Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/GGuOJPwv4Hjs43e2QHhahyV3108.mft
File: GGuOJPwv4Hjs43e2QHhahyV3108.mft (raw, json)
Hash identifier: lYgDRJXwJWjmzEcJdZQL6o3XQQjatExjV63IwcuFp/8=
Subject key identifier: 7B:29:F1:C9:F7:2D:F7:F6:63:B6:0D:C3:A2:E3:0B:1F:2B:51:A5:45
Authority key identifier: 18:6B:8E:24:FC:2F:E0:78:EC:E3:77:B6:40:78:5A:87:25:77:D7:4F
Certificate issuer: /CN=186b8e24fc2fe078ece377b640785a872577d74f
Certificate serial: 01A0CA47AEAB564A5CD1DE098267883E3476
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GGuOJPwv4Hjs43e2QHhahyV3108.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/GGuOJPwv4Hjs43e2QHhahyV3108.mft
Manifest number: E2
Signing time: Tue 22 Sep 2026 18:01:30 +0000
Manifest this update: Tue 22 Sep 2026 18:01:30 +0000
Manifest next update: Wed 23 Sep 2026 18:01:30 +0000
Files and hashes: 1: GGuOJPwv4Hjs43e2QHhahyV3108.crl (hash: sr80cT20qhSlrfT4JdYsFq6xEDHfhah5thDVvtygPEc=)
2: P-ygUlow62dRgj3KwI1qyzkMeOA.roa (hash: O8MOfZwhLY2ZIpxWmwXD5U4weem+XHHwGlte/rosmFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/GGuOJPwv4Hjs43e2QHhahyV3108.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/GGuOJPwv4Hjs43e2QHhahyV3108.mft
rsync://rpki.ripe.net/repository/DEFAULT/GGuOJPwv4Hjs43e2QHhahyV3108.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:47:ae:ab:56:4a:5c:d1:de:09:82:67:88:3e:34:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=186b8e24fc2fe078ece377b640785a872577d74f
Validity
Not Before: Sep 22 18:01:30 2026 GMT
Not After : Sep 23 18:01:30 2026 GMT
Subject: CN=7b29f1c9f72df7f663b60dc3a2e30b1f2b51a545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e1:f4:14:09:40:26:8d:eb:d6:63:96:32:1e:
e5:91:bb:fb:ad:51:05:43:6c:90:28:2e:22:42:85:
90:60:0d:89:63:e6:e9:18:d8:83:24:c8:5c:4e:26:
f2:68:28:bc:57:2f:9f:da:cd:a4:a2:dd:1f:c4:15:
b0:72:26:4b:40:60:04:9b:58:9b:3a:f1:65:e5:c2:
64:dc:45:e1:b6:4b:4a:ba:42:08:3c:db:d7:57:a6:
bf:b1:a8:f1:eb:57:30:85:32:45:1d:ab:4f:f9:42:
e1:ad:63:7e:7c:f2:1c:d2:e5:73:fd:66:6f:f9:0d:
0e:0a:ca:86:04:25:ac:82:0c:b5:39:24:6a:98:b5:
97:02:96:78:cd:aa:a9:26:0b:be:5d:ad:f7:a8:32:
cc:42:39:09:0f:9c:30:48:d8:94:f1:9e:f2:d3:0f:
91:0d:24:31:1d:27:5d:0d:d9:13:95:7d:7e:47:46:
50:fb:e8:a8:65:66:93:f5:79:93:15:5a:9b:c1:8a:
68:f2:82:12:a8:03:40:79:3d:34:fa:81:8c:b0:91:
4f:25:68:aa:f0:bd:b8:ac:74:f6:4a:22:88:7f:57:
d3:76:d6:98:ea:49:32:02:50:40:b7:41:26:d9:3b:
d3:ad:f4:38:cd:66:13:39:78:fc:34:cc:a4:88:05:
1d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:29:F1:C9:F7:2D:F7:F6:63:B6:0D:C3:A2:E3:0B:1F:2B:51:A5:45
X509v3 Authority Key Identifier:
keyid:18:6B:8E:24:FC:2F:E0:78:EC:E3:77:B6:40:78:5A:87:25:77:D7:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GGuOJPwv4Hjs43e2QHhahyV3108.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/GGuOJPwv4Hjs43e2QHhahyV3108.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/GGuOJPwv4Hjs43e2QHhahyV3108.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:9c:89:93:bd:5f:95:51:c7:1d:bb:c4:68:2a:24:ce:3c:46:
9c:97:1b:de:53:14:68:5e:06:18:22:07:21:29:22:ea:65:e7:
56:e4:57:e7:01:a8:f9:84:0a:58:a6:fb:b8:d1:33:eb:9c:fc:
f9:4d:26:fe:76:a7:28:ea:a7:17:c2:6b:14:21:4b:b3:34:98:
4c:0c:ed:30:c2:50:e4:f1:47:00:67:8f:82:02:98:7b:52:65:
24:18:db:96:11:48:66:a7:be:dd:0d:d8:37:79:1e:2e:53:e7:
17:fc:7d:50:21:de:e8:31:01:e9:da:63:51:b6:86:a9:08:06:
dc:f4:54:53:2c:18:e1:ea:3f:b4:65:16:47:1f:22:00:71:5e:
5b:6f:2e:be:31:ba:85:c4:a5:ed:c8:65:0d:a1:fd:70:4f:52:
b6:eb:93:e2:07:15:61:da:5c:af:56:83:73:0c:75:b6:4e:67:
08:61:a3:c0:62:72:af:e9:dd:1c:7b:44:dd:3c:ee:be:7a:e3:
73:d1:b1:d8:76:79:f8:5c:71:de:a6:dc:5b:7a:30:37:e7:dd:
7d:54:85:51:37:66:1b:39:25:3e:66:2f:98:21:ba:5f:cf:50:
8d:41:12:d5:13:97:d3:0f:44:d6:1b:76:b4:97:30:63:60:70:
b6:b6:75:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:02:22 2026 by rpki-client