Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.mft
File: GCHMkI36kRENERmm3h7EHj7P80Y.mft (raw, json)
Hash identifier: sO9cqnyi6wMI59SdRSA2jQOeOeotbTtsUjOUWc0rILs=
Subject key identifier: 76:1F:FE:56:CC:3B:47:80:4A:AA:13:1D:37:0A:AA:74:30:87:59:54
Authority key identifier: 18:21:CC:90:8D:FA:91:11:0D:11:19:A6:DE:1E:C4:1E:3E:CF:F3:46
Certificate issuer: /CN=1821cc908dfa91110d1119a6de1ec41e3ecff346
Certificate serial: 01A105EEC0507EBE55D61184BA31008AE0B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GCHMkI36kRENERmm3h7EHj7P80Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.mft
Manifest number: 0A49
Signing time: Sun 04 Oct 2026 08:01:35 +0000
Manifest this update: Sun 04 Oct 2026 08:01:35 +0000
Manifest next update: Mon 05 Oct 2026 08:01:35 +0000
Files and hashes: 1: GCHMkI36kRENERmm3h7EHj7P80Y.crl (hash: 52bNQDYMXdFUOiQO5sFT4f4MRpAfS6ydxPnAUB1qfNw=)
2: zcaWIGhkG55HVrp_LTvU2dDCIlw.roa (hash: kwl/J+DhlHUe4YxPvoDLnKqddS3rQt5tFVk3ZqLbgmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GCHMkI36kRENERmm3h7EHj7P80Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:05:ee:c0:50:7e:be:55:d6:11:84:ba:31:00:8a:e0:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1821cc908dfa91110d1119a6de1ec41e3ecff346
Validity
Not Before: Oct 4 08:01:35 2026 GMT
Not After : Oct 5 08:01:35 2026 GMT
Subject: CN=761ffe56cc3b47804aaa131d370aaa7430875954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d1:0e:ec:69:2d:bc:2e:19:31:91:bb:1b:c3:
fc:54:94:e6:83:a1:8e:6a:8b:e9:bb:73:d2:5e:3c:
44:76:5d:72:04:8e:d2:f5:07:fe:7c:99:12:d6:3c:
b2:33:b2:18:a6:7c:29:5d:a2:b9:07:b4:f5:6b:61:
0e:03:a5:72:a8:3e:fb:38:df:9f:d4:51:5f:f5:cd:
66:1a:99:8d:c5:93:af:26:a1:b8:95:ec:70:71:42:
f6:64:97:d2:d4:f2:ed:44:26:0b:03:9a:13:d2:92:
aa:ae:23:f8:fa:6e:46:f7:bf:8e:fa:39:05:29:e4:
5c:ec:1f:a2:42:b3:5c:08:32:fb:e4:6e:9b:fb:3f:
19:fa:ac:0d:30:0a:c0:31:e4:af:e6:e1:5c:6c:7f:
73:6e:95:8b:22:85:4e:5e:3c:d5:28:73:e2:ac:6c:
6d:77:4d:a0:29:8c:0e:31:87:94:d9:4b:56:d8:d9:
45:95:7c:a1:ce:a9:68:a5:ea:99:2f:63:45:00:4c:
32:d2:d7:35:df:e9:e2:ba:21:93:e4:40:f8:a4:be:
92:9e:00:fc:57:d8:15:3d:37:b6:79:09:e7:0a:08:
0e:d7:ea:9f:1b:5e:22:4e:9a:e0:f5:a9:87:97:6f:
db:29:98:ae:f3:a2:bc:cb:0f:c1:65:0d:19:47:fd:
69:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:1F:FE:56:CC:3B:47:80:4A:AA:13:1D:37:0A:AA:74:30:87:59:54
X509v3 Authority Key Identifier:
keyid:18:21:CC:90:8D:FA:91:11:0D:11:19:A6:DE:1E:C4:1E:3E:CF:F3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GCHMkI36kRENERmm3h7EHj7P80Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:81:d0:86:12:fc:fc:49:6f:97:11:97:64:48:59:c5:b0:da:
ea:b0:ea:32:6b:b8:3e:23:65:52:cc:dd:7f:4e:39:65:2d:e7:
77:4a:cc:aa:48:08:e8:36:e5:44:84:16:4e:4d:3b:53:da:c6:
40:00:3c:51:3b:de:7e:65:c1:33:be:77:f5:eb:3b:4e:f1:e0:
6d:09:f1:45:df:e8:0d:f8:ea:b2:9a:fd:9a:bb:4f:6c:c0:e4:
3e:18:d3:f1:c7:d3:a9:88:65:cf:6c:01:09:a2:18:12:df:84:
13:ff:b1:5f:e7:20:f8:77:57:9e:fa:01:3d:b4:3b:12:eb:aa:
c6:1d:b1:5a:db:21:d3:81:47:ee:6a:b7:a6:97:de:e4:eb:9f:
2c:a1:a3:eb:ff:20:eb:32:42:53:9c:b5:a6:29:4c:c5:58:2b:
52:c2:10:6f:76:79:13:fe:ca:83:9c:f2:d1:11:35:e6:e0:00:
4d:78:2c:32:66:c2:2b:6b:6a:cb:2b:8c:be:f4:a0:73:15:7d:
5a:68:5c:75:64:5f:d6:66:1e:69:dc:7b:08:6d:0c:54:6e:07:
1a:a0:ff:f2:7b:29:97:72:eb:bd:c0:79:0e:7b:ad:e1:9f:ac:
e5:74:dd:4c:de:7f:3f:0e:95:b4:c6:1f:b0:64:6a:a6:1c:e8:
92:a1:cd:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 13:27:16 2026 by rpki-client