Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/9a5af2-5daf-400b-b91a-5c00cbe76f34/1/GHrmJafreY8V_B5hw-E3AaNW_hY.mft
File: GHrmJafreY8V_B5hw-E3AaNW_hY.mft (raw, json)
Hash identifier: RamEIHjIFphE5OGVYgUlfIqDKGsduy8IokQnYg06lZo=
Subject key identifier: 93:0E:A0:85:77:60:10:19:33:D3:B3:23:C2:81:93:08:4B:BE:5A:B6
Authority key identifier: 18:7A:E6:25:A7:EB:79:8F:15:FC:1E:61:C3:E1:37:01:A3:56:FE:16
Certificate issuer: /CN=187ae625a7eb798f15fc1e61c3e13701a356fe16
Certificate serial: 019D3865803917007EA2B5B7CECF1BF54FD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GHrmJafreY8V_B5hw-E3AaNW_hY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/9a5af2-5daf-400b-b91a-5c00cbe76f34/1/GHrmJafreY8V_B5hw-E3AaNW_hY.mft
Manifest number: 02AE
Signing time: Sun 29 Mar 2026 07:01:09 +0000
Manifest this update: Sun 29 Mar 2026 07:01:09 +0000
Manifest next update: Mon 30 Mar 2026 07:01:09 +0000
Files and hashes: 1: GHrmJafreY8V_B5hw-E3AaNW_hY.crl (hash: +eC9b3p7Hpn+C17xM2IQcAWrN5pIR6wpcnNA8vQXFMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/9a5af2-5daf-400b-b91a-5c00cbe76f34/1/GHrmJafreY8V_B5hw-E3AaNW_hY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/9a5af2-5daf-400b-b91a-5c00cbe76f34/1/GHrmJafreY8V_B5hw-E3AaNW_hY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GHrmJafreY8V_B5hw-E3AaNW_hY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:80:39:17:00:7e:a2:b5:b7:ce:cf:1b:f5:4f:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=187ae625a7eb798f15fc1e61c3e13701a356fe16
Validity
Not Before: Mar 29 07:01:09 2026 GMT
Not After : Mar 30 07:01:09 2026 GMT
Subject: CN=930ea0857760101933d3b323c28193084bbe5ab6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:78:7c:a4:a1:71:cd:08:95:26:e4:19:20:5b:
5a:79:f6:6c:91:5f:c6:cb:f5:cc:c2:0b:b5:27:45:
1c:f2:42:ef:19:1d:76:9c:07:2f:0d:81:2b:d4:00:
be:80:39:9f:b8:97:51:9c:0d:94:c2:61:8b:13:ce:
28:56:ac:16:44:16:ea:1a:fb:eb:2f:d3:9f:34:4e:
cb:9d:7d:5b:1b:d5:ae:cd:99:3a:23:a6:2c:58:2c:
93:9e:f0:9c:50:85:0d:a7:2b:9b:7d:44:52:ad:a5:
21:03:15:c9:65:27:16:8c:e7:31:36:70:52:6b:9a:
80:7f:c7:69:d5:22:c7:94:ac:61:4d:c7:42:92:f5:
45:e9:21:f5:33:fc:d8:63:65:8b:fe:da:77:fe:a2:
ed:cf:5a:d0:fa:9c:94:7f:90:97:ef:f0:b2:8b:3e:
4f:41:68:93:f7:1c:79:ad:30:3d:1d:fa:c1:ac:8c:
c7:97:c4:83:8f:b8:d5:5c:d9:8d:fa:33:80:da:c2:
81:f4:fe:ec:79:44:15:28:55:5d:c3:74:dc:4c:4d:
39:ab:cd:93:76:e7:9f:c0:96:81:f4:31:94:5d:7c:
d2:0a:0f:c2:e9:eb:9b:53:a5:c6:f0:4b:a4:29:e6:
40:bf:c2:fe:84:f3:47:e5:98:2c:c1:a8:ef:cb:9d:
3f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:0E:A0:85:77:60:10:19:33:D3:B3:23:C2:81:93:08:4B:BE:5A:B6
X509v3 Authority Key Identifier:
keyid:18:7A:E6:25:A7:EB:79:8F:15:FC:1E:61:C3:E1:37:01:A3:56:FE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GHrmJafreY8V_B5hw-E3AaNW_hY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9a5af2-5daf-400b-b91a-5c00cbe76f34/1/GHrmJafreY8V_B5hw-E3AaNW_hY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9a5af2-5daf-400b-b91a-5c00cbe76f34/1/GHrmJafreY8V_B5hw-E3AaNW_hY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:2e:b1:de:97:16:33:3d:75:7b:48:1e:c3:6b:c7:8f:66:92:
30:9b:47:2c:2c:4d:09:e3:0d:1c:de:e2:b7:00:e9:e7:0b:40:
52:71:d8:ba:f1:28:0d:18:25:3b:7f:03:fc:41:e5:e8:ec:00:
b0:c6:d8:89:2d:a3:e9:df:01:fd:3e:d2:6e:91:0d:6b:2c:3d:
63:6f:01:5a:0b:d1:4c:5a:d9:9b:68:88:bd:34:35:38:cf:87:
11:75:b6:9a:0c:5b:ed:57:23:78:43:1e:90:74:20:b9:9c:6f:
46:d0:91:84:f8:e8:3f:1a:38:bc:84:7d:9b:12:09:4c:b1:57:
c1:97:89:d6:c8:1d:1f:00:98:7f:f0:04:25:b0:69:72:a8:fd:
53:db:7f:af:d8:25:ba:e9:9a:8b:2a:d7:02:cd:fb:59:5c:a9:
34:b1:73:4d:6f:e2:f4:d3:6c:95:19:44:ec:b1:7c:d3:09:9a:
0e:83:6d:21:1f:60:f9:9a:f5:6d:4b:00:2e:66:b7:3b:8c:74:
b1:c6:e1:df:cf:f9:da:30:8d:9b:d3:86:04:bb:dc:ac:46:ba:
b2:18:f8:51:bd:82:76:58:52:0b:5d:e3:62:c1:cb:a0:51:91:
84:c1:6e:0f:a2:3e:75:64:e3:0f:e1:dd:9e:90:b9:e6:ed:ab:
46:1d:8e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:26:16 2026 by rpki-client