Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/GHvBuyhitXJX0p4NO9axztQz6hM.mft
File: GHvBuyhitXJX0p4NO9axztQz6hM.mft (raw, json)
Hash identifier: CwdPcq4+AoeMOD6GT1FNTT41Qv8dzRvFnEMEOM6qliM=
Subject key identifier: 5E:59:98:53:72:1D:75:14:77:D1:72:C5:3A:EF:FC:E9:83:49:AA:92
Authority key identifier: 18:7B:C1:BB:28:62:B5:72:57:D2:9E:0D:3B:D6:B1:CE:D4:33:EA:13
Certificate issuer: /CN=187bc1bb2862b57257d29e0d3bd6b1ced433ea13
Certificate serial: 019F954A3A638B63A94588A9B3CCF6A3A6F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GHvBuyhitXJX0p4NO9axztQz6hM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/GHvBuyhitXJX0p4NO9axztQz6hM.mft
Manifest number: 42
Signing time: Fri 24 Jul 2026 18:01:37 +0000
Manifest this update: Fri 24 Jul 2026 18:01:37 +0000
Manifest next update: Sat 25 Jul 2026 18:01:37 +0000
Files and hashes: 1: GHvBuyhitXJX0p4NO9axztQz6hM.crl (hash: 1n40td68BTkYFD1uHcnpaOAm+aKYKGdapDEmyT6eRmI=)
2: LUhM3H8lhONxGgoaXHEWfKhnz2Y.roa (hash: J7ufmJc4Z0JPmS7/Bpmv26Oq7u+qgxbzuIWPGLK6uo4=)
3: SFPLQXBEuitf9FRle3yJD2Tmikc.roa (hash: IrAXCvoBEciQQdZR3nxtSBV8+ab2Nq5ETilfM1Yg9CE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/GHvBuyhitXJX0p4NO9axztQz6hM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/GHvBuyhitXJX0p4NO9axztQz6hM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GHvBuyhitXJX0p4NO9axztQz6hM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:4a:3a:63:8b:63:a9:45:88:a9:b3:cc:f6:a3:a6:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=187bc1bb2862b57257d29e0d3bd6b1ced433ea13
Validity
Not Before: Jul 24 18:01:37 2026 GMT
Not After : Jul 25 18:01:37 2026 GMT
Subject: CN=5e599853721d751477d172c53aeffce98349aa92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:72:e7:70:78:62:f6:fe:bd:f5:00:40:b4:c2:
cb:56:b5:5e:1b:2c:68:39:54:53:48:28:c2:0f:40:
1a:11:6f:2f:5e:a6:d0:24:1c:35:33:b3:f0:bc:50:
68:8c:29:13:8c:c4:0a:50:ab:8e:31:3c:b9:7b:d1:
ad:c1:ac:d9:e3:26:fc:7a:a1:62:21:40:c6:2d:15:
be:40:20:cd:0d:90:96:8b:e5:50:50:9e:31:de:95:
b6:bc:fb:fe:95:78:68:19:6b:c1:fc:ce:64:62:30:
8c:66:ce:7c:3f:83:ae:32:e3:40:6c:9b:b1:f3:33:
d2:ce:0c:22:e1:be:81:de:a8:ff:d2:f6:93:44:69:
69:81:33:34:5b:fc:9a:ea:ab:16:2a:a9:ef:49:0e:
5c:b9:27:99:66:e2:2f:e2:74:2d:5f:48:1f:50:80:
a6:98:3a:43:07:e3:85:54:b0:46:db:62:ee:3e:ee:
b7:ed:5e:62:2d:d3:ba:b3:ee:69:ce:2d:8a:9e:d6:
7e:07:07:f4:0d:c6:02:75:f7:d9:99:22:e8:46:3e:
f5:e5:3e:90:28:20:0f:b0:52:c9:57:53:02:e5:ba:
5c:58:6d:61:87:57:ab:48:f9:9e:79:26:18:2c:94:
55:27:7e:ee:60:2c:a7:80:f7:f3:c7:37:ce:2e:ec:
91:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:59:98:53:72:1D:75:14:77:D1:72:C5:3A:EF:FC:E9:83:49:AA:92
X509v3 Authority Key Identifier:
keyid:18:7B:C1:BB:28:62:B5:72:57:D2:9E:0D:3B:D6:B1:CE:D4:33:EA:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GHvBuyhitXJX0p4NO9axztQz6hM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/GHvBuyhitXJX0p4NO9axztQz6hM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/GHvBuyhitXJX0p4NO9axztQz6hM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:9c:72:fb:c8:2f:21:28:2e:d1:d1:57:f1:71:60:4d:80:3c:
3f:cb:a6:01:32:f6:86:bc:bc:52:c5:1e:1e:fe:f9:f8:08:67:
a2:ac:c0:d3:7b:16:f3:62:87:d5:e2:45:10:39:c5:37:24:13:
d3:e7:4f:81:2b:9e:ec:20:6b:2a:fc:ed:a7:09:0d:7a:cf:be:
26:3e:9c:bc:90:f8:03:21:8f:3d:75:2f:80:89:ca:df:a5:26:
d2:83:47:15:d6:69:e3:15:8c:3e:05:1a:48:4e:54:cb:39:3f:
7a:34:6f:29:7b:e8:bd:51:10:98:58:9d:06:71:2e:67:b1:53:
7e:e6:61:e8:93:1f:c1:6b:e5:5a:40:18:57:57:0b:a2:c3:18:
bd:2a:d5:b6:23:a9:06:b5:e1:d3:e1:70:71:53:2e:62:d0:1d:
04:d5:d6:b4:1e:e8:a1:e0:df:91:35:21:b6:e8:2b:8f:dc:5b:
a7:e1:19:4b:aa:fe:1a:8f:56:4e:22:2c:17:0e:42:3f:c1:e8:
dc:2e:6b:81:01:bf:a2:f4:f7:8e:33:cd:c7:38:5e:46:c8:95:
a9:45:62:78:ff:87:93:a3:03:aa:34:6b:41:3f:5a:31:05:ba:
69:d8:15:fb:2e:4f:7a:d8:41:d7:13:c3:a6:8c:d1:42:14:ab:
db:c1:38:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:44:55 2026 by rpki-client