Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/2a7a18-8d4a-4e81-90a0-fbc026917f62/1/ghTcSLPpGeVc6BhNOpaQ0UklvL0.mft
File: ghTcSLPpGeVc6BhNOpaQ0UklvL0.mft (raw, json)
Hash identifier: zVVfiZL9h9BvQybLxBBHpromURDLq/Y2yeaWkPNFqA4=
Subject key identifier: 1D:84:7F:CE:48:AA:AD:54:6C:C8:FE:86:21:CD:C8:1B:35:21:3E:55
Authority key identifier: 82:14:DC:48:B3:E9:19:E5:5C:E8:18:4D:3A:96:90:D1:49:25:BC:BD
Certificate issuer: /CN=8214dc48b3e919e55ce8184d3a9690d14925bcbd
Certificate serial: 019DA29D26821D005C6887D194EC00013BCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ghTcSLPpGeVc6BhNOpaQ0UklvL0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/2a7a18-8d4a-4e81-90a0-fbc026917f62/1/ghTcSLPpGeVc6BhNOpaQ0UklvL0.mft
Manifest number: 0AAC
Signing time: Sat 18 Apr 2026 22:01:41 +0000
Manifest this update: Sat 18 Apr 2026 22:01:41 +0000
Manifest next update: Sun 19 Apr 2026 22:01:41 +0000
Files and hashes: 1: ghTcSLPpGeVc6BhNOpaQ0UklvL0.crl (hash: BKBeZkklPykauIoUlqYjo0VlWiLAhj7WYudTe/B5b+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/2a7a18-8d4a-4e81-90a0-fbc026917f62/1/ghTcSLPpGeVc6BhNOpaQ0UklvL0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/2a7a18-8d4a-4e81-90a0-fbc026917f62/1/ghTcSLPpGeVc6BhNOpaQ0UklvL0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ghTcSLPpGeVc6BhNOpaQ0UklvL0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 22:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a2:9d:26:82:1d:00:5c:68:87:d1:94:ec:00:01:3b:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8214dc48b3e919e55ce8184d3a9690d14925bcbd
Validity
Not Before: Apr 18 22:01:41 2026 GMT
Not After : Apr 19 22:01:41 2026 GMT
Subject: CN=1d847fce48aaad546cc8fe8621cdc81b35213e55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5e:9d:f5:45:b8:5b:86:50:a8:f5:25:48:ee:
15:87:cb:36:49:06:87:ca:ed:9f:a1:2b:8a:8e:90:
8a:75:1e:a0:05:74:72:d2:73:3d:40:af:05:09:5a:
2f:a4:7e:f6:30:da:6e:ef:5a:75:33:09:d8:be:6f:
95:29:c7:2a:fa:94:c7:55:87:28:e1:61:32:f8:63:
9f:a1:b7:81:bd:37:8e:5c:79:c4:f5:e3:1b:2f:47:
15:fc:4a:9f:fa:55:a0:3a:8a:49:40:b4:2e:81:8b:
4e:b8:15:5c:51:a2:ed:f2:31:5d:cd:d7:37:39:67:
7f:21:09:d4:2c:43:75:a5:ae:27:e4:ae:5d:f4:0e:
d6:b1:b1:f7:93:4d:f8:ba:2f:d5:23:7b:4c:a1:37:
64:af:4d:8f:64:e5:2b:46:c6:b9:21:d3:0e:b3:48:
5b:e3:78:74:f7:9d:c0:33:cb:07:49:66:35:53:6c:
5c:0d:9d:8b:2a:ec:0a:d2:0d:9c:27:b3:04:37:33:
39:27:43:12:9f:fd:ab:fa:06:a6:6f:1e:3b:fe:5e:
10:a4:31:6e:bd:69:43:18:d2:02:f7:76:25:47:ab:
a7:03:44:5b:7e:ab:a9:7c:7c:41:30:9d:88:97:4e:
20:b4:24:ff:87:57:af:7c:bd:98:f9:b5:ff:06:4a:
73:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:84:7F:CE:48:AA:AD:54:6C:C8:FE:86:21:CD:C8:1B:35:21:3E:55
X509v3 Authority Key Identifier:
keyid:82:14:DC:48:B3:E9:19:E5:5C:E8:18:4D:3A:96:90:D1:49:25:BC:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ghTcSLPpGeVc6BhNOpaQ0UklvL0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2a7a18-8d4a-4e81-90a0-fbc026917f62/1/ghTcSLPpGeVc6BhNOpaQ0UklvL0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2a7a18-8d4a-4e81-90a0-fbc026917f62/1/ghTcSLPpGeVc6BhNOpaQ0UklvL0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:e5:ea:30:06:1d:43:cf:15:f2:df:a1:45:94:07:c9:28:6d:
27:9f:b8:7d:5a:af:da:c7:1f:f7:b1:dc:73:b2:81:83:dd:2c:
fe:65:18:bf:15:38:83:ac:23:6d:83:ef:71:64:f1:cb:bc:8e:
e7:cf:24:ed:cc:c7:ad:a2:cf:44:e3:cf:dc:36:5f:98:39:86:
91:23:a2:cd:b2:fa:5b:2c:1f:e2:67:d1:dc:f0:d4:69:a6:fe:
f9:c9:8d:68:db:39:a5:79:c2:f6:7b:ad:77:de:b4:2a:ae:db:
4c:b9:ef:fc:cd:0f:7d:d3:57:c5:04:08:22:cf:f2:5c:9c:2b:
81:d7:db:b2:5d:0f:1f:9d:fc:af:ec:23:e3:2f:11:26:e1:41:
ca:95:68:48:85:47:1e:ea:d5:64:73:58:d2:d5:b8:23:16:10:
67:07:06:08:9c:23:2d:19:64:5c:4c:fd:16:87:c2:22:4b:1e:
9a:70:3b:b7:02:cb:fc:d9:19:ff:87:92:36:52:c5:b6:bd:c4:
fa:19:d3:64:33:14:66:58:97:c6:63:17:96:4d:b6:54:54:79:
36:16:81:da:c5:cd:ec:45:7d:e5:e9:17:7e:88:38:8f:f5:b9:
80:7b:4e:f3:f7:b7:52:35:7b:9e:33:fe:18:6f:a1:e9:17:76:
a9:50:f6:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:16:00 2026 by rpki-client