Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/ghv243Q6As8royrxDfvt8a_UOqI.mft
File: ghv243Q6As8royrxDfvt8a_UOqI.mft (raw, json)
Hash identifier: rHKtGWozmYaxrPKVGwlNrnJ8JBETlD7//bTSsXPGo/c=
Subject key identifier: 0C:43:43:60:C5:1E:4E:77:9C:E0:62:CA:30:94:DE:9B:74:49:26:72
Authority key identifier: 82:1B:F6:E3:74:3A:02:CF:2B:A3:2A:F1:0D:FB:ED:F1:AF:D4:3A:A2
Certificate issuer: /CN=821bf6e3743a02cf2ba32af10dfbedf1afd43aa2
Certificate serial: 019F916D6931E4708D509D4FE104AD036046
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ghv243Q6As8royrxDfvt8a_UOqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/ghv243Q6As8royrxDfvt8a_UOqI.mft
Manifest number: 40
Signing time: Fri 24 Jul 2026 00:01:34 +0000
Manifest this update: Fri 24 Jul 2026 00:01:34 +0000
Manifest next update: Sat 25 Jul 2026 00:01:34 +0000
Files and hashes: 1: 9MFXK73OiqcN6LapwMg5Z8b38i0.roa (hash: WqIbxz6dWrFwqJH0l2f/YrBWMsIoujMuumNHpVLbnyk=)
2: ghv243Q6As8royrxDfvt8a_UOqI.crl (hash: mD3zLHUClyjmDnLz8cC2yfWJZreo1Oz58LXGn2BKaZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/ghv243Q6As8royrxDfvt8a_UOqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/ghv243Q6As8royrxDfvt8a_UOqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ghv243Q6As8royrxDfvt8a_UOqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:69:31:e4:70:8d:50:9d:4f:e1:04:ad:03:60:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821bf6e3743a02cf2ba32af10dfbedf1afd43aa2
Validity
Not Before: Jul 24 00:01:34 2026 GMT
Not After : Jul 25 00:01:34 2026 GMT
Subject: CN=0c434360c51e4e779ce062ca3094de9b74492672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:66:ac:c5:6a:6d:00:ef:7e:d6:c3:5a:0b:c0:
b7:cd:33:8f:36:fb:8d:c1:2e:70:53:7d:60:0e:f0:
9d:a3:78:ea:b6:92:64:4b:8d:2d:31:8f:40:10:65:
b4:83:17:ac:d9:d1:43:8f:9d:dd:a6:94:0f:91:ee:
f5:97:49:58:9d:48:f4:91:3c:c1:61:6d:72:00:59:
0a:80:d9:ab:96:43:6b:6a:41:a5:ed:bd:01:0f:16:
b9:00:48:f4:3e:bd:a9:7f:fb:d8:9a:f1:26:ed:22:
bf:2c:85:f1:f4:53:cd:18:f3:94:98:d5:49:30:53:
e9:63:fe:81:37:33:f8:65:16:33:cc:38:22:2d:5e:
34:73:ff:5a:7f:db:c9:ac:83:e7:36:99:2d:c9:52:
1a:7c:f8:34:b5:62:10:ff:bc:21:3f:df:21:20:72:
83:0c:6e:d6:7a:71:c1:9e:78:65:a3:35:93:88:48:
da:04:97:13:d2:25:98:7e:89:ec:48:c3:07:2d:b4:
25:27:0d:65:d0:e3:9e:f5:c8:cb:59:5c:26:18:4a:
b8:56:74:47:0d:64:91:7f:cb:18:17:93:6e:a7:1a:
22:89:7e:36:10:13:17:4b:6f:88:de:6c:07:c7:e2:
8c:0b:c8:a8:74:63:71:9a:81:7f:c6:c9:8e:a0:85:
6b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:43:43:60:C5:1E:4E:77:9C:E0:62:CA:30:94:DE:9B:74:49:26:72
X509v3 Authority Key Identifier:
keyid:82:1B:F6:E3:74:3A:02:CF:2B:A3:2A:F1:0D:FB:ED:F1:AF:D4:3A:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ghv243Q6As8royrxDfvt8a_UOqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/ghv243Q6As8royrxDfvt8a_UOqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/ghv243Q6As8royrxDfvt8a_UOqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:c9:4f:82:89:bf:74:d3:1f:7b:5f:4c:fe:6c:5c:2c:f8:22:
a2:14:c5:72:37:7a:d2:f4:7d:2d:25:49:8b:17:d1:0e:e9:c2:
8d:21:be:2d:8a:e8:6c:48:c5:1e:0e:cb:a3:98:ba:d2:1b:48:
82:e5:76:cc:3d:cc:1a:24:c7:ec:5b:f3:ad:06:9c:4d:da:97:
28:d6:e0:79:1d:2a:d3:0b:3b:2c:2a:4e:30:d6:87:70:73:15:
e2:25:0e:59:41:af:39:6a:59:40:af:92:fb:8f:fb:29:db:fe:
d4:bc:ed:dd:41:1b:68:ad:88:b8:d7:f4:e1:23:8b:68:04:41:
0a:75:f8:c5:d0:95:74:e3:28:be:5e:52:eb:f1:7f:be:b5:4c:
6c:37:81:ea:4f:cf:7d:3c:1e:c6:84:af:4f:c1:8a:e9:71:08:
0a:88:7d:23:16:bd:d8:f5:39:2b:c7:43:0a:50:e6:e2:21:cd:
3d:59:56:a6:1a:d9:e6:b0:49:1a:41:ab:fd:80:48:7d:8e:d5:
c9:82:a7:45:21:aa:aa:5b:44:21:2c:2e:1f:57:87:2a:8f:c7:
5d:52:32:3e:e6:fc:4a:2c:d0:65:93:bb:23:b0:6f:e3:38:85:
27:11:0c:51:35:52:f8:34:a9:c3:de:9b:82:78:8f:71:a0:4b:
6e:46:86:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:00:25 2026 by rpki-client