Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/GHvBuyhitXJX0p4NO9axztQz6hM.mft
File: GHvBuyhitXJX0p4NO9axztQz6hM.mft (raw, json)
Hash identifier: lVkfXuoU905cMk03xeQOpBmO7KF+DRKOnqkcxDhr9hs=
Subject key identifier: 1C:54:52:18:61:11:0F:E5:A3:7F:4A:D5:CA:4E:A3:F9:D0:DB:55:26
Authority key identifier: 18:7B:C1:BB:28:62:B5:72:57:D2:9E:0D:3B:D6:B1:CE:D4:33:EA:13
Certificate issuer: /CN=187bc1bb2862b57257d29e0d3bd6b1ced433ea13
Certificate serial: 01A0D5DDB812DDC08DCEA408BB24114015F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GHvBuyhitXJX0p4NO9axztQz6hM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/GHvBuyhitXJX0p4NO9axztQz6hM.mft
Manifest number: E8
Signing time: Fri 25 Sep 2026 00:01:12 +0000
Manifest this update: Fri 25 Sep 2026 00:01:12 +0000
Manifest next update: Sat 26 Sep 2026 00:01:12 +0000
Files and hashes: 1: GHvBuyhitXJX0p4NO9axztQz6hM.crl (hash: +oAPyV7WcxVdHoxcoA03m4cxkEwilzFtxg8CV/usmJQ=)
2: LUhM3H8lhONxGgoaXHEWfKhnz2Y.roa (hash: J7ufmJc4Z0JPmS7/Bpmv26Oq7u+qgxbzuIWPGLK6uo4=)
3: SFPLQXBEuitf9FRle3yJD2Tmikc.roa (hash: IrAXCvoBEciQQdZR3nxtSBV8+ab2Nq5ETilfM1Yg9CE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/GHvBuyhitXJX0p4NO9axztQz6hM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/GHvBuyhitXJX0p4NO9axztQz6hM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GHvBuyhitXJX0p4NO9axztQz6hM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:dd:b8:12:dd:c0:8d:ce:a4:08:bb:24:11:40:15:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=187bc1bb2862b57257d29e0d3bd6b1ced433ea13
Validity
Not Before: Sep 25 00:01:12 2026 GMT
Not After : Sep 26 00:01:12 2026 GMT
Subject: CN=1c54521861110fe5a37f4ad5ca4ea3f9d0db5526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ee:7c:97:96:55:ab:c0:a1:c7:06:ce:ae:e3:
60:64:5e:23:88:5c:b3:ec:7b:7e:e3:71:fc:31:47:
b1:28:4e:b6:f9:a6:27:8b:9c:06:c1:13:de:4c:a6:
be:e9:9b:4d:07:02:ef:26:ce:de:10:03:07:1a:f4:
9e:7a:55:5d:93:ef:7e:0d:bf:c8:cd:e3:df:1d:29:
cf:d6:2b:a1:8e:b2:8f:0d:34:41:a7:28:cc:f2:ad:
0c:76:91:2a:5f:2f:e5:6f:f7:7b:40:86:37:f8:50:
bc:80:b6:67:d4:ad:32:04:93:a2:ab:a9:08:2f:b5:
74:fd:19:7d:f0:bc:28:9b:85:c9:3d:5c:6d:21:3a:
42:fe:16:e9:40:3b:dd:27:8a:b0:ad:5b:a1:e7:7c:
30:63:95:d8:27:5d:9b:5e:61:2e:d3:b7:2a:d5:5e:
53:c4:d8:0f:94:5c:02:df:ab:5d:c5:92:13:c5:84:
05:18:45:46:47:48:d5:80:f9:49:60:32:ac:c5:cb:
78:80:93:d8:0d:3b:85:d4:7e:84:8e:6e:bc:39:b2:
64:b6:d5:c8:45:7d:d4:62:04:82:0f:da:40:63:9f:
a1:34:75:39:a5:84:ac:c4:f8:e0:4f:ab:fe:c2:5e:
5c:21:3d:ca:41:43:23:87:b7:3b:6c:53:6d:20:5e:
43:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:54:52:18:61:11:0F:E5:A3:7F:4A:D5:CA:4E:A3:F9:D0:DB:55:26
X509v3 Authority Key Identifier:
keyid:18:7B:C1:BB:28:62:B5:72:57:D2:9E:0D:3B:D6:B1:CE:D4:33:EA:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GHvBuyhitXJX0p4NO9axztQz6hM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/GHvBuyhitXJX0p4NO9axztQz6hM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/GHvBuyhitXJX0p4NO9axztQz6hM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:9d:52:2f:9d:b0:b9:bf:f0:72:39:a0:36:0d:17:4a:9c:0d:
31:4f:09:df:bf:44:0b:1c:07:f9:d4:d6:4a:4f:5e:aa:48:86:
a7:c7:a4:11:96:99:44:59:d6:a1:b4:14:69:a3:2c:06:93:0f:
c6:37:a7:b3:60:35:45:46:91:3f:ec:dd:30:eb:16:52:e1:31:
41:84:7f:81:43:60:e8:39:4d:c8:86:62:84:26:3e:39:45:ee:
8e:af:b5:21:d1:4a:b5:4b:73:a1:fc:07:ed:34:70:f2:96:7c:
b6:8f:6f:82:f6:e3:ba:ec:dc:57:6c:88:73:19:ce:ad:31:bb:
7f:c8:25:42:5b:04:b2:6c:c2:0c:e2:1f:6b:9e:1a:60:09:c5:
f5:8c:1d:92:cb:a3:29:eb:c8:7f:1f:6d:3e:8d:df:bf:69:a2:
18:7a:1f:c2:0f:ee:ea:27:ac:4e:f1:ed:32:64:17:e2:3f:fb:
ba:c9:14:e9:ec:fb:fd:a2:83:05:78:26:df:78:6a:15:fa:eb:
31:49:3d:70:41:66:6d:20:86:4a:76:df:2f:5a:a7:64:9a:c7:
34:2a:ec:58:92:ff:c3:15:6a:d0:84:b2:a5:87:2b:5c:21:e8:
b2:07:4a:ce:02:e6:5f:52:94:80:7f:eb:b3:21:64:4b:ce:12:
5e:44:9a:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDV3bgS3cCNzqQIuyQRQBX5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4N2JjMWJiMjg2MmI1NzI1N2QyOWUwZDNiZDZiMWNlZDQz
M2VhMTMwHhcNMjYwOTI1MDAwMTEyWhcNMjYwOTI2MDAwMTEyWjAzMTEwLwYDVQQD
EygxYzU0NTIxODYxMTEwZmU1YTM3ZjRhZDVjYTRlYTNmOWQwZGI1NTI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAse58l5ZVq8ChxwbOruNgZF4jiFyz
7Ht+43H8MUexKE62+aYni5wGwRPeTKa+6ZtNBwLvJs7eEAMHGvSeelVdk+9+Db/I
zePfHSnP1iuhjrKPDTRBpyjM8q0MdpEqXy/lb/d7QIY3+FC8gLZn1K0yBJOiq6kI
L7V0/Rl98Lwom4XJPVxtITpC/hbpQDvdJ4qwrVuh53wwY5XYJ12bXmEu07cq1V5T
xNgPlFwC36tdxZITxYQFGEVGR0jVgPlJYDKsxct4gJPYDTuF1H6Ejm68ObJkttXI
RX3UYgSCD9pAY5+hNHU5pYSsxPjgT6v+wl5cIT3KQUMjh7c7bFNtIF5DqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBxUUhhhEQ/lo39K1cpOo/nQ21UmMB8GA1UdIwQY
MBaAFBh7wbsoYrVyV9KeDTvWsc7UM+oTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0h2QnV5aGl0WEpYMHA0Tk85YXh6dFF6NmhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi84NDc1MGYtNzZjNC00MWVlLTg1MTct
ZTBhZGFiN2YxMTEyLzEvR0h2QnV5aGl0WEpYMHA0Tk85YXh6dFF6NmhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi84NDc1MGYtNzZjNC00MWVlLTg1MTctZTBhZGFiN2YxMTEy
LzEvR0h2QnV5aGl0WEpYMHA0Tk85YXh6dFF6NmhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGJ1SL52w
ub/wcjmgNg0XSpwNMU8J379ECxwH+dTWSk9eqkiGp8ekEZaZRFnWobQUaaMsBpMP
xjens2A1RUaRP+zdMOsWUuExQYR/gUNg6DlNyIZihCY+OUXujq+1IdFKtUtzofwH
7TRw8pZ8to9vgvbjuuzcV2yIcxnOrTG7f8glQlsEsmzCDOIfa54aYAnF9Ywdksuj
KevIfx9tPo3fv2miGHofwg/u6iesTvHtMmQX4j/7uskU6ez7/aKDBXgm33hqFfrr
MUk9cEFmbSCGSnbfL1qnZJrHNCrsWJL/wxVq0ISypYcrXCHosgdKzgLmX1KUgH/r
syFkS84SXkSa7A==
-----END CERTIFICATE-----
Generated at Fri Sep 25 07:28:53 2026 by rpki-client