Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.mft
File: GKhKjkdfZgbnoS-SszDWPY-IC-A.mft (raw, json)
Hash identifier: UkM2nJbeOaRnVERlvhwuXMTnJ44gyPsQkFaD60I4sBE=
Subject key identifier: EF:A8:57:0B:52:8F:12:B5:54:4F:52:94:BA:ED:1E:68:DD:76:5F:65
Authority key identifier: 18:A8:4A:8E:47:5F:66:06:E7:A1:2F:92:B3:30:D6:3D:8F:88:0B:E0
Certificate issuer: /CN=18a84a8e475f6606e7a12f92b330d63d8f880be0
Certificate serial: 019F92EDE1169E80B7DC58B15527B0834DD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GKhKjkdfZgbnoS-SszDWPY-IC-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.mft
Manifest number: 1225
Signing time: Fri 24 Jul 2026 07:01:30 +0000
Manifest this update: Fri 24 Jul 2026 07:01:30 +0000
Manifest next update: Sat 25 Jul 2026 07:01:30 +0000
Files and hashes: 1: 06yOpErAwfmu7WvZFdUTDOLYIKg.roa (hash: 5YYabp9k2b6WBw8sfF/NEk7pKY9/HTMuCCjJqa+bbeQ=)
2: Eu4BP5a5E95Q7p4k5RfhumyOrvk.roa (hash: 1lD5R4cJuPj/nZ60zfBHs9WvrZ5YRD+ZAX1KkvheAUY=)
3: GKhKjkdfZgbnoS-SszDWPY-IC-A.crl (hash: DuloWvBRQ8W8OVhNcxr6pocb4dMmUV57y5B7jbU8WEM=)
4: Lz9HTbSY8lhhcxkrepciN8LQ0fQ.roa (hash: rZwlf03cUQC4V8ZoX8hCUb5cuhgy7zpkYtcAyoRPcgs=)
5: QGpEibgpEzzKHJ9Zq6TY1Hl8o-Y.roa (hash: +vRj62FE8yxCk1o/sYs/sodlZx7km+qb9MSzTq89XM4=)
6: ahZml9k3oIr290dwF6vuGRQYGMg.roa (hash: JIWiUU3hD62X9V1VtVd1M0m6Dubft4KBA0RK4vdkSeI=)
7: lnQm--gY8ePlCI161SZETEH7iss.roa (hash: vxrBUtHuyLV0LieoKDVoBuqAYfEuInf7kfLphmP99fg=)
8: mb8r9vp3wM6oJLJdPmkNlWrgKtE.roa (hash: Xrfg/Aqkw9N5mVtt/uYm1yP5BsOe0X4pZfMOzaQDicg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/GKhKjkdfZgbnoS-SszDWPY-IC-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:e1:16:9e:80:b7:dc:58:b1:55:27:b0:83:4d:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18a84a8e475f6606e7a12f92b330d63d8f880be0
Validity
Not Before: Jul 24 07:01:30 2026 GMT
Not After : Jul 25 07:01:30 2026 GMT
Subject: CN=efa8570b528f12b5544f5294baed1e68dd765f65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:46:a1:47:ad:21:02:02:91:82:b9:d5:74:29:
df:41:24:18:af:3a:02:5a:49:76:35:a1:62:b5:8b:
77:3c:f4:13:a7:69:42:4c:65:2e:bd:7d:a4:56:00:
34:23:3b:c6:f0:5e:21:50:ee:91:e6:bd:00:67:a1:
b2:96:7e:31:a0:b5:be:b5:11:96:ae:b3:39:ba:ed:
6c:34:a3:30:f0:9d:b4:86:f1:a5:37:2f:ef:bb:29:
79:63:2f:12:65:a5:00:03:da:06:97:33:14:1d:9c:
55:65:17:c6:df:c9:65:22:fa:e3:2d:9a:40:0f:2e:
cd:cd:45:17:be:fe:7b:6f:8f:b3:37:62:d3:35:11:
88:35:8c:e2:4b:ff:7f:10:68:d3:b5:e1:91:d0:65:
c9:d5:96:08:d4:fc:28:82:a5:10:3b:db:7e:90:5f:
82:e5:62:09:38:23:63:8e:f1:8e:3a:7e:75:d1:06:
e0:4b:41:51:e3:11:f9:cf:90:6d:24:d5:fa:64:22:
00:2a:df:7b:37:74:65:ba:cb:f3:47:1b:06:22:75:
3f:5d:e7:da:2f:e7:3a:e2:d0:d9:6f:8c:9e:9d:71:
f8:69:0b:61:70:07:ee:6d:65:66:72:ca:f9:95:e0:
11:dd:58:50:b3:87:e5:55:f2:6a:48:83:98:16:9c:
c5:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:A8:57:0B:52:8F:12:B5:54:4F:52:94:BA:ED:1E:68:DD:76:5F:65
X509v3 Authority Key Identifier:
keyid:18:A8:4A:8E:47:5F:66:06:E7:A1:2F:92:B3:30:D6:3D:8F:88:0B:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GKhKjkdfZgbnoS-SszDWPY-IC-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:08:5e:fe:5e:8f:89:7b:30:d4:93:ff:a5:20:04:e9:22:eb:
9f:de:4c:0f:c6:93:2e:7f:db:cd:38:05:45:78:e2:39:f8:e1:
e9:19:9d:fa:cc:93:48:67:62:30:2f:6a:b0:34:df:51:fe:f8:
24:a0:43:f6:0f:6f:3b:cb:9d:76:66:c7:29:7f:fe:f9:9b:90:
d6:04:a1:1f:f1:54:77:d1:3e:56:70:dc:a4:8d:f4:86:10:5e:
2d:28:da:b7:a1:06:2f:a7:dd:ec:9f:53:0a:f3:36:de:6c:68:
9b:d6:35:ab:a1:61:e0:3d:4e:57:d2:8c:e1:70:7e:a9:dc:36:
df:a3:14:14:5d:bb:2f:b9:47:95:f5:c8:c0:70:09:06:04:2c:
65:fa:be:9c:13:fd:e1:cb:de:28:02:3f:fb:25:30:ce:f1:26:
91:99:8e:f4:49:dc:38:22:c5:21:0f:54:84:20:8b:6d:13:ed:
cc:e3:86:28:31:97:27:ed:11:77:42:a9:4d:0f:49:75:e5:f7:
27:1e:85:4e:e5:66:19:b5:b5:fa:5b:f3:60:3f:01:60:82:a0:
00:f8:ca:ab:ad:8a:03:8b:d9:fe:32:c5:96:a3:dc:45:6a:e0:
b1:de:3e:91:01:6b:ed:72:87:64:21:c5:c8:e9:ad:20:ba:9c:
ae:c1:5f:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:53:22 2026 by rpki-client