Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.mft
File: GCHMkI36kRENERmm3h7EHj7P80Y.mft (raw, json)
Hash identifier: wiktViRmEC7V7iSSdJoIWCiees0ajL7M/1SM74xQtrY=
Subject key identifier: 9D:B3:EA:2D:10:C0:FD:D4:EB:55:44:E2:3E:58:D6:BC:19:62:3F:A3
Authority key identifier: 18:21:CC:90:8D:FA:91:11:0D:11:19:A6:DE:1E:C4:1E:3E:CF:F3:46
Certificate issuer: /CN=1821cc908dfa91110d1119a6de1ec41e3ecff346
Certificate serial: 019D2AA95DD0C7537EF16524DD32435FCB0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GCHMkI36kRENERmm3h7EHj7P80Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.mft
Manifest number: 0849
Signing time: Thu 26 Mar 2026 15:00:35 +0000
Manifest this update: Thu 26 Mar 2026 15:00:35 +0000
Manifest next update: Fri 27 Mar 2026 15:00:35 +0000
Files and hashes: 1: GCHMkI36kRENERmm3h7EHj7P80Y.crl (hash: hh9gtu3JWIhztbPKb0zfzUm4SL46p3x0TEJ2/el1JPs=)
2: TmcoRu9ef8n5uSGSq8iHWL8zg0M.roa (hash: GDDsDyd58H/bp3P5lSRMWErs4U1SYPdz+Rlr9Gl1yps=)
3: zcaWIGhkG55HVrp_LTvU2dDCIlw.roa (hash: kwl/J+DhlHUe4YxPvoDLnKqddS3rQt5tFVk3ZqLbgmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GCHMkI36kRENERmm3h7EHj7P80Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 15:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:5d:d0:c7:53:7e:f1:65:24:dd:32:43:5f:cb:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1821cc908dfa91110d1119a6de1ec41e3ecff346
Validity
Not Before: Mar 26 15:00:35 2026 GMT
Not After : Mar 27 15:00:35 2026 GMT
Subject: CN=9db3ea2d10c0fdd4eb5544e23e58d6bc19623fa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:7a:d4:9b:6f:1a:18:82:3d:99:1d:50:21:3d:
04:12:38:d1:21:62:67:b4:5f:3b:7a:34:41:f4:c5:
7a:42:13:cd:72:b1:ad:80:4f:80:95:25:98:b0:d3:
41:05:12:ed:b7:5f:c3:57:b8:25:9d:68:a0:60:1a:
7d:a7:9b:00:5e:f6:c6:75:6a:01:bd:b2:a3:a8:69:
ec:94:24:4e:bc:ac:6f:6f:73:50:01:eb:51:0f:7f:
6c:a3:d8:33:ff:af:7d:0e:f7:5d:bd:1d:cd:83:a8:
16:a3:95:88:cc:7f:ca:43:93:ba:69:e3:46:e5:ec:
df:b9:7f:ca:ef:7f:e8:7a:fe:2d:c5:7a:b2:23:4d:
ee:55:ac:f5:4b:ee:95:43:e1:41:e1:39:10:46:aa:
ae:37:46:e9:ab:1e:64:cc:41:dd:27:ae:2d:53:e7:
52:27:4d:02:b3:fc:5a:1f:10:01:ac:da:35:f3:77:
fc:df:bc:97:96:b1:4f:16:f4:5a:ee:92:b6:2a:d8:
77:6d:dd:06:45:21:02:8a:14:ba:4b:f8:28:71:8c:
08:cd:48:f8:9d:03:6f:5c:68:55:b5:e6:f7:52:f8:
70:8b:1a:74:7c:51:03:49:d4:ac:02:57:e0:4e:c3:
b2:82:3f:59:7d:34:4b:fe:c6:42:88:24:d3:33:9c:
bd:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:B3:EA:2D:10:C0:FD:D4:EB:55:44:E2:3E:58:D6:BC:19:62:3F:A3
X509v3 Authority Key Identifier:
keyid:18:21:CC:90:8D:FA:91:11:0D:11:19:A6:DE:1E:C4:1E:3E:CF:F3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GCHMkI36kRENERmm3h7EHj7P80Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:ee:3c:ac:ef:4f:68:e8:91:ce:3d:27:a7:ec:f5:b2:71:30:
a7:c7:75:bc:78:7e:f7:46:2d:ec:a1:09:13:b8:83:29:ca:db:
e4:b4:86:03:c9:92:35:51:66:1c:3d:0c:c7:34:78:80:12:6b:
98:fb:a1:bd:3d:21:31:32:67:41:54:34:29:ad:a4:8f:fe:e9:
5d:ef:c4:97:b7:aa:70:c5:07:98:45:1d:c3:12:3f:de:83:b7:
b7:f4:c3:af:b5:c6:42:e8:7d:cb:a0:60:db:5b:fe:88:39:01:
ab:2d:c4:d6:fb:9a:d6:c5:f9:4e:70:b2:31:8c:e0:49:5b:c3:
71:2a:07:44:20:14:f9:63:0b:8d:25:38:97:76:f4:e8:f2:bb:
e5:8e:73:d0:80:16:bf:e5:2e:ad:a5:f7:9d:62:45:a8:ca:1a:
30:66:28:86:26:ef:55:43:10:db:c2:aa:98:64:0d:97:1e:c5:
d6:11:bb:cf:af:3e:88:48:39:b6:ba:68:07:3b:0d:4f:1b:8e:
1c:ca:92:ea:73:37:ba:56:7b:8d:bc:87:27:ce:f3:25:fa:78:
9d:b9:19:f5:5c:66:47:47:e6:1f:fc:64:ff:e9:f1:d8:4f:5c:
02:46:0c:7c:ec:87:9d:f9:b5:91:4d:dd:9f:4b:39:f0:c6:7b:
c3:d8:94:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:10:24 2026 by rpki-client