
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/a75aa5-536e-42a7-b2ab-961220fa951a/1/GHCRz8zDJ-YqY7G3Q6zvMqUGVU8.mft
File: GHCRz8zDJ-YqY7G3Q6zvMqUGVU8.mft (raw, json)
Hash identifier: Udk0Sft1vzYr5UNKHgmdLFhLjx2PIgbhUru0ac5Fl2E=
Subject key identifier: 84:55:26:03:A5:4C:7F:85:B6:3D:29:1C:55:AB:D6:1E:7E:9F:4E:04
Authority key identifier: 18:70:91:CF:CC:C3:27:E6:2A:63:B1:B7:43:AC:EF:32:A5:06:55:4F
Certificate issuer: /CN=187091cfccc327e62a63b1b743acef32a506554f
Certificate serial: 019F916CDAC96543E3EF09D0ABB7995B0C2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GHCRz8zDJ-YqY7G3Q6zvMqUGVU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/a75aa5-536e-42a7-b2ab-961220fa951a/1/GHCRz8zDJ-YqY7G3Q6zvMqUGVU8.mft
Manifest number: 40
Signing time: Fri 24 Jul 2026 00:00:57 +0000
Manifest this update: Fri 24 Jul 2026 00:00:57 +0000
Manifest next update: Sat 25 Jul 2026 00:00:57 +0000
Files and hashes: 1: GHCRz8zDJ-YqY7G3Q6zvMqUGVU8.crl (hash: 1FZDEAYrqA8Bew3LTmRibk/L0THw32SlDK3t/+avtp4=)
2: ITQ_fLmxy4DjGBL45vz2QEMqGJA.roa (hash: HfggULB+36iVP97JMDur3JZVIMvMcNZa9ngwLysPNW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/a75aa5-536e-42a7-b2ab-961220fa951a/1/GHCRz8zDJ-YqY7G3Q6zvMqUGVU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/a75aa5-536e-42a7-b2ab-961220fa951a/1/GHCRz8zDJ-YqY7G3Q6zvMqUGVU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GHCRz8zDJ-YqY7G3Q6zvMqUGVU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:da:c9:65:43:e3:ef:09:d0:ab:b7:99:5b:0c:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=187091cfccc327e62a63b1b743acef32a506554f
Validity
Not Before: Jul 24 00:00:57 2026 GMT
Not After : Jul 25 00:00:57 2026 GMT
Subject: CN=84552603a54c7f85b63d291c55abd61e7e9f4e04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:73:ac:47:36:4d:a5:59:96:b4:2f:2f:8f:6e:
c4:54:71:11:b2:78:94:0f:89:ab:f1:4e:c7:fe:39:
0f:fd:91:a1:4e:12:23:5e:30:ee:63:74:82:60:3a:
48:88:ed:55:6e:7e:d5:06:37:e3:13:e7:7c:1f:16:
ca:0d:f2:6d:62:98:86:1a:3b:c8:3e:e5:8c:67:ac:
5c:b0:23:8a:5e:9c:b5:ea:6f:68:67:fb:ea:f6:9a:
86:ca:21:be:e1:d1:8a:ea:8b:7e:21:b0:d7:80:5a:
11:91:5e:3e:f9:e0:cf:29:21:bd:92:1e:cf:24:94:
b8:d1:ce:cb:77:e6:e8:60:b8:96:e1:92:b5:ed:5e:
42:05:25:65:36:56:9c:e0:61:22:93:61:2c:e3:19:
79:7c:0a:79:ba:8b:8f:58:3f:f6:11:b5:09:32:07:
26:a2:2e:40:bd:5e:8b:02:66:66:1e:97:16:15:be:
17:4a:96:cf:7b:4b:f7:26:e9:0e:17:6e:5d:50:2c:
ed:72:5d:72:ba:da:e9:db:0c:5f:94:2a:63:b0:89:
66:5f:74:ef:61:3b:4b:c9:81:28:cc:de:a7:dd:a8:
04:51:d1:86:b5:0e:0d:96:4c:dc:36:6f:88:35:80:
0b:ed:c2:ba:b4:a3:6a:43:39:cc:18:6f:64:bd:45:
86:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:55:26:03:A5:4C:7F:85:B6:3D:29:1C:55:AB:D6:1E:7E:9F:4E:04
X509v3 Authority Key Identifier:
keyid:18:70:91:CF:CC:C3:27:E6:2A:63:B1:B7:43:AC:EF:32:A5:06:55:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GHCRz8zDJ-YqY7G3Q6zvMqUGVU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a75aa5-536e-42a7-b2ab-961220fa951a/1/GHCRz8zDJ-YqY7G3Q6zvMqUGVU8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a75aa5-536e-42a7-b2ab-961220fa951a/1/GHCRz8zDJ-YqY7G3Q6zvMqUGVU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:36:cd:a1:4d:16:ef:ad:b2:0a:99:fa:88:c1:98:54:b7:86:
45:45:e8:59:80:41:2e:49:73:c4:f1:01:60:84:65:fd:3e:9a:
6e:25:87:46:ac:2d:10:71:c2:86:77:23:32:a2:79:96:5d:5e:
e3:b7:6f:7e:da:68:40:50:ca:02:61:9b:95:d5:0b:5a:a7:74:
6e:80:8a:cd:a5:84:1f:bf:c8:9e:34:21:3e:4d:c7:cf:f1:b2:
b6:e6:9b:82:f5:27:ba:99:dd:7b:57:24:6e:d9:12:46:ab:bd:
ad:4d:94:34:92:b9:aa:0a:d8:a9:ec:8c:28:9b:3c:3f:27:e6:
76:01:65:50:01:d7:15:16:c6:4e:c5:15:74:6d:a7:58:6a:4b:
ee:0a:62:c8:28:aa:74:73:a9:f7:76:ac:8c:a1:b3:0c:c7:06:
19:71:64:0f:4e:e0:b9:5f:39:b4:52:ba:d7:7a:d7:33:f6:26:
a3:53:14:0b:31:07:a9:32:cc:5e:51:25:10:36:66:3a:96:76:
5c:d8:80:dc:50:84:50:46:49:e5:bd:c4:c8:9d:0b:fb:24:33:
e9:01:46:6e:cf:65:fb:3c:b6:cf:96:bd:7b:48:11:24:b8:43:
1a:ae:c8:7d:a2:1e:2d:83:48:1e:6f:51:4c:57:27:a9:59:76:
d2:8c:da:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RbNrJZUPj7wnQq7eZWwwsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4NzA5MWNmY2NjMzI3ZTYyYTYzYjFiNzQzYWNlZjMyYTUw
NjU1NGYwHhcNMjYwNzI0MDAwMDU3WhcNMjYwNzI1MDAwMDU3WjAzMTEwLwYDVQQD
Eyg4NDU1MjYwM2E1NGM3Zjg1YjYzZDI5MWM1NWFiZDYxZTdlOWY0ZTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6HOsRzZNpVmWtC8vj27EVHERsniU
D4mr8U7H/jkP/ZGhThIjXjDuY3SCYDpIiO1Vbn7VBjfjE+d8HxbKDfJtYpiGGjvI
PuWMZ6xcsCOKXpy16m9oZ/vq9pqGyiG+4dGK6ot+IbDXgFoRkV4++eDPKSG9kh7P
JJS40c7Ld+boYLiW4ZK17V5CBSVlNlac4GEik2Es4xl5fAp5uouPWD/2EbUJMgcm
oi5AvV6LAmZmHpcWFb4XSpbPe0v3JukOF25dUCztcl1yutrp2wxflCpjsIlmX3Tv
YTtLyYEozN6n3agEUdGGtQ4NlkzcNm+INYAL7cK6tKNqQznMGG9kvUWG1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIRVJgOlTH+Ftj0pHFWr1h5+n04EMB8GA1UdIwQY
MBaAFBhwkc/MwyfmKmOxt0Os7zKlBlVPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0hDUno4ekRKLVlxWTdHM1E2enZNcVVHVlU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9hNzVhYTUtNTM2ZS00MmE3LWIyYWIt
OTYxMjIwZmE5NTFhLzEvR0hDUno4ekRKLVlxWTdHM1E2enZNcVVHVlU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9hNzVhYTUtNTM2ZS00MmE3LWIyYWItOTYxMjIwZmE5NTFh
LzEvR0hDUno4ekRKLVlxWTdHM1E2enZNcVVHVlU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgzbNoU0W
762yCpn6iMGYVLeGRUXoWYBBLklzxPEBYIRl/T6abiWHRqwtEHHChncjMqJ5ll1e
47dvftpoQFDKAmGbldULWqd0boCKzaWEH7/InjQhPk3Hz/GytuabgvUnupnde1ck
btkSRqu9rU2UNJK5qgrYqeyMKJs8PyfmdgFlUAHXFRbGTsUVdG2nWGpL7gpiyCiq
dHOp93asjKGzDMcGGXFkD07guV85tFK613rXM/Ymo1MUCzEHqTLMXlElEDZmOpZ2
XNiA3FCEUEZJ5b3EyJ0L+yQz6QFGbs9l+zy2z5a9e0gRJLhDGq7IfaIeLYNIHm9R
TFcnqVl20ozaww==
-----END CERTIFICATE-----
Generated at Fri Jul 24 09:20:36 2026 by rpki-client