Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.mft
File: Ghrl5JpEq93CKwrb2utkE28l1Gc.mft (raw, json)
Hash identifier: RMyTLyRVjoX3kzMrlX5Xz9uYL4biiwYuhBYZGp86DVk=
Subject key identifier: A8:FD:C6:98:65:3A:56:01:B1:05:3C:0F:33:A2:84:84:6A:0E:03:F6
Authority key identifier: 1A:1A:E5:E4:9A:44:AB:DD:C2:2B:0A:DB:DA:EB:64:13:6F:25:D4:67
Certificate issuer: /CN=1a1ae5e49a44abddc22b0adbdaeb64136f25d467
Certificate serial: 019E1FB564DF3FD11F686D0FA0E67EF5516D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ghrl5JpEq93CKwrb2utkE28l1Gc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.mft
Manifest number: 1241
Signing time: Wed 13 May 2026 05:00:41 +0000
Manifest this update: Wed 13 May 2026 05:00:41 +0000
Manifest next update: Thu 14 May 2026 05:00:41 +0000
Files and hashes: 1: Ghrl5JpEq93CKwrb2utkE28l1Gc.crl (hash: i2pSXKriB/KvblNRiBvtjW4bSepyNeph8Kr7f86Ytho=)
2: _H4CUuz3Tvl-T1zwCAZAvhXJbiM.roa (hash: xsJ3awajiTbn083/zKjj3KHpA/9WdA0RqzmcuoYihQA=)
3: kz2Yp1K6YIxekPASAxXKtmwq5Nc.roa (hash: wGYvhz3IuQwWNkOw50DFvXGGrTTnqTHVgvd/Ec1JbTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ghrl5JpEq93CKwrb2utkE28l1Gc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 05:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b5:64:df:3f:d1:1f:68:6d:0f:a0:e6:7e:f5:51:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a1ae5e49a44abddc22b0adbdaeb64136f25d467
Validity
Not Before: May 13 05:00:41 2026 GMT
Not After : May 14 05:00:41 2026 GMT
Subject: CN=a8fdc698653a5601b1053c0f33a284846a0e03f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:47:d3:89:21:d7:5e:31:9a:30:ae:5e:57:79:
11:99:33:91:77:a5:c3:88:5f:72:17:4b:20:96:da:
f1:dd:3b:55:f9:37:c6:3f:88:f6:5a:00:18:71:a6:
b9:d8:9c:7f:a9:d4:4e:c9:c9:c3:d7:91:bb:92:24:
83:49:5e:aa:2c:cd:de:91:51:70:eb:8e:60:0d:a3:
11:15:ac:60:b8:95:18:9c:a1:e5:85:12:94:de:7d:
74:66:ac:40:08:01:23:be:6d:9f:7a:df:71:05:73:
11:76:a5:c3:32:3f:5f:fa:97:49:6b:90:66:83:83:
0f:d3:02:9d:fc:40:05:94:c1:2d:b0:de:0a:34:6b:
7b:e9:71:33:2c:3e:31:24:cf:ec:92:53:fa:ac:27:
00:b8:16:e8:d1:e2:30:45:fa:2e:ef:22:dd:01:12:
e6:d2:35:fa:e6:7c:38:05:23:d4:21:12:f4:0e:2a:
7f:d2:54:af:c7:35:44:14:92:f8:92:85:8a:d0:69:
de:90:42:44:7a:a4:64:24:c6:c1:bc:4e:22:f1:dd:
df:94:6c:40:24:ae:39:41:1c:75:a2:f3:af:35:e0:
4e:82:3b:20:4b:28:48:bf:d8:f8:fc:0d:95:38:5c:
8b:f2:7b:e0:c6:f7:b5:e1:9e:11:29:30:ac:19:e3:
c5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:FD:C6:98:65:3A:56:01:B1:05:3C:0F:33:A2:84:84:6A:0E:03:F6
X509v3 Authority Key Identifier:
keyid:1A:1A:E5:E4:9A:44:AB:DD:C2:2B:0A:DB:DA:EB:64:13:6F:25:D4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ghrl5JpEq93CKwrb2utkE28l1Gc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:ca:f3:59:f3:c5:ce:19:93:f6:a6:a8:3a:42:56:0a:df:eb:
09:22:a5:4a:a0:65:ed:1e:61:45:6f:22:d2:7b:e9:1f:f7:eb:
d8:58:0b:9d:f0:cf:95:57:b9:93:4e:80:af:4b:4a:db:9e:d1:
3b:da:24:a5:9c:42:46:1c:ba:54:57:e5:5a:69:77:1b:8a:bb:
c7:db:23:6c:49:e8:e5:ed:08:62:40:f2:27:5a:45:72:49:16:
35:ca:f9:58:ed:fb:56:cb:e4:dc:e8:e2:96:27:b3:c7:83:5b:
51:ff:c6:27:fd:bb:ef:c2:4f:be:6d:f5:68:90:8d:df:b4:4f:
b5:72:35:34:9a:d4:c0:25:dd:93:20:51:62:ea:3f:86:9e:bc:
19:08:3d:9c:69:ea:63:05:48:2e:b3:23:07:25:65:fa:de:b2:
c7:5d:d4:fb:10:6d:0c:f7:90:c1:d6:e6:3a:eb:49:16:b1:a2:
ef:1e:f9:26:cf:3a:db:a3:70:19:6b:f7:4c:0f:df:09:6d:ee:
29:44:74:e5:30:49:c2:ba:fb:9c:63:b4:6c:b7:da:5d:6f:5b:
7e:d4:8b:c7:8d:75:11:1f:78:37:ba:1d:79:a1:58:c3:b3:e0:
a2:10:3a:b3:5e:94:95:0b:4a:36:58:0c:ff:68:ba:03:02:36:
85:63:19:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:29:33 2026 by rpki-client