Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.mft
File: GCHMkI36kRENERmm3h7EHj7P80Y.mft (raw, json)
Hash identifier: vK9OnJQUwDuPLgZZ1P3wOFUgsT+SqkL61iN524TFHcw=
Subject key identifier: B5:8D:EC:0C:71:5F:1E:EA:5F:83:05:6D:4C:F8:97:6B:F5:E9:1B:12
Authority key identifier: 18:21:CC:90:8D:FA:91:11:0D:11:19:A6:DE:1E:C4:1E:3E:CF:F3:46
Certificate issuer: /CN=1821cc908dfa91110d1119a6de1ec41e3ecff346
Certificate serial: 019E1FECE8FDF299812C171DC48D67016A90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GCHMkI36kRENERmm3h7EHj7P80Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.mft
Manifest number: 08C8
Signing time: Wed 13 May 2026 06:01:20 +0000
Manifest this update: Wed 13 May 2026 06:01:20 +0000
Manifest next update: Thu 14 May 2026 06:01:20 +0000
Files and hashes: 1: GCHMkI36kRENERmm3h7EHj7P80Y.crl (hash: RbhKISRFRubKlqSGboGtz+HqoCM8sljekma1piVJrb4=)
2: TmcoRu9ef8n5uSGSq8iHWL8zg0M.roa (hash: GDDsDyd58H/bp3P5lSRMWErs4U1SYPdz+Rlr9Gl1yps=)
3: zcaWIGhkG55HVrp_LTvU2dDCIlw.roa (hash: kwl/J+DhlHUe4YxPvoDLnKqddS3rQt5tFVk3ZqLbgmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GCHMkI36kRENERmm3h7EHj7P80Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:ec:e8:fd:f2:99:81:2c:17:1d:c4:8d:67:01:6a:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1821cc908dfa91110d1119a6de1ec41e3ecff346
Validity
Not Before: May 13 06:01:20 2026 GMT
Not After : May 14 06:01:20 2026 GMT
Subject: CN=b58dec0c715f1eea5f83056d4cf8976bf5e91b12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d6:88:94:11:e6:53:b2:b8:a4:80:20:35:bb:
03:ab:ae:ec:1e:07:72:e6:57:4e:18:1c:f7:d9:13:
6f:f8:26:09:a5:92:94:e1:33:bc:50:70:2c:ea:72:
31:67:24:72:8f:fd:57:b9:4a:6a:37:38:96:c7:da:
19:97:b8:51:c1:c1:46:24:73:f1:03:46:9f:cc:34:
4e:ee:c7:7e:50:87:76:07:47:d9:ab:aa:99:a5:4b:
57:5b:ba:7e:5a:54:c8:d8:af:ee:71:8b:86:12:6e:
24:6d:20:70:ff:41:43:fc:6d:f8:29:42:10:da:87:
84:09:40:d5:31:af:6e:a4:3d:c1:bf:3c:aa:81:b8:
c6:08:c6:2a:41:70:dc:82:27:b6:56:aa:6b:f8:f1:
9d:b5:3b:d3:8e:55:9f:3a:54:b0:97:ab:53:f2:22:
a0:f9:eb:be:5b:fa:53:03:d0:c9:48:95:80:8a:88:
6a:cf:1d:b3:69:f0:da:97:d4:df:6e:3e:e6:5c:cb:
32:88:c3:ab:ab:4d:7c:26:c8:01:72:23:f0:05:86:
78:c1:1c:8e:f4:8c:0f:07:30:9d:46:87:19:0d:2e:
a4:15:47:36:74:0a:87:46:2a:84:bf:0e:ad:89:97:
84:5a:c6:3a:62:b8:4e:f0:ec:f1:86:8f:95:f5:de:
3c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:8D:EC:0C:71:5F:1E:EA:5F:83:05:6D:4C:F8:97:6B:F5:E9:1B:12
X509v3 Authority Key Identifier:
keyid:18:21:CC:90:8D:FA:91:11:0D:11:19:A6:DE:1E:C4:1E:3E:CF:F3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GCHMkI36kRENERmm3h7EHj7P80Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:2f:54:c4:24:1b:87:dc:c7:cf:7c:e5:8a:d2:e4:7c:fc:49:
14:80:b3:b9:ce:e3:e0:a7:2c:e0:f1:b6:4e:fa:1c:d5:e5:4f:
e9:f5:53:3b:25:8e:fa:6a:6a:d3:a8:f9:1f:db:24:9d:71:b5:
ee:56:1b:bf:a6:61:3f:a1:65:89:c5:5f:d9:93:57:ec:d0:d9:
2b:8b:bc:01:d6:6d:b9:0b:11:32:1a:ef:42:72:41:17:72:9f:
f0:48:d8:0f:72:6f:e0:9d:27:9b:52:be:5f:67:64:84:7b:dd:
61:f4:2c:b5:8b:96:fd:ab:d4:3b:6f:ea:d1:a5:e8:41:b8:e8:
e8:8d:43:65:8c:7c:9f:4e:a3:dd:47:3c:b5:34:d3:5b:5d:e8:
93:6a:fe:e9:a4:dd:8e:f1:ae:28:3b:60:0a:fc:6a:e1:1c:7f:
3c:65:c8:e8:7b:be:6a:93:97:b9:3b:3a:4e:89:36:b2:38:67:
3c:45:d8:0c:a7:15:db:92:d2:e5:fc:47:d0:96:b5:71:2c:e2:
7b:fb:53:20:dd:39:c2:5a:78:31:73:bc:2c:ec:4a:ff:3c:03:
91:7c:5d:7e:e0:9b:11:ac:12:4f:fb:93:d8:67:b2:77:d7:cb:
50:4e:c7:d9:03:68:e9:75:f5:0b:79:02:17:26:3e:aa:03:9c:
4e:a2:8d:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:01:30 2026 by rpki-client