Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/698bec-a0f0-42f7-99fa-28516bb7505c/1/GHpwT0heEd7avFYmTl2AwUh-CEI.mft
File: GHpwT0heEd7avFYmTl2AwUh-CEI.mft (raw, json)
Hash identifier: SPC550/YDXSijunw9mN4MGKSkHq3bSsoCIlr6L4FgGc=
Subject key identifier: 46:58:E3:91:C3:6F:4E:0D:0F:18:FB:21:3E:14:48:FB:5F:A2:38:2C
Authority key identifier: 18:7A:70:4F:48:5E:11:DE:DA:BC:56:26:4E:5D:80:C1:48:7E:08:42
Certificate issuer: /CN=187a704f485e11dedabc56264e5d80c1487e0842
Certificate serial: 019FAABEC9B3034454E0FB593AF6866292C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GHpwT0heEd7avFYmTl2AwUh-CEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/698bec-a0f0-42f7-99fa-28516bb7505c/1/GHpwT0heEd7avFYmTl2AwUh-CEI.mft
Manifest number: 0511
Signing time: Tue 28 Jul 2026 22:00:57 +0000
Manifest this update: Tue 28 Jul 2026 22:00:57 +0000
Manifest next update: Wed 29 Jul 2026 22:00:57 +0000
Files and hashes: 1: AEpkQkkfLG6rJm7NAyWlaxt2CMs.roa (hash: /9I8pIAZhjtu6FrEBop1PE7UbloCJoFogvxN2q8jOmU=)
2: GHpwT0heEd7avFYmTl2AwUh-CEI.crl (hash: PwYk+cPtKFuNm7QFeun+V5y+A52+sdSfit0KA7DpMlA=)
3: aEnZIoEJkStf77dfAjgVbuSXis0.asa (hash: BGS53pukSEt/CRgtLVvrNUv1d2Wx94sdd8l5xlNSNcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/698bec-a0f0-42f7-99fa-28516bb7505c/1/GHpwT0heEd7avFYmTl2AwUh-CEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/698bec-a0f0-42f7-99fa-28516bb7505c/1/GHpwT0heEd7avFYmTl2AwUh-CEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GHpwT0heEd7avFYmTl2AwUh-CEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:c9:b3:03:44:54:e0:fb:59:3a:f6:86:62:92:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=187a704f485e11dedabc56264e5d80c1487e0842
Validity
Not Before: Jul 28 22:00:57 2026 GMT
Not After : Jul 29 22:00:57 2026 GMT
Subject: CN=4658e391c36f4e0d0f18fb213e1448fb5fa2382c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b5:a9:49:2b:7b:c4:10:4b:1f:cf:71:3b:11:
81:41:cf:cf:c5:d6:29:1d:1b:46:8f:1d:29:cd:6c:
5f:6c:ac:ca:c7:47:a2:e9:9f:dd:44:c5:3a:e1:14:
83:03:d3:b2:a7:bc:c0:e3:ea:32:41:c5:2d:3d:58:
95:63:6d:60:91:17:61:5f:92:a7:9d:ed:56:b0:61:
4e:de:59:ae:98:64:d4:25:19:ae:40:95:ca:5d:fb:
49:d1:d7:b8:ed:75:86:53:94:40:de:79:e7:c8:67:
cc:87:dc:0d:6a:e8:c8:c6:64:86:23:ca:50:50:5e:
a5:df:a4:b5:63:a6:c0:2a:44:cf:45:f2:60:74:d5:
da:39:c4:a6:86:4e:a2:0e:29:a4:38:5b:38:4f:d1:
c9:b5:9c:a3:33:cd:be:3b:f6:0f:d6:c3:4c:06:3b:
4a:39:2e:27:bd:76:76:d6:a4:88:eb:e6:ac:7e:2c:
78:a5:0c:fa:97:1f:cb:22:23:33:1a:e7:60:54:a0:
22:26:b2:95:3f:3a:b2:32:6a:f8:b4:7f:5e:21:5c:
64:7a:b6:eb:b5:db:63:be:e1:5d:d1:03:b8:cf:1a:
67:a3:10:a7:c7:41:63:4b:4f:92:64:f3:a5:f8:25:
56:db:d2:34:dc:14:0e:6c:a5:01:b6:27:99:db:3f:
3a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:58:E3:91:C3:6F:4E:0D:0F:18:FB:21:3E:14:48:FB:5F:A2:38:2C
X509v3 Authority Key Identifier:
keyid:18:7A:70:4F:48:5E:11:DE:DA:BC:56:26:4E:5D:80:C1:48:7E:08:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GHpwT0heEd7avFYmTl2AwUh-CEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/698bec-a0f0-42f7-99fa-28516bb7505c/1/GHpwT0heEd7avFYmTl2AwUh-CEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/698bec-a0f0-42f7-99fa-28516bb7505c/1/GHpwT0heEd7avFYmTl2AwUh-CEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:56:27:8e:e5:c9:3b:e6:78:bc:fa:ca:84:99:ef:f0:40:72:
6e:ea:2b:0f:50:b8:03:0a:30:d3:cc:f6:e6:df:85:f8:6d:a2:
c9:35:73:51:f4:aa:89:84:8e:56:ab:37:6a:8d:7a:00:a7:99:
dc:b5:28:4b:60:6b:af:24:3e:70:14:9c:19:0c:32:2d:76:b3:
a4:04:78:78:dd:8f:a1:68:27:bb:6b:b2:fb:c2:46:3b:80:86:
b6:6e:33:b7:b5:24:7e:78:bf:12:4c:dc:8f:59:a8:85:40:4f:
87:10:f7:74:e4:82:de:57:ad:94:c0:3f:1e:48:68:03:72:7e:
11:2e:d9:2c:93:66:9b:50:6e:4c:a5:69:4c:2c:47:02:3c:61:
47:a3:dd:c5:cb:83:6f:ff:33:87:66:5e:d0:af:7f:98:74:ff:
49:51:0d:b0:b5:af:53:dc:75:1a:98:f8:56:e0:56:3d:26:72:
9a:7f:fe:5f:1c:51:49:0a:30:a9:45:67:48:64:c6:0d:e7:bb:
ab:db:2a:d6:2b:18:01:e3:23:05:c2:e2:8b:d6:5f:38:04:0a:
67:47:30:ed:29:2a:ef:18:0d:a8:3a:ef:ac:2f:fb:cb:b6:db:
66:09:60:13:39:12:9c:98:6a:df:e8:c0:a7:bf:50:5f:e6:12:
f5:68:a9:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:26:41 2026 by rpki-client