Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft
File: G7RXRKVBKF7qDk4E5d52apyCO1M.mft (raw, json)
Hash identifier: XOhtIGLVK1HZZkeSazpKZHGCtN7YrSNASCNvgU4RGu0=
Subject key identifier: 2D:88:42:C9:5F:C3:4A:4C:C9:6E:3E:E9:54:5C:7D:21:84:CA:52:82
Authority key identifier: 1B:B4:57:44:A5:41:28:5E:EA:0E:4E:04:E5:DE:76:6A:9C:82:3B:53
Certificate issuer: /CN=1bb45744a541285eea0e4e04e5de766a9c823b53
Certificate serial: 01A1B4613809E6E3E833EAAA1E224E36FC8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G7RXRKVBKF7qDk4E5d52apyCO1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft
Manifest number: 1AE4
Signing time: Sat 07 Nov 2026 05:00:32 +0000
Manifest this update: Sat 07 Nov 2026 05:00:32 +0000
Manifest next update: Sun 08 Nov 2026 05:00:32 +0000
Files and hashes: 1: 68ijX6q-2nq8Xhg6uqOGZDuPsRc.roa (hash: QNHUQqt5EVQQNkIU2QQU5fl59vzcGBrnS9cGdUgjlSY=)
2: G7RXRKVBKF7qDk4E5d52apyCO1M.crl (hash: BRN5FD32A+5Qm0x3/pw02rpGc/UVYUIKArp7CNz8AEQ=)
3: HAB9cuTsLde3XFXZY2Nbmq3GLUA.roa (hash: y8hO0Sxo2F3ybGp859zfrPy+Ge9PA0C88wBSkRBXGYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/G7RXRKVBKF7qDk4E5d52apyCO1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Nov 2026 05:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:b4:61:38:09:e6:e3:e8:33:ea:aa:1e:22:4e:36:fc:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bb45744a541285eea0e4e04e5de766a9c823b53
Validity
Not Before: Nov 7 05:00:32 2026 GMT
Not After : Nov 8 05:00:32 2026 GMT
Subject: CN=2d8842c95fc34a4cc96e3ee9545c7d2184ca5282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:08:c2:48:5f:7d:04:45:66:b6:a9:7e:e9:c5:
a6:75:2b:3c:6d:ff:18:be:e7:60:0d:e0:7c:eb:5e:
2d:85:38:e8:14:f5:8f:8c:9d:6b:cf:4f:38:c2:82:
68:32:79:4b:50:a2:82:5d:4f:bb:32:ba:a7:e0:b9:
4f:ad:c9:87:b3:10:f6:31:85:f2:1b:61:ea:f0:9a:
6a:54:63:96:32:7b:a3:7a:79:ad:57:3e:ec:32:3b:
0a:3d:bd:23:04:01:49:fe:a2:ab:f0:a1:b4:56:26:
d4:2c:0e:80:56:9d:b0:e1:e3:f7:fc:77:87:03:b0:
7c:a7:3c:7d:d6:b3:1e:01:9a:b0:6e:5f:05:3b:41:
a4:2a:ce:1b:29:19:be:00:c1:16:9b:fc:56:0f:90:
f9:af:34:dc:81:ce:7b:af:00:ea:58:4f:07:d3:a7:
4b:79:09:ba:ea:8e:66:02:0c:e1:bd:20:5b:59:94:
09:c9:34:28:a1:a4:0e:ea:a2:b6:ba:d5:17:97:ff:
fe:6a:5a:61:5c:99:8c:ad:7c:6e:af:e2:ef:1d:67:
e2:ce:42:87:42:9c:5a:d2:8f:10:14:31:7f:7a:77:
75:35:38:f8:db:29:69:fb:31:46:65:6b:94:eb:0b:
3b:5c:dc:f2:35:fc:79:2a:c8:0d:63:81:92:91:42:
f0:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:88:42:C9:5F:C3:4A:4C:C9:6E:3E:E9:54:5C:7D:21:84:CA:52:82
X509v3 Authority Key Identifier:
keyid:1B:B4:57:44:A5:41:28:5E:EA:0E:4E:04:E5:DE:76:6A:9C:82:3B:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G7RXRKVBKF7qDk4E5d52apyCO1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c63f9e-9e7b-46dc-a402-879979d29e1e/1/G7RXRKVBKF7qDk4E5d52apyCO1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:f3:1f:25:f8:d7:ae:ff:64:b4:f5:9c:98:2f:a7:f5:8e:dc:
aa:33:43:71:c8:2f:52:91:f1:a6:6b:2b:9e:8d:bf:3c:b9:a8:
a9:e0:09:79:d4:71:ea:53:be:13:dd:61:d0:2a:f1:1a:0f:95:
7d:9e:ed:9f:7b:46:b0:eb:c3:16:7a:fb:6a:85:95:08:61:0c:
66:fd:a0:00:14:b8:38:fb:95:54:cf:a7:5f:8a:92:f1:6d:72:
6c:ea:8c:7c:ab:d3:87:c3:51:65:9b:64:4c:bc:57:9c:50:d4:
ee:6d:78:d9:14:9c:20:80:4b:c0:c8:3b:aa:11:bf:ac:7b:f4:
75:56:15:a7:13:4d:5b:0c:06:10:da:6b:44:44:48:5a:df:23:
c8:95:8a:e8:c9:54:37:46:dc:9e:cd:32:0c:22:88:df:37:54:
e1:8a:ce:da:9b:99:9c:0b:44:87:26:15:d6:08:e2:3a:48:62:
72:0c:74:25:5f:7c:7d:97:35:99:5e:02:6b:42:8f:10:d7:8b:
c3:52:84:8a:0d:34:78:df:95:8d:53:43:37:79:5e:85:de:88:
50:3b:e9:3a:77:ba:3f:9c:39:17:58:46:64:d9:ca:06:33:28:
e4:0f:87:79:1b:fe:38:39:e9:4a:bc:fa:a8:8f:02:ce:13:98:
9b:76:e1:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 7 13:47:43 2026 by rpki-client