Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.mft
File: GhJQnk8qcw4WmTfUCDO7iT7nuYw.mft (raw, json)
Hash identifier: 0J+UyCDsM0dKLDZYu2sNL8JABUD76+WooahptOb1jLg=
Subject key identifier: 8C:CC:40:DB:CA:E4:8B:9E:F7:BA:A6:87:15:D9:E2:4B:72:D5:BC:B9
Authority key identifier: 1A:12:50:9E:4F:2A:73:0E:16:99:37:D4:08:33:BB:89:3E:E7:B9:8C
Certificate issuer: /CN=1a12509e4f2a730e169937d40833bb893ee7b98c
Certificate serial: 019E9C60F6F6999F0B177DD248413B937E14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GhJQnk8qcw4WmTfUCDO7iT7nuYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.mft
Manifest number: 1947
Signing time: Sat 06 Jun 2026 10:01:00 +0000
Manifest this update: Sat 06 Jun 2026 10:01:00 +0000
Manifest next update: Sun 07 Jun 2026 10:01:00 +0000
Files and hashes: 1: GhJQnk8qcw4WmTfUCDO7iT7nuYw.crl (hash: edXQbJfMg/uTz/OsA6sq3IPlCTyAp8EPP8XShcJkbH8=)
2: LiC_HAv2ieS9qZCIroR8UZoFlPI.roa (hash: R+F8lZe1pX4qczdw7OYcz3GuxYj0Q6ggGPfm7H8FjeE=)
3: i1r9TcXNXsbzaMSqfIgjvx7tIUc.roa (hash: KYoEYuLGKlqcsdZuYcCfv5Zk9kbtA+bdbC5coofITqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/GhJQnk8qcw4WmTfUCDO7iT7nuYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 04:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9c:60:f6:f6:99:9f:0b:17:7d:d2:48:41:3b:93:7e:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a12509e4f2a730e169937d40833bb893ee7b98c
Validity
Not Before: Jun 6 10:01:00 2026 GMT
Not After : Jun 7 10:01:00 2026 GMT
Subject: CN=8ccc40dbcae48b9ef7baa68715d9e24b72d5bcb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:d0:fa:75:fa:5b:a1:cf:4f:9c:89:37:05:5a:
2f:5e:a1:39:dd:1e:66:e8:e9:90:eb:78:f3:f0:32:
82:9f:86:6e:4b:76:dc:b5:67:72:7d:54:3a:aa:6e:
24:35:fb:61:cd:54:02:a6:00:01:2b:bf:1f:9c:cf:
a0:0c:17:ed:b5:05:ae:04:ba:dc:74:fc:bf:7d:5d:
3f:6e:45:16:84:7d:aa:cc:6d:12:1a:b2:53:30:91:
78:8c:9b:b3:e1:94:74:7e:a1:6c:1c:64:51:49:c5:
a4:b3:d5:de:ae:88:7e:c7:91:3f:08:39:fd:bf:b2:
4c:4d:70:4a:13:94:b3:52:2c:75:f4:c0:09:ca:da:
27:6e:40:b8:17:2f:72:f7:c4:1c:58:dd:54:d2:6a:
d4:ad:a7:47:2b:4d:f6:53:2a:c6:42:81:a8:0e:6b:
a4:a2:8b:39:55:c4:33:8f:6e:a0:09:e2:56:ff:bf:
71:e8:e8:4f:55:e3:f0:2b:3a:b8:3a:86:24:44:b0:
5e:da:7c:0d:d0:7d:23:de:e7:ca:20:35:3b:3e:a5:
81:f5:55:6c:9e:61:f6:6b:d7:9b:37:90:e5:34:62:
d1:5a:9a:d0:bb:ca:3d:7a:dc:e7:c8:c1:8d:ae:2d:
12:0c:ab:e1:24:cf:de:54:86:b1:80:47:72:ae:2e:
be:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:CC:40:DB:CA:E4:8B:9E:F7:BA:A6:87:15:D9:E2:4B:72:D5:BC:B9
X509v3 Authority Key Identifier:
keyid:1A:12:50:9E:4F:2A:73:0E:16:99:37:D4:08:33:BB:89:3E:E7:B9:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GhJQnk8qcw4WmTfUCDO7iT7nuYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:7d:f1:aa:17:d5:5c:9f:f8:1d:cb:19:11:22:0a:bf:c1:7a:
0f:94:01:b1:43:28:13:c1:b1:77:94:96:90:c1:0b:58:bd:4f:
f1:84:46:85:ff:01:bb:dd:53:7f:d5:aa:75:c0:76:f4:92:d3:
17:ac:d5:3f:2b:c4:ae:2c:f7:27:eb:11:76:3d:0c:58:f8:d6:
a6:c3:c2:b5:17:df:f0:bc:a8:0f:36:d9:da:9d:5d:c8:2f:4a:
79:51:f9:3b:8e:f5:1e:8e:89:e3:50:9c:32:d0:62:61:47:48:
8c:07:a0:56:03:06:6f:05:fc:c4:81:8e:36:0f:8a:cd:82:09:
07:aa:e8:9e:73:cb:b8:b3:f4:ce:74:58:da:62:b1:da:e8:7c:
ed:1d:1b:c3:de:2f:c0:fa:45:8e:a4:88:fb:44:89:8b:8c:13:
e4:b4:cb:f0:05:64:39:23:9b:56:b0:a7:21:6a:ab:65:22:8f:
ed:d5:da:ad:bd:7e:c2:07:16:cb:d8:fc:3e:55:b7:70:23:e2:
07:75:9b:c9:56:00:af:92:15:18:5c:08:59:af:b3:1d:9c:53:
fe:da:ef:00:39:35:a7:14:17:d8:4e:d2:5c:4d:7a:20:b3:d5:
d3:d3:38:88:c9:e4:10:82:48:3b:da:ad:24:8c:24:6e:ce:5e:
bb:59:59:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 13:23:08 2026 by rpki-client