Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/698bec-a0f0-42f7-99fa-28516bb7505c/1/GHpwT0heEd7avFYmTl2AwUh-CEI.mft
File: GHpwT0heEd7avFYmTl2AwUh-CEI.mft (raw, json)
Hash identifier: 4qVu3/ohxJsyV+upeHDSYvljhWWzCHCKPTtAAcLz7a8=
Subject key identifier: 7F:07:9C:92:FA:D2:7E:CA:6B:D3:79:F9:2E:A6:69:33:39:DA:8A:4A
Authority key identifier: 18:7A:70:4F:48:5E:11:DE:DA:BC:56:26:4E:5D:80:C1:48:7E:08:42
Certificate issuer: /CN=187a704f485e11dedabc56264e5d80c1487e0842
Certificate serial: 01A1065C8F355900E0FC65044E13B9A06943
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GHpwT0heEd7avFYmTl2AwUh-CEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/698bec-a0f0-42f7-99fa-28516bb7505c/1/GHpwT0heEd7avFYmTl2AwUh-CEI.mft
Manifest number: 05C5
Signing time: Sun 04 Oct 2026 10:01:31 +0000
Manifest this update: Sun 04 Oct 2026 10:01:31 +0000
Manifest next update: Mon 05 Oct 2026 10:01:31 +0000
Files and hashes: 1: AEpkQkkfLG6rJm7NAyWlaxt2CMs.roa (hash: /9I8pIAZhjtu6FrEBop1PE7UbloCJoFogvxN2q8jOmU=)
2: GHpwT0heEd7avFYmTl2AwUh-CEI.crl (hash: 5ou4bdO1Y9+UfgdUrGuQlApK2AMV/G7Odi1GuljntY4=)
3: aEnZIoEJkStf77dfAjgVbuSXis0.asa (hash: BGS53pukSEt/CRgtLVvrNUv1d2Wx94sdd8l5xlNSNcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/698bec-a0f0-42f7-99fa-28516bb7505c/1/GHpwT0heEd7avFYmTl2AwUh-CEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/698bec-a0f0-42f7-99fa-28516bb7505c/1/GHpwT0heEd7avFYmTl2AwUh-CEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GHpwT0heEd7avFYmTl2AwUh-CEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:06:5c:8f:35:59:00:e0:fc:65:04:4e:13:b9:a0:69:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=187a704f485e11dedabc56264e5d80c1487e0842
Validity
Not Before: Oct 4 10:01:31 2026 GMT
Not After : Oct 5 10:01:31 2026 GMT
Subject: CN=7f079c92fad27eca6bd379f92ea6693339da8a4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:42:90:69:dc:53:ef:f1:14:76:ff:9c:24:65:
58:98:2a:9c:0f:42:b0:ef:33:b1:60:56:b2:c9:43:
30:d2:14:d4:29:3e:f0:0b:a3:b2:52:2a:26:c5:e3:
0a:dd:2a:25:62:27:e5:4d:11:b6:70:96:4b:3b:0d:
d8:37:93:a3:10:b2:ee:5b:7e:9b:35:9a:6f:37:b1:
d2:5c:36:9a:df:9d:0d:b2:06:ac:14:49:cb:5c:a4:
39:d4:6e:ab:24:c6:e7:76:55:9e:17:94:94:0d:cc:
89:36:2f:79:1f:ad:c8:9e:c0:2a:46:18:15:92:c6:
db:e2:f3:d5:f7:38:7f:54:82:ef:43:30:0f:a8:a0:
d4:09:d9:aa:97:77:4c:d7:51:b5:06:d7:8d:4a:cc:
3b:93:8e:a5:4c:00:5d:2b:ad:5f:f6:00:dd:a9:df:
f6:5a:a4:74:6f:a4:5e:71:38:5c:c1:9f:77:a4:95:
3c:2e:62:d3:d7:79:62:97:c4:86:7a:23:4c:b5:f9:
23:3f:f5:18:73:08:91:e6:9d:51:2a:62:57:61:f2:
9f:ec:3f:9e:eb:c2:c2:29:8f:92:05:43:b1:09:85:
8e:4a:e2:72:aa:fb:ee:ad:3e:e3:18:93:05:24:44:
55:84:0f:67:78:9d:8e:14:59:b2:79:a6:a1:45:e5:
b8:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:07:9C:92:FA:D2:7E:CA:6B:D3:79:F9:2E:A6:69:33:39:DA:8A:4A
X509v3 Authority Key Identifier:
keyid:18:7A:70:4F:48:5E:11:DE:DA:BC:56:26:4E:5D:80:C1:48:7E:08:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GHpwT0heEd7avFYmTl2AwUh-CEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/698bec-a0f0-42f7-99fa-28516bb7505c/1/GHpwT0heEd7avFYmTl2AwUh-CEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/698bec-a0f0-42f7-99fa-28516bb7505c/1/GHpwT0heEd7avFYmTl2AwUh-CEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:7e:74:99:80:47:d7:51:91:4f:e9:2b:22:41:d6:42:c2:91:
13:a7:86:4b:18:18:ac:71:4c:93:94:6b:ae:5d:e7:4a:f7:e5:
41:43:0c:7e:4f:25:e2:a8:39:0b:c5:01:12:0e:90:5f:c4:2a:
3a:1f:f8:24:20:b2:46:85:fd:e6:fa:9e:45:c2:4c:17:ca:73:
f9:30:16:88:e6:c7:dc:31:4c:b5:c5:8c:6c:53:31:a7:ad:92:
0c:49:e4:57:62:be:f7:87:c4:b5:a3:63:ee:b6:57:31:12:0b:
d9:06:c0:5f:0e:9f:82:68:29:7f:c8:52:10:75:4e:e7:c4:b5:
73:cd:0b:60:4c:11:f2:71:f9:0f:cb:bf:f1:7c:cd:2a:ec:11:
b8:bf:93:d8:75:e1:e3:e0:ba:33:91:ef:e1:e2:22:92:4a:3d:
4a:7f:ef:64:dd:98:e6:60:6e:31:b4:65:78:7b:50:3f:99:99:
a4:38:93:57:c9:7b:9f:c2:c0:0c:4f:5d:d5:61:6e:68:cb:fc:
71:64:ce:0f:66:48:7c:18:f0:96:9a:96:3f:59:43:d5:11:e9:
38:6e:01:49:0f:01:13:bc:ec:51:ff:6e:43:0f:3c:2f:40:94:
16:56:35:c5:69:0a:f3:19:81:86:36:ae:46:50:72:31:30:43:
b7:b2:5b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 16:55:50 2026 by rpki-client