Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/GHvBuyhitXJX0p4NO9axztQz6hM.mft
File: GHvBuyhitXJX0p4NO9axztQz6hM.mft (raw, json)
Hash identifier: xqQUVwmm0tJmdEWBgaZW1JZOH1RVP+seWqwDPAjfe2M=
Subject key identifier: A1:34:EF:B2:94:26:A0:1E:B6:AD:FB:6C:DD:DD:B3:96:C5:C7:41:31
Authority key identifier: 18:7B:C1:BB:28:62:B5:72:57:D2:9E:0D:3B:D6:B1:CE:D4:33:EA:13
Certificate issuer: /CN=187bc1bb2862b57257d29e0d3bd6b1ced433ea13
Certificate serial: 01A0D0128D1CD9CCC97EBE178549EF516E86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GHvBuyhitXJX0p4NO9axztQz6hM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/GHvBuyhitXJX0p4NO9axztQz6hM.mft
Manifest number: E5
Signing time: Wed 23 Sep 2026 21:01:11 +0000
Manifest this update: Wed 23 Sep 2026 21:01:11 +0000
Manifest next update: Thu 24 Sep 2026 21:01:11 +0000
Files and hashes: 1: GHvBuyhitXJX0p4NO9axztQz6hM.crl (hash: U+etd4RHvaScGpmgqDYZsA/+NRkgZAvfYDBdi0TfKcI=)
2: LUhM3H8lhONxGgoaXHEWfKhnz2Y.roa (hash: J7ufmJc4Z0JPmS7/Bpmv26Oq7u+qgxbzuIWPGLK6uo4=)
3: SFPLQXBEuitf9FRle3yJD2Tmikc.roa (hash: IrAXCvoBEciQQdZR3nxtSBV8+ab2Nq5ETilfM1Yg9CE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/GHvBuyhitXJX0p4NO9axztQz6hM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/GHvBuyhitXJX0p4NO9axztQz6hM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GHvBuyhitXJX0p4NO9axztQz6hM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:12:8d:1c:d9:cc:c9:7e:be:17:85:49:ef:51:6e:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=187bc1bb2862b57257d29e0d3bd6b1ced433ea13
Validity
Not Before: Sep 23 21:01:11 2026 GMT
Not After : Sep 24 21:01:11 2026 GMT
Subject: CN=a134efb29426a01eb6adfb6cddddb396c5c74131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:8c:ef:9b:2d:d8:94:4e:a6:97:43:ad:ae:0e:
6f:c2:db:27:10:6e:6e:d3:76:2f:0c:25:fa:9d:cb:
09:94:d4:d7:60:33:76:5e:b7:83:37:73:d4:39:7a:
ea:23:25:3c:e1:13:5a:9e:bd:95:0e:9c:12:55:45:
ef:a3:fa:fe:bf:4c:b0:25:27:5a:f7:4d:8f:d8:4e:
fd:eb:01:d6:7c:82:26:45:f4:49:b1:35:05:8b:9b:
e5:f9:c0:f6:67:69:ab:cf:55:ee:79:c6:03:ec:a2:
93:ff:27:3e:48:e5:e6:4c:61:ba:a2:9b:7c:20:0d:
41:80:b4:10:cb:fa:f2:8c:5c:c3:54:25:34:57:df:
b4:47:01:f4:3c:00:4a:65:f2:20:60:a7:e5:41:e7:
f9:c7:25:ac:2c:af:13:6d:a7:29:79:d7:74:3d:f9:
7f:f6:2f:85:14:a5:fe:36:07:39:86:0c:3a:94:3c:
4d:ce:0f:ab:c7:2d:54:c0:33:69:b0:6d:10:5f:12:
98:a4:cb:0d:fb:d1:9f:95:b3:89:b5:34:15:4e:12:
97:79:80:28:67:cd:77:5d:33:09:fd:71:c2:a6:73:
d1:17:b4:df:0f:6e:8d:87:44:4c:57:f8:76:f7:00:
0c:fc:6b:cb:11:39:cb:f3:57:f8:64:43:8b:c8:68:
d9:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:34:EF:B2:94:26:A0:1E:B6:AD:FB:6C:DD:DD:B3:96:C5:C7:41:31
X509v3 Authority Key Identifier:
keyid:18:7B:C1:BB:28:62:B5:72:57:D2:9E:0D:3B:D6:B1:CE:D4:33:EA:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GHvBuyhitXJX0p4NO9axztQz6hM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/GHvBuyhitXJX0p4NO9axztQz6hM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/GHvBuyhitXJX0p4NO9axztQz6hM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:dd:d8:55:90:5e:2d:e8:f7:06:99:51:83:4c:8f:75:26:df:
ca:9b:f2:b9:60:2c:86:92:35:6b:1b:81:eb:9d:d8:cb:a7:8a:
fe:a5:f3:9f:56:87:01:6f:a9:42:74:0a:ac:1d:65:b3:d6:68:
5a:e4:1f:e7:cb:a7:55:d1:6b:fc:62:33:e7:10:6d:b6:d4:95:
4b:f7:78:23:cb:8a:d6:5f:5c:9a:8f:e6:09:1f:9a:92:ca:ad:
32:b5:31:9e:5a:68:3f:45:07:c1:ee:64:c5:40:3a:a0:c3:a1:
c9:91:22:f1:d7:85:62:94:41:5f:85:f8:45:44:d6:11:56:e2:
17:f7:54:ea:f1:15:3c:5d:fb:65:9e:68:d6:f8:8f:02:70:96:
61:f6:62:60:34:08:b6:ba:ad:d3:29:88:64:11:27:4d:c4:2c:
4f:60:45:f1:48:00:8b:ed:8d:d1:b9:67:23:3c:9e:10:09:e3:
0c:9b:4b:b4:bc:c5:d4:ae:d6:4b:a0:70:6a:e7:27:08:4a:75:
5d:ac:91:de:dc:c7:0e:ac:a5:eb:76:1e:44:8c:d6:10:9c:12:
86:3c:bf:d1:17:97:2e:fe:0d:21:e8:c0:88:ab:d9:e1:82:83:
cb:b5:bb:4c:48:6f:f1:68:89:52:a3:b0:e2:51:69:06:90:87:
a2:19:1a:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:26:41 2026 by rpki-client