Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.mft
File: GKhKjkdfZgbnoS-SszDWPY-IC-A.mft (raw, json)
Hash identifier: 7WoFz82RudmYLLxa8bfx+WwQGMWsQCguraBP8QBp8JQ=
Subject key identifier: 01:60:4F:EF:14:5F:8B:2E:8F:28:EB:2B:D3:7C:D7:3E:B6:FF:51:46
Authority key identifier: 18:A8:4A:8E:47:5F:66:06:E7:A1:2F:92:B3:30:D6:3D:8F:88:0B:E0
Certificate issuer: /CN=18a84a8e475f6606e7a12f92b330d63d8f880be0
Certificate serial: 019D2AE0D4596F9C80FAFEB320FB5E52725D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GKhKjkdfZgbnoS-SszDWPY-IC-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.mft
Manifest number: 10E2
Signing time: Thu 26 Mar 2026 16:01:10 +0000
Manifest this update: Thu 26 Mar 2026 16:01:10 +0000
Manifest next update: Fri 27 Mar 2026 16:01:10 +0000
Files and hashes: 1: 8Ql9UfBMlhf-9sEO0J-6rh-4uGE.roa (hash: cCjd/UNv//U8Wz2A7iG4uR2Nv+n8ykigX0NiqbbBYBw=)
2: Eu4BP5a5E95Q7p4k5RfhumyOrvk.roa (hash: 1lD5R4cJuPj/nZ60zfBHs9WvrZ5YRD+ZAX1KkvheAUY=)
3: GKhKjkdfZgbnoS-SszDWPY-IC-A.crl (hash: QQ0Q6wrADBrz5HKvYHm753stb9P2IOcnYrZnO+DJ4I8=)
4: lnQm--gY8ePlCI161SZETEH7iss.roa (hash: vxrBUtHuyLV0LieoKDVoBuqAYfEuInf7kfLphmP99fg=)
5: mb8r9vp3wM6oJLJdPmkNlWrgKtE.roa (hash: Xrfg/Aqkw9N5mVtt/uYm1yP5BsOe0X4pZfMOzaQDicg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/GKhKjkdfZgbnoS-SszDWPY-IC-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e0:d4:59:6f:9c:80:fa:fe:b3:20:fb:5e:52:72:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18a84a8e475f6606e7a12f92b330d63d8f880be0
Validity
Not Before: Mar 26 16:01:10 2026 GMT
Not After : Mar 27 16:01:10 2026 GMT
Subject: CN=01604fef145f8b2e8f28eb2bd37cd73eb6ff5146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:4e:cb:d7:a8:15:4c:92:2e:9c:e2:3b:9d:23:
5c:5a:77:78:f8:39:ad:e7:92:34:fd:c7:46:79:7b:
49:c6:3f:11:9d:49:e5:72:68:4d:c6:a4:aa:e6:38:
3d:af:e0:17:c2:54:94:24:d4:f3:dd:c9:8f:43:54:
54:8a:86:2d:ab:cc:26:95:81:2b:b1:ce:05:2f:09:
ad:43:26:89:a0:38:86:2d:f7:5d:5c:f2:e3:d4:5d:
b3:e8:81:7c:7c:be:d1:b3:2f:f6:fa:da:1f:6d:c2:
e4:52:79:d0:fe:01:2b:44:a9:88:b9:bc:af:69:26:
18:f1:71:0d:8d:3c:17:77:75:f1:f7:1b:39:d8:bd:
1a:fc:35:50:9f:77:07:b2:20:3c:c5:d3:d0:a7:99:
1a:d2:a3:17:c2:b1:2a:46:ff:2d:d6:89:62:db:c8:
dd:05:20:0d:95:56:24:9c:7c:12:26:67:30:00:9b:
0d:61:28:00:ac:c3:93:1f:c2:0f:be:d0:26:c7:a0:
3f:89:72:dc:58:32:31:b8:6f:6c:b4:d3:be:9f:86:
c9:1f:37:15:69:8f:8c:0d:5a:60:cd:f3:f7:e2:e9:
f0:53:45:45:68:d1:ec:a3:56:61:46:37:32:7a:0c:
92:77:f0:12:db:f5:96:f7:63:cf:26:fc:5c:7e:d5:
7f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:60:4F:EF:14:5F:8B:2E:8F:28:EB:2B:D3:7C:D7:3E:B6:FF:51:46
X509v3 Authority Key Identifier:
keyid:18:A8:4A:8E:47:5F:66:06:E7:A1:2F:92:B3:30:D6:3D:8F:88:0B:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GKhKjkdfZgbnoS-SszDWPY-IC-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:e5:25:b1:35:34:9e:1f:11:14:cc:d5:37:b1:a1:17:a6:60:
5a:f4:40:78:cc:d0:5c:37:6b:ff:50:62:62:f8:4f:56:b8:79:
cd:85:94:8a:3a:6d:79:96:69:01:71:21:0e:e2:db:dd:b3:46:
79:22:06:c0:c6:b9:31:c3:d6:d9:63:0a:16:38:e1:d1:c9:fe:
e0:5c:9e:af:61:8a:89:91:71:16:70:be:ed:51:28:42:59:31:
74:02:1a:35:f5:01:e7:43:de:6f:5c:23:88:89:be:59:16:b2:
65:08:96:53:2c:92:c1:95:17:3b:2d:58:a7:42:c1:90:0e:45:
a3:fd:a9:fc:a8:ff:cd:c0:d1:48:07:56:bd:ce:c3:d8:8d:ef:
a8:df:82:c6:90:de:9f:d0:b2:52:bc:31:9b:79:c7:51:64:e4:
07:99:0a:e1:6b:f6:1f:5d:ba:fd:3d:97:7d:ee:df:98:74:6a:
65:8e:c9:56:49:e6:0c:f6:ec:49:13:a9:70:dc:8a:fc:cc:96:
a8:d0:82:b4:db:e3:03:63:c4:15:6c:58:8d:7d:f4:4a:70:63:
59:1b:c2:58:92:e3:42:94:2f:67:03:e1:8e:dc:8a:e2:8c:cd:
6e:d0:a8:a6:91:1e:cc:52:b7:3d:21:a3:6e:38:04:70:b5:a2:
79:b8:f9:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:50:53 2026 by rpki-client