Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/7b981c-01e3-4895-bf1f-f1fc0541c649/1/GHRUZrThRoMLlit0kG2xxtCB_HA.mft
File: GHRUZrThRoMLlit0kG2xxtCB_HA.mft (raw, json)
Hash identifier: WN50kwxc/1Sq+Xrv3qDJUGl2Jlc5g7i6axv0xvra0KA=
Subject key identifier: F3:39:86:56:9F:33:1A:C2:C4:6F:26:6B:AC:D5:80:56:58:48:CC:7E
Authority key identifier: 18:74:54:66:B4:E1:46:83:0B:96:2B:74:90:6D:B1:C6:D0:81:FC:70
Certificate issuer: /CN=18745466b4e146830b962b74906db1c6d081fc70
Certificate serial: 019D9961DFD336D719DB5640FDE274CF7CB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GHRUZrThRoMLlit0kG2xxtCB_HA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/7b981c-01e3-4895-bf1f-f1fc0541c649/1/GHRUZrThRoMLlit0kG2xxtCB_HA.mft
Manifest number: 1887
Signing time: Fri 17 Apr 2026 03:00:21 +0000
Manifest this update: Fri 17 Apr 2026 03:00:21 +0000
Manifest next update: Sat 18 Apr 2026 03:00:21 +0000
Files and hashes: 1: GHRUZrThRoMLlit0kG2xxtCB_HA.crl (hash: yQNna50My7bYTZLuePLNsnDpZI6cPwEi65JIXY7f79Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/7b981c-01e3-4895-bf1f-f1fc0541c649/1/GHRUZrThRoMLlit0kG2xxtCB_HA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/7b981c-01e3-4895-bf1f-f1fc0541c649/1/GHRUZrThRoMLlit0kG2xxtCB_HA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GHRUZrThRoMLlit0kG2xxtCB_HA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:61:df:d3:36:d7:19:db:56:40:fd:e2:74:cf:7c:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18745466b4e146830b962b74906db1c6d081fc70
Validity
Not Before: Apr 17 03:00:21 2026 GMT
Not After : Apr 18 03:00:21 2026 GMT
Subject: CN=f33986569f331ac2c46f266bacd580565848cc7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b4:f2:2d:86:74:7b:30:3c:0c:78:6b:8b:c5:
66:74:dd:5f:a4:46:de:e7:5f:14:2b:38:f3:ec:2c:
cf:e5:fa:69:42:9e:36:db:f8:5f:e8:f9:e0:35:b5:
9f:ed:fc:53:b1:c9:bc:6b:c5:4a:a6:f0:7c:cf:94:
1b:24:25:4b:c5:3b:2e:54:07:d1:ca:7b:f3:3e:23:
f1:86:03:c8:38:9a:2e:d3:0f:76:e3:4d:79:38:5b:
12:2a:d9:fc:73:02:8a:2f:52:1b:18:20:cf:b8:4f:
a5:e2:f3:4d:47:d0:41:6e:d5:75:45:bb:4e:c1:0d:
bd:cf:60:09:d5:ec:4a:21:6f:5f:87:2a:86:fa:9c:
bb:54:3d:a5:59:e9:fb:39:26:84:e1:69:87:c9:d5:
84:41:79:5c:d3:1a:32:39:65:ad:08:a2:07:cc:8d:
da:26:b7:ed:ae:b8:8c:21:11:b1:47:76:f1:ab:63:
f6:76:47:49:87:20:5a:7c:76:42:fe:99:d5:80:be:
3e:5c:a6:fd:ce:89:77:d1:9b:48:81:36:df:d2:10:
ae:dc:79:de:a1:80:85:ed:77:eb:84:86:8c:23:23:
a5:d9:07:64:42:0f:54:3f:3c:02:62:44:b7:9e:76:
cf:3b:3b:36:4c:60:c2:10:b4:cd:80:3b:fe:42:01:
c6:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:39:86:56:9F:33:1A:C2:C4:6F:26:6B:AC:D5:80:56:58:48:CC:7E
X509v3 Authority Key Identifier:
keyid:18:74:54:66:B4:E1:46:83:0B:96:2B:74:90:6D:B1:C6:D0:81:FC:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GHRUZrThRoMLlit0kG2xxtCB_HA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/7b981c-01e3-4895-bf1f-f1fc0541c649/1/GHRUZrThRoMLlit0kG2xxtCB_HA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/7b981c-01e3-4895-bf1f-f1fc0541c649/1/GHRUZrThRoMLlit0kG2xxtCB_HA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:31:30:97:99:ce:0d:0c:3a:45:7f:6e:ea:10:a6:40:3d:9c:
51:3d:41:5a:a4:93:fa:3e:92:07:f0:9b:a0:07:a4:67:a4:79:
5c:70:ee:c0:af:bf:90:80:61:4a:cb:90:f7:e4:fa:c2:9c:e8:
89:7c:4f:0c:db:e9:7a:ec:96:cd:06:de:fc:d7:55:23:c4:df:
f3:f6:bb:9a:68:b9:ae:58:c2:16:99:ba:39:42:6f:d4:40:63:
75:d7:af:c1:c7:67:45:ac:59:d6:e3:52:ac:15:cf:f4:01:fd:
4b:5e:1f:ab:88:79:dc:c1:d6:0f:0d:63:54:6e:26:6e:f9:ff:
e5:34:75:68:a7:a7:d5:b3:2d:6d:e7:c7:b8:ff:1f:4f:44:6b:
e5:3d:03:d6:76:48:1c:34:9b:cc:6b:31:6f:a5:b4:4e:80:a1:
55:d4:82:8a:26:78:ad:88:79:aa:10:3e:ec:cb:5f:b9:64:e7:
18:6f:b7:03:1e:5c:92:93:73:6e:78:a9:0a:bf:13:e3:96:b9:
7e:88:c4:dc:c3:98:68:db:09:aa:d2:32:50:be:54:46:82:2c:
60:e6:75:fe:d3:53:e2:6d:08:0d:d3:0e:41:ab:31:8a:fe:7f:
02:16:a2:0a:a6:3c:f8:d3:1a:92:a9:9d:9b:04:93:7b:0e:e9:
e0:b3:c0:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:30:47 2026 by rpki-client