Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/698bec-a0f0-42f7-99fa-28516bb7505c/1/GHpwT0heEd7avFYmTl2AwUh-CEI.mft
File: GHpwT0heEd7avFYmTl2AwUh-CEI.mft (raw, json)
Hash identifier: vSCYRO8Zy6e82WoExYd+eHsLbX/p1D6LMDx+0BtLhys=
Subject key identifier: F7:FC:10:3D:F0:4D:A2:FA:EB:13:90:CC:CF:A9:40:6B:70:70:F7:07
Authority key identifier: 18:7A:70:4F:48:5E:11:DE:DA:BC:56:26:4E:5D:80:C1:48:7E:08:42
Certificate issuer: /CN=187a704f485e11dedabc56264e5d80c1487e0842
Certificate serial: 01A0CA7D72CCAEC803F63566C11E539F7FC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GHpwT0heEd7avFYmTl2AwUh-CEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/698bec-a0f0-42f7-99fa-28516bb7505c/1/GHpwT0heEd7avFYmTl2AwUh-CEI.mft
Manifest number: 05A6
Signing time: Tue 22 Sep 2026 19:00:13 +0000
Manifest this update: Tue 22 Sep 2026 19:00:13 +0000
Manifest next update: Wed 23 Sep 2026 19:00:13 +0000
Files and hashes: 1: AEpkQkkfLG6rJm7NAyWlaxt2CMs.roa (hash: /9I8pIAZhjtu6FrEBop1PE7UbloCJoFogvxN2q8jOmU=)
2: GHpwT0heEd7avFYmTl2AwUh-CEI.crl (hash: NGm7y7p3uO74pbKFu5yuMQPte4vdUqoxhoji8dpnthc=)
3: aEnZIoEJkStf77dfAjgVbuSXis0.asa (hash: BGS53pukSEt/CRgtLVvrNUv1d2Wx94sdd8l5xlNSNcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/698bec-a0f0-42f7-99fa-28516bb7505c/1/GHpwT0heEd7avFYmTl2AwUh-CEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/698bec-a0f0-42f7-99fa-28516bb7505c/1/GHpwT0heEd7avFYmTl2AwUh-CEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GHpwT0heEd7avFYmTl2AwUh-CEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 19:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:7d:72:cc:ae:c8:03:f6:35:66:c1:1e:53:9f:7f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=187a704f485e11dedabc56264e5d80c1487e0842
Validity
Not Before: Sep 22 19:00:13 2026 GMT
Not After : Sep 23 19:00:13 2026 GMT
Subject: CN=f7fc103df04da2faeb1390cccfa9406b7070f707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1e:8d:99:9c:65:ce:47:0e:c7:e0:81:f0:19:
49:bf:14:83:71:d3:40:d4:b8:b2:7c:76:97:cf:66:
2c:7e:a3:85:5e:2e:36:81:f6:31:f6:0f:1f:d8:34:
a6:6b:2b:51:1f:90:cc:3d:16:17:e0:99:c1:c0:1c:
72:20:c2:df:35:ba:c8:83:6b:e1:e2:ec:d9:d2:c6:
7a:24:62:8a:f8:dd:26:da:90:7c:fb:c7:74:12:11:
17:b7:0e:15:ba:a9:32:2b:ed:b6:40:83:f5:ee:8d:
8f:1e:9c:c1:b0:fa:2a:82:b7:8a:4f:95:41:ca:c8:
5e:9f:1a:99:f2:88:1b:12:dc:fa:af:a8:31:25:38:
52:e2:11:62:68:89:f7:71:d2:f4:5f:90:1d:f9:12:
c2:0e:92:e6:a0:cb:f0:a9:75:7f:6a:2f:16:9f:f4:
b0:ab:23:2b:3a:84:f3:a9:b5:fc:07:9b:c5:ba:54:
c8:68:e2:b8:3c:45:0c:c2:16:ee:66:a0:ea:42:f7:
4d:ff:5c:2c:f1:dd:1d:da:f8:e5:02:13:f0:10:c0:
2c:66:ac:35:bf:62:95:e9:0e:76:54:f2:19:ba:fd:
16:90:a8:5f:5f:c5:41:44:2e:6d:c5:97:da:3b:e3:
57:c9:bc:40:bb:6a:65:c1:d3:0e:44:f9:cf:c3:d9:
7a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:FC:10:3D:F0:4D:A2:FA:EB:13:90:CC:CF:A9:40:6B:70:70:F7:07
X509v3 Authority Key Identifier:
keyid:18:7A:70:4F:48:5E:11:DE:DA:BC:56:26:4E:5D:80:C1:48:7E:08:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GHpwT0heEd7avFYmTl2AwUh-CEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/698bec-a0f0-42f7-99fa-28516bb7505c/1/GHpwT0heEd7avFYmTl2AwUh-CEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/698bec-a0f0-42f7-99fa-28516bb7505c/1/GHpwT0heEd7avFYmTl2AwUh-CEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:fa:80:77:e8:e5:f0:8f:dc:2a:42:73:dc:95:cb:f4:81:d5:
86:50:b9:ea:16:97:0f:db:08:d4:fd:d5:3c:10:f2:24:86:57:
80:41:3c:e1:0e:3f:cb:4a:f2:20:3e:de:8c:5c:86:aa:ef:17:
9f:77:bd:ff:4b:39:a9:f9:52:57:a6:36:56:bf:99:0c:fe:79:
2c:8b:60:62:29:9e:37:0e:21:aa:97:0d:3a:e4:d5:38:96:05:
8e:fa:01:02:b7:22:33:f3:0b:a4:6b:55:22:be:28:06:11:ef:
4a:3d:dc:10:21:77:c2:fe:c6:f8:79:72:d7:cb:e2:c3:5c:bc:
dd:76:8f:94:95:cb:e1:4f:89:f2:6b:3f:b3:72:34:94:ed:e8:
b5:f8:cd:04:7c:a9:e8:52:b5:b2:6e:69:59:b2:d7:d8:50:4b:
c3:e4:ee:fa:64:4c:ee:16:e1:41:7b:3b:c7:af:ee:7c:35:4d:
95:7b:d1:60:1c:3c:5d:55:9d:28:2d:0c:8a:d1:22:d7:2e:6c:
88:30:d3:f3:4d:62:76:d4:9a:85:b8:c4:fa:c5:65:cd:38:08:
a9:63:b9:b2:2d:f7:ad:1a:f6:de:0a:dc:e2:71:75:ef:4a:f3:
7a:94:4a:0e:a8:8c:2d:87:b2:5b:a5:3e:26:42:28:7e:d5:92:
a3:08:4a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:23:34 2026 by rpki-client