Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/698bec-a0f0-42f7-99fa-28516bb7505c/1/GHpwT0heEd7avFYmTl2AwUh-CEI.mft
File: GHpwT0heEd7avFYmTl2AwUh-CEI.mft (raw, json)
Hash identifier: y7FQu0QB3H9hoWjxUff/H0AFbALArEhX2fWVaB7zraQ=
Subject key identifier: 80:50:7A:E2:FB:1C:2B:03:68:BD:E8:DF:77:7B:B3:E9:13:B9:60:B4
Authority key identifier: 18:7A:70:4F:48:5E:11:DE:DA:BC:56:26:4E:5D:80:C1:48:7E:08:42
Certificate issuer: /CN=187a704f485e11dedabc56264e5d80c1487e0842
Certificate serial: 01A0EF2FAD0BBFCBC37C9BA2B279C98E51B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GHpwT0heEd7avFYmTl2AwUh-CEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/698bec-a0f0-42f7-99fa-28516bb7505c/1/GHpwT0heEd7avFYmTl2AwUh-CEI.mft
Manifest number: 05B9
Signing time: Tue 29 Sep 2026 22:01:14 +0000
Manifest this update: Tue 29 Sep 2026 22:01:14 +0000
Manifest next update: Wed 30 Sep 2026 22:01:14 +0000
Files and hashes: 1: AEpkQkkfLG6rJm7NAyWlaxt2CMs.roa (hash: /9I8pIAZhjtu6FrEBop1PE7UbloCJoFogvxN2q8jOmU=)
2: GHpwT0heEd7avFYmTl2AwUh-CEI.crl (hash: tIZ2d8/+kFUAmyrhnpwN0E9WjhbOZpbtdB/lcGfoz1I=)
3: aEnZIoEJkStf77dfAjgVbuSXis0.asa (hash: BGS53pukSEt/CRgtLVvrNUv1d2Wx94sdd8l5xlNSNcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/698bec-a0f0-42f7-99fa-28516bb7505c/1/GHpwT0heEd7avFYmTl2AwUh-CEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/698bec-a0f0-42f7-99fa-28516bb7505c/1/GHpwT0heEd7avFYmTl2AwUh-CEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GHpwT0heEd7avFYmTl2AwUh-CEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ef:2f:ad:0b:bf:cb:c3:7c:9b:a2:b2:79:c9:8e:51:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=187a704f485e11dedabc56264e5d80c1487e0842
Validity
Not Before: Sep 29 22:01:14 2026 GMT
Not After : Sep 30 22:01:14 2026 GMT
Subject: CN=80507ae2fb1c2b0368bde8df777bb3e913b960b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d1:68:9f:05:56:7a:0b:cd:34:59:bd:ce:bb:
da:77:89:1c:aa:21:39:2b:17:7f:41:7a:08:1b:a9:
85:55:17:ff:d3:b6:62:2a:4c:ef:de:6d:27:d1:9c:
dd:91:83:d5:ce:a7:9d:0a:00:0a:b7:c5:16:8a:1b:
0c:31:f5:31:33:eb:24:5b:e6:58:9b:8c:7a:1e:70:
cb:0a:33:0a:96:5c:a2:e3:42:27:ff:e4:4b:90:59:
4a:98:27:fb:5a:bc:86:fb:79:8e:46:98:5d:5b:70:
ac:d5:2d:5e:69:c0:85:48:cd:7e:62:97:a5:c3:4d:
e9:8b:05:eb:09:5e:49:18:11:74:f1:76:a4:e4:96:
af:d6:97:3c:d6:7b:ad:ab:05:88:e1:b8:2c:d2:3e:
a9:22:d2:cb:36:90:28:5b:11:74:2e:f1:32:65:77:
ea:f0:73:97:6b:35:9a:26:ec:ba:6a:c1:26:0b:79:
bd:44:9c:d0:51:80:78:80:9b:d4:27:a0:68:ce:82:
0d:34:37:17:7a:41:6d:a4:d3:87:e0:80:d6:c9:93:
55:cf:bb:85:4b:96:c2:56:33:b0:ea:01:f7:03:4e:
06:c6:af:9c:62:99:96:9a:c4:2d:9d:c3:ec:05:fa:
92:d9:85:ad:9f:99:e2:d2:01:19:a7:d1:07:53:d9:
f8:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:50:7A:E2:FB:1C:2B:03:68:BD:E8:DF:77:7B:B3:E9:13:B9:60:B4
X509v3 Authority Key Identifier:
keyid:18:7A:70:4F:48:5E:11:DE:DA:BC:56:26:4E:5D:80:C1:48:7E:08:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GHpwT0heEd7avFYmTl2AwUh-CEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/698bec-a0f0-42f7-99fa-28516bb7505c/1/GHpwT0heEd7avFYmTl2AwUh-CEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/698bec-a0f0-42f7-99fa-28516bb7505c/1/GHpwT0heEd7avFYmTl2AwUh-CEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:8e:dd:70:53:8a:c2:34:15:06:f8:58:57:6e:59:af:d2:88:
29:58:c8:9c:f4:72:89:7b:84:cb:2c:bc:dc:b9:b2:ce:5c:2e:
5b:62:47:65:87:4d:4b:48:6a:0e:a7:25:84:30:7c:e8:74:51:
78:ef:56:0a:bb:5c:95:06:57:33:76:b9:fd:39:b8:75:07:20:
fa:ae:b5:f7:79:75:35:f1:07:da:39:6d:20:6d:d6:48:0f:f9:
dc:3d:2b:70:2e:0a:a3:83:f9:67:b8:5c:d1:88:b7:e2:d8:17:
8b:6f:18:43:29:7b:76:31:bb:e3:26:04:2c:8a:23:cf:85:00:
e5:52:1c:ae:70:0a:e3:26:5a:33:ac:f9:fa:5d:4b:97:46:89:
28:b8:e1:da:aa:c0:27:f8:4d:c1:ca:6f:49:ea:af:7f:ed:47:
95:02:37:67:a4:4a:82:02:bb:b6:04:3c:96:af:77:27:9a:7f:
99:fd:6f:2e:66:fc:c4:c3:50:32:27:24:c1:92:ed:3b:ed:3d:
07:96:bd:42:9c:fb:83:90:e4:c3:25:c5:f6:ee:dc:9b:16:e1:
98:eb:12:c7:c3:6b:38:6a:97:0f:2f:b4:e1:ef:b5:7f:3d:4c:
c6:89:a2:1d:14:34:97:ef:f6:9a:8e:c4:b6:ce:d7:fa:5c:75:
57:96:3c:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 04:00:23 2026 by rpki-client