Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/e647ab-6de5-4f60-824a-ba1578fdcaf9/1/GHc-xZU-uNqLxN7b2sUp0c6bZ6o.mft
File: GHc-xZU-uNqLxN7b2sUp0c6bZ6o.mft (raw, json)
Hash identifier: w/r5Z88bRwAKdQxmdTpbYbARgBG8+gQugvc89AoV5Yc=
Subject key identifier: 3B:BA:81:C7:E7:F1:96:31:64:45:CA:4D:6D:14:B7:EA:7A:B0:52:76
Authority key identifier: 18:77:3E:C5:95:3E:B8:DA:8B:C4:DE:DB:DA:C5:29:D1:CE:9B:67:AA
Certificate issuer: /CN=18773ec5953eb8da8bc4dedbdac529d1ce9b67aa
Certificate serial: 019D341A8FC2A177BDCA94824B12F620E711
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GHc-xZU-uNqLxN7b2sUp0c6bZ6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/e647ab-6de5-4f60-824a-ba1578fdcaf9/1/GHc-xZU-uNqLxN7b2sUp0c6bZ6o.mft
Manifest number: 4F
Signing time: Sat 28 Mar 2026 11:00:48 +0000
Manifest this update: Sat 28 Mar 2026 11:00:48 +0000
Manifest next update: Sun 29 Mar 2026 11:00:48 +0000
Files and hashes: 1: GHc-xZU-uNqLxN7b2sUp0c6bZ6o.crl (hash: nM0uDp3chReZBZGyRYS5LnIOsUEQyvz9uYe5FywYqyA=)
2: ULZ1IXriNbVt1RF82-qhaW1hFMs.roa (hash: ApQ7wcFJx+88WL2MSx6t/CPLNYoC52lkQ/wgD971pZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/e647ab-6de5-4f60-824a-ba1578fdcaf9/1/GHc-xZU-uNqLxN7b2sUp0c6bZ6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/e647ab-6de5-4f60-824a-ba1578fdcaf9/1/GHc-xZU-uNqLxN7b2sUp0c6bZ6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/GHc-xZU-uNqLxN7b2sUp0c6bZ6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:34:1a:8f:c2:a1:77:bd:ca:94:82:4b:12:f6:20:e7:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18773ec5953eb8da8bc4dedbdac529d1ce9b67aa
Validity
Not Before: Mar 28 11:00:48 2026 GMT
Not After : Mar 29 11:00:48 2026 GMT
Subject: CN=3bba81c7e7f196316445ca4d6d14b7ea7ab05276
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fb:24:4e:3e:ff:ad:03:36:67:53:89:52:cf:
07:f1:f5:f9:04:6c:03:95:68:56:e5:a6:cb:3c:0a:
7b:5c:f2:7a:5a:af:e2:dc:e7:8d:58:5f:5e:53:97:
c1:29:73:a7:d8:21:1b:bc:07:a5:4f:eb:33:3b:4b:
9f:16:cc:ec:90:59:55:e7:df:95:49:b5:63:e4:0d:
d3:2c:f1:2f:06:b0:9d:c5:41:a3:e8:e3:ec:3d:5e:
6b:e8:10:fa:93:cb:c6:d7:79:04:42:b9:e6:e9:a9:
37:e8:99:60:78:2f:12:90:f0:10:4a:3f:7f:6c:bf:
c6:7c:5f:79:4f:e4:c8:d7:47:ad:62:90:6d:c5:7f:
fb:8d:bf:c2:46:f5:61:e5:e2:6c:79:b2:b2:3d:69:
58:bc:90:df:27:37:c3:9e:80:c3:aa:1e:c3:29:ee:
41:2b:9c:99:7f:86:2a:40:ad:32:6e:16:f3:f7:ee:
bb:56:3e:99:cf:a2:36:b3:b0:41:dd:48:a8:88:1d:
1e:e4:e8:e5:55:aa:62:db:77:e3:b6:65:f2:7a:5e:
bd:81:96:7e:12:81:bb:35:34:9b:47:5f:1d:7a:b5:
05:11:83:d6:4a:8d:86:65:0d:ce:b5:12:b9:3d:15:
fa:06:49:1b:6f:4e:1b:c7:10:cc:75:e8:30:4c:cf:
b2:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:BA:81:C7:E7:F1:96:31:64:45:CA:4D:6D:14:B7:EA:7A:B0:52:76
X509v3 Authority Key Identifier:
keyid:18:77:3E:C5:95:3E:B8:DA:8B:C4:DE:DB:DA:C5:29:D1:CE:9B:67:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GHc-xZU-uNqLxN7b2sUp0c6bZ6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e647ab-6de5-4f60-824a-ba1578fdcaf9/1/GHc-xZU-uNqLxN7b2sUp0c6bZ6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e647ab-6de5-4f60-824a-ba1578fdcaf9/1/GHc-xZU-uNqLxN7b2sUp0c6bZ6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:d5:7b:60:4c:f2:72:70:54:f3:37:cc:97:d6:c7:e7:f4:b6:
48:4c:c6:6a:61:04:40:ef:f8:20:6e:2c:ae:2e:99:43:4e:1e:
a0:f7:61:7a:11:49:00:e0:fd:81:ab:4d:cc:62:0f:53:dc:59:
a4:2c:ce:8d:90:f9:24:6a:f2:91:e5:a2:0e:c0:8a:8d:98:88:
ec:08:af:32:c8:11:b3:dc:a0:4a:8d:19:61:eb:9e:2e:53:aa:
e5:75:86:8b:9a:c4:22:79:be:71:6d:b1:2a:d2:97:5a:8f:00:
b1:33:14:54:af:8b:9f:e6:63:40:e7:08:73:d8:c3:9c:8d:8a:
68:e9:a1:09:be:af:5f:ab:f7:d7:19:7c:4d:38:f3:7c:ae:9d:
f0:fd:54:e8:38:2f:96:4e:11:82:eb:b4:8a:40:c7:2e:e1:dc:
bd:34:10:65:e4:c2:d5:9b:62:96:14:62:4e:dd:2a:aa:26:fa:
72:de:6f:cb:eb:31:30:8d:73:a4:1e:ef:51:d0:af:2c:92:7e:
48:91:28:5f:66:25:e0:ac:d4:b8:e3:02:8a:8d:6e:f5:38:35:
df:5e:9a:18:e4:e9:3a:27:e5:c9:d0:73:57:df:01:b3:98:32:
5a:5c:07:5d:e2:79:a2:7c:75:b1:7e:f3:09:01:32:cf:10:b4:
cb:0e:6a:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 15:54:59 2026 by rpki-client