Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.mft
File: Ghrl5JpEq93CKwrb2utkE28l1Gc.mft (raw, json)
Hash identifier: /ztnyhorSLfjISsy/NHwXJZG9TQ2GkTJoaRzthhzh1s=
Subject key identifier: B1:B8:5E:38:F1:15:86:DB:31:5A:4E:E0:D3:6C:2D:CA:7E:F4:FF:8C
Authority key identifier: 1A:1A:E5:E4:9A:44:AB:DD:C2:2B:0A:DB:DA:EB:64:13:6F:25:D4:67
Certificate issuer: /CN=1a1ae5e49a44abddc22b0adbdaeb64136f25d467
Certificate serial: 019F18D6D506ECD6C37D0E39ABC54A653292
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ghrl5JpEq93CKwrb2utkE28l1Gc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.mft
Manifest number: 12C2
Signing time: Tue 30 Jun 2026 14:02:40 +0000
Manifest this update: Tue 30 Jun 2026 14:02:40 +0000
Manifest next update: Wed 01 Jul 2026 14:02:40 +0000
Files and hashes: 1: Ghrl5JpEq93CKwrb2utkE28l1Gc.crl (hash: AYrjk2OgH4Ml51BXq5i49jxNfhGDXUKccZDV1Y2D98o=)
2: _H4CUuz3Tvl-T1zwCAZAvhXJbiM.roa (hash: xsJ3awajiTbn083/zKjj3KHpA/9WdA0RqzmcuoYihQA=)
3: kz2Yp1K6YIxekPASAxXKtmwq5Nc.roa (hash: wGYvhz3IuQwWNkOw50DFvXGGrTTnqTHVgvd/Ec1JbTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ghrl5JpEq93CKwrb2utkE28l1Gc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:02:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:d6:d5:06:ec:d6:c3:7d:0e:39:ab:c5:4a:65:32:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a1ae5e49a44abddc22b0adbdaeb64136f25d467
Validity
Not Before: Jun 30 14:02:40 2026 GMT
Not After : Jul 1 14:02:40 2026 GMT
Subject: CN=b1b85e38f11586db315a4ee0d36c2dca7ef4ff8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d2:c3:12:22:57:bc:0f:c6:35:c6:f3:97:ca:
3e:2d:61:21:94:94:26:3e:64:e7:75:0c:03:7d:2b:
37:15:31:23:ba:79:6e:62:e3:bf:13:58:b0:7f:b5:
2f:cc:7a:af:dc:e5:21:7c:d4:ab:14:71:42:99:a1:
28:cf:34:cb:7c:73:b2:e2:fb:d0:ef:d3:a5:65:30:
87:79:f3:0a:04:d3:51:2d:d3:fb:80:34:0d:36:ae:
73:73:6d:39:30:0e:df:51:f4:55:f2:1a:56:f1:06:
2f:a8:77:fd:94:58:cd:2a:60:06:cf:4e:37:c8:d1:
b9:08:55:1b:a6:f3:4d:09:7f:85:69:9f:17:bf:93:
50:8e:4a:6e:82:b2:e4:dd:ee:fb:d8:25:aa:39:8c:
fa:00:3d:90:60:98:21:7e:16:5c:25:19:4c:93:c2:
6c:28:56:3e:dd:12:a0:21:5c:c3:6f:0a:05:9d:f7:
8f:fe:55:c1:2a:87:0c:4d:cd:fb:b8:7d:c2:55:d8:
da:8c:bd:51:dc:8e:a1:a9:9e:94:79:b6:10:41:13:
79:07:2f:7a:5b:4f:81:d7:fd:69:b8:26:c0:6b:65:
35:9e:54:f1:50:01:a9:71:cc:6d:92:e9:c6:6d:6e:
bc:b9:73:45:16:ac:09:0a:dd:58:be:cc:61:12:71:
07:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:B8:5E:38:F1:15:86:DB:31:5A:4E:E0:D3:6C:2D:CA:7E:F4:FF:8C
X509v3 Authority Key Identifier:
keyid:1A:1A:E5:E4:9A:44:AB:DD:C2:2B:0A:DB:DA:EB:64:13:6F:25:D4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ghrl5JpEq93CKwrb2utkE28l1Gc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:ca:f9:92:04:c5:2e:80:e3:b9:1d:99:5c:ad:f0:65:6e:6b:
2a:86:77:6c:5d:32:cb:37:3d:e2:b8:6f:aa:6f:7c:b8:93:ac:
c7:c5:cd:09:df:20:73:e5:23:b5:6a:b6:c8:45:a3:e2:0c:b7:
78:6d:bc:df:f5:df:18:96:64:1c:c0:3e:60:91:a4:85:1a:bf:
5b:b8:31:30:b4:d3:48:b9:8f:53:a1:5a:9e:fe:0b:42:8d:fa:
c8:9b:58:ff:64:f6:41:17:b9:55:17:72:e9:31:bc:79:57:49:
bd:2e:26:dd:04:d9:0c:2f:91:df:75:f8:1b:41:00:7f:98:0b:
cf:e8:6a:dc:00:24:9d:fc:00:d6:83:72:7b:95:2b:31:af:9d:
01:b6:e3:76:59:e2:dd:37:2f:5b:34:1d:55:8d:35:d6:32:28:
bd:22:d3:4e:52:e5:ff:50:3b:75:b3:7d:55:10:9d:7e:3a:4e:
40:3b:9b:4e:f0:c5:e0:5c:73:50:1f:aa:41:2e:51:77:41:54:
2d:0e:b5:b5:b3:ab:9c:43:5c:50:a9:97:01:c2:47:46:e2:83:
f2:c9:32:f6:88:21:93:ea:e6:be:32:57:b9:22:40:d6:c4:18:
e4:38:14:0b:c8:05:c0:77:d4:a0:4d:91:3b:3e:bd:ad:cd:82:
d2:ae:db:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 23:38:21 2026 by rpki-client