Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft
File: G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft (raw, json)
Hash identifier: KUwHwBx6eSQzoZ5YpQ9YB8WMsezJTFmySNzybMjbgn4=
Subject key identifier: C0:99:61:C3:5B:4A:82:D0:EE:BA:96:34:06:06:76:C2:F9:B2:D5:6A
Authority key identifier: 1B:68:65:61:26:19:83:73:D0:78:86:BF:4A:B8:FB:06:B9:00:67:80
Certificate issuer: /CN=1b68656126198373d07886bf4ab8fb06b9006780
Certificate serial: 01A17D3C6697954F3DA5D04285696A3A5173
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft
Manifest number: 1AC7
Signing time: Tue 27 Oct 2026 12:01:12 +0000
Manifest this update: Tue 27 Oct 2026 12:01:12 +0000
Manifest next update: Wed 28 Oct 2026 12:01:12 +0000
Files and hashes: 1: AdqGNGTNFT1rSz03F0HVwK9B37I.roa (hash: cI5ji7V4dg8v9ui9zXXCNsMNEyJTysTdpdklDgc65jE=)
2: G2hlYSYZg3PQeIa_Srj7BrkAZ4A.crl (hash: r2ZN7P+x8Bh6ElxaWwOwCXEfkAh1waPbTEm0iYYK+yk=)
3: SiR8FHHKdbXqmwMkjZZOq7HZtxo.roa (hash: mkRGoCYQs5pO/fqORGXARxwk0SLVCsNlvRMucJrxHow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:3c:66:97:95:4f:3d:a5:d0:42:85:69:6a:3a:51:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b68656126198373d07886bf4ab8fb06b9006780
Validity
Not Before: Oct 27 12:01:12 2026 GMT
Not After : Oct 28 12:01:12 2026 GMT
Subject: CN=c09961c35b4a82d0eeba9634060676c2f9b2d56a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:45:90:c4:6e:b0:b0:e6:f7:9f:f6:98:33:0a:
a6:f5:bc:50:b3:c2:35:fa:05:0e:63:06:c1:5f:46:
4c:11:ef:ae:05:16:f5:4c:d6:c9:15:5c:3c:c0:ef:
c5:e2:45:71:be:a6:e0:d9:6d:3e:24:ff:97:e9:69:
0f:33:19:ab:d8:b2:43:68:4c:02:72:23:64:fe:15:
1a:af:0c:08:e4:a0:44:82:31:34:22:24:58:9f:d7:
28:1a:3b:3c:39:9e:8d:b7:48:72:97:c1:99:f5:b5:
29:83:fd:6c:1b:d2:fd:17:57:ab:1b:05:c7:d8:cd:
9d:38:ea:f4:b5:a1:38:31:a3:e4:ef:00:83:06:13:
d9:cd:1e:97:7d:c6:fb:71:cc:d6:e4:3a:03:04:de:
c8:89:82:3d:0d:46:1f:a7:4f:24:f0:07:46:0e:3d:
e7:11:85:ed:c3:26:8c:c5:ec:c5:da:56:41:c8:74:
74:f2:3c:e0:7a:da:c0:b3:88:b9:a9:12:93:cc:c1:
12:5a:2f:6b:63:6f:fd:ca:5e:a5:68:3a:b4:77:77:
2c:a5:48:80:14:63:0d:6e:ce:b5:e7:11:b7:c6:ec:
fb:fb:67:a7:a2:86:65:f1:ed:34:76:9c:ac:b1:f5:
8f:af:0b:aa:35:23:fe:ea:cf:a2:1a:d3:17:c9:9b:
7b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:99:61:C3:5B:4A:82:D0:EE:BA:96:34:06:06:76:C2:F9:B2:D5:6A
X509v3 Authority Key Identifier:
keyid:1B:68:65:61:26:19:83:73:D0:78:86:BF:4A:B8:FB:06:B9:00:67:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:d0:83:de:da:db:e1:3d:d6:da:d7:4a:d4:7c:9a:3a:b5:d8:
ba:a0:7d:af:48:4f:2f:9b:9a:27:fe:0f:05:c9:c6:01:57:c5:
9d:c4:f5:bd:30:60:1e:f2:bc:b8:b3:a6:70:f5:6f:d2:5b:4f:
d9:3e:86:4c:d4:d1:b6:77:69:c6:28:48:6d:76:b3:1d:61:74:
20:26:35:15:85:dd:09:e7:8c:62:47:c0:df:18:4b:4f:2b:a7:
bd:e2:cc:bf:50:3e:10:51:99:85:ba:ea:ba:c8:bc:10:0f:ab:
0f:ed:70:8c:75:92:e9:e3:3a:6a:76:de:72:34:e6:83:a1:ea:
d9:28:2a:4b:97:85:e9:76:a4:69:17:84:d4:2c:ea:0c:75:ec:
1e:2c:77:c0:42:a6:74:30:a7:08:18:3d:44:94:63:91:39:89:
ea:17:bd:e2:4b:52:7c:7a:1f:bc:81:13:42:54:00:0b:54:a8:
1c:7f:25:4a:19:50:69:ce:01:24:31:f9:8c:74:59:82:c4:f2:
68:a3:22:6f:f4:ae:c9:9f:93:5d:30:87:8e:83:d3:20:6f:33:
b3:d2:96:8b:b9:bb:5a:5f:54:e2:19:60:e0:c6:9e:f5:05:92:
a9:72:e5:87:11:15:f6:1b:49:4f:cf:84:6d:23:36:b3:f2:97:
17:cf:7b:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:21:36 2026 by rpki-client