Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/ghv243Q6As8royrxDfvt8a_UOqI.mft
File: ghv243Q6As8royrxDfvt8a_UOqI.mft (raw, json)
Hash identifier: WSdX4UpOkA7QgJl/ohTr+sxO4F4gkUADQ3Op5B6IibQ=
Subject key identifier: BD:58:E9:67:04:D6:50:17:33:33:C7:B8:69:17:49:32:88:A0:9A:A3
Authority key identifier: 82:1B:F6:E3:74:3A:02:CF:2B:A3:2A:F1:0D:FB:ED:F1:AF:D4:3A:A2
Certificate issuer: /CN=821bf6e3743a02cf2ba32af10dfbedf1afd43aa2
Certificate serial: 01A0D200D31339C682714AB12786ECEA8626
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ghv243Q6As8royrxDfvt8a_UOqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/ghv243Q6As8royrxDfvt8a_UOqI.mft
Manifest number: E6
Signing time: Thu 24 Sep 2026 06:01:04 +0000
Manifest this update: Thu 24 Sep 2026 06:01:04 +0000
Manifest next update: Fri 25 Sep 2026 06:01:04 +0000
Files and hashes: 1: 9MFXK73OiqcN6LapwMg5Z8b38i0.roa (hash: WqIbxz6dWrFwqJH0l2f/YrBWMsIoujMuumNHpVLbnyk=)
2: ghv243Q6As8royrxDfvt8a_UOqI.crl (hash: 9/0p6SXW/luu4U1wu4goUxi4xFPhXwdQsR+N2XeI6No=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/ghv243Q6As8royrxDfvt8a_UOqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/ghv243Q6As8royrxDfvt8a_UOqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ghv243Q6As8royrxDfvt8a_UOqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 06:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:00:d3:13:39:c6:82:71:4a:b1:27:86:ec:ea:86:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821bf6e3743a02cf2ba32af10dfbedf1afd43aa2
Validity
Not Before: Sep 24 06:01:04 2026 GMT
Not After : Sep 25 06:01:04 2026 GMT
Subject: CN=bd58e96704d650173333c7b86917493288a09aa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:eb:5b:47:3a:37:4d:6d:1a:7e:24:7a:93:d7:
ae:39:25:c7:93:20:ff:db:13:66:5d:99:24:45:8f:
4b:6c:b1:b5:fa:fa:90:05:2e:cd:ab:d4:d8:0e:15:
1b:a2:b6:07:00:dd:a7:f9:f9:d7:81:79:bf:be:b2:
57:fe:27:3c:6d:43:a9:21:42:21:ab:cd:c4:3d:2f:
c4:21:8f:6e:07:fa:97:ad:90:d9:b0:f0:d2:7a:40:
b9:31:21:13:75:9e:82:a9:c9:d0:24:b5:24:1c:e0:
98:1d:d8:5d:3b:5d:e4:8b:db:e8:d5:e2:f2:e6:fa:
41:f4:01:bd:12:f4:39:43:85:70:ec:da:62:f3:23:
17:97:7e:4c:1a:9a:6c:5c:1a:60:73:e6:dc:b2:95:
2a:1f:fe:59:f0:a3:aa:16:b6:fb:48:89:5d:da:28:
f5:ae:b9:81:8a:2f:ca:15:08:d9:6e:44:bb:44:d5:
a7:b4:83:9e:ee:a2:df:61:60:82:e1:d9:0e:5b:f9:
c0:8a:c8:ec:24:78:81:97:cd:ad:76:68:f5:69:66:
77:94:51:e6:c5:60:c0:c0:d4:cf:67:1a:5d:b7:d4:
77:93:e1:73:56:69:08:80:f9:d4:7d:bd:6a:de:16:
c9:15:11:5b:19:12:4e:57:73:d6:40:65:71:1b:02:
70:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:58:E9:67:04:D6:50:17:33:33:C7:B8:69:17:49:32:88:A0:9A:A3
X509v3 Authority Key Identifier:
keyid:82:1B:F6:E3:74:3A:02:CF:2B:A3:2A:F1:0D:FB:ED:F1:AF:D4:3A:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ghv243Q6As8royrxDfvt8a_UOqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/ghv243Q6As8royrxDfvt8a_UOqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/ghv243Q6As8royrxDfvt8a_UOqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:0a:45:86:3f:92:9c:40:17:b3:fe:90:23:1c:6a:05:c1:63:
ca:33:4d:25:14:d1:3d:2e:e6:18:61:7c:04:d2:75:93:13:3b:
7d:d0:4f:8e:98:bd:60:cb:ac:0e:de:d6:bb:4e:76:67:ce:d0:
07:88:5c:38:aa:b8:af:11:ba:b2:77:db:a9:b6:44:8d:ca:63:
de:66:7a:a5:51:3f:57:05:25:3c:a7:cf:42:be:55:06:51:68:
98:e0:b7:95:cb:b9:ab:cc:17:88:84:65:d2:1d:c0:59:a7:ec:
91:5d:41:35:bf:1f:11:d5:f9:52:69:cf:85:e2:48:bb:33:c0:
40:b2:09:2a:19:3f:76:bc:23:7e:b8:d6:98:87:c9:eb:a0:6a:
ba:d6:05:6d:3d:64:02:53:9c:86:9f:60:6d:ef:b6:99:22:25:
cc:d0:d1:ec:f5:83:8e:ea:11:be:78:da:10:0c:46:0a:ec:f8:
d4:03:27:43:98:5d:a9:48:da:d2:16:3a:46:b8:db:e3:2c:33:
0e:f4:7f:7e:b7:c7:62:74:ad:8f:94:a6:3b:27:b1:47:0d:9b:
d1:90:22:1f:5b:e1:a0:76:98:ec:98:da:9c:32:e7:5d:9b:88:
5b:c9:be:24:ab:6b:4c:53:1e:ea:b7:4a:99:2f:8c:72:50:25:
fc:fd:9e:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 09:29:01 2026 by rpki-client