Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/a75aa5-536e-42a7-b2ab-961220fa951a/1/GHCRz8zDJ-YqY7G3Q6zvMqUGVU8.mft
File: GHCRz8zDJ-YqY7G3Q6zvMqUGVU8.mft (raw, json)
Hash identifier: W18k9X1cS8f1E/SbZxtPb4JSnlapCg1IpHHVkuw6NI8=
Subject key identifier: A4:70:07:0D:DA:1D:2B:FB:F0:EA:B5:20:BD:D2:06:B6:F2:96:A5:A3
Authority key identifier: 18:70:91:CF:CC:C3:27:E6:2A:63:B1:B7:43:AC:EF:32:A5:06:55:4F
Certificate issuer: /CN=187091cfccc327e62a63b1b743acef32a506554f
Certificate serial: 01A178157F401AE383A8E129D5EAD970472C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GHCRz8zDJ-YqY7G3Q6zvMqUGVU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/a75aa5-536e-42a7-b2ab-961220fa951a/1/GHCRz8zDJ-YqY7G3Q6zvMqUGVU8.mft
Manifest number: 013C
Signing time: Mon 26 Oct 2026 12:00:37 +0000
Manifest this update: Mon 26 Oct 2026 12:00:37 +0000
Manifest next update: Tue 27 Oct 2026 12:00:37 +0000
Files and hashes: 1: GHCRz8zDJ-YqY7G3Q6zvMqUGVU8.crl (hash: tnve2PnoFn/kZCs4bfciiMYEHoH+yygr2zjFfoKeh+s=)
2: ITQ_fLmxy4DjGBL45vz2QEMqGJA.roa (hash: HfggULB+36iVP97JMDur3JZVIMvMcNZa9ngwLysPNW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/a75aa5-536e-42a7-b2ab-961220fa951a/1/GHCRz8zDJ-YqY7G3Q6zvMqUGVU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/a75aa5-536e-42a7-b2ab-961220fa951a/1/GHCRz8zDJ-YqY7G3Q6zvMqUGVU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GHCRz8zDJ-YqY7G3Q6zvMqUGVU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:15:7f:40:1a:e3:83:a8:e1:29:d5:ea:d9:70:47:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=187091cfccc327e62a63b1b743acef32a506554f
Validity
Not Before: Oct 26 12:00:37 2026 GMT
Not After : Oct 27 12:00:37 2026 GMT
Subject: CN=a470070dda1d2bfbf0eab520bdd206b6f296a5a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e4:36:e8:f1:89:3a:cd:84:0a:0d:33:b0:73:
1d:57:5d:33:ff:f6:00:23:d5:11:73:14:76:88:b4:
e1:5a:00:af:52:07:35:ac:b4:3e:3e:35:08:fb:52:
b5:fc:77:08:e1:11:f9:9b:22:e9:18:35:46:45:d1:
54:61:c0:d6:91:40:84:12:92:90:8a:54:cf:43:8f:
94:cf:81:cd:02:9a:fd:9c:5b:66:f8:14:bf:f8:07:
5a:b0:e1:1a:3c:10:1b:90:f5:71:f1:17:0d:7f:40:
ef:56:db:c1:c2:6f:ac:32:ee:35:06:d0:f5:06:2f:
ba:72:d9:86:79:19:02:8c:08:59:ca:f8:ed:e9:d9:
b3:6d:2c:9e:dd:21:25:1c:cc:ec:e4:54:c9:74:8e:
71:b9:4c:56:09:14:39:59:2e:a0:57:2a:3a:62:16:
f7:04:1e:a3:5c:fc:44:c0:ba:62:0f:1e:e3:90:06:
27:b9:09:ca:e1:d3:74:40:c6:e7:17:f6:93:fb:64:
1a:01:90:2f:3d:cd:32:53:20:9b:67:44:11:09:6e:
29:77:4c:62:4b:22:84:f8:e5:0f:0f:c4:5c:bb:b8:
90:da:23:4d:51:f6:e6:51:b0:f2:bd:fd:09:8a:e8:
f3:37:bb:f6:25:9e:b2:86:72:e0:cb:be:31:d4:e9:
d8:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:70:07:0D:DA:1D:2B:FB:F0:EA:B5:20:BD:D2:06:B6:F2:96:A5:A3
X509v3 Authority Key Identifier:
keyid:18:70:91:CF:CC:C3:27:E6:2A:63:B1:B7:43:AC:EF:32:A5:06:55:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GHCRz8zDJ-YqY7G3Q6zvMqUGVU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a75aa5-536e-42a7-b2ab-961220fa951a/1/GHCRz8zDJ-YqY7G3Q6zvMqUGVU8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a75aa5-536e-42a7-b2ab-961220fa951a/1/GHCRz8zDJ-YqY7G3Q6zvMqUGVU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:94:66:f2:22:81:eb:da:55:9c:f8:d3:f9:d1:58:55:4b:10:
53:08:53:72:2c:73:db:7a:7e:0b:3e:0e:de:c9:44:b1:4f:72:
4a:dc:06:35:60:51:02:3d:8f:ba:11:5e:00:a5:96:ad:cf:e8:
dc:63:fb:a2:8d:fa:63:58:f0:3e:42:f1:d8:c8:eb:d0:b7:7b:
8c:80:17:27:19:d2:85:0e:f7:a2:c6:61:4f:d3:5b:8f:a4:69:
17:58:fb:b5:65:d8:63:34:e3:cb:11:2e:ba:d2:a4:87:4c:28:
7c:8f:af:92:ba:04:90:13:5a:6f:3c:a0:27:e7:cb:43:c1:6b:
47:4c:7e:f6:69:d6:9c:1f:e3:bf:25:0a:b1:b8:16:dc:65:4b:
ed:7c:c9:4e:75:4d:11:34:2f:1f:c3:ba:2c:6e:94:0d:5b:a6:
a4:c5:41:22:75:f2:23:08:07:37:30:a7:54:46:95:92:50:26:
df:f2:b8:2f:e3:c0:7a:c8:4c:1e:b3:da:5c:87:d7:69:fa:ea:
cf:e5:15:ab:9f:24:c4:7c:56:9e:e6:36:b5:b0:44:c5:11:44:
e3:48:ca:e6:f7:92:27:a5:a4:02:45:66:30:c9:f5:ca:92:40:
44:63:5d:dc:d8:6a:84:66:d7:6e:3e:38:41:8a:3e:ad:7e:9f:
6f:7e:50:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 16:14:42 2026 by rpki-client