Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/a75aa5-536e-42a7-b2ab-961220fa951a/1/GHCRz8zDJ-YqY7G3Q6zvMqUGVU8.mft
File: GHCRz8zDJ-YqY7G3Q6zvMqUGVU8.mft (raw, json)
Hash identifier: d0Up4aWe7OtcRLLjHCTPXRdcZsfOnezch1fOyXHCWlM=
Subject key identifier: 4B:20:DA:4F:F0:9B:77:61:EE:C6:9A:C9:80:2A:CE:7E:CA:FC:29:E9
Authority key identifier: 18:70:91:CF:CC:C3:27:E6:2A:63:B1:B7:43:AC:EF:32:A5:06:55:4F
Certificate issuer: /CN=187091cfccc327e62a63b1b743acef32a506554f
Certificate serial: 019FA0DFBEB1E6A738EAA3B3FB0A309C6146
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GHCRz8zDJ-YqY7G3Q6zvMqUGVU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/a75aa5-536e-42a7-b2ab-961220fa951a/1/GHCRz8zDJ-YqY7G3Q6zvMqUGVU8.mft
Manifest number: 48
Signing time: Mon 27 Jul 2026 00:00:45 +0000
Manifest this update: Mon 27 Jul 2026 00:00:45 +0000
Manifest next update: Tue 28 Jul 2026 00:00:45 +0000
Files and hashes: 1: GHCRz8zDJ-YqY7G3Q6zvMqUGVU8.crl (hash: l1wdGY2OwgbObp9bgwQ3tY1u3sZURGwbvGTGXv7xKhc=)
2: ITQ_fLmxy4DjGBL45vz2QEMqGJA.roa (hash: HfggULB+36iVP97JMDur3JZVIMvMcNZa9ngwLysPNW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/a75aa5-536e-42a7-b2ab-961220fa951a/1/GHCRz8zDJ-YqY7G3Q6zvMqUGVU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/a75aa5-536e-42a7-b2ab-961220fa951a/1/GHCRz8zDJ-YqY7G3Q6zvMqUGVU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GHCRz8zDJ-YqY7G3Q6zvMqUGVU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 00:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:df:be:b1:e6:a7:38:ea:a3:b3:fb:0a:30:9c:61:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=187091cfccc327e62a63b1b743acef32a506554f
Validity
Not Before: Jul 27 00:00:45 2026 GMT
Not After : Jul 28 00:00:45 2026 GMT
Subject: CN=4b20da4ff09b7761eec69ac9802ace7ecafc29e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:04:a0:e8:ee:48:15:7b:e4:7d:57:9f:98:fb:
13:34:73:b1:f0:66:10:37:08:40:00:9f:6d:9e:7f:
86:fa:74:9a:67:dc:07:5c:d5:28:17:b4:70:85:aa:
37:05:fc:d7:7b:a5:eb:05:95:59:f1:e0:de:71:e7:
86:21:43:71:a2:11:dd:3b:d7:f0:da:24:f9:9a:ca:
23:41:ef:55:5e:1d:67:87:f9:3d:be:8a:be:92:a3:
d6:b6:2f:f4:a6:8d:46:74:f8:95:16:2d:96:d4:14:
ef:4a:66:c6:21:3a:28:8c:bb:ab:d5:d5:ab:38:cb:
b7:6c:6e:9e:f4:a5:30:49:43:34:b3:d5:22:e7:b4:
a5:0f:f1:bf:6a:66:25:03:77:f7:f5:0d:71:9b:16:
07:79:20:66:be:b5:00:a5:15:21:d9:62:f3:fc:29:
e3:94:1b:f4:11:05:9a:37:d1:57:b8:06:be:29:8e:
76:96:b9:e9:be:40:24:92:16:78:65:16:30:b6:cc:
cc:d1:2e:b0:c2:bd:96:30:50:8c:74:1d:2c:de:ef:
97:4d:01:42:ea:61:3f:18:dd:16:c5:ba:5e:63:76:
cd:5f:85:be:b2:b9:0a:67:a9:ef:cb:98:64:bc:7e:
d8:a3:48:a6:11:45:7b:8d:59:fb:a0:44:81:c7:03:
4c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:20:DA:4F:F0:9B:77:61:EE:C6:9A:C9:80:2A:CE:7E:CA:FC:29:E9
X509v3 Authority Key Identifier:
keyid:18:70:91:CF:CC:C3:27:E6:2A:63:B1:B7:43:AC:EF:32:A5:06:55:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GHCRz8zDJ-YqY7G3Q6zvMqUGVU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a75aa5-536e-42a7-b2ab-961220fa951a/1/GHCRz8zDJ-YqY7G3Q6zvMqUGVU8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a75aa5-536e-42a7-b2ab-961220fa951a/1/GHCRz8zDJ-YqY7G3Q6zvMqUGVU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:42:83:fc:d1:3a:9f:15:a1:b2:c7:3e:ab:8b:0b:a0:b3:cc:
70:ab:9a:b2:01:a5:fb:b3:25:03:10:5a:44:aa:7b:8a:e9:cd:
0c:73:aa:89:53:4f:c2:b5:15:7b:c3:9c:6c:5d:b2:5d:32:68:
cd:54:22:1a:33:c3:bb:50:70:9f:95:52:e0:6c:88:41:9d:8d:
e6:b7:4f:95:da:7f:a8:1b:d4:65:ff:04:9c:77:50:fa:56:fd:
26:c9:b3:86:d5:73:dc:a1:79:70:2e:32:96:2f:d4:53:a0:0a:
93:c2:67:42:56:df:c0:2a:a8:8c:d1:c6:e4:76:c8:a3:af:18:
d1:59:69:20:de:5e:3d:fd:4c:ee:2e:41:d9:5c:f3:07:3b:37:
7c:4a:3a:ae:a1:15:85:b6:57:2a:88:49:c0:80:c6:de:12:2a:
fc:70:f3:3d:e2:64:e4:9a:7e:f6:e7:65:81:fe:85:f8:aa:6f:
fd:dc:44:f3:26:18:67:da:83:08:94:ad:6d:be:79:c0:62:ea:
40:1f:8b:5e:8c:6e:56:27:38:8e:24:a3:0d:c7:1c:12:39:b4:
0d:7d:f5:bc:d1:cc:6a:1b:64:c6:16:c4:4f:d7:e8:16:1c:43:
1b:db:da:bd:08:ca:7c:bb:9a:ae:10:d5:84:61:b6:bb:71:82:
88:c6:08:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 08:57:35 2026 by rpki-client