Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/GHvBuyhitXJX0p4NO9axztQz6hM.mft
File: GHvBuyhitXJX0p4NO9axztQz6hM.mft (raw, json)
Hash identifier: L+UIGm6I+I6yGusZQmf+CM8tyChy8gncP/UJusYYiGU=
Subject key identifier: 54:7D:BF:9F:E9:04:42:2E:B7:35:2F:C4:76:43:60:6C:79:8F:9B:55
Authority key identifier: 18:7B:C1:BB:28:62:B5:72:57:D2:9E:0D:3B:D6:B1:CE:D4:33:EA:13
Certificate issuer: /CN=187bc1bb2862b57257d29e0d3bd6b1ced433ea13
Certificate serial: 019FAC7622F1FE5FF0AD454EC0368AF7C995
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GHvBuyhitXJX0p4NO9axztQz6hM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/GHvBuyhitXJX0p4NO9axztQz6hM.mft
Manifest number: 4E
Signing time: Wed 29 Jul 2026 06:00:50 +0000
Manifest this update: Wed 29 Jul 2026 06:00:50 +0000
Manifest next update: Thu 30 Jul 2026 06:00:50 +0000
Files and hashes: 1: GHvBuyhitXJX0p4NO9axztQz6hM.crl (hash: +ClQtLInYbd2NwDYlqwZ6014mjY78gs129uT592yhmQ=)
2: LUhM3H8lhONxGgoaXHEWfKhnz2Y.roa (hash: J7ufmJc4Z0JPmS7/Bpmv26Oq7u+qgxbzuIWPGLK6uo4=)
3: SFPLQXBEuitf9FRle3yJD2Tmikc.roa (hash: IrAXCvoBEciQQdZR3nxtSBV8+ab2Nq5ETilfM1Yg9CE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/GHvBuyhitXJX0p4NO9axztQz6hM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/GHvBuyhitXJX0p4NO9axztQz6hM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GHvBuyhitXJX0p4NO9axztQz6hM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:76:22:f1:fe:5f:f0:ad:45:4e:c0:36:8a:f7:c9:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=187bc1bb2862b57257d29e0d3bd6b1ced433ea13
Validity
Not Before: Jul 29 06:00:50 2026 GMT
Not After : Jul 30 06:00:50 2026 GMT
Subject: CN=547dbf9fe904422eb7352fc47643606c798f9b55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ac:a9:99:49:2f:cc:fd:77:0f:44:db:03:1d:
78:5b:2b:18:84:a8:c8:96:74:93:82:b8:b0:39:03:
81:18:df:88:56:41:de:fe:54:34:37:0f:27:44:40:
4f:ab:b3:f1:d3:98:f3:cb:aa:23:3c:50:de:d7:2a:
79:a1:c9:f5:49:d5:41:96:3e:44:07:36:ae:7f:91:
21:e9:ff:05:95:5b:69:8a:06:f2:1d:f9:32:db:b2:
b9:27:b5:4b:4c:d5:16:4e:11:56:f5:0f:14:62:2c:
ef:1b:1d:ec:bb:ab:44:5a:fc:99:5d:8d:e6:25:82:
98:bc:d7:fb:94:ab:ad:fa:ef:99:28:52:42:50:33:
8a:7b:36:c4:a5:81:5a:71:f9:28:3e:fe:ae:2d:af:
54:65:c2:ad:bc:f6:f0:35:6e:4a:55:bc:51:f5:55:
73:58:31:9b:3c:0d:cd:79:2a:35:42:75:84:b8:2e:
23:8b:22:f2:15:46:bf:a6:62:8e:0c:0b:c0:53:37:
ca:5a:b4:67:1e:a3:3e:0c:9e:55:dc:69:41:cd:1e:
ea:82:90:ad:ac:1e:1b:8e:60:ba:c3:06:b8:74:1c:
ed:a5:e6:98:d4:90:b9:e9:16:56:a2:4c:48:16:71:
d9:ef:80:38:7f:08:ba:ed:b3:8a:a2:86:76:59:dc:
12:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:7D:BF:9F:E9:04:42:2E:B7:35:2F:C4:76:43:60:6C:79:8F:9B:55
X509v3 Authority Key Identifier:
keyid:18:7B:C1:BB:28:62:B5:72:57:D2:9E:0D:3B:D6:B1:CE:D4:33:EA:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GHvBuyhitXJX0p4NO9axztQz6hM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/GHvBuyhitXJX0p4NO9axztQz6hM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/GHvBuyhitXJX0p4NO9axztQz6hM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:60:87:48:0e:1a:da:2c:fb:90:49:fa:31:85:32:ee:78:df:
19:7c:ab:24:af:e2:6d:e2:a6:4a:d6:1b:bb:5b:44:f6:0c:85:
e4:6b:d4:22:d6:42:fd:29:d3:e2:97:74:21:60:92:5a:c5:ba:
d7:60:46:39:1b:7b:0a:99:a6:ca:6b:48:a2:b4:43:bd:3b:7a:
93:12:4f:2a:a9:82:34:e7:db:5b:7f:a6:ba:ac:8d:9f:95:cb:
91:68:39:6b:7a:0a:1d:a3:27:13:2a:e0:f2:96:a4:2c:e5:4a:
7d:b7:56:53:0a:26:19:7a:53:43:71:95:c7:35:51:13:2a:08:
28:67:6e:b8:88:92:6a:2b:3c:ff:44:39:85:4e:80:cf:52:65:
14:a9:02:2d:5a:24:22:7e:13:57:98:e8:65:da:e1:17:90:ab:
bd:ed:42:1a:4e:f4:56:e9:d2:fd:e8:cc:a1:a9:03:4a:f1:72:
7d:cb:07:f8:99:f3:67:36:42:a8:bc:9f:16:ed:81:79:c0:86:
ee:4b:fb:9b:95:b0:69:ec:1b:aa:9f:47:a3:2a:9a:23:63:d4:
b5:fb:47:c8:99:8e:dd:de:e0:94:40:79:0d:0f:aa:bd:34:ba:
c8:ab:af:0b:ed:68:b0:0e:30:b3:94:e0:af:d4:57:12:8c:10:
bd:de:56:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:22:10 2026 by rpki-client