Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/c122a7-5712-4bbd-b638-ac9a93171aa5/1/GHexnUhH_D9JWvk2xbGhkoyRJ0g.mft
File: GHexnUhH_D9JWvk2xbGhkoyRJ0g.mft (raw, json)
Hash identifier: /vyOohqAkyc/RmLmCeKQOqF5PKs5zRm8b7lg6Xsj3+Y=
Subject key identifier: 00:CF:6D:54:0A:1F:41:8E:D4:DE:71:43:DF:45:97:C8:07:59:3D:9F
Authority key identifier: 18:77:B1:9D:48:47:FC:3F:49:5A:F9:36:C5:B1:A1:92:8C:91:27:48
Certificate issuer: /CN=1877b19d4847fc3f495af936c5b1a1928c912748
Certificate serial: 019D38D3B1EB97A0B92CA20215F310B971D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GHexnUhH_D9JWvk2xbGhkoyRJ0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/c122a7-5712-4bbd-b638-ac9a93171aa5/1/GHexnUhH_D9JWvk2xbGhkoyRJ0g.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 09:01:30 +0000
Manifest this update: Sun 29 Mar 2026 09:01:30 +0000
Manifest next update: Mon 30 Mar 2026 09:01:30 +0000
Files and hashes: 1: GHexnUhH_D9JWvk2xbGhkoyRJ0g.crl (hash: 21/b96isZkoqki0hULfLENVGN4QP6r3UligOY02Y7hk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/c122a7-5712-4bbd-b638-ac9a93171aa5/1/GHexnUhH_D9JWvk2xbGhkoyRJ0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/c122a7-5712-4bbd-b638-ac9a93171aa5/1/GHexnUhH_D9JWvk2xbGhkoyRJ0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/GHexnUhH_D9JWvk2xbGhkoyRJ0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:b1:eb:97:a0:b9:2c:a2:02:15:f3:10:b9:71:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1877b19d4847fc3f495af936c5b1a1928c912748
Validity
Not Before: Mar 29 09:01:30 2026 GMT
Not After : Mar 30 09:01:30 2026 GMT
Subject: CN=00cf6d540a1f418ed4de7143df4597c807593d9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:31:24:40:fb:9b:2b:f7:8b:be:38:49:35:b8:
d9:72:71:74:3c:d6:57:46:05:1b:42:a1:ec:31:82:
a7:a8:63:73:a2:25:5c:52:38:60:ed:ad:37:9d:70:
c0:dd:6a:f6:0a:88:38:77:11:02:44:96:0b:2c:af:
85:35:11:15:5f:95:90:48:b8:8a:d8:3f:28:c9:c5:
e2:99:5c:41:ca:48:1b:16:33:ff:e4:06:19:a9:08:
ac:0e:7b:be:55:48:c8:65:a8:48:95:54:c6:cc:f5:
e5:b1:a2:90:a9:69:c2:84:e4:39:54:79:20:8f:77:
44:b9:c7:04:55:bf:e6:a5:9c:75:ab:c2:74:72:f8:
64:27:40:ee:ba:fe:66:c4:9b:91:8a:20:e2:f4:c6:
89:f2:49:d0:50:69:6f:4d:78:42:27:58:50:14:6e:
cd:10:f2:33:0c:6d:a6:69:65:67:5b:5d:76:d7:cd:
e2:4a:44:01:37:b8:21:38:50:dc:a5:14:ba:7b:4b:
d9:ad:aa:69:00:73:1c:98:22:72:9a:92:ab:6b:ca:
7b:59:6b:59:5b:1a:3a:90:9f:46:4d:e4:6b:10:3e:
4b:44:ce:03:ea:8e:1f:b0:ab:2f:39:ed:db:30:05:
cb:e5:82:5d:78:b6:08:91:7d:f1:73:5f:54:75:6a:
b5:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:CF:6D:54:0A:1F:41:8E:D4:DE:71:43:DF:45:97:C8:07:59:3D:9F
X509v3 Authority Key Identifier:
keyid:18:77:B1:9D:48:47:FC:3F:49:5A:F9:36:C5:B1:A1:92:8C:91:27:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GHexnUhH_D9JWvk2xbGhkoyRJ0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/c122a7-5712-4bbd-b638-ac9a93171aa5/1/GHexnUhH_D9JWvk2xbGhkoyRJ0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/c122a7-5712-4bbd-b638-ac9a93171aa5/1/GHexnUhH_D9JWvk2xbGhkoyRJ0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:54:45:73:3b:73:c4:5c:cf:42:c9:2b:43:c0:a5:a4:31:d7:
29:0c:5b:de:b2:6b:7b:1a:e2:3c:2c:7a:a0:3b:93:82:c8:e6:
81:6c:e1:3f:b9:bd:9b:50:41:e8:c0:52:a4:19:bb:d1:77:f5:
dc:3a:03:e1:f2:3e:4f:92:c9:30:d1:0a:16:f0:a9:bf:05:d6:
72:db:ff:2e:6c:ad:59:f0:78:71:9a:84:45:00:0f:cf:7a:1e:
7a:c3:39:7d:11:56:d7:11:e5:9d:12:c2:aa:21:4b:f3:bb:56:
4c:0a:e9:a7:b1:17:a2:ae:20:f4:8e:3e:b2:59:69:69:a4:6d:
a0:81:ac:b7:b7:31:52:e3:a7:74:d8:39:46:9d:77:aa:4b:e2:
a4:80:96:04:55:52:ff:4b:f5:59:2b:4a:af:33:d3:4b:2f:dd:
85:17:d0:00:7a:05:fd:d4:bc:cd:d9:f8:35:16:4d:ac:31:2e:
67:4b:eb:7f:42:d3:e6:d3:bc:30:98:bd:b9:19:a2:de:25:35:
72:68:57:64:94:a5:11:3c:5f:f5:73:01:60:49:8f:4c:a0:4d:
34:22:43:d8:5f:39:0d:81:77:9b:4a:c4:b2:7a:5f:7c:9e:e4:
e7:69:ad:1c:41:e0:56:b3:2b:da:ba:a8:d9:e8:96:b1:5e:ef:
d7:5b:91:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:52 2026 by rpki-client