Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/ghv243Q6As8royrxDfvt8a_UOqI.mft
File: ghv243Q6As8royrxDfvt8a_UOqI.mft (raw, json)
Hash identifier: HnnmigyyFozdrq7jWpvivbDffaW/vdRqJDCCN2Ug2Lc=
Subject key identifier: 4F:04:72:97:0E:4E:43:C2:1C:09:82:A6:07:97:0E:16:20:53:F4:5D
Authority key identifier: 82:1B:F6:E3:74:3A:02:CF:2B:A3:2A:F1:0D:FB:ED:F1:AF:D4:3A:A2
Certificate issuer: /CN=821bf6e3743a02cf2ba32af10dfbedf1afd43aa2
Certificate serial: 019FA899723377DE04332B038CB27DE503E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ghv243Q6As8royrxDfvt8a_UOqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/ghv243Q6As8royrxDfvt8a_UOqI.mft
Manifest number: 4C
Signing time: Tue 28 Jul 2026 12:00:56 +0000
Manifest this update: Tue 28 Jul 2026 12:00:56 +0000
Manifest next update: Wed 29 Jul 2026 12:00:56 +0000
Files and hashes: 1: 9MFXK73OiqcN6LapwMg5Z8b38i0.roa (hash: WqIbxz6dWrFwqJH0l2f/YrBWMsIoujMuumNHpVLbnyk=)
2: ghv243Q6As8royrxDfvt8a_UOqI.crl (hash: TUGgbOLrr7o+DrOJazZL1xFLlaEuJvw0Un2fCL7k7DA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/ghv243Q6As8royrxDfvt8a_UOqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/ghv243Q6As8royrxDfvt8a_UOqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ghv243Q6As8royrxDfvt8a_UOqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:72:33:77:de:04:33:2b:03:8c:b2:7d:e5:03:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821bf6e3743a02cf2ba32af10dfbedf1afd43aa2
Validity
Not Before: Jul 28 12:00:56 2026 GMT
Not After : Jul 29 12:00:56 2026 GMT
Subject: CN=4f0472970e4e43c21c0982a607970e162053f45d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:61:ad:6a:8a:f6:e2:e0:d1:a2:2b:a7:6d:8d:
a8:24:6f:e5:94:c7:bd:f1:57:7f:7e:81:06:d8:46:
4d:93:a6:90:47:9c:35:8d:5f:94:09:ea:3f:95:23:
a3:5f:50:2c:18:1f:67:53:6a:0d:e3:3f:a5:91:8b:
43:a9:e6:12:c7:c2:06:08:13:0b:0f:ee:b7:17:23:
5c:00:28:24:01:76:86:59:6a:30:46:d9:f1:90:05:
b6:fa:0a:3e:d6:48:01:c2:1c:b8:ba:5a:46:07:3c:
5c:8b:0c:1b:4d:de:f8:59:28:2e:e3:a4:b1:9b:e3:
e6:3c:3b:1c:e0:6a:15:98:58:76:e9:cf:37:63:8f:
3a:ca:e2:bd:46:c8:96:35:cb:45:d0:e7:76:5d:66:
0d:b3:d1:13:6e:b0:c9:14:34:11:46:3b:4f:e7:2f:
6c:5d:3b:15:5b:59:0e:00:ea:11:39:b5:dd:62:29:
c6:fc:0a:4b:83:1d:3d:72:5c:d6:06:04:83:5e:59:
19:e1:d3:2b:11:65:ce:01:14:df:43:7f:48:ed:a0:
15:aa:b6:81:66:6a:58:77:f6:da:22:4d:36:d9:df:
a1:e0:72:97:e7:5d:6b:e8:b4:9e:a8:b0:e1:c6:0d:
61:5a:2c:f0:dc:8e:00:9d:98:aa:07:0b:71:78:10:
ba:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:04:72:97:0E:4E:43:C2:1C:09:82:A6:07:97:0E:16:20:53:F4:5D
X509v3 Authority Key Identifier:
keyid:82:1B:F6:E3:74:3A:02:CF:2B:A3:2A:F1:0D:FB:ED:F1:AF:D4:3A:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ghv243Q6As8royrxDfvt8a_UOqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/ghv243Q6As8royrxDfvt8a_UOqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/ghv243Q6As8royrxDfvt8a_UOqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:74:5c:47:0c:96:ec:72:b4:04:9b:73:d2:b6:46:01:2e:52:
ad:7e:55:5b:52:d0:18:36:99:07:a3:72:b2:e2:74:7f:7f:ab:
ce:3e:e8:d3:49:6c:4b:c4:7b:d9:31:ea:eb:b4:76:f9:6b:7a:
50:8e:44:a1:2b:66:f4:79:66:f6:32:4f:60:ad:66:3a:0e:27:
0e:02:12:98:c8:9b:dd:c3:24:e8:bf:3b:c1:ea:48:2a:67:03:
8f:31:3c:55:ed:4b:2f:a2:d7:98:c7:fd:1c:bb:1c:b3:14:e9:
81:0f:fa:48:ca:a5:9c:a4:2c:b4:e8:d6:dc:05:10:b0:b8:58:
5d:19:b2:e9:06:c5:90:c0:f3:b8:b3:75:84:78:52:a9:45:cc:
2e:c4:c3:2d:d5:0e:e6:4a:25:54:3c:64:c4:59:b9:29:a1:15:
a3:9e:e6:0e:d1:5f:26:57:dd:37:66:8f:9d:03:03:ee:9d:31:
5a:f7:7b:65:b6:26:6e:16:b9:ad:aa:78:2f:74:a2:ba:23:c0:
f4:90:b3:56:8d:d4:60:63:a1:81:ce:f5:dc:38:45:4d:4e:35:
e1:f5:74:01:e2:1a:c7:c9:0f:7f:ca:9b:c4:62:ac:b4:dd:06:
8e:1b:29:ce:12:da:ca:07:6c:12:4f:13:91:e2:6a:52:d6:00:
29:3f:4e:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:36:23 2026 by rpki-client