Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/698bec-a0f0-42f7-99fa-28516bb7505c/1/GHpwT0heEd7avFYmTl2AwUh-CEI.mft
File: GHpwT0heEd7avFYmTl2AwUh-CEI.mft (raw, json)
Hash identifier: iAR6iz4dh7WEXSAlxRCdI9HO5JCWa6plyjOQ0unI9Zc=
Subject key identifier: 10:37:C0:A4:94:98:8E:43:B9:D2:96:05:AF:96:42:B6:19:A1:89:9A
Authority key identifier: 18:7A:70:4F:48:5E:11:DE:DA:BC:56:26:4E:5D:80:C1:48:7E:08:42
Certificate issuer: /CN=187a704f485e11dedabc56264e5d80c1487e0842
Certificate serial: 019F8FB53E127F29E15C0E8F09B323B71527
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GHpwT0heEd7avFYmTl2AwUh-CEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/698bec-a0f0-42f7-99fa-28516bb7505c/1/GHpwT0heEd7avFYmTl2AwUh-CEI.mft
Manifest number: 0503
Signing time: Thu 23 Jul 2026 16:00:47 +0000
Manifest this update: Thu 23 Jul 2026 16:00:47 +0000
Manifest next update: Fri 24 Jul 2026 16:00:47 +0000
Files and hashes: 1: AEpkQkkfLG6rJm7NAyWlaxt2CMs.roa (hash: /9I8pIAZhjtu6FrEBop1PE7UbloCJoFogvxN2q8jOmU=)
2: GHpwT0heEd7avFYmTl2AwUh-CEI.crl (hash: VM2do9teLM3SGJqiN96cK+DVeMQVMVS7FlFioue2Mv0=)
3: aEnZIoEJkStf77dfAjgVbuSXis0.asa (hash: BGS53pukSEt/CRgtLVvrNUv1d2Wx94sdd8l5xlNSNcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/698bec-a0f0-42f7-99fa-28516bb7505c/1/GHpwT0heEd7avFYmTl2AwUh-CEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/698bec-a0f0-42f7-99fa-28516bb7505c/1/GHpwT0heEd7avFYmTl2AwUh-CEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GHpwT0heEd7avFYmTl2AwUh-CEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b5:3e:12:7f:29:e1:5c:0e:8f:09:b3:23:b7:15:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=187a704f485e11dedabc56264e5d80c1487e0842
Validity
Not Before: Jul 23 16:00:47 2026 GMT
Not After : Jul 24 16:00:47 2026 GMT
Subject: CN=1037c0a494988e43b9d29605af9642b619a1899a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:d2:95:78:a3:05:b0:fb:1e:9e:8e:b0:c8:60:
06:5e:62:77:25:95:7c:ad:02:20:e6:ac:e1:bb:20:
cc:12:c6:eb:e5:e2:f0:56:a4:0b:5c:06:77:c2:f6:
e3:73:31:12:da:57:c4:81:a9:d5:a0:44:3e:f2:da:
6b:53:8c:b6:05:ed:8a:48:3d:ce:69:db:db:e6:16:
ed:c9:f6:75:54:90:94:86:e1:26:2d:a6:48:c8:8e:
8f:bb:2a:c4:31:70:a6:50:9a:ad:b5:4b:4b:d8:b5:
69:c2:e2:3f:35:d6:3b:e3:a8:8b:74:c6:41:2b:52:
0a:6c:a6:50:c7:99:10:db:94:99:5e:35:dc:90:11:
4d:5a:c0:a0:47:fc:7d:af:56:f5:79:c6:17:2a:9a:
b4:6a:10:31:46:74:74:46:84:ca:c3:a4:81:5c:37:
b2:4f:84:34:62:29:33:04:1b:bb:98:41:cb:74:64:
4f:6f:e0:86:d5:20:a1:98:23:f7:8e:9a:11:8b:0f:
76:9f:d7:6a:b3:f5:a3:d9:d9:28:34:92:27:5f:5d:
0d:31:f9:2c:3d:14:7e:1d:f4:ad:3d:65:e7:32:b8:
fd:65:9b:1f:da:a4:e9:11:b1:c2:4c:8b:7c:28:f5:
5d:45:36:d3:80:db:4e:54:8b:b3:0d:d5:28:1f:7f:
87:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:37:C0:A4:94:98:8E:43:B9:D2:96:05:AF:96:42:B6:19:A1:89:9A
X509v3 Authority Key Identifier:
keyid:18:7A:70:4F:48:5E:11:DE:DA:BC:56:26:4E:5D:80:C1:48:7E:08:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GHpwT0heEd7avFYmTl2AwUh-CEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/698bec-a0f0-42f7-99fa-28516bb7505c/1/GHpwT0heEd7avFYmTl2AwUh-CEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/698bec-a0f0-42f7-99fa-28516bb7505c/1/GHpwT0heEd7avFYmTl2AwUh-CEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:00:28:35:24:b3:a5:ca:26:d9:4e:04:30:9a:32:14:ff:41:
ab:e8:30:a5:9a:35:f8:3c:0a:29:2c:9e:df:ab:17:d1:92:2b:
22:ba:7e:e4:98:4a:23:46:ba:af:15:3e:2b:aa:68:13:84:12:
94:27:3c:2b:d2:7e:b9:5e:1e:15:25:02:ca:1d:ca:42:85:8b:
a7:96:e2:8c:c4:d9:aa:a0:f1:65:24:b3:d5:41:fd:78:a1:0f:
db:f8:a4:82:94:03:a1:3e:8b:d2:f6:bb:0f:79:6a:1a:e4:c6:
54:45:3b:1f:f8:51:9a:73:ce:b6:7b:e0:b9:95:6a:a5:ed:eb:
3a:92:a0:5c:29:3e:4e:a6:bc:16:8f:78:bf:3d:38:f7:be:2a:
d1:2a:f2:ca:ee:f6:f3:df:e4:80:0c:63:61:65:47:61:03:cd:
a0:45:8d:70:bf:64:4f:55:95:a9:9b:c9:08:19:09:99:33:26:
a8:4b:96:5c:c2:90:0b:84:f7:32:b8:c3:f3:9e:3a:a9:e8:58:
e3:df:19:89:36:44:2c:8d:cc:cd:bc:d9:b8:ce:a0:f8:8c:df:
a8:49:17:27:54:dc:75:a3:f8:4c:51:eb:59:a7:f2:71:47:08:
55:4f:e8:34:60:5b:26:05:ec:c2:9a:4b:1b:9f:3e:8f:f7:40:
35:d7:e5:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:02:49 2026 by rpki-client