d9:3e:fe:fc:cd:55:de:74:46:05:75:51:1d:f9:34:d3:0a:98:
90:b6:90:18:4e:74:02:f1:4d:24:85:99:c0:02:14:52:9e:f2:
9a:79:aa:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 22:58:41 2026 by rpki-client