Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/GHvBuyhitXJX0p4NO9axztQz6hM.mft
File: GHvBuyhitXJX0p4NO9axztQz6hM.mft (raw, json)
Hash identifier: cuYrSIeo+KXu3BgVnxc5ALJwKsgvq4Z+RZfj3txAmYM=
Subject key identifier: 02:0B:00:14:3E:3A:21:B8:A2:3C:01:3A:57:0E:E2:B6:D9:BF:E4:FC
Authority key identifier: 18:7B:C1:BB:28:62:B5:72:57:D2:9E:0D:3B:D6:B1:CE:D4:33:EA:13
Certificate issuer: /CN=187bc1bb2862b57257d29e0d3bd6b1ced433ea13
Certificate serial: 019FDEACC54B1631AF372FC864A8B55AC09C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GHvBuyhitXJX0p4NO9axztQz6hM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/GHvBuyhitXJX0p4NO9axztQz6hM.mft
Manifest number: 68
Signing time: Sat 08 Aug 2026 00:01:32 +0000
Manifest this update: Sat 08 Aug 2026 00:01:32 +0000
Manifest next update: Sun 09 Aug 2026 00:01:32 +0000
Files and hashes: 1: GHvBuyhitXJX0p4NO9axztQz6hM.crl (hash: 5AFGiAAC7d9A6d1vt4mmobSVR9Wdx9aNEjGdzFrxUL4=)
2: LUhM3H8lhONxGgoaXHEWfKhnz2Y.roa (hash: J7ufmJc4Z0JPmS7/Bpmv26Oq7u+qgxbzuIWPGLK6uo4=)
3: SFPLQXBEuitf9FRle3yJD2Tmikc.roa (hash: IrAXCvoBEciQQdZR3nxtSBV8+ab2Nq5ETilfM1Yg9CE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/GHvBuyhitXJX0p4NO9axztQz6hM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/GHvBuyhitXJX0p4NO9axztQz6hM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GHvBuyhitXJX0p4NO9axztQz6hM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Aug 2026 22:03:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:de:ac:c5:4b:16:31:af:37:2f:c8:64:a8:b5:5a:c0:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=187bc1bb2862b57257d29e0d3bd6b1ced433ea13
Validity
Not Before: Aug 8 00:01:32 2026 GMT
Not After : Aug 9 00:01:32 2026 GMT
Subject: CN=020b00143e3a21b8a23c013a570ee2b6d9bfe4fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d5:ee:02:c1:54:4a:16:62:16:ed:cb:5a:9b:
0b:93:22:72:6d:d7:2e:f9:be:e4:94:8b:89:4d:f7:
90:8b:22:3d:c1:a8:8b:f4:71:be:cd:83:38:9c:d0:
57:49:b3:ac:bb:60:2c:98:e2:fa:d2:48:0f:4b:d6:
63:82:01:44:61:06:2c:12:05:bf:12:00:1a:95:9d:
42:6a:b8:22:28:2f:e4:10:c6:49:96:6e:a3:13:d6:
70:67:45:45:e6:15:ee:36:b0:e8:62:9d:06:51:e1:
a8:d5:79:12:56:56:f3:0a:84:35:c9:03:6b:60:4c:
e3:73:9b:c4:ce:0e:4c:d0:99:35:f0:1b:d2:06:ab:
56:57:1d:f8:ce:ac:c3:d4:e0:4b:e8:37:af:8f:cf:
da:d7:26:7d:82:cd:73:60:51:4f:da:26:f7:98:df:
83:bf:01:22:10:91:25:e8:52:6e:a5:f5:6a:5d:d0:
14:0e:46:8e:56:5a:9e:85:a4:b4:85:25:23:ce:03:
70:3b:57:d2:c3:f4:7f:42:81:a4:26:26:13:2a:1a:
d9:46:01:0b:56:23:b4:e7:b7:fa:b5:05:99:11:75:
49:ad:53:82:c8:ea:78:02:0a:76:05:34:d9:b1:86:
93:55:00:d9:a4:28:81:86:77:ab:6f:12:de:0b:33:
2e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:0B:00:14:3E:3A:21:B8:A2:3C:01:3A:57:0E:E2:B6:D9:BF:E4:FC
X509v3 Authority Key Identifier:
keyid:18:7B:C1:BB:28:62:B5:72:57:D2:9E:0D:3B:D6:B1:CE:D4:33:EA:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GHvBuyhitXJX0p4NO9axztQz6hM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/GHvBuyhitXJX0p4NO9axztQz6hM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/GHvBuyhitXJX0p4NO9axztQz6hM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:5d:3b:80:84:90:80:ea:e8:1c:0e:fb:14:59:37:83:7e:ee:
d0:10:d7:9d:d4:16:ce:39:7b:9c:86:41:d6:06:2c:a1:08:d8:
6a:9e:d0:52:0a:30:8c:42:81:4d:c7:d7:1c:b2:4c:b9:b9:e1:
53:d7:62:02:64:00:32:57:a6:81:20:97:f5:99:cd:26:20:fa:
51:e1:8f:d5:8c:49:d9:68:c0:99:5c:fe:23:6d:2c:9e:e0:90:
65:ff:e8:2f:b1:60:08:8e:c0:ed:dc:06:9c:13:1c:40:ee:97:
ef:29:cb:6a:67:95:04:d6:ad:93:6b:57:0c:1f:2d:c1:8c:8d:
56:cd:ac:46:5b:94:bf:0e:cf:a3:97:22:a3:80:86:ef:8b:68:
21:d7:8a:5c:13:aa:26:a9:8e:16:08:b3:57:74:c8:50:42:bf:
ad:e4:fb:c2:6f:f4:cf:4a:29:e8:c4:d8:2b:7c:91:10:a4:e5:
49:ee:67:d5:80:e0:db:7f:8e:9a:fc:89:a5:57:17:61:2c:bd:
fc:41:69:88:62:cf:03:30:f9:85:70:02:f7:2a:49:94:2a:f9:
8e:41:1c:06:ee:2e:0d:9b:48:65:3a:70:26:cb:6d:3a:7c:1a:
71:c0:a6:1c:79:ff:53:88:cf:fd:01:c8:60:99:55:b2:b4:5e:
f0:43:3e:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 04:57:12 2026 by rpki-client