Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.mft
File: GKhKjkdfZgbnoS-SszDWPY-IC-A.mft (raw, json)
Hash identifier: zQHqG/3OmSx+l+Z/1OCFTW6YcJH7WghiFtMPumXF3tE=
Subject key identifier: 4D:5A:25:38:CA:B9:D1:09:8E:B5:2F:23:93:F3:C2:4F:AE:16:CE:2B
Authority key identifier: 18:A8:4A:8E:47:5F:66:06:E7:A1:2F:92:B3:30:D6:3D:8F:88:0B:E0
Certificate issuer: /CN=18a84a8e475f6606e7a12f92b330d63d8f880be0
Certificate serial: 01A12DD7959582C3E6402347BE160710785D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GKhKjkdfZgbnoS-SszDWPY-IC-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.mft
Manifest number: 12FA
Signing time: Mon 12 Oct 2026 02:01:05 +0000
Manifest this update: Mon 12 Oct 2026 02:01:05 +0000
Manifest next update: Tue 13 Oct 2026 02:01:05 +0000
Files and hashes: 1: 06yOpErAwfmu7WvZFdUTDOLYIKg.roa (hash: 5YYabp9k2b6WBw8sfF/NEk7pKY9/HTMuCCjJqa+bbeQ=)
2: Eu4BP5a5E95Q7p4k5RfhumyOrvk.roa (hash: 1lD5R4cJuPj/nZ60zfBHs9WvrZ5YRD+ZAX1KkvheAUY=)
3: GKhKjkdfZgbnoS-SszDWPY-IC-A.crl (hash: Ki+TI4tYdfqqJpke+wG+n7dpwGIvZYF9htVn9lch+Wg=)
4: Lz9HTbSY8lhhcxkrepciN8LQ0fQ.roa (hash: rZwlf03cUQC4V8ZoX8hCUb5cuhgy7zpkYtcAyoRPcgs=)
5: QGpEibgpEzzKHJ9Zq6TY1Hl8o-Y.roa (hash: +vRj62FE8yxCk1o/sYs/sodlZx7km+qb9MSzTq89XM4=)
6: ahZml9k3oIr290dwF6vuGRQYGMg.roa (hash: JIWiUU3hD62X9V1VtVd1M0m6Dubft4KBA0RK4vdkSeI=)
7: lnQm--gY8ePlCI161SZETEH7iss.roa (hash: vxrBUtHuyLV0LieoKDVoBuqAYfEuInf7kfLphmP99fg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/GKhKjkdfZgbnoS-SszDWPY-IC-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 22:49:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2d:d7:95:95:82:c3:e6:40:23:47:be:16:07:10:78:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18a84a8e475f6606e7a12f92b330d63d8f880be0
Validity
Not Before: Oct 12 02:01:05 2026 GMT
Not After : Oct 13 02:01:05 2026 GMT
Subject: CN=4d5a2538cab9d1098eb52f2393f3c24fae16ce2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:08:27:98:d8:ea:4e:f4:b4:19:f7:9a:97:4d:
67:56:7a:f3:88:96:bb:73:2d:07:21:7e:67:1b:bd:
dc:5c:9f:65:05:cf:a6:b0:a7:1b:01:cd:4a:6f:79:
b5:d9:47:18:9b:71:7d:1b:e5:bf:a3:b0:9d:3b:34:
4b:49:9b:28:08:0c:c4:22:df:92:4d:cc:a8:29:64:
24:ee:2a:bf:57:a5:46:50:fa:39:1e:cd:0f:24:42:
79:46:3a:0d:c4:4d:ba:64:4a:d3:44:2a:e7:77:aa:
08:ec:db:2e:c9:bc:5b:00:20:a0:1b:60:36:e8:5e:
ae:09:db:82:57:3b:c9:8e:bc:16:43:89:e4:b4:a6:
ce:f2:d1:e6:5c:15:66:14:f4:87:61:5b:eb:f5:fa:
4d:88:d9:f5:7a:99:05:d6:ce:3a:d0:83:83:ac:95:
fe:a8:4a:cd:ec:f6:36:c7:ae:ad:d5:fb:24:0c:8a:
1b:f0:1d:a7:69:96:02:64:61:c7:17:5f:08:b1:55:
44:72:6c:0d:57:ed:03:88:c1:ad:38:f8:f1:d2:33:
bd:eb:72:da:02:61:3e:62:ba:79:77:30:2e:e1:4f:
1e:38:f0:5e:37:c5:21:fa:65:38:49:e3:96:05:23:
03:dd:8b:13:c1:1c:9a:b2:2e:92:00:07:ee:99:13:
4c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:5A:25:38:CA:B9:D1:09:8E:B5:2F:23:93:F3:C2:4F:AE:16:CE:2B
X509v3 Authority Key Identifier:
keyid:18:A8:4A:8E:47:5F:66:06:E7:A1:2F:92:B3:30:D6:3D:8F:88:0B:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GKhKjkdfZgbnoS-SszDWPY-IC-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:c5:64:b0:9b:30:0e:06:b4:ce:61:23:3b:0f:47:b1:f5:c9:
33:66:cb:01:61:eb:d6:7f:e8:75:af:b2:e1:3b:6b:5b:f6:ef:
cf:61:34:f7:5b:c3:08:64:3f:9d:c6:4a:f0:0d:de:39:18:fc:
12:c5:df:2c:bf:4d:be:86:30:4f:bb:6d:98:aa:6f:22:c0:f8:
66:b5:dc:18:84:a5:a9:7a:69:bd:7b:90:94:1f:fb:67:72:fd:
b2:5f:61:d3:a4:22:3b:70:27:77:1e:a2:90:5e:5f:c8:81:81:
6f:fb:ca:2b:6d:cf:ef:c1:d7:35:93:18:57:f5:68:82:c2:02:
3f:92:3f:5d:3f:19:53:e1:e9:02:bb:26:71:b8:c0:43:79:d5:
10:68:bc:4d:cb:9b:d1:a8:96:82:48:81:93:22:cd:7f:d3:63:
47:71:5c:94:93:fd:67:89:3b:ca:07:8d:6c:59:9d:9f:16:c5:
b2:5b:66:dc:1f:fb:2a:c6:f6:a6:00:8e:51:df:df:df:7e:ce:
22:ea:dd:ab:ed:fa:1c:fa:4d:76:fb:8d:94:53:2f:b8:f4:25:
6d:49:70:db:18:2b:26:62:ec:87:58:47:03:35:54:d2:33:c5:
c1:76:5d:98:8a:cc:56:a6:fb:0d:f9:6f:d0:a4:b7:2c:10:25:
33:73:1f:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 04:50:51 2026 by rpki-client