Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/e647ab-6de5-4f60-824a-ba1578fdcaf9/1/GHc-xZU-uNqLxN7b2sUp0c6bZ6o.mft
File: GHc-xZU-uNqLxN7b2sUp0c6bZ6o.mft (raw, json)
Hash identifier: PSXMLYNT3nPjDZJLK81eZZIOHqHvvEc0Gr8TaqNN3fs=
Subject key identifier: 93:5D:75:76:E5:F2:73:A4:0C:55:56:41:7E:02:A9:16:65:DA:3F:76
Authority key identifier: 18:77:3E:C5:95:3E:B8:DA:8B:C4:DE:DB:DA:C5:29:D1:CE:9B:67:AA
Certificate issuer: /CN=18773ec5953eb8da8bc4dedbdac529d1ce9b67aa
Certificate serial: 019D39E5DF2ED4C608548F5552033A1ACDB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GHc-xZU-uNqLxN7b2sUp0c6bZ6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/e647ab-6de5-4f60-824a-ba1578fdcaf9/1/GHc-xZU-uNqLxN7b2sUp0c6bZ6o.mft
Manifest number: 52
Signing time: Sun 29 Mar 2026 14:00:59 +0000
Manifest this update: Sun 29 Mar 2026 14:00:59 +0000
Manifest next update: Mon 30 Mar 2026 14:00:59 +0000
Files and hashes: 1: GHc-xZU-uNqLxN7b2sUp0c6bZ6o.crl (hash: Je7EuI9LguE1oMKxdE9FzcYOSeZ31gh2fV80lS4MY2U=)
2: ULZ1IXriNbVt1RF82-qhaW1hFMs.roa (hash: ApQ7wcFJx+88WL2MSx6t/CPLNYoC52lkQ/wgD971pZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/e647ab-6de5-4f60-824a-ba1578fdcaf9/1/GHc-xZU-uNqLxN7b2sUp0c6bZ6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/e647ab-6de5-4f60-824a-ba1578fdcaf9/1/GHc-xZU-uNqLxN7b2sUp0c6bZ6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/GHc-xZU-uNqLxN7b2sUp0c6bZ6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:df:2e:d4:c6:08:54:8f:55:52:03:3a:1a:cd:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18773ec5953eb8da8bc4dedbdac529d1ce9b67aa
Validity
Not Before: Mar 29 14:00:59 2026 GMT
Not After : Mar 30 14:00:59 2026 GMT
Subject: CN=935d7576e5f273a40c5556417e02a91665da3f76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fd:6f:e1:51:43:ad:23:2d:7a:b9:d4:ad:b2:
7f:fe:25:ff:09:8a:e1:5f:c4:0e:47:92:db:1d:16:
cc:fc:26:d1:2b:79:b5:09:02:7a:b9:78:eb:4a:9d:
0f:a0:9b:5a:6d:58:5a:74:ee:1a:9c:98:c5:74:ec:
e0:51:9a:4a:43:3c:9f:fb:c8:72:8c:09:76:18:59:
f4:38:38:e4:8b:88:15:68:c7:1b:26:0b:bb:54:d2:
88:03:3d:6b:75:0d:6f:d4:4a:0d:f1:55:22:b0:85:
44:e2:04:ca:a4:b6:84:e6:41:0a:88:33:2e:89:81:
81:be:1b:71:dc:2e:aa:e2:f4:8e:5c:1e:59:cb:48:
13:12:b9:07:cc:d0:72:cc:61:eb:0b:8f:c7:84:0a:
19:90:c9:82:62:d4:51:df:a4:55:78:00:e8:00:51:
11:bb:ff:a0:45:a3:23:20:06:f7:3a:5c:b6:c8:49:
24:5e:a3:c6:1d:74:3a:cd:e1:e2:37:b9:ca:de:b9:
6d:ee:cd:96:63:37:dc:90:74:d1:0a:98:8e:bc:55:
cb:6b:a6:fd:f3:b2:46:a2:8c:7f:75:14:9e:a4:2e:
ae:24:22:95:d5:2a:cc:5c:82:3a:7a:17:7e:c5:23:
13:49:27:5a:bf:f0:05:49:0b:fe:b1:3c:f8:96:45:
7c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:5D:75:76:E5:F2:73:A4:0C:55:56:41:7E:02:A9:16:65:DA:3F:76
X509v3 Authority Key Identifier:
keyid:18:77:3E:C5:95:3E:B8:DA:8B:C4:DE:DB:DA:C5:29:D1:CE:9B:67:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GHc-xZU-uNqLxN7b2sUp0c6bZ6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e647ab-6de5-4f60-824a-ba1578fdcaf9/1/GHc-xZU-uNqLxN7b2sUp0c6bZ6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e647ab-6de5-4f60-824a-ba1578fdcaf9/1/GHc-xZU-uNqLxN7b2sUp0c6bZ6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:d7:7e:8a:7c:e7:24:9f:9d:91:0e:2c:49:46:1f:6c:85:09:
9d:25:26:49:19:dc:1d:92:be:c1:7f:89:39:9b:07:7d:e9:64:
ba:0a:84:16:55:12:44:ed:53:dc:fe:c0:b1:45:42:f7:1e:de:
3b:80:15:42:6f:12:c6:b2:3e:49:44:8b:74:a6:72:d5:78:aa:
7c:a3:83:59:e9:3d:37:57:29:7f:e5:20:b2:b1:29:d5:d1:82:
6a:c4:77:85:5c:8f:27:59:0f:75:07:b4:70:31:4c:59:16:d5:
a0:42:2d:5d:e9:bf:d3:19:d2:3a:b3:a2:fc:21:1d:1a:57:6e:
e2:58:1a:7d:4d:e0:e3:74:b7:f9:5a:e1:97:a4:67:fa:cb:11:
94:e9:61:f1:0a:d5:1d:b3:4b:6e:e5:19:41:ce:6d:c2:35:35:
9c:87:de:2f:fc:65:1d:af:d7:7a:a1:39:40:f3:d3:e0:e8:55:
88:d2:74:0b:9a:d6:64:af:ca:03:d2:70:a4:b1:b0:5a:4a:23:
69:92:22:97:84:70:9a:95:fe:a5:9f:c6:ad:2b:85:bb:f1:b6:
74:4a:51:74:4a:a2:7d:0c:99:ed:67:ed:90:49:78:49:c7:42:
8d:eb:51:c1:d7:fb:3d:2c:46:c4:84:28:9b:3c:a2:84:28:9d:
08:b9:72:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:14:26 2026 by rpki-client