Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.mft
File: GCHMkI36kRENERmm3h7EHj7P80Y.mft (raw, json)
Hash identifier: YTQ7/IFu29k8E0K+S0F3zLOq+QTIn+gMQooBw9ji+h8=
Subject key identifier: 5F:3A:C5:AF:AE:D1:34:12:A4:44:1B:7A:BD:D0:56:4B:7B:2E:0B:9E
Authority key identifier: 18:21:CC:90:8D:FA:91:11:0D:11:19:A6:DE:1E:C4:1E:3E:CF:F3:46
Certificate issuer: /CN=1821cc908dfa91110d1119a6de1ec41e3ecff346
Certificate serial: 019F9323B8654F60D0E2DAAA8814FE2C51BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GCHMkI36kRENERmm3h7EHj7P80Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.mft
Manifest number: 0989
Signing time: Fri 24 Jul 2026 08:00:19 +0000
Manifest this update: Fri 24 Jul 2026 08:00:19 +0000
Manifest next update: Sat 25 Jul 2026 08:00:19 +0000
Files and hashes: 1: GCHMkI36kRENERmm3h7EHj7P80Y.crl (hash: IfcLiDr9rnD1Su64GtRikUXjaD697kyNnXpJxluq5Dk=)
2: zcaWIGhkG55HVrp_LTvU2dDCIlw.roa (hash: kwl/J+DhlHUe4YxPvoDLnKqddS3rQt5tFVk3ZqLbgmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GCHMkI36kRENERmm3h7EHj7P80Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:23:b8:65:4f:60:d0:e2:da:aa:88:14:fe:2c:51:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1821cc908dfa91110d1119a6de1ec41e3ecff346
Validity
Not Before: Jul 24 08:00:19 2026 GMT
Not After : Jul 25 08:00:19 2026 GMT
Subject: CN=5f3ac5afaed13412a4441b7abdd0564b7b2e0b9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:56:d8:cc:e2:55:88:76:c0:b3:c5:64:a3:d0:
c4:8d:14:00:d5:bd:89:5e:db:95:c5:7e:e2:d9:fe:
1f:c7:af:40:b4:19:77:06:1e:d2:00:56:30:99:c6:
60:e3:42:80:90:bd:09:f5:30:3c:21:c1:37:9c:9d:
c9:a6:5c:d5:8b:b5:2e:64:f0:95:63:05:fb:68:c9:
3e:e7:f4:0a:c1:9a:4a:46:6d:0d:3f:c1:e7:31:89:
79:ad:e4:33:79:65:9a:0d:dc:b6:af:23:22:49:c1:
c7:8d:49:2c:21:5a:52:6c:2d:73:fc:29:fd:db:41:
89:86:03:de:6f:ae:a8:3e:72:28:ce:27:84:e5:4d:
a8:95:fc:9c:60:42:fa:7a:ec:27:2f:3a:85:37:0a:
e9:76:ae:c1:b8:5b:03:6f:34:10:7c:2b:f2:ae:04:
13:ef:21:e1:81:51:ad:49:81:59:6c:e7:f1:5e:01:
ff:d8:d6:e4:e0:dc:4a:36:f8:a5:4a:29:4c:22:98:
6c:33:37:30:e8:0b:68:06:cd:6d:33:1a:d6:7b:9c:
fb:06:a6:d5:cb:42:1a:48:6e:7a:72:01:c0:da:33:
46:1c:f5:54:e5:e2:0f:c0:b6:b9:7b:51:83:16:1e:
b4:72:ea:2e:c7:19:8b:be:e5:88:8d:ee:e1:5a:65:
d7:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:3A:C5:AF:AE:D1:34:12:A4:44:1B:7A:BD:D0:56:4B:7B:2E:0B:9E
X509v3 Authority Key Identifier:
keyid:18:21:CC:90:8D:FA:91:11:0D:11:19:A6:DE:1E:C4:1E:3E:CF:F3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GCHMkI36kRENERmm3h7EHj7P80Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:7e:90:ef:84:91:7f:10:b6:f4:fc:4e:ba:01:e6:64:e1:73:
55:3a:79:8a:59:26:dc:08:ea:b3:b6:29:68:d2:96:47:ec:77:
a1:4f:89:51:e9:61:61:78:0a:d5:aa:3d:bf:e7:19:4b:63:d2:
c4:3e:f7:5a:b9:37:04:37:9a:7f:05:8d:3c:55:07:71:2c:77:
22:bb:56:2c:45:f6:86:14:07:15:54:6b:fd:db:50:00:85:51:
29:09:a7:f3:54:c8:8a:51:bf:90:4e:ac:04:26:5c:80:af:74:
4e:5e:ab:0a:bb:e7:af:02:d1:d2:cb:73:61:9b:03:85:ea:ce:
31:f5:90:51:14:8d:f3:01:e3:09:12:54:79:1d:9a:2e:74:03:
f9:e2:d8:65:9a:02:0d:0d:b4:40:bf:67:7d:15:30:67:65:f0:
e1:c1:b7:21:6a:76:c7:c0:fa:7d:2d:f3:ba:62:93:f9:2f:0e:
64:8b:c7:2c:10:13:f2:17:d3:8a:4c:9c:f6:de:a2:06:59:e6:
19:e3:87:88:74:c4:28:85:b0:ef:7c:7d:13:05:85:61:43:7d:
9d:bf:08:a8:23:27:4d:55:a9:ad:db:7c:82:49:84:1e:c9:6f:
ed:fe:49:37:22:c1:c6:fa:94:f8:e2:d7:e8:d8:76:90:4e:d2:
48:54:45:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TI7hlT2DQ4tqqiBT+LFG+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4MjFjYzkwOGRmYTkxMTEwZDExMTlhNmRlMWVjNDFlM2Vj
ZmYzNDYwHhcNMjYwNzI0MDgwMDE5WhcNMjYwNzI1MDgwMDE5WjAzMTEwLwYDVQQD
Eyg1ZjNhYzVhZmFlZDEzNDEyYTQ0NDFiN2FiZGQwNTY0YjdiMmUwYjllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2VbYzOJViHbAs8Vko9DEjRQA1b2J
XtuVxX7i2f4fx69AtBl3Bh7SAFYwmcZg40KAkL0J9TA8IcE3nJ3JplzVi7UuZPCV
YwX7aMk+5/QKwZpKRm0NP8HnMYl5reQzeWWaDdy2ryMiScHHjUksIVpSbC1z/Cn9
20GJhgPeb66oPnIozieE5U2olfycYEL6euwnLzqFNwrpdq7BuFsDbzQQfCvyrgQT
7yHhgVGtSYFZbOfxXgH/2Nbk4NxKNvilSilMIphsMzcw6AtoBs1tMxrWe5z7BqbV
y0IaSG56cgHA2jNGHPVU5eIPwLa5e1GDFh60cuouxxmLvuWIje7hWmXXgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF86xa+u0TQSpEQber3QVkt7LgueMB8GA1UdIwQY
MBaAFBghzJCN+pERDREZpt4exB4+z/NGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0NITWtJMzZrUkVORVJtbTNoN0VIajdQODBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC80NTZjNjItNDc0Ni00MWUwLTgwNDQt
OTIwNTk5ZjUyNjM3LzEvR0NITWtJMzZrUkVORVJtbTNoN0VIajdQODBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC80NTZjNjItNDc0Ni00MWUwLTgwNDQtOTIwNTk5ZjUyNjM3
LzEvR0NITWtJMzZrUkVORVJtbTNoN0VIajdQODBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeX6Q74SR
fxC29PxOugHmZOFzVTp5ilkm3Ajqs7YpaNKWR+x3oU+JUelhYXgK1ao9v+cZS2PS
xD73Wrk3BDeafwWNPFUHcSx3IrtWLEX2hhQHFVRr/dtQAIVRKQmn81TIilG/kE6s
BCZcgK90Tl6rCrvnrwLR0stzYZsDherOMfWQURSN8wHjCRJUeR2aLnQD+eLYZZoC
DQ20QL9nfRUwZ2Xw4cG3IWp2x8D6fS3zumKT+S8OZIvHLBAT8hfTikyc9t6iBlnm
GeOHiHTEKIWw73x9EwWFYUN9nb8IqCMnTVWprdt8gkmEHslv7f5JNyLBxvqU+OLX
6Nh2kE7SSFRFKQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 15:16:55 2026 by rpki-client