Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.mft
File: GKhKjkdfZgbnoS-SszDWPY-IC-A.mft (raw, json)
Hash identifier: zpo5DIxRUUbdntxcFrPoqPF2NkCBfp+vjrQ+f9jjPow=
Subject key identifier: EE:37:B8:A0:6C:22:46:16:25:B1:B0:C2:8A:DA:89:7C:3F:44:65:48
Authority key identifier: 18:A8:4A:8E:47:5F:66:06:E7:A1:2F:92:B3:30:D6:3D:8F:88:0B:E0
Certificate issuer: /CN=18a84a8e475f6606e7a12f92b330d63d8f880be0
Certificate serial: 01A172816A414D9C08A4C8158120A27158DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GKhKjkdfZgbnoS-SszDWPY-IC-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.mft
Manifest number: 1320
Signing time: Sun 25 Oct 2026 10:00:46 +0000
Manifest this update: Sun 25 Oct 2026 10:00:46 +0000
Manifest next update: Mon 26 Oct 2026 10:00:46 +0000
Files and hashes: 1: 06yOpErAwfmu7WvZFdUTDOLYIKg.roa (hash: 5YYabp9k2b6WBw8sfF/NEk7pKY9/HTMuCCjJqa+bbeQ=)
2: 44rdbiZ5W01w2FHGmmFZuLEjtH4.roa (hash: BAjDaUqD15lGYQOgjoqQVVyEDv/bCkhBoeDQRC5iHCc=)
3: Eu4BP5a5E95Q7p4k5RfhumyOrvk.roa (hash: 1lD5R4cJuPj/nZ60zfBHs9WvrZ5YRD+ZAX1KkvheAUY=)
4: GKhKjkdfZgbnoS-SszDWPY-IC-A.crl (hash: /zxXOoLVhYpUVWu2Y66HPKTgmRNEVrgqQTFkwzmgoMY=)
5: Lz9HTbSY8lhhcxkrepciN8LQ0fQ.roa (hash: rZwlf03cUQC4V8ZoX8hCUb5cuhgy7zpkYtcAyoRPcgs=)
6: QGpEibgpEzzKHJ9Zq6TY1Hl8o-Y.roa (hash: +vRj62FE8yxCk1o/sYs/sodlZx7km+qb9MSzTq89XM4=)
7: lnQm--gY8ePlCI161SZETEH7iss.roa (hash: vxrBUtHuyLV0LieoKDVoBuqAYfEuInf7kfLphmP99fg=)
8: smMdv_-HUKB9o1SN60BqNTKIRKY.roa (hash: ozUtLx+Ca1FQOeVoLfIOrLVvfNRiDbVizsQUikzvOg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/GKhKjkdfZgbnoS-SszDWPY-IC-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:72:81:6a:41:4d:9c:08:a4:c8:15:81:20:a2:71:58:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18a84a8e475f6606e7a12f92b330d63d8f880be0
Validity
Not Before: Oct 25 10:00:46 2026 GMT
Not After : Oct 26 10:00:46 2026 GMT
Subject: CN=ee37b8a06c22461625b1b0c28ada897c3f446548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:92:34:e9:6a:64:eb:44:44:d0:f1:5f:d2:11:
44:d9:0c:de:50:fc:92:8e:34:22:96:83:08:40:bc:
73:e7:45:36:75:e8:c9:fe:5d:8a:e2:64:84:54:80:
0a:76:3a:a3:d9:ec:77:b5:d9:95:10:d7:e3:22:1e:
3e:78:59:b7:22:64:20:fa:49:b4:f2:7a:46:aa:38:
cd:4e:f4:95:d2:92:e9:f4:4d:8a:6b:d0:ee:77:5f:
4e:e2:83:58:8f:b8:70:82:c9:68:98:17:cd:6f:ff:
9d:ae:f0:93:2b:ee:5d:1a:b1:50:0b:db:54:f3:eb:
17:65:da:b6:26:a3:33:c4:7c:e6:b4:c9:5e:e8:3a:
84:0d:e0:ee:94:51:68:ba:6e:0a:34:89:d1:0d:29:
4b:df:ae:d2:e6:02:05:6d:14:f6:8f:99:0a:1e:4d:
81:19:35:20:f4:91:8f:97:ef:ba:68:e5:a3:74:c6:
89:4a:7b:be:3b:1f:30:d0:11:17:44:98:2e:d8:69:
4b:08:96:2c:98:58:6c:a5:df:d3:1e:0f:f0:c0:8f:
c3:3e:7d:27:5d:dc:9b:25:69:02:a4:cf:f5:a4:f6:
15:aa:72:ab:40:49:84:c6:ae:b9:42:02:4d:62:b6:
b2:44:77:b4:d6:ce:a2:fa:eb:91:62:12:fa:16:fa:
82:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:37:B8:A0:6C:22:46:16:25:B1:B0:C2:8A:DA:89:7C:3F:44:65:48
X509v3 Authority Key Identifier:
keyid:18:A8:4A:8E:47:5F:66:06:E7:A1:2F:92:B3:30:D6:3D:8F:88:0B:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GKhKjkdfZgbnoS-SszDWPY-IC-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:17:0f:b9:8b:b3:4a:d5:c8:5b:f6:a7:01:fa:fd:ab:75:a9:
6e:55:8f:b2:8d:f9:0d:72:3e:a5:71:94:62:cd:e2:0f:2a:87:
75:cd:af:1d:9d:f2:b2:d1:24:93:bb:1b:b5:36:ac:05:4d:9c:
fe:87:26:05:cd:26:a4:15:95:dd:c4:06:a4:25:47:86:e2:db:
9a:84:a7:99:2a:25:ef:3b:ac:01:7f:83:44:15:75:18:03:92:
54:3d:0b:9b:f0:9d:22:90:54:05:3a:aa:d2:17:a9:79:fa:b9:
4f:ee:3d:00:ed:b3:e1:fd:5b:7e:e7:9d:3e:92:27:90:1c:b3:
df:c6:7e:2d:13:78:d7:80:45:d4:87:f3:90:11:87:89:b8:0d:
d6:a7:98:92:ff:4d:f1:83:7c:ef:de:a3:df:cf:c2:bb:cf:2c:
01:e4:f0:b6:81:59:b2:76:10:e9:7e:d5:f7:3e:55:94:77:d4:
d8:4b:d2:be:6a:ac:cf:ee:71:c1:68:e3:cf:b5:f3:65:41:79:
e5:ac:f3:2c:f3:fc:b8:d0:b6:dc:8c:30:53:97:f1:46:04:09:
36:a7:e0:f1:45:3e:94:23:5e:25:cd:4e:d4:1b:15:7f:cd:70:
4a:b6:a5:b8:06:5c:2b:f5:2f:10:b9:bc:75:f3:12:53:8c:1d:
9c:9a:03:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 15:53:20 2026 by rpki-client