Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/698bec-a0f0-42f7-99fa-28516bb7505c/1/GHpwT0heEd7avFYmTl2AwUh-CEI.mft
File: GHpwT0heEd7avFYmTl2AwUh-CEI.mft (raw, json)
Hash identifier: a8vBb55q6+gtqON/AmUOcddzQU/gnWuLMf+4yE0L99k=
Subject key identifier: D7:A7:96:CE:1A:25:83:22:6D:B5:82:E6:71:4F:95:7F:6C:E2:43:BE
Authority key identifier: 18:7A:70:4F:48:5E:11:DE:DA:BC:56:26:4E:5D:80:C1:48:7E:08:42
Certificate issuer: /CN=187a704f485e11dedabc56264e5d80c1487e0842
Certificate serial: 019D25F1CE10AB52EBDE31A86817C88F202D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GHpwT0heEd7avFYmTl2AwUh-CEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/698bec-a0f0-42f7-99fa-28516bb7505c/1/GHpwT0heEd7avFYmTl2AwUh-CEI.mft
Manifest number: 03C0
Signing time: Wed 25 Mar 2026 17:01:37 +0000
Manifest this update: Wed 25 Mar 2026 17:01:37 +0000
Manifest next update: Thu 26 Mar 2026 17:01:37 +0000
Files and hashes: 1: GHpwT0heEd7avFYmTl2AwUh-CEI.crl (hash: QZ3WLgVk8NMwZdTtntzut6TX/gZPaiJUGZ4C2FtHDK8=)
2: uevpehLgWf1goDveIaAf_RWmFqo.roa (hash: 6gDUveXYOEUjPreD5zKGNwaO5HHi1e9vD8LKnyRtvSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/698bec-a0f0-42f7-99fa-28516bb7505c/1/GHpwT0heEd7avFYmTl2AwUh-CEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/698bec-a0f0-42f7-99fa-28516bb7505c/1/GHpwT0heEd7avFYmTl2AwUh-CEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GHpwT0heEd7avFYmTl2AwUh-CEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:ce:10:ab:52:eb:de:31:a8:68:17:c8:8f:20:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=187a704f485e11dedabc56264e5d80c1487e0842
Validity
Not Before: Mar 25 17:01:37 2026 GMT
Not After : Mar 26 17:01:37 2026 GMT
Subject: CN=d7a796ce1a2583226db582e6714f957f6ce243be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:a8:9f:fb:87:65:8c:1c:17:e5:4c:3d:43:8a:
84:6b:8a:d0:40:e8:2e:68:cc:d4:86:f4:a3:51:a6:
95:9f:b3:b5:9e:c7:63:3d:74:8b:89:c6:82:dd:6c:
0d:6a:9f:61:3a:ce:87:ae:d2:21:3b:44:e6:65:4a:
41:9e:a4:38:76:60:6c:7d:82:78:1f:04:ae:e8:c0:
59:e3:ca:80:f4:dd:60:25:41:f6:4a:90:99:b6:58:
af:51:cf:3c:99:7e:b8:70:b1:a6:7b:4c:40:c3:26:
e9:e3:fd:91:15:bd:fe:25:10:d4:66:c2:fe:c5:4b:
5d:1e:cb:ea:17:95:81:4c:f4:94:89:06:a4:fe:c7:
c6:26:aa:f8:95:3f:64:c6:e9:21:c9:72:11:9d:96:
e2:29:a4:a2:09:08:93:87:a0:aa:82:cd:9b:47:4a:
24:c2:47:01:8f:1a:63:21:28:3e:c7:ab:5b:f9:5b:
86:39:04:08:13:38:e1:0f:43:01:de:6a:ff:4f:8e:
4b:88:0f:eb:d7:b7:a7:2f:c9:72:4b:2f:e3:cb:21:
4e:69:c9:df:c1:db:04:83:dc:6a:78:63:50:1f:ed:
51:e7:d8:de:df:5e:28:a7:6f:5f:89:d7:ab:5a:fc:
c4:9a:5f:20:fe:32:19:b6:ca:ea:98:e0:d2:e5:62:
9c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:A7:96:CE:1A:25:83:22:6D:B5:82:E6:71:4F:95:7F:6C:E2:43:BE
X509v3 Authority Key Identifier:
keyid:18:7A:70:4F:48:5E:11:DE:DA:BC:56:26:4E:5D:80:C1:48:7E:08:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GHpwT0heEd7avFYmTl2AwUh-CEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/698bec-a0f0-42f7-99fa-28516bb7505c/1/GHpwT0heEd7avFYmTl2AwUh-CEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/698bec-a0f0-42f7-99fa-28516bb7505c/1/GHpwT0heEd7avFYmTl2AwUh-CEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:d0:1f:57:21:ec:42:3e:9d:9d:87:24:26:b6:5a:ae:63:98:
90:e0:aa:2b:04:84:89:cc:4e:62:86:3d:38:f4:59:46:77:52:
32:52:d0:b5:08:3c:0f:d3:6d:30:76:7d:ec:d3:7b:ae:59:be:
75:83:99:de:26:1b:bf:ed:d6:ef:f7:3c:1c:cd:45:e5:19:1f:
00:60:c9:41:a0:3f:7f:ff:ca:be:24:1c:da:ce:37:d4:8f:cd:
39:d9:56:94:44:56:d7:a2:aa:7f:9f:06:3f:20:fa:2d:e1:ee:
cf:06:f9:fc:94:75:50:b7:20:dc:a7:30:8d:8b:a6:a1:5a:93:
ca:4c:25:a1:89:94:9c:98:21:a5:16:90:eb:a1:7d:41:30:10:
6d:e3:af:1c:63:2e:71:34:a2:16:2a:b6:c9:90:25:1e:d6:10:
44:52:94:44:f2:ad:e3:ba:16:92:0d:0f:35:85:f2:94:c1:bb:
9f:5d:3b:b8:5c:73:ce:81:ba:7e:4c:f2:b0:2b:a8:be:7e:4c:
9a:22:56:a4:88:32:c5:b3:29:ae:98:b9:81:5e:c8:7d:5e:f7:
4a:cd:29:16:a0:bd:54:15:58:71:07:9d:39:99:cd:ea:41:0b:
95:fe:f3:a4:19:96:3f:41:80:1d:84:dc:17:32:5b:be:e1:0f:
61:ab:15:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:53:03 2026 by rpki-client