Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft
File: G7RXRKVBKF7qDk4E5d52apyCO1M.mft (raw, json)
Hash identifier: J82SbeFTywTUkMlZU/suZlhTyvy4ZyI4nInowDyThu8=
Subject key identifier: 88:28:C0:A9:15:4F:CA:6E:3A:3B:9D:D1:8A:8D:DD:25:36:ED:B0:3F
Authority key identifier: 1B:B4:57:44:A5:41:28:5E:EA:0E:4E:04:E5:DE:76:6A:9C:82:3B:53
Certificate issuer: /CN=1bb45744a541285eea0e4e04e5de766a9c823b53
Certificate serial: 019CFF51F3719994CC63CE4134268B3073F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G7RXRKVBKF7qDk4E5d52apyCO1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft
Manifest number: 1874
Signing time: Wed 18 Mar 2026 05:01:26 +0000
Manifest this update: Wed 18 Mar 2026 05:01:26 +0000
Manifest next update: Thu 19 Mar 2026 05:01:26 +0000
Files and hashes: 1: 68ijX6q-2nq8Xhg6uqOGZDuPsRc.roa (hash: QNHUQqt5EVQQNkIU2QQU5fl59vzcGBrnS9cGdUgjlSY=)
2: G7RXRKVBKF7qDk4E5d52apyCO1M.crl (hash: 3EMDXMxJbRIwPjiqp9pu1xrtg5uUCA6gHdLDdc49rEU=)
3: HAB9cuTsLde3XFXZY2Nbmq3GLUA.roa (hash: y8hO0Sxo2F3ybGp859zfrPy+Ge9PA0C88wBSkRBXGYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/G7RXRKVBKF7qDk4E5d52apyCO1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Mar 2026 03:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ff:51:f3:71:99:94:cc:63:ce:41:34:26:8b:30:73:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bb45744a541285eea0e4e04e5de766a9c823b53
Validity
Not Before: Mar 18 05:01:26 2026 GMT
Not After : Mar 19 05:01:26 2026 GMT
Subject: CN=8828c0a9154fca6e3a3b9dd18a8ddd2536edb03f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:39:d6:ab:c7:1f:16:0a:60:db:44:7d:40:3b:
39:83:58:50:88:70:ad:66:e1:bd:64:97:7b:d5:84:
07:a6:79:b8:ed:08:d3:2e:3d:0c:12:f8:cf:c7:90:
25:7b:99:cd:a9:c7:c9:d9:4f:3f:bb:4e:e0:96:76:
15:7a:78:34:3f:73:c4:5e:bd:b6:f9:aa:dd:4f:09:
56:48:a1:19:9c:83:8c:81:4b:29:e6:9f:50:b0:d1:
53:77:46:0c:87:6d:ff:8f:a2:47:9e:0d:df:e2:fa:
c4:49:ce:bd:95:3a:08:17:36:4c:79:76:68:7c:bf:
00:a6:4e:71:a9:86:36:d8:a2:a3:50:99:c9:1c:ce:
98:7d:e0:4b:67:ff:75:e1:65:b2:46:62:38:3f:6e:
76:9a:d7:ce:a8:c6:03:45:d0:bd:45:5a:4b:b5:c1:
cd:9f:f1:29:c0:05:53:e5:fa:8d:d0:3e:fe:57:47:
13:6a:21:8e:c3:ae:04:91:b1:37:d1:f1:ea:35:8b:
40:6e:e8:74:83:cf:f2:7d:ff:59:4f:07:01:78:93:
a8:56:0f:9d:49:b8:e9:6c:98:8c:ff:f0:94:b5:f7:
76:fc:a1:23:11:82:4b:03:f1:c2:24:89:ca:05:bb:
92:a9:18:31:7a:cf:a2:67:72:ae:f4:69:1f:ae:ef:
0e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:28:C0:A9:15:4F:CA:6E:3A:3B:9D:D1:8A:8D:DD:25:36:ED:B0:3F
X509v3 Authority Key Identifier:
keyid:1B:B4:57:44:A5:41:28:5E:EA:0E:4E:04:E5:DE:76:6A:9C:82:3B:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G7RXRKVBKF7qDk4E5d52apyCO1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:82:71:fd:a7:b7:27:e3:72:52:b2:02:fc:4f:bf:9b:e0:ec:
e4:fb:8f:60:60:f4:39:0a:72:93:46:7a:34:01:20:bf:41:6a:
f0:50:a2:60:b8:ed:35:6f:ee:92:c9:e4:8c:c2:c5:ba:aa:73:
d6:eb:90:d1:62:9b:b6:b2:b2:2c:1c:79:64:8a:7a:5c:4d:5a:
e6:7e:94:52:f0:48:82:3c:04:bc:9d:07:a9:2a:b3:3e:0d:86:
97:aa:5c:4f:7f:42:f5:0b:07:9a:ea:e8:78:1a:7a:59:d3:4b:
57:e8:3d:08:74:75:70:be:ac:e8:d5:9c:33:b4:1a:62:a3:12:
6a:c9:53:74:d2:5c:76:1d:04:39:6e:bc:90:67:0b:01:83:77:
6c:a8:63:4b:24:0f:f9:9c:73:08:36:8a:ba:e1:3b:25:36:71:
37:41:2e:68:d9:e2:70:24:f2:e2:69:4f:c6:37:9b:fd:46:db:
74:1f:32:87:9c:13:aa:90:3f:16:96:9e:ed:9c:cf:57:d0:66:
10:bc:82:be:ed:53:8c:18:36:08:cc:a9:d8:b2:8c:6b:f4:8e:
cb:a1:15:75:6c:fe:65:ef:d5:6c:d9:43:17:e2:10:50:75:6f:
2a:ac:4a:61:73:89:e4:61:e4:ca:9b:34:85:28:84:25:7f:6c:
33:54:22:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 18 10:31:46 2026 by rpki-client