Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.mft
File: Ghrl5JpEq93CKwrb2utkE28l1Gc.mft (raw, json)
Hash identifier: R6MJfBdXdDHeogJT0BSccnvuAyES/bPXJm1kXVsZOUU=
Subject key identifier: 32:66:6D:17:C0:D4:2C:6A:CC:6C:75:CE:1A:E7:F6:D6:A9:0B:0A:AF
Authority key identifier: 1A:1A:E5:E4:9A:44:AB:DD:C2:2B:0A:DB:DA:EB:64:13:6F:25:D4:67
Certificate issuer: /CN=1a1ae5e49a44abddc22b0adbdaeb64136f25d467
Certificate serial: 019F1AC5264E54A42BA060E1E3671ADE67A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ghrl5JpEq93CKwrb2utkE28l1Gc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.mft
Manifest number: 12C3
Signing time: Tue 30 Jun 2026 23:02:35 +0000
Manifest this update: Tue 30 Jun 2026 23:02:35 +0000
Manifest next update: Wed 01 Jul 2026 23:02:35 +0000
Files and hashes: 1: Ghrl5JpEq93CKwrb2utkE28l1Gc.crl (hash: v2hlfPPjchjvM60S3rs9PTVI1m9ZIrhXSFvQzJ5s+as=)
2: _H4CUuz3Tvl-T1zwCAZAvhXJbiM.roa (hash: xsJ3awajiTbn083/zKjj3KHpA/9WdA0RqzmcuoYihQA=)
3: kz2Yp1K6YIxekPASAxXKtmwq5Nc.roa (hash: wGYvhz3IuQwWNkOw50DFvXGGrTTnqTHVgvd/Ec1JbTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ghrl5JpEq93CKwrb2utkE28l1Gc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 23:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1a:c5:26:4e:54:a4:2b:a0:60:e1:e3:67:1a:de:67:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a1ae5e49a44abddc22b0adbdaeb64136f25d467
Validity
Not Before: Jun 30 23:02:35 2026 GMT
Not After : Jul 1 23:02:35 2026 GMT
Subject: CN=32666d17c0d42c6acc6c75ce1ae7f6d6a90b0aaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6e:a1:5f:18:a6:66:bb:15:2f:5a:33:5a:d6:
34:8c:03:df:3b:cb:7e:8f:a1:66:6e:41:e8:fd:27:
9f:ba:7a:8c:e8:0b:51:56:61:a8:9f:4b:5c:05:6b:
12:a4:31:20:db:8a:01:7b:f8:29:5f:52:89:56:96:
a5:a4:4f:9d:08:59:9d:fc:f5:a3:fe:81:e1:5a:e2:
f3:39:da:92:16:53:df:ea:1c:df:75:cf:32:1a:d6:
f0:72:d9:cf:07:84:1b:29:aa:e7:8d:a5:a4:5d:43:
7f:3b:df:f1:af:1c:3c:2f:b5:26:63:68:38:2c:02:
45:e4:f2:f1:cb:84:2d:5a:a6:ae:0d:96:7b:10:1a:
5c:bd:38:5e:fd:df:94:57:17:24:e7:d3:7c:ad:56:
59:0f:39:d7:a4:9e:75:20:a8:7d:8e:c1:30:75:42:
ba:ab:8c:a5:88:e8:ce:95:2c:7e:2f:57:c9:32:8a:
39:5f:56:75:8f:39:d6:a7:3c:d0:ed:c8:10:a9:3d:
75:07:67:dc:c7:fa:e9:ca:2b:28:df:e9:c0:38:85:
76:37:a9:0d:43:f5:a5:aa:bc:ec:09:8d:25:cf:32:
68:46:81:aa:98:5e:eb:ad:a8:3b:1a:ea:0b:91:78:
11:12:31:91:17:32:d1:85:46:14:da:a5:30:86:f4:
aa:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:66:6D:17:C0:D4:2C:6A:CC:6C:75:CE:1A:E7:F6:D6:A9:0B:0A:AF
X509v3 Authority Key Identifier:
keyid:1A:1A:E5:E4:9A:44:AB:DD:C2:2B:0A:DB:DA:EB:64:13:6F:25:D4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ghrl5JpEq93CKwrb2utkE28l1Gc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/99dcca-963a-4003-bfaf-a1169a289c54/1/Ghrl5JpEq93CKwrb2utkE28l1Gc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:a7:78:4f:72:8c:52:a4:d4:89:3f:7f:2e:10:c3:93:f0:9e:
dd:3b:c1:44:2c:33:3b:1d:25:4a:bb:b3:e1:a9:8a:5d:d9:20:
7f:82:01:ae:25:2c:89:b7:e0:66:5d:02:e8:f4:d9:6d:01:f2:
23:02:3c:e7:5c:ee:02:5d:5f:29:44:ba:fb:b6:15:dc:cb:33:
fa:6d:89:d2:33:db:7f:b6:89:54:b2:5f:85:5e:c6:4c:32:01:
db:07:0a:36:a9:36:28:03:37:66:0f:d2:32:71:50:8c:cd:9b:
61:c8:b3:0b:5a:bf:5d:75:8f:48:dc:37:b6:1c:c7:09:a4:63:
cd:37:6a:56:36:bb:b8:14:42:90:8b:09:c9:9a:5e:cb:44:a0:
7b:8c:a4:b2:a7:bd:34:64:18:6f:28:ab:dc:9c:8f:1a:b3:0c:
c6:02:c5:d2:14:2b:92:21:0b:d7:c0:33:72:cb:85:ea:08:60:
22:ec:e9:20:56:dd:5d:5c:1a:81:62:96:2a:93:2c:e1:7d:2b:
5e:8a:26:c2:6d:ab:d7:7f:25:e3:6a:83:59:dc:74:5f:0e:43:
c4:a3:18:bc:4f:67:33:0e:7b:53:2b:5e:76:38:34:70:7e:99:
db:59:29:5d:7e:cb:11:db:60:da:aa:d6:6d:eb:f6:a3:7b:d6:
f2:cb:e7:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 09:02:52 2026 by rpki-client