Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/GHvBuyhitXJX0p4NO9axztQz6hM.mft
File: GHvBuyhitXJX0p4NO9axztQz6hM.mft (raw, json)
Hash identifier: otCTvLJCpSKPD7CoFoorldGW3365QeguMSqbTTkYKmg=
Subject key identifier: 65:29:B0:B8:3B:43:F7:56:5D:C8:9E:BA:93:C5:78:19:08:67:FF:C8
Authority key identifier: 18:7B:C1:BB:28:62:B5:72:57:D2:9E:0D:3B:D6:B1:CE:D4:33:EA:13
Certificate issuer: /CN=187bc1bb2862b57257d29e0d3bd6b1ced433ea13
Certificate serial: 01A0C85809641840FCD37231C48CB1440500
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GHvBuyhitXJX0p4NO9axztQz6hM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/GHvBuyhitXJX0p4NO9axztQz6hM.mft
Manifest number: E1
Signing time: Tue 22 Sep 2026 09:00:07 +0000
Manifest this update: Tue 22 Sep 2026 09:00:07 +0000
Manifest next update: Wed 23 Sep 2026 09:00:07 +0000
Files and hashes: 1: GHvBuyhitXJX0p4NO9axztQz6hM.crl (hash: iDiow2xDvDPCXUXLzpG9FeyoesQ2ghhqKippLA12830=)
2: LUhM3H8lhONxGgoaXHEWfKhnz2Y.roa (hash: J7ufmJc4Z0JPmS7/Bpmv26Oq7u+qgxbzuIWPGLK6uo4=)
3: SFPLQXBEuitf9FRle3yJD2Tmikc.roa (hash: IrAXCvoBEciQQdZR3nxtSBV8+ab2Nq5ETilfM1Yg9CE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/GHvBuyhitXJX0p4NO9axztQz6hM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/GHvBuyhitXJX0p4NO9axztQz6hM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GHvBuyhitXJX0p4NO9axztQz6hM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 09:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:58:09:64:18:40:fc:d3:72:31:c4:8c:b1:44:05:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=187bc1bb2862b57257d29e0d3bd6b1ced433ea13
Validity
Not Before: Sep 22 09:00:07 2026 GMT
Not After : Sep 23 09:00:07 2026 GMT
Subject: CN=6529b0b83b43f7565dc89eba93c578190867ffc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ee:88:6a:29:62:52:9e:9d:ec:8c:cd:c7:5c:
02:9e:92:49:64:9a:ce:3e:7d:c7:50:ea:8a:48:25:
7f:1d:ed:a0:e0:5d:12:50:f0:f2:55:44:f5:4c:6f:
93:a6:35:86:2c:71:c5:92:73:79:6b:ab:83:a1:14:
52:c3:da:e5:c9:5a:58:48:e2:04:5f:b5:c3:ce:b5:
1b:92:7a:d4:1f:38:c8:90:d2:63:dc:7c:f8:6a:77:
8f:f7:4f:91:62:c8:10:f5:0a:ae:8b:3c:87:13:e7:
9d:5d:5b:ec:e6:a9:af:50:e9:b4:14:a6:35:54:5e:
fe:96:97:6d:11:c8:ec:8f:10:1c:2e:f6:fb:49:fa:
5b:5a:bd:b8:e7:a5:39:31:b7:20:24:2b:8c:1c:ae:
7a:43:77:bf:de:92:89:7c:31:47:d8:51:eb:66:02:
bd:9b:aa:11:43:59:5c:10:4c:0d:62:ae:2f:e2:47:
7b:31:9f:f7:15:d1:98:af:8d:f6:b6:f7:51:b8:e0:
58:68:c2:32:58:4c:f3:9e:12:39:62:23:cb:85:78:
b9:65:ab:e2:f9:7f:f6:93:9c:01:31:07:89:36:19:
02:18:47:6a:a5:08:f0:d9:00:ed:b4:32:9d:2b:89:
87:ec:3e:05:d1:ef:6d:c7:c7:e8:fb:c1:b7:72:ac:
25:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:29:B0:B8:3B:43:F7:56:5D:C8:9E:BA:93:C5:78:19:08:67:FF:C8
X509v3 Authority Key Identifier:
keyid:18:7B:C1:BB:28:62:B5:72:57:D2:9E:0D:3B:D6:B1:CE:D4:33:EA:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GHvBuyhitXJX0p4NO9axztQz6hM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/GHvBuyhitXJX0p4NO9axztQz6hM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/GHvBuyhitXJX0p4NO9axztQz6hM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:51:b5:f4:c5:e6:9b:fc:9b:1e:14:15:de:3a:d3:40:8d:da:
61:c5:19:de:17:db:84:80:ac:fc:0f:db:ee:ed:80:f6:e8:93:
0e:c2:c8:5c:95:51:28:1b:b9:ba:5d:fe:29:8a:b1:dc:14:27:
bd:93:00:00:76:4f:b9:c5:44:b6:2e:c5:ae:0d:62:20:1b:99:
70:d6:1c:45:8a:56:29:74:ee:e5:01:0e:0b:ca:f3:ea:98:23:
2d:42:14:ff:97:a8:89:90:17:72:8f:9f:59:b6:39:b8:7e:55:
03:65:1b:20:23:f0:fb:70:04:32:54:fc:a2:30:cf:20:b6:fa:
19:69:99:1a:17:54:21:f9:f1:ed:8b:3e:40:d1:ae:aa:43:ab:
65:59:ff:9e:64:2c:92:78:8a:ba:8e:ce:b2:c0:1e:99:79:e1:
7b:ad:79:0a:cc:25:17:37:51:0e:ff:bc:a2:53:f6:e7:fd:be:
15:90:23:3c:e9:e1:18:6b:ec:85:ee:35:ef:3a:79:db:b0:15:
2f:74:57:fc:bf:85:ee:c6:d6:c2:cd:f7:f0:0f:e7:16:70:3b:
f5:cb:fa:84:80:e2:e7:5e:73:bd:e6:52:27:51:62:b7:20:71:
b6:fe:9d:82:bb:1f:22:d8:df:c6:59:a0:a1:d4:31:a0:ea:5a:
9a:d8:ba:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:26:00 2026 by rpki-client