Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.mft
File: GKhKjkdfZgbnoS-SszDWPY-IC-A.mft (raw, json)
Hash identifier: JZn5qFKP8uFVVOpdB/WgxFFonBwbxdIX/EZkBedcmq4=
Subject key identifier: 53:32:96:77:D3:46:D1:26:64:C0:7D:DC:E7:C3:95:45:A6:8A:5A:60
Authority key identifier: 18:A8:4A:8E:47:5F:66:06:E7:A1:2F:92:B3:30:D6:3D:8F:88:0B:E0
Certificate issuer: /CN=18a84a8e475f6606e7a12f92b330d63d8f880be0
Certificate serial: 01A06D26BFF35F189C1498DDA686ACFAAE07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GKhKjkdfZgbnoS-SszDWPY-IC-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.mft
Manifest number: 1296
Signing time: Fri 04 Sep 2026 16:00:51 +0000
Manifest this update: Fri 04 Sep 2026 16:00:51 +0000
Manifest next update: Sat 05 Sep 2026 16:00:51 +0000
Files and hashes: 1: 06yOpErAwfmu7WvZFdUTDOLYIKg.roa (hash: 5YYabp9k2b6WBw8sfF/NEk7pKY9/HTMuCCjJqa+bbeQ=)
2: Eu4BP5a5E95Q7p4k5RfhumyOrvk.roa (hash: 1lD5R4cJuPj/nZ60zfBHs9WvrZ5YRD+ZAX1KkvheAUY=)
3: GKhKjkdfZgbnoS-SszDWPY-IC-A.crl (hash: nw3F32n68WJbvQjosA1m2IoRzsQneNLloVgbWAMhJ7k=)
4: Lz9HTbSY8lhhcxkrepciN8LQ0fQ.roa (hash: rZwlf03cUQC4V8ZoX8hCUb5cuhgy7zpkYtcAyoRPcgs=)
5: QGpEibgpEzzKHJ9Zq6TY1Hl8o-Y.roa (hash: +vRj62FE8yxCk1o/sYs/sodlZx7km+qb9MSzTq89XM4=)
6: ahZml9k3oIr290dwF6vuGRQYGMg.roa (hash: JIWiUU3hD62X9V1VtVd1M0m6Dubft4KBA0RK4vdkSeI=)
7: lnQm--gY8ePlCI161SZETEH7iss.roa (hash: vxrBUtHuyLV0LieoKDVoBuqAYfEuInf7kfLphmP99fg=)
8: mb8r9vp3wM6oJLJdPmkNlWrgKtE.roa (hash: Xrfg/Aqkw9N5mVtt/uYm1yP5BsOe0X4pZfMOzaQDicg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/GKhKjkdfZgbnoS-SszDWPY-IC-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:26:bf:f3:5f:18:9c:14:98:dd:a6:86:ac:fa:ae:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18a84a8e475f6606e7a12f92b330d63d8f880be0
Validity
Not Before: Sep 4 16:00:51 2026 GMT
Not After : Sep 5 16:00:51 2026 GMT
Subject: CN=53329677d346d12664c07ddce7c39545a68a5a60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:59:78:30:93:d3:c1:a4:5c:60:54:e8:b5:1c:
88:52:a9:c3:48:b1:0e:05:1c:37:e0:2f:ae:60:e1:
39:10:ad:59:30:a2:b4:50:f3:85:c4:f0:52:c9:45:
9a:91:0f:cd:ef:a2:1b:56:f1:1b:a3:53:64:fc:bd:
13:76:68:1f:62:99:53:d4:98:3d:39:2a:66:f1:b2:
96:11:5d:65:09:3b:02:42:d9:63:51:e2:29:2f:8a:
4a:d7:bf:3c:fa:da:e8:b4:9a:03:64:06:2c:92:07:
cb:37:c7:93:e7:4f:53:d2:bf:19:f0:f9:f0:d7:cf:
ed:3d:5b:48:3d:0a:2a:84:03:ee:dc:61:42:3d:1d:
8c:d3:a4:15:52:b0:75:de:b1:25:44:f9:8c:ca:cb:
aa:7a:c1:ff:41:a2:64:f0:29:e5:98:4b:b1:11:4f:
aa:d9:90:b4:c5:1d:0c:98:63:e4:08:66:15:9e:a0:
54:fb:f3:7f:f0:15:55:39:93:69:7c:0b:92:69:f4:
79:79:9a:15:64:88:09:ae:ba:c8:73:a6:b0:33:5c:
52:bc:dc:5c:0f:f0:6e:f1:0d:fc:68:f9:5d:cd:84:
75:4b:8d:21:fa:c1:b7:c5:12:e5:07:9c:06:b2:5b:
2f:6a:c0:72:31:39:fd:01:86:47:1b:b2:89:8d:00:
81:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:32:96:77:D3:46:D1:26:64:C0:7D:DC:E7:C3:95:45:A6:8A:5A:60
X509v3 Authority Key Identifier:
keyid:18:A8:4A:8E:47:5F:66:06:E7:A1:2F:92:B3:30:D6:3D:8F:88:0B:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GKhKjkdfZgbnoS-SszDWPY-IC-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:e9:2a:ac:79:5f:dd:a3:2d:92:2a:42:41:5a:3d:fd:94:c1:
8c:e8:ed:f4:39:80:92:9a:1b:2c:5c:fd:8e:9f:d1:fb:bf:23:
de:f2:3e:24:9a:20:98:a2:f3:fd:76:bb:1a:32:82:df:8d:75:
5a:0f:54:5d:ab:46:d2:ef:0a:90:1c:a3:06:4b:2d:53:71:34:
b3:38:b2:74:f0:e3:c0:bc:ff:95:df:8b:53:5b:71:ad:97:cc:
16:bf:77:20:24:8c:49:1f:ea:ef:b0:56:ad:05:11:a3:6d:cb:
71:bd:d3:7a:48:66:33:e3:89:8b:69:12:d4:75:4c:b1:a7:cb:
d1:3c:24:bf:77:2a:41:41:65:f3:c5:ae:17:d9:21:49:e6:6d:
93:03:d5:21:6c:b5:fc:b5:69:2c:2c:2f:7d:3a:24:ba:ed:da:
2b:77:cc:dc:d5:27:e9:fe:52:a9:94:71:8c:f6:c7:0e:15:6a:
86:41:e2:86:bc:17:54:ba:be:81:43:fe:0d:1e:49:27:3a:0c:
93:2d:e6:89:4a:cc:99:12:18:70:08:df:54:05:95:be:23:96:
1d:32:bf:c1:e8:d7:05:b1:85:b3:30:72:cc:52:79:de:59:31:
73:09:92:2c:52:d8:1a:ac:9b:69:aa:58:81:96:76:26:cd:1a:
50:d9:48:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:22:49 2026 by rpki-client