Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/e076dc-10d8-44cc-8aa5-5a94ad133118/1/gh9un_H7vyH2QToTfnNn3YqMA1w.mft
File: gh9un_H7vyH2QToTfnNn3YqMA1w.mft (raw, json)
Hash identifier: ScMGtjKlRoh1Fc6XpLMfk9hc95KKFLWjLGBpylN/btg=
Subject key identifier: D7:7A:CC:D1:4E:5D:14:AB:29:82:71:B1:21:8E:69:60:F7:5D:96:65
Authority key identifier: 82:1F:6E:9F:F1:FB:BF:21:F6:41:3A:13:7E:73:67:DD:8A:8C:03:5C
Certificate issuer: /CN=821f6e9ff1fbbf21f6413a137e7367dd8a8c035c
Certificate serial: 019CAE3560A374DC148DEB4472B0C968F894
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gh9un_H7vyH2QToTfnNn3YqMA1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/e076dc-10d8-44cc-8aa5-5a94ad133118/1/gh9un_H7vyH2QToTfnNn3YqMA1w.mft
Manifest number: 108A
Signing time: Mon 02 Mar 2026 11:00:59 +0000
Manifest this update: Mon 02 Mar 2026 11:00:59 +0000
Manifest next update: Tue 03 Mar 2026 11:00:59 +0000
Files and hashes: 1: gh9un_H7vyH2QToTfnNn3YqMA1w.crl (hash: ap6dSQbkn5jtzp6/UVGVfvmWLDRkGedULhjYf39XO20=)
2: lHeFeB5XmUgMTZd-xp7pg5O2hRk.roa (hash: yDjRb/PwiyZiL5zE1UM9tbqgd31//MiOL1EvDdOA92U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/e076dc-10d8-44cc-8aa5-5a94ad133118/1/gh9un_H7vyH2QToTfnNn3YqMA1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/e076dc-10d8-44cc-8aa5-5a94ad133118/1/gh9un_H7vyH2QToTfnNn3YqMA1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/gh9un_H7vyH2QToTfnNn3YqMA1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:60:a3:74:dc:14:8d:eb:44:72:b0:c9:68:f8:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821f6e9ff1fbbf21f6413a137e7367dd8a8c035c
Validity
Not Before: Mar 2 11:00:59 2026 GMT
Not After : Mar 3 11:00:59 2026 GMT
Subject: CN=d77accd14e5d14ab298271b1218e6960f75d9665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:37:9b:5f:e1:9a:92:35:ce:da:b6:6d:a3:d2:
31:85:ba:8e:ce:30:be:93:b6:c1:fa:c5:d3:d4:d8:
ef:14:aa:0b:d5:07:b3:6d:c5:85:89:b5:16:13:7f:
22:38:ba:6d:72:c2:dc:98:f6:70:c6:b1:01:cb:d0:
0e:ee:2f:fb:71:6c:39:10:ed:81:74:de:70:69:ec:
fb:6f:d3:97:f7:67:51:48:0d:1c:ee:9f:06:78:7f:
a6:18:3e:03:57:b7:04:6c:e1:77:ae:a8:97:18:eb:
e9:96:a5:df:70:56:90:30:32:3c:d4:f6:43:e3:a2:
e5:6c:31:a8:b1:fe:b8:73:0c:6a:e9:0d:59:02:3e:
a7:2e:83:48:3f:49:b0:63:19:98:e2:5b:77:59:4a:
23:6f:28:83:17:f7:32:89:c9:fd:ae:b0:e3:7e:cc:
3d:7e:14:34:75:07:48:b5:78:21:fd:d5:60:7e:18:
fc:95:92:40:8b:17:e0:39:a6:a9:66:d3:c4:46:88:
e4:10:9f:37:e7:14:63:35:64:81:f2:13:80:04:06:
e0:1a:b3:12:c0:23:72:8a:39:37:23:5c:93:5c:68:
f3:39:27:4e:06:8e:a2:7d:6a:40:e9:44:b5:d5:65:
48:92:a8:2d:05:85:91:c6:6d:cd:53:0b:97:d1:ee:
89:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:7A:CC:D1:4E:5D:14:AB:29:82:71:B1:21:8E:69:60:F7:5D:96:65
X509v3 Authority Key Identifier:
keyid:82:1F:6E:9F:F1:FB:BF:21:F6:41:3A:13:7E:73:67:DD:8A:8C:03:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gh9un_H7vyH2QToTfnNn3YqMA1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/e076dc-10d8-44cc-8aa5-5a94ad133118/1/gh9un_H7vyH2QToTfnNn3YqMA1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/e076dc-10d8-44cc-8aa5-5a94ad133118/1/gh9un_H7vyH2QToTfnNn3YqMA1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:4c:31:09:6a:df:46:69:80:84:ca:88:22:11:d7:a0:d9:0e:
f9:80:e9:6f:8b:3b:80:5b:7e:70:fd:c4:1b:b5:46:97:35:9a:
05:4e:e4:15:05:79:e7:ef:74:e6:33:d9:84:dd:62:4e:52:7a:
65:ef:18:82:5e:4e:20:ca:03:a8:65:9d:4c:7f:7b:48:28:48:
45:31:2c:be:93:17:7a:57:d7:87:0e:e0:67:17:0c:cb:c6:15:
40:36:b3:1b:ab:26:32:9b:21:4e:dd:39:c4:6e:90:2e:93:4a:
26:d7:8e:53:d1:2c:33:39:34:90:a9:31:8f:bc:05:68:a1:07:
17:d4:4f:95:22:12:90:32:c0:52:14:69:0a:e4:a7:09:f3:4e:
35:57:8b:f8:40:19:51:57:9a:9b:56:60:cb:b4:c7:d7:c5:b0:
8b:1f:a8:0d:32:d2:94:dd:78:89:bc:0f:64:ea:cd:ff:f2:f8:
39:af:7f:b0:b9:db:2b:18:c0:0d:37:83:40:f9:84:37:1a:68:
e4:b8:87:b3:7f:49:46:26:2c:f5:a5:a2:37:6f:70:ab:2d:df:
93:c5:64:2b:a8:87:50:b3:46:cb:3d:60:de:a1:39:47:e6:2d:
3c:07:5a:98:be:20:9c:25:e9:eb:da:77:fc:e2:fe:4b:b3:35:
7f:2a:13:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:10:07 2026 by rpki-client