Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.mft
File: GCHMkI36kRENERmm3h7EHj7P80Y.mft (raw, json)
Hash identifier: 9JT8nbMdknRpXeYu+0Q+Vl2ISqeN8k/uZD5KpPUxDS0=
Subject key identifier: 6B:29:48:73:E9:C8:96:12:A9:56:74:68:84:19:2C:05:A8:87:16:7A
Authority key identifier: 18:21:CC:90:8D:FA:91:11:0D:11:19:A6:DE:1E:C4:1E:3E:CF:F3:46
Certificate issuer: /CN=1821cc908dfa91110d1119a6de1ec41e3ecff346
Certificate serial: 019CC07263C7DA2177A21533061B9202EEF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GCHMkI36kRENERmm3h7EHj7P80Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.mft
Manifest number: 0812
Signing time: Fri 06 Mar 2026 00:00:47 +0000
Manifest this update: Fri 06 Mar 2026 00:00:47 +0000
Manifest next update: Sat 07 Mar 2026 00:00:47 +0000
Files and hashes: 1: GCHMkI36kRENERmm3h7EHj7P80Y.crl (hash: Vc5OsB9xcFavO2H0SoD20DpoXLzZBOCOxNvAobSByN0=)
2: TmcoRu9ef8n5uSGSq8iHWL8zg0M.roa (hash: GDDsDyd58H/bp3P5lSRMWErs4U1SYPdz+Rlr9Gl1yps=)
3: zcaWIGhkG55HVrp_LTvU2dDCIlw.roa (hash: kwl/J+DhlHUe4YxPvoDLnKqddS3rQt5tFVk3ZqLbgmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GCHMkI36kRENERmm3h7EHj7P80Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Mar 2026 00:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c0:72:63:c7:da:21:77:a2:15:33:06:1b:92:02:ee:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1821cc908dfa91110d1119a6de1ec41e3ecff346
Validity
Not Before: Mar 6 00:00:47 2026 GMT
Not After : Mar 7 00:00:47 2026 GMT
Subject: CN=6b294873e9c89612a956746884192c05a887167a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:a8:59:75:94:f9:5d:4d:2f:14:2d:91:75:9c:
d8:00:1a:94:d1:34:64:a7:30:73:67:e7:22:01:13:
d9:15:28:81:1d:02:3d:8e:87:2d:8a:a4:00:2d:14:
4d:91:29:ab:ae:eb:09:87:3a:e4:ab:08:01:26:ea:
04:76:28:d7:f7:05:36:68:23:b7:5c:06:7a:9c:d1:
86:00:c0:36:65:35:d3:ca:cd:a0:01:de:fb:e0:15:
58:4a:ed:91:d6:4d:61:dd:7b:0c:4f:a7:22:40:3b:
53:99:e2:0c:21:7e:dc:f0:2b:ef:a9:cf:4e:38:f0:
d1:9e:c8:4f:27:f4:80:9b:9d:2f:79:28:05:80:c7:
bf:95:6d:23:f3:fe:3c:01:cf:49:ff:a5:a2:2b:54:
ab:a3:c8:84:2e:99:f5:33:c5:a3:e1:d0:22:d1:c7:
d1:bd:8c:d7:d0:eb:55:38:9e:03:df:75:7f:bb:70:
8c:c0:e5:17:20:8a:39:2f:d5:13:55:f2:01:20:94:
85:de:92:ce:c2:3b:5a:e0:0a:f4:46:07:98:5d:a2:
b3:ae:39:01:26:da:ef:18:89:33:77:c8:ee:df:b8:
d1:f2:3d:93:e4:7b:37:18:ba:33:f5:12:e9:d3:df:
c0:d5:1a:2b:67:35:a9:75:5b:98:47:11:9d:f2:4c:
c7:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:29:48:73:E9:C8:96:12:A9:56:74:68:84:19:2C:05:A8:87:16:7A
X509v3 Authority Key Identifier:
keyid:18:21:CC:90:8D:FA:91:11:0D:11:19:A6:DE:1E:C4:1E:3E:CF:F3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GCHMkI36kRENERmm3h7EHj7P80Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:66:c5:4a:f8:c5:4a:30:16:3c:8b:8d:f4:44:a7:de:b5:a4:
fb:61:0c:1c:35:39:11:b0:ba:bc:4b:63:0d:d2:81:2a:15:17:
a6:4c:13:c5:45:a2:76:44:0a:74:39:88:ff:be:70:03:24:a2:
fb:e9:e4:cb:70:55:a0:1a:08:8f:ac:7c:1e:52:b3:eb:a6:c0:
42:d0:22:8b:e7:50:a0:5c:bb:77:91:43:75:c3:43:aa:d9:fa:
b1:fc:71:c7:31:80:98:cd:09:ab:4a:00:23:aa:a3:19:05:00:
15:60:f8:fd:8c:64:e5:b7:7b:84:22:8d:f1:da:67:22:7f:72:
d8:34:e8:f6:44:f0:70:2c:38:10:49:1e:09:09:a3:13:4d:40:
c5:25:ed:73:76:e0:ba:7e:60:3e:07:da:1f:73:22:53:51:77:
e4:a4:b8:e8:6a:62:d7:b1:a1:34:90:c9:4e:60:10:4b:58:d0:
2d:ac:ca:40:c2:eb:50:20:64:28:4a:cc:99:13:49:f4:46:b8:
13:8f:9d:20:62:a7:1f:df:4a:3c:0b:93:3a:12:16:32:d4:0b:
1d:68:f1:01:bb:62:d0:9b:1c:a6:77:9b:40:6c:72:df:44:f2:
6b:d7:82:19:a2:2a:a1:63:cb:e4:79:76:ef:4e:ff:fe:e8:46:
17:12:c1:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 05:45:48 2026 by rpki-client