Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.mft
File: GKhKjkdfZgbnoS-SszDWPY-IC-A.mft (raw, json)
Hash identifier: 9t5qRPolfukV1/uvnEWWQLw37n1Oq+kYj7cpODHpgTo=
Subject key identifier: D6:1E:A6:CE:A1:48:BD:0C:78:DD:84:20:63:28:90:19:45:A2:56:0C
Authority key identifier: 18:A8:4A:8E:47:5F:66:06:E7:A1:2F:92:B3:30:D6:3D:8F:88:0B:E0
Certificate issuer: /CN=18a84a8e475f6606e7a12f92b330d63d8f880be0
Certificate serial: 019FAC08FCA56F0C21EDDE69FBC7DAB58A87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GKhKjkdfZgbnoS-SszDWPY-IC-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.mft
Manifest number: 1232
Signing time: Wed 29 Jul 2026 04:01:37 +0000
Manifest this update: Wed 29 Jul 2026 04:01:37 +0000
Manifest next update: Thu 30 Jul 2026 04:01:37 +0000
Files and hashes: 1: 06yOpErAwfmu7WvZFdUTDOLYIKg.roa (hash: 5YYabp9k2b6WBw8sfF/NEk7pKY9/HTMuCCjJqa+bbeQ=)
2: Eu4BP5a5E95Q7p4k5RfhumyOrvk.roa (hash: 1lD5R4cJuPj/nZ60zfBHs9WvrZ5YRD+ZAX1KkvheAUY=)
3: GKhKjkdfZgbnoS-SszDWPY-IC-A.crl (hash: jPK1ODwe2NWDjfg0c+KapANB7bJ6SWv9aexvUrv3IzA=)
4: Lz9HTbSY8lhhcxkrepciN8LQ0fQ.roa (hash: rZwlf03cUQC4V8ZoX8hCUb5cuhgy7zpkYtcAyoRPcgs=)
5: QGpEibgpEzzKHJ9Zq6TY1Hl8o-Y.roa (hash: +vRj62FE8yxCk1o/sYs/sodlZx7km+qb9MSzTq89XM4=)
6: ahZml9k3oIr290dwF6vuGRQYGMg.roa (hash: JIWiUU3hD62X9V1VtVd1M0m6Dubft4KBA0RK4vdkSeI=)
7: lnQm--gY8ePlCI161SZETEH7iss.roa (hash: vxrBUtHuyLV0LieoKDVoBuqAYfEuInf7kfLphmP99fg=)
8: mb8r9vp3wM6oJLJdPmkNlWrgKtE.roa (hash: Xrfg/Aqkw9N5mVtt/uYm1yP5BsOe0X4pZfMOzaQDicg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/GKhKjkdfZgbnoS-SszDWPY-IC-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:08:fc:a5:6f:0c:21:ed:de:69:fb:c7:da:b5:8a:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18a84a8e475f6606e7a12f92b330d63d8f880be0
Validity
Not Before: Jul 29 04:01:37 2026 GMT
Not After : Jul 30 04:01:37 2026 GMT
Subject: CN=d61ea6cea148bd0c78dd84206328901945a2560c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:78:1d:13:0e:54:bd:c0:80:0e:bb:ef:43:c8:
e4:1d:8c:c4:f1:6b:5c:ac:69:d1:ac:7f:dc:08:ed:
f5:89:9c:bc:d2:3c:b9:58:57:46:15:33:18:4c:fd:
5d:78:70:4c:6c:5c:85:98:f5:e4:9a:1d:8d:22:67:
f7:cd:62:73:f7:2c:0d:4c:7a:81:b3:65:af:6a:22:
96:08:6b:a7:e6:62:27:02:1e:9e:f6:24:07:1a:0e:
ef:25:a3:88:e5:a9:db:cf:27:34:0f:8f:fd:64:7b:
8b:09:68:6a:3f:0c:1b:87:9f:7c:07:7d:05:70:33:
00:44:43:f1:2c:d6:e6:76:c4:13:63:c9:35:be:01:
4c:2a:8d:ec:06:85:13:8e:52:89:17:2c:cb:c6:94:
90:15:07:0c:20:53:bc:a7:a6:d6:4c:59:5a:38:85:
d3:18:69:94:1f:ce:e2:c5:ef:6b:11:1a:15:27:b0:
54:58:eb:60:4a:74:f6:3d:1e:5b:5c:a5:48:20:da:
51:be:16:4e:b9:15:78:7e:a9:0e:00:76:e0:9d:9a:
c7:fb:e3:0c:5a:f1:5a:87:d0:a4:56:6e:3f:74:ef:
3d:3d:79:10:4a:e7:68:c5:a7:d7:93:df:21:d8:6c:
98:b8:14:ed:9f:8d:96:85:2e:97:17:94:df:07:ce:
8b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:1E:A6:CE:A1:48:BD:0C:78:DD:84:20:63:28:90:19:45:A2:56:0C
X509v3 Authority Key Identifier:
keyid:18:A8:4A:8E:47:5F:66:06:E7:A1:2F:92:B3:30:D6:3D:8F:88:0B:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GKhKjkdfZgbnoS-SszDWPY-IC-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:40:48:b9:8f:f2:c2:6f:19:b2:02:39:40:56:bb:79:f5:5a:
fa:2e:8b:35:26:03:9f:59:0a:08:5e:aa:dd:22:ca:d2:01:a6:
b0:9b:1d:9c:57:53:a6:fa:a1:0c:be:cf:3b:d3:25:8d:bc:96:
27:bf:29:ab:5c:69:38:8b:85:6d:d6:9c:39:bc:b5:bc:c0:e8:
f4:a4:71:da:47:7c:f5:ae:8d:3d:0e:a1:09:68:4c:a5:69:04:
6d:6d:06:db:7d:41:b1:56:4b:25:5c:20:9e:ed:96:5d:5d:20:
ba:5e:fb:1f:76:41:56:74:bf:89:30:9a:7e:ad:7a:b2:56:a3:
6e:78:37:b9:ac:94:cc:ca:22:74:6e:4d:8d:83:49:1c:29:c9:
31:04:1b:58:00:c6:70:49:c8:43:e1:36:07:7b:f9:8a:0a:c8:
4f:be:31:dc:1d:7c:56:8b:67:d3:a6:8a:de:3c:77:0f:13:e8:
44:f1:2f:e9:29:30:da:e3:4c:91:7d:26:66:f2:cb:7a:3b:58:
91:ad:9d:33:90:a3:1a:ad:f2:d0:d3:e3:38:b2:a0:ad:fb:75:
8c:43:42:09:68:53:ac:5d:ae:8c:01:f7:f2:8d:18:18:c0:66:
07:91:b2:65:df:24:01:4a:06:de:ab:27:69:51:e4:58:64:da:
96:e3:ec:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+sCPylbwwh7d5p+8fatYqHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4YTg0YThlNDc1ZjY2MDZlN2ExMmY5MmIzMzBkNjNkOGY4
ODBiZTAwHhcNMjYwNzI5MDQwMTM3WhcNMjYwNzMwMDQwMTM3WjAzMTEwLwYDVQQD
EyhkNjFlYTZjZWExNDhiZDBjNzhkZDg0MjA2MzI4OTAxOTQ1YTI1NjBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXgdEw5UvcCADrvvQ8jkHYzE8Wtc
rGnRrH/cCO31iZy80jy5WFdGFTMYTP1deHBMbFyFmPXkmh2NImf3zWJz9ywNTHqB
s2WvaiKWCGun5mInAh6e9iQHGg7vJaOI5anbzyc0D4/9ZHuLCWhqPwwbh598B30F
cDMAREPxLNbmdsQTY8k1vgFMKo3sBoUTjlKJFyzLxpSQFQcMIFO8p6bWTFlaOIXT
GGmUH87ixe9rERoVJ7BUWOtgSnT2PR5bXKVIINpRvhZOuRV4fqkOAHbgnZrH++MM
WvFah9CkVm4/dO89PXkQSudoxafXk98h2GyYuBTtn42WhS6XF5TfB86LLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNYeps6hSL0MeN2EIGMokBlFolYMMB8GA1UdIwQY
MBaAFBioSo5HX2YG56EvkrMw1j2PiAvgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0toS2prZGZaZ2Jub1MtU3N6RFdQWS1JQy1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC84OTJhMjctZmRiNi00Mjg1LTgyOWEt
ODdmNWI2NDc5ZDFlLzEvR0toS2prZGZaZ2Jub1MtU3N6RFdQWS1JQy1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC84OTJhMjctZmRiNi00Mjg1LTgyOWEtODdmNWI2NDc5ZDFl
LzEvR0toS2prZGZaZ2Jub1MtU3N6RFdQWS1JQy1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhEBIuY/y
wm8ZsgI5QFa7efVa+i6LNSYDn1kKCF6q3SLK0gGmsJsdnFdTpvqhDL7PO9MljbyW
J78pq1xpOIuFbdacOby1vMDo9KRx2kd89a6NPQ6hCWhMpWkEbW0G231BsVZLJVwg
nu2WXV0gul77H3ZBVnS/iTCafq16slajbng3uayUzMoidG5NjYNJHCnJMQQbWADG
cEnIQ+E2B3v5igrIT74x3B18Votn06aK3jx3DxPoRPEv6Skw2uNMkX0mZvLLejtY
ka2dM5CjGq3y0NPjOLKgrft1jENCCWhTrF2ujAH38o0YGMBmB5GyZd8kAUoG3qsn
aVHkWGTaluPsfQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 07:22:19 2026 by rpki-client