Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.mft
File: GCHMkI36kRENERmm3h7EHj7P80Y.mft (raw, json)
Hash identifier: a5BpjKnEMIRvy/NbgR4nS06Jshi8zmKcjqKz/S5GDyw=
Subject key identifier: 33:3A:A1:05:93:EF:07:61:BE:FB:95:D4:6D:9B:C4:F7:3C:AC:7D:CE
Authority key identifier: 18:21:CC:90:8D:FA:91:11:0D:11:19:A6:DE:1E:C4:1E:3E:CF:F3:46
Certificate issuer: /CN=1821cc908dfa91110d1119a6de1ec41e3ecff346
Certificate serial: 01A126C2E742606CFD111E076A6EE782A48D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GCHMkI36kRENERmm3h7EHj7P80Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.mft
Manifest number: 0A5A
Signing time: Sat 10 Oct 2026 17:01:09 +0000
Manifest this update: Sat 10 Oct 2026 17:01:09 +0000
Manifest next update: Sun 11 Oct 2026 17:01:09 +0000
Files and hashes: 1: GCHMkI36kRENERmm3h7EHj7P80Y.crl (hash: iqLRoTmQshrIwyHBAxpjrOsPeznl9MUnMvFlJZeg2mg=)
2: zcaWIGhkG55HVrp_LTvU2dDCIlw.roa (hash: kwl/J+DhlHUe4YxPvoDLnKqddS3rQt5tFVk3ZqLbgmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GCHMkI36kRENERmm3h7EHj7P80Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:26:c2:e7:42:60:6c:fd:11:1e:07:6a:6e:e7:82:a4:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1821cc908dfa91110d1119a6de1ec41e3ecff346
Validity
Not Before: Oct 10 17:01:09 2026 GMT
Not After : Oct 11 17:01:09 2026 GMT
Subject: CN=333aa10593ef0761befb95d46d9bc4f73cac7dce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:03:8e:e4:02:d8:0d:7a:9a:1d:72:6f:1a:15:
32:af:0a:94:4c:fe:46:ef:f7:65:8d:dc:b3:bf:72:
e3:4e:69:c5:ee:4b:94:93:f3:43:a5:a2:43:d6:ea:
c0:cf:32:3a:be:83:4e:4f:95:4c:7c:6e:2e:61:97:
14:0f:4d:94:98:62:5f:d8:3e:a5:96:16:c1:0b:ee:
1e:91:76:91:7b:af:ed:5d:af:5a:60:c7:50:1d:8f:
97:49:6e:fe:47:82:55:f6:d0:47:6b:11:f4:05:2b:
ed:ae:1d:9c:1c:71:a8:50:47:77:48:20:7f:e5:c6:
84:33:b3:ac:b3:73:00:10:a9:2c:a8:5b:8e:9f:ce:
77:58:a2:37:af:c5:b8:88:e7:9c:44:97:59:48:f5:
77:e2:bf:02:d3:31:96:d1:ad:6a:66:de:7c:d8:d6:
5b:5a:a5:2a:fb:71:1b:c4:24:8a:72:9a:ef:7e:da:
5b:46:0c:57:48:54:6c:d8:cf:66:9c:66:05:3e:73:
59:ca:10:78:0c:2f:48:10:8a:ee:41:17:ae:c8:ee:
3f:fc:d9:ea:63:ff:12:2b:32:29:07:93:03:a7:2f:
1b:d5:f7:57:d9:a8:80:87:12:68:e7:2b:53:e1:fb:
04:30:fb:02:12:cc:fa:d7:2e:20:f9:eb:99:e5:54:
d9:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:3A:A1:05:93:EF:07:61:BE:FB:95:D4:6D:9B:C4:F7:3C:AC:7D:CE
X509v3 Authority Key Identifier:
keyid:18:21:CC:90:8D:FA:91:11:0D:11:19:A6:DE:1E:C4:1E:3E:CF:F3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GCHMkI36kRENERmm3h7EHj7P80Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/456c62-4746-41e0-8044-920599f52637/1/GCHMkI36kRENERmm3h7EHj7P80Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:3b:84:49:f7:2a:b8:f4:7d:64:24:c5:89:e2:70:75:69:71:
e2:c6:60:c9:d8:df:ad:27:4d:c7:77:5a:4f:91:ae:d0:5c:73:
ce:f5:ba:c1:05:bc:60:a7:08:23:0f:7e:0e:1b:a7:7b:db:47:
ac:4a:fb:32:6c:ad:de:45:b1:ed:7a:76:34:e2:24:3e:f5:c3:
51:d0:ae:12:e9:d6:ba:78:0c:cc:03:7a:99:ce:31:e9:22:fd:
86:80:31:cc:6a:1b:1b:dd:b7:b5:2c:21:d4:a2:e0:10:e9:01:
ac:80:53:6b:ef:3e:e0:97:ec:c6:66:14:a3:36:91:44:95:61:
44:7b:e9:5a:8a:5e:0e:2f:49:30:62:25:8e:23:48:f3:ca:8c:
d5:f7:a0:8f:fc:b0:be:af:0c:e0:c2:20:85:26:1e:05:4a:f6:
c6:8c:fc:79:ff:0f:96:fb:80:5b:e0:fc:8e:df:e7:c4:2b:cb:
a6:8f:bb:6f:3f:5f:a1:b6:ae:89:0d:87:85:d2:4c:af:c1:a5:
c7:89:3c:de:e5:30:c1:3b:5b:6d:5d:75:9f:03:20:3f:f4:6b:
05:f7:17:d5:64:b9:b2:7e:e8:b5:49:f6:08:bf:2e:a2:da:0c:
84:55:e6:c3:65:94:1d:54:3a:86:fe:7d:58:07:a9:77:43:13:
2e:03:36:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 23:23:01 2026 by rpki-client