
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/66acb4-7a0c-41a5-95ad-123bf1f0a9c1/1/G1ZI14Ze9lxHeNgj37_qC6sa3Qg.mft
File: G1ZI14Ze9lxHeNgj37_qC6sa3Qg.mft (raw, json)
Hash identifier: 43TOexbuToqafOhMtGMk6manpVoHUOEHL9X5VezodJc=
Subject key identifier: F4:FF:E0:DD:45:6F:78:A4:24:DB:5C:8D:8B:75:2E:46:BA:39:BC:66
Authority key identifier: 1B:56:48:D7:86:5E:F6:5C:47:78:D8:23:DF:BF:EA:0B:AB:1A:DD:08
Certificate issuer: /CN=1b5648d7865ef65c4778d823dfbfea0bab1add08
Certificate serial: 019E2AA73D7B16981EDEC2EE4992C529D105
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G1ZI14Ze9lxHeNgj37_qC6sa3Qg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/66acb4-7a0c-41a5-95ad-123bf1f0a9c1/1/G1ZI14Ze9lxHeNgj37_qC6sa3Qg.mft
Manifest number: 07
Signing time: Fri 15 May 2026 08:01:03 +0000
Manifest this update: Fri 15 May 2026 08:01:03 +0000
Manifest next update: Sat 16 May 2026 08:01:03 +0000
Files and hashes: 1: G1ZI14Ze9lxHeNgj37_qC6sa3Qg.crl (hash: SHf8K0YtdPaNxd7hhwMPcGoRtCc01TRnk3mvw9x6bjg=)
2: VW-yfyXm2BfDYOtGsIByfba8GjY.roa (hash: m5w3Cs66lipJPg61wjza2fM59lMVwR2ZUJBgpGXqP/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/66acb4-7a0c-41a5-95ad-123bf1f0a9c1/1/G1ZI14Ze9lxHeNgj37_qC6sa3Qg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/66acb4-7a0c-41a5-95ad-123bf1f0a9c1/1/G1ZI14Ze9lxHeNgj37_qC6sa3Qg.mft
rsync://rpki.ripe.net/repository/DEFAULT/G1ZI14Ze9lxHeNgj37_qC6sa3Qg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2a:a7:3d:7b:16:98:1e:de:c2:ee:49:92:c5:29:d1:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b5648d7865ef65c4778d823dfbfea0bab1add08
Validity
Not Before: May 15 08:01:03 2026 GMT
Not After : May 16 08:01:03 2026 GMT
Subject: CN=f4ffe0dd456f78a424db5c8d8b752e46ba39bc66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:5e:a1:b1:68:4a:51:85:4f:c2:12:df:84:48:
43:39:f3:a7:5b:14:ef:7e:6c:51:fa:60:82:fd:25:
77:5c:8f:53:14:27:09:89:73:12:79:20:ba:7e:8c:
b9:40:57:a9:1f:0a:f1:2e:d7:81:eb:ad:c9:66:66:
21:90:88:bb:d9:47:3a:f0:5e:ef:3a:b8:42:49:6f:
3f:0a:e2:98:be:70:56:a4:bc:21:7f:cd:50:58:b0:
b8:2d:a7:4f:d2:cd:35:2c:24:5f:16:55:18:56:2a:
19:db:10:21:ec:0e:f9:c6:7a:ba:ad:79:37:f8:11:
3b:64:9a:e8:ed:5b:90:81:5d:15:eb:32:4d:a5:fd:
53:ed:96:e2:ed:4c:1a:70:6f:a9:cb:a0:d5:ed:09:
14:f7:e6:a0:df:87:cc:a7:bf:a6:00:ff:07:b7:11:
dd:d6:28:95:8a:d5:bb:26:71:d5:d1:04:f7:42:da:
19:83:f0:f8:db:be:7c:42:e0:24:27:7d:30:d5:72:
54:69:ce:79:3f:76:07:87:5c:96:c1:62:f3:b2:b8:
d6:ad:e6:08:f8:5c:51:3d:75:ae:5c:5f:e7:5c:03:
e2:16:9d:de:29:1e:5f:95:29:32:a3:34:85:7f:bc:
87:27:05:df:6e:79:25:18:f2:2d:3c:51:72:e3:72:
2d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:FF:E0:DD:45:6F:78:A4:24:DB:5C:8D:8B:75:2E:46:BA:39:BC:66
X509v3 Authority Key Identifier:
keyid:1B:56:48:D7:86:5E:F6:5C:47:78:D8:23:DF:BF:EA:0B:AB:1A:DD:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G1ZI14Ze9lxHeNgj37_qC6sa3Qg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/66acb4-7a0c-41a5-95ad-123bf1f0a9c1/1/G1ZI14Ze9lxHeNgj37_qC6sa3Qg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/66acb4-7a0c-41a5-95ad-123bf1f0a9c1/1/G1ZI14Ze9lxHeNgj37_qC6sa3Qg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:b3:25:9b:35:83:be:c9:dd:20:3a:29:fe:6b:41:b2:a3:bc:
2b:52:f6:7c:11:6f:1b:44:21:7d:00:03:96:f8:35:8d:10:fa:
12:e9:a3:6c:83:ca:c0:26:51:9c:b7:fc:a1:3a:cb:3a:f5:b3:
99:b7:0d:04:2b:c0:03:07:3c:2d:d1:48:6a:9d:70:e9:e1:93:
59:bd:51:1a:be:1f:38:08:cd:53:0c:e6:c0:a8:40:a7:71:b9:
88:d0:ca:f7:9b:27:fd:a2:b6:6d:54:46:21:79:6b:07:45:b4:
87:3e:25:92:d0:54:a7:2e:78:88:f1:c5:86:be:1e:32:bf:d7:
65:9c:ff:16:96:23:99:e7:73:30:33:ab:96:a2:c3:05:52:dd:
8b:28:1b:bf:c1:9f:ef:3e:56:7d:ac:2c:b5:f8:ec:0a:35:3f:
8e:f7:b9:22:9d:f7:27:46:90:2d:4d:25:23:57:c9:bc:ec:f1:
36:72:88:28:22:a2:40:f7:9c:02:0f:c5:b6:56:82:9a:8d:fc:
55:b7:9a:1d:6f:a4:04:d3:d5:62:c1:84:9b:77:1d:93:77:cb:
66:99:68:12:b7:1d:eb:49:af:b4:de:f5:c6:45:3d:f6:e0:6b:
ee:45:2a:75:e9:f9:ef:2e:ba:ee:bf:00:4e:bc:f4:69:84:f2:
6c:5c:d5:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 10:34:51 2026 by rpki-client