Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/68195e-9902-4958-a507-fda9cdc90fe3/1/GhSy7j_ZgZQB2sukPsCsIAspWcA.mft
File: GhSy7j_ZgZQB2sukPsCsIAspWcA.mft (raw, json)
Hash identifier: XGTlScIBPWeLv1WaJ/nwy/ZwilySNFZ/1oWR+FW5URc=
Subject key identifier: 17:54:5D:80:C4:1A:DC:59:DA:84:F0:11:C0:6D:A9:28:2C:04:2E:51
Authority key identifier: 1A:14:B2:EE:3F:D9:81:94:01:DA:CB:A4:3E:C0:AC:20:0B:29:59:C0
Certificate issuer: /CN=1a14b2ee3fd9819401dacba43ec0ac200b2959c0
Certificate serial: 019D284D603188CEB60FBB5B79EA290F19A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GhSy7j_ZgZQB2sukPsCsIAspWcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/68195e-9902-4958-a507-fda9cdc90fe3/1/GhSy7j_ZgZQB2sukPsCsIAspWcA.mft
Manifest number: 0962
Signing time: Thu 26 Mar 2026 04:00:52 +0000
Manifest this update: Thu 26 Mar 2026 04:00:52 +0000
Manifest next update: Fri 27 Mar 2026 04:00:52 +0000
Files and hashes: 1: GhSy7j_ZgZQB2sukPsCsIAspWcA.crl (hash: fWQtt5P7D4SFGvc9nqBvlJO0SWExxy6mV5gu+Be0/AQ=)
2: Op0Xld0AvV9D-Gn5dQ7yl5fha9k.roa (hash: w+2GDqO3QQPP7xUHnZq2EDl7NnG4Qd4Bmp0KetYUXf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/68195e-9902-4958-a507-fda9cdc90fe3/1/GhSy7j_ZgZQB2sukPsCsIAspWcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/68195e-9902-4958-a507-fda9cdc90fe3/1/GhSy7j_ZgZQB2sukPsCsIAspWcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GhSy7j_ZgZQB2sukPsCsIAspWcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:60:31:88:ce:b6:0f:bb:5b:79:ea:29:0f:19:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a14b2ee3fd9819401dacba43ec0ac200b2959c0
Validity
Not Before: Mar 26 04:00:52 2026 GMT
Not After : Mar 27 04:00:52 2026 GMT
Subject: CN=17545d80c41adc59da84f011c06da9282c042e51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:10:2b:2f:53:05:30:fa:70:2d:20:9a:e3:aa:
83:74:fd:0c:4e:3f:1f:f2:9f:da:c7:6c:40:51:30:
1d:36:de:09:ec:6f:ad:c5:01:4d:6d:00:91:b5:2d:
36:e8:ca:f4:94:a7:e3:b6:d6:3e:9f:9d:3a:a8:90:
bb:62:45:cd:bb:a9:81:ed:69:41:5a:d5:6f:8a:68:
6f:28:8b:2e:39:d9:b7:f6:a2:11:06:63:ee:40:8a:
b4:4c:a5:cd:85:1c:b4:f4:25:c7:ea:97:de:ac:ce:
db:1d:e4:73:a5:43:75:6a:66:73:50:2d:6b:28:00:
a2:14:47:62:bc:8b:76:9f:b0:26:7a:fa:b4:b7:91:
7d:8b:d9:fc:b4:e0:6c:7e:3d:9d:bd:c6:be:56:39:
72:eb:31:f0:18:4c:16:c9:da:6d:72:da:71:de:08:
ae:7a:6f:6a:78:a4:4a:0c:c5:29:9a:12:4f:a0:c7:
e2:bc:aa:5a:26:8a:ca:f1:4a:72:b1:c6:a2:4a:64:
a7:43:38:a6:07:51:c5:f7:f3:a1:04:3a:3a:db:c9:
d8:b1:5f:1b:a8:be:6d:55:84:6b:4e:0e:0e:c0:eb:
1f:fc:ed:3a:b6:74:83:1d:82:08:56:7d:91:bf:a1:
28:a0:0a:49:33:96:af:a6:de:96:db:56:98:dc:71:
66:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:54:5D:80:C4:1A:DC:59:DA:84:F0:11:C0:6D:A9:28:2C:04:2E:51
X509v3 Authority Key Identifier:
keyid:1A:14:B2:EE:3F:D9:81:94:01:DA:CB:A4:3E:C0:AC:20:0B:29:59:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GhSy7j_ZgZQB2sukPsCsIAspWcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/68195e-9902-4958-a507-fda9cdc90fe3/1/GhSy7j_ZgZQB2sukPsCsIAspWcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/68195e-9902-4958-a507-fda9cdc90fe3/1/GhSy7j_ZgZQB2sukPsCsIAspWcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:8a:24:9f:97:17:6a:b8:1c:15:74:3a:18:e3:49:69:f7:b5:
5c:d9:21:a3:b3:c9:49:74:ac:3d:75:da:91:4c:1f:77:3b:ab:
af:c1:d9:87:8c:65:19:01:5d:16:e9:f8:20:f1:ee:7b:dd:8a:
e3:f8:dd:7a:75:48:3b:12:c2:e8:7f:78:16:36:08:93:9e:61:
db:b8:41:65:4b:57:ab:0c:87:88:05:cb:ca:43:cd:bb:c6:e9:
41:f0:9c:47:5c:8c:9a:e0:b0:ea:27:3f:e1:61:ee:41:9d:07:
9f:5d:66:c0:62:53:14:5d:55:00:64:74:2c:3d:5c:be:2c:e9:
33:52:19:94:3d:03:43:62:93:0e:d4:e4:70:2f:10:5f:c7:22:
a8:cb:f8:4f:03:9e:12:58:65:5b:5a:ab:ec:5e:51:df:b0:72:
26:c0:e4:3b:ff:85:1f:96:9f:14:90:5c:3a:e3:24:ab:14:14:
12:93:90:88:63:56:9a:18:01:3b:dd:8a:54:d0:23:ac:d2:e2:
bb:21:8b:58:c2:e3:8a:39:1b:92:8d:19:ff:64:59:2e:93:3f:
66:60:91:a4:a1:a3:56:7f:ef:d1:64:b4:ad:7d:e9:b0:cd:dc:
03:a7:86:06:aa:30:ae:ce:b6:e0:d2:b6:29:53:db:f4:0c:10:
87:47:97:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:52:53 2026 by rpki-client