Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/GHvBuyhitXJX0p4NO9axztQz6hM.mft
File: GHvBuyhitXJX0p4NO9axztQz6hM.mft (raw, json)
Hash identifier: +0xksjAyKI23aJsK9mXBgh5z/04enYT2iuVtIwKvHdU=
Subject key identifier: 54:63:FB:27:60:BE:80:C1:B1:63:D3:10:1B:19:85:5D:99:8A:B1:A4
Authority key identifier: 18:7B:C1:BB:28:62:B5:72:57:D2:9E:0D:3B:D6:B1:CE:D4:33:EA:13
Certificate issuer: /CN=187bc1bb2862b57257d29e0d3bd6b1ced433ea13
Certificate serial: 01A0ED0A62F9169F5A335AC4994D59DE9FD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GHvBuyhitXJX0p4NO9axztQz6hM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/GHvBuyhitXJX0p4NO9axztQz6hM.mft
Manifest number: F4
Signing time: Tue 29 Sep 2026 12:01:15 +0000
Manifest this update: Tue 29 Sep 2026 12:01:15 +0000
Manifest next update: Wed 30 Sep 2026 12:01:15 +0000
Files and hashes: 1: GHvBuyhitXJX0p4NO9axztQz6hM.crl (hash: h3JqeNgayCOu71YWTBkdLC9T9t9rIy/zq8hW5Ne5Eak=)
2: LUhM3H8lhONxGgoaXHEWfKhnz2Y.roa (hash: J7ufmJc4Z0JPmS7/Bpmv26Oq7u+qgxbzuIWPGLK6uo4=)
3: SFPLQXBEuitf9FRle3yJD2Tmikc.roa (hash: IrAXCvoBEciQQdZR3nxtSBV8+ab2Nq5ETilfM1Yg9CE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/GHvBuyhitXJX0p4NO9axztQz6hM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/GHvBuyhitXJX0p4NO9axztQz6hM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GHvBuyhitXJX0p4NO9axztQz6hM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:0a:62:f9:16:9f:5a:33:5a:c4:99:4d:59:de:9f:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=187bc1bb2862b57257d29e0d3bd6b1ced433ea13
Validity
Not Before: Sep 29 12:01:15 2026 GMT
Not After : Sep 30 12:01:15 2026 GMT
Subject: CN=5463fb2760be80c1b163d3101b19855d998ab1a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:83:95:bd:71:47:9f:ce:6f:ca:01:93:f0:50:
f6:a7:a4:4d:8e:f8:e4:72:a0:f7:f7:a4:55:d4:8b:
82:9c:8c:f2:7d:df:ee:c1:3b:3b:a5:89:3d:5c:f4:
88:8e:00:bb:ac:5d:c2:c4:24:31:18:2e:46:6e:56:
8e:90:5e:21:5d:02:cd:97:b0:56:07:06:80:bd:29:
06:6b:b0:42:36:5a:71:9f:09:7a:a5:4d:24:73:ab:
5d:8d:93:15:1e:38:7b:ec:ee:fa:16:9d:8f:92:15:
fb:62:e1:b2:13:99:d7:4e:bb:e2:86:f3:30:b7:a8:
08:57:86:87:a7:37:15:6f:6a:d4:25:66:a2:1a:bb:
72:05:57:21:0c:28:5b:a9:8b:a9:01:f6:d4:8a:1c:
47:df:09:7a:4e:cf:9c:65:3f:85:90:d9:d8:5a:fb:
38:0a:7a:3c:3e:7e:dc:5f:bb:6b:86:7f:7b:65:e7:
36:9a:ac:f5:f9:49:40:20:69:ae:a4:17:97:60:c9:
7e:31:c9:e1:5c:f9:df:a8:97:2a:a5:f6:ec:85:39:
44:56:ed:dc:65:d7:4a:e7:d5:65:04:27:d9:af:63:
75:67:b4:de:60:85:18:12:14:86:17:11:92:13:a6:
5b:eb:cb:bf:3c:58:f8:f3:ef:ee:3b:e6:2a:e6:57:
5a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:63:FB:27:60:BE:80:C1:B1:63:D3:10:1B:19:85:5D:99:8A:B1:A4
X509v3 Authority Key Identifier:
keyid:18:7B:C1:BB:28:62:B5:72:57:D2:9E:0D:3B:D6:B1:CE:D4:33:EA:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GHvBuyhitXJX0p4NO9axztQz6hM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/GHvBuyhitXJX0p4NO9axztQz6hM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/GHvBuyhitXJX0p4NO9axztQz6hM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:b0:e9:2e:03:1f:71:6c:b4:2d:c4:f2:90:ed:80:f5:d0:96:
d2:75:91:a9:86:26:44:bd:cb:10:0a:1c:35:fd:08:f5:f0:43:
be:25:ac:df:f5:3e:6f:e2:26:01:dc:fa:29:74:f0:04:fc:92:
20:b5:b3:c4:c8:c2:a7:f0:03:20:8f:fb:4d:f0:d0:9a:17:a1:
33:0f:13:d7:65:05:ae:56:5c:d0:d8:be:16:79:e1:a6:c6:f6:
0b:e6:dc:09:6f:b5:1e:da:21:a0:c6:61:7d:15:26:99:cb:5d:
47:a6:09:ef:54:e5:41:c7:c3:cd:51:3a:18:b6:99:d7:20:b6:
6d:3b:a8:3b:ac:18:52:c5:f5:d5:c8:52:07:35:ad:48:56:5b:
c1:79:35:cf:99:fc:00:4b:1a:fa:0d:91:11:4c:19:08:42:2c:
eb:a4:68:ac:17:dc:e1:32:36:f5:18:dd:ef:8c:31:1c:cb:36:
53:b8:f8:4c:8d:5a:9b:49:3b:d1:3e:01:45:22:54:c8:a2:1d:
00:ad:7e:0a:86:e1:eb:dd:c2:8f:bd:f7:78:1a:d9:0c:c2:b0:
b5:7b:09:18:7c:dc:58:11:fe:3b:8e:e0:18:43:54:4a:65:e2:
3f:53:b2:ed:74:c6:fb:eb:b9:d3:c8:78:91:74:bf:f0:23:42:
b8:44:e9:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 19:19:35 2026 by rpki-client