Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/ghv243Q6As8royrxDfvt8a_UOqI.mft
File: ghv243Q6As8royrxDfvt8a_UOqI.mft (raw, json)
Hash identifier: wzqLxyjOtLuDN5EaVW79OmyRD4rEFHqB6mLTVtGPM+k=
Subject key identifier: 60:85:32:6A:4D:F2:15:FA:07:67:C9:C6:77:3F:88:3A:B6:E8:EC:40
Authority key identifier: 82:1B:F6:E3:74:3A:02:CF:2B:A3:2A:F1:0D:FB:ED:F1:AF:D4:3A:A2
Certificate issuer: /CN=821bf6e3743a02cf2ba32af10dfbedf1afd43aa2
Certificate serial: 01A0E174A8352018202A714366A16F2A4B7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ghv243Q6As8royrxDfvt8a_UOqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/ghv243Q6As8royrxDfvt8a_UOqI.mft
Manifest number: EE
Signing time: Sun 27 Sep 2026 06:01:53 +0000
Manifest this update: Sun 27 Sep 2026 06:01:53 +0000
Manifest next update: Mon 28 Sep 2026 06:01:53 +0000
Files and hashes: 1: 9MFXK73OiqcN6LapwMg5Z8b38i0.roa (hash: WqIbxz6dWrFwqJH0l2f/YrBWMsIoujMuumNHpVLbnyk=)
2: ghv243Q6As8royrxDfvt8a_UOqI.crl (hash: 0dlargEmCr2LX3P6ORa9/HvqSuo54RPPHBWYSXSRCHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/ghv243Q6As8royrxDfvt8a_UOqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/ghv243Q6As8royrxDfvt8a_UOqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ghv243Q6As8royrxDfvt8a_UOqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:74:a8:35:20:18:20:2a:71:43:66:a1:6f:2a:4b:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821bf6e3743a02cf2ba32af10dfbedf1afd43aa2
Validity
Not Before: Sep 27 06:01:53 2026 GMT
Not After : Sep 28 06:01:53 2026 GMT
Subject: CN=6085326a4df215fa0767c9c6773f883ab6e8ec40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ca:cd:d4:29:1d:38:61:94:7d:79:1c:8e:e2:
ef:4c:7e:09:e5:94:44:17:6e:f1:de:be:32:5b:a4:
3c:fb:07:29:6b:f3:a5:6c:4b:02:f0:f3:67:08:5c:
89:7c:5d:35:98:74:75:45:90:ce:44:8b:ff:2a:db:
56:d3:bf:0d:d2:51:33:ed:b8:1c:84:83:2e:a5:da:
7f:43:c9:4f:5a:5e:2a:93:77:e6:05:7f:01:6c:cc:
da:b0:ad:21:70:69:a7:60:e2:03:07:07:d3:9a:91:
52:e9:33:2a:62:12:09:7a:cb:b3:a8:99:a1:81:56:
10:9f:50:71:9b:70:1f:b7:33:58:ba:86:b3:09:7e:
fd:11:30:2e:0e:c3:f1:75:53:f5:4c:8a:53:83:36:
2d:05:f3:a6:6d:10:15:b0:74:ae:9c:e4:a7:a6:94:
a7:d1:f0:99:95:ff:02:bb:c4:24:c8:d9:42:66:25:
40:6d:13:cb:75:8b:7c:86:18:2b:8a:d6:29:96:9f:
a9:b5:f2:1e:2d:a1:fd:5f:a4:60:5b:eb:8e:68:5d:
b5:64:3d:f9:2f:9c:fb:59:5a:3b:dd:99:ec:1e:d2:
8e:30:5b:f2:1b:07:98:82:12:b5:08:69:31:d6:ce:
33:df:5a:fe:a1:f4:f1:05:7c:10:b0:1c:51:ca:af:
33:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:85:32:6A:4D:F2:15:FA:07:67:C9:C6:77:3F:88:3A:B6:E8:EC:40
X509v3 Authority Key Identifier:
keyid:82:1B:F6:E3:74:3A:02:CF:2B:A3:2A:F1:0D:FB:ED:F1:AF:D4:3A:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ghv243Q6As8royrxDfvt8a_UOqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/ghv243Q6As8royrxDfvt8a_UOqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/ghv243Q6As8royrxDfvt8a_UOqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:c3:e3:fd:7d:dd:a8:27:9d:9e:09:2b:d3:cc:54:dc:c6:ec:
58:02:ec:7d:16:e6:31:73:a2:48:b1:18:0d:00:5d:8e:80:52:
3a:91:d9:37:32:76:fc:a5:69:c4:cf:19:d7:84:c0:2c:f0:97:
53:dd:be:ff:23:0c:35:fa:57:7e:6e:af:70:0c:f1:5c:8b:96:
0e:70:a6:7e:d7:eb:63:56:49:b4:f5:56:61:20:07:02:04:0a:
87:7d:f1:52:df:9a:2b:e5:bc:40:01:3f:01:77:79:c1:c2:02:
8b:ab:03:3d:67:5d:f9:b8:7d:08:b8:73:d4:29:2e:0d:0c:5d:
1f:9a:70:84:f2:75:5d:8e:87:cf:57:71:9e:60:32:be:87:0d:
14:d6:ad:14:92:e7:81:73:c1:66:f3:df:f7:bb:43:d3:15:8c:
17:63:d5:53:1f:9f:7a:76:0c:b2:26:2f:b6:3f:4a:88:46:ae:
3a:b0:b4:79:fd:36:98:db:d9:8e:79:e2:2a:c1:c5:f5:48:e9:
ca:30:c5:a5:1c:98:49:b2:d1:cf:71:2a:01:93:ee:2d:7e:b9:
bf:e7:b6:84:bb:60:10:93:f5:c9:39:6e:58:8e:f3:76:4f:dd:
b9:5d:07:25:fd:ac:32:37:a1:a1:a0:c6:5b:5b:fa:bb:ea:88:
cf:74:1e:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:08:17 2026 by rpki-client