Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/2a7a18-8d4a-4e81-90a0-fbc026917f62/1/ghTcSLPpGeVc6BhNOpaQ0UklvL0.mft
File: ghTcSLPpGeVc6BhNOpaQ0UklvL0.mft (raw, json)
Hash identifier: pLrQgEL9OSbfyszN+gmrlpUBe/Y8YsN6etQmjtTKuDM=
Subject key identifier: 3B:EC:94:67:02:03:8B:00:BF:DB:B7:6C:A7:5B:B4:47:07:5A:43:EC
Authority key identifier: 82:14:DC:48:B3:E9:19:E5:5C:E8:18:4D:3A:96:90:D1:49:25:BC:BD
Certificate issuer: /CN=8214dc48b3e919e55ce8184d3a9690d14925bcbd
Certificate serial: 019CAB6BFD2EED2F93C82AEFF55A6780E199
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ghTcSLPpGeVc6BhNOpaQ0UklvL0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/2a7a18-8d4a-4e81-90a0-fbc026917f62/1/ghTcSLPpGeVc6BhNOpaQ0UklvL0.mft
Manifest number: 0A2C
Signing time: Sun 01 Mar 2026 22:01:46 +0000
Manifest this update: Sun 01 Mar 2026 22:01:46 +0000
Manifest next update: Mon 02 Mar 2026 22:01:46 +0000
Files and hashes: 1: ghTcSLPpGeVc6BhNOpaQ0UklvL0.crl (hash: sooiSQ6YlPUYbP1exeyKtYHd7FH0DpW/mx5wF1+6jSU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/2a7a18-8d4a-4e81-90a0-fbc026917f62/1/ghTcSLPpGeVc6BhNOpaQ0UklvL0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/2a7a18-8d4a-4e81-90a0-fbc026917f62/1/ghTcSLPpGeVc6BhNOpaQ0UklvL0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ghTcSLPpGeVc6BhNOpaQ0UklvL0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:fd:2e:ed:2f:93:c8:2a:ef:f5:5a:67:80:e1:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8214dc48b3e919e55ce8184d3a9690d14925bcbd
Validity
Not Before: Mar 1 22:01:46 2026 GMT
Not After : Mar 2 22:01:46 2026 GMT
Subject: CN=3bec946702038b00bfdbb76ca75bb447075a43ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:15:12:45:fd:42:74:7d:f0:77:b8:70:b7:27:
76:ca:df:89:27:17:58:8b:f0:e4:10:6f:50:71:75:
27:c3:68:2b:70:2e:91:41:6e:b2:87:ce:de:f4:06:
8a:f9:19:76:40:ad:0b:33:ee:12:c7:39:d9:29:8b:
7b:ed:51:c2:b7:8a:54:08:8d:48:fe:7a:b0:dd:ee:
c5:dd:5a:14:2e:64:1f:1c:1b:83:05:7d:f0:3a:3b:
99:19:3e:88:9b:b0:55:17:9b:6e:28:5e:df:f1:b6:
9c:82:0e:ae:83:5c:88:7d:b1:c8:7a:60:e4:16:d4:
cb:8a:e7:51:79:b7:c2:71:5a:44:cc:bd:37:bc:e9:
e7:c6:b2:ea:04:ca:1c:33:04:e4:83:cc:72:86:32:
95:b5:91:94:a0:e8:06:32:fd:4a:df:b2:a1:4a:1f:
59:33:b0:95:f5:67:b1:f8:8d:58:7e:1e:01:21:95:
fb:c4:ba:c1:28:63:14:25:12:f6:f6:12:64:fe:ce:
d6:ef:c9:00:bc:d7:f1:fb:91:c8:74:41:ae:b9:13:
4e:42:d1:80:d3:ff:e2:ea:5c:3e:32:c4:68:7c:07:
54:d9:02:ab:32:0f:ab:56:3d:ee:d1:0b:4c:78:2a:
54:7b:1a:1a:fe:19:2f:b8:08:af:17:d4:c3:5c:25:
bb:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:EC:94:67:02:03:8B:00:BF:DB:B7:6C:A7:5B:B4:47:07:5A:43:EC
X509v3 Authority Key Identifier:
keyid:82:14:DC:48:B3:E9:19:E5:5C:E8:18:4D:3A:96:90:D1:49:25:BC:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ghTcSLPpGeVc6BhNOpaQ0UklvL0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2a7a18-8d4a-4e81-90a0-fbc026917f62/1/ghTcSLPpGeVc6BhNOpaQ0UklvL0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2a7a18-8d4a-4e81-90a0-fbc026917f62/1/ghTcSLPpGeVc6BhNOpaQ0UklvL0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:be:92:c7:9d:0a:75:ae:4d:c7:e9:81:ce:17:e2:3b:fb:eb:
20:66:9b:ff:3a:78:aa:f8:22:9c:2d:75:02:8c:76:87:eb:a6:
5b:aa:7e:ec:47:3b:7b:68:6f:0b:a9:90:c7:54:cd:9b:a8:25:
ba:bd:1d:a3:e1:6c:1d:69:34:1d:8b:c7:92:63:dc:c0:f7:c6:
21:d2:0a:38:6b:9e:38:f7:60:28:43:57:4c:1f:af:ac:1d:9d:
13:fd:73:fb:32:f7:46:18:20:93:5a:3f:63:85:2f:93:59:4c:
52:9a:9e:51:65:d3:00:6e:ea:79:cb:04:98:b5:1d:1e:91:8c:
31:2f:f7:e8:81:71:a3:8b:8b:f2:ad:3a:01:2c:53:1c:e8:82:
2b:91:94:8f:8a:76:c2:14:7c:4a:07:df:b0:9d:47:9f:ff:b9:
f8:ab:ef:f7:66:51:e1:a1:82:81:6e:93:64:4b:20:cd:4c:84:
cb:8c:a0:95:63:71:07:d0:e9:1a:80:b2:1d:a4:60:27:0e:45:
e9:2c:b6:4a:72:15:a6:3b:a2:a8:d1:b2:29:23:e6:5c:f6:8b:
9f:c5:e8:c0:ed:a6:9c:4c:cc:d5:76:9f:84:de:b7:f2:fa:52:
ec:93:3b:07:be:fe:f7:3a:7a:f9:e4:83:32:78:6c:03:01:ea:
c1:05:6b:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:19:03 2026 by rpki-client