Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/698bec-a0f0-42f7-99fa-28516bb7505c/1/GHpwT0heEd7avFYmTl2AwUh-CEI.mft
File: GHpwT0heEd7avFYmTl2AwUh-CEI.mft (raw, json)
Hash identifier: QJyQegA8E8P3+0srEgUjr7MxHFe/QDQWSoHKjtr/JbI=
Subject key identifier: 04:EF:B7:78:84:52:37:48:CD:F0:ED:13:0A:40:8F:46:5E:DE:0A:DC
Authority key identifier: 18:7A:70:4F:48:5E:11:DE:DA:BC:56:26:4E:5D:80:C1:48:7E:08:42
Certificate issuer: /CN=187a704f485e11dedabc56264e5d80c1487e0842
Certificate serial: 019EB76A7A0FF5B779D81314C38E97BB1846
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GHpwT0heEd7avFYmTl2AwUh-CEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/698bec-a0f0-42f7-99fa-28516bb7505c/1/GHpwT0heEd7avFYmTl2AwUh-CEI.mft
Manifest number: 0492
Signing time: Thu 11 Jun 2026 16:01:08 +0000
Manifest this update: Thu 11 Jun 2026 16:01:08 +0000
Manifest next update: Fri 12 Jun 2026 16:01:08 +0000
Files and hashes: 1: AEpkQkkfLG6rJm7NAyWlaxt2CMs.roa (hash: /9I8pIAZhjtu6FrEBop1PE7UbloCJoFogvxN2q8jOmU=)
2: GHpwT0heEd7avFYmTl2AwUh-CEI.crl (hash: 6T3yc2lOPkA696OY+UDqGLSNQMrJlWwK/oKRKuc6WPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/698bec-a0f0-42f7-99fa-28516bb7505c/1/GHpwT0heEd7avFYmTl2AwUh-CEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/698bec-a0f0-42f7-99fa-28516bb7505c/1/GHpwT0heEd7avFYmTl2AwUh-CEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GHpwT0heEd7avFYmTl2AwUh-CEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 16:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:6a:7a:0f:f5:b7:79:d8:13:14:c3:8e:97:bb:18:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=187a704f485e11dedabc56264e5d80c1487e0842
Validity
Not Before: Jun 11 16:01:08 2026 GMT
Not After : Jun 12 16:01:08 2026 GMT
Subject: CN=04efb77884523748cdf0ed130a408f465ede0adc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4a:aa:c0:b3:a2:75:80:95:3b:82:37:c4:c5:
d5:44:fa:3b:bf:a4:c3:c7:44:4f:ba:a2:40:8d:89:
f0:1b:ab:43:09:47:a8:15:df:da:92:77:f4:c1:68:
fb:c6:cd:bb:ca:fc:55:dd:da:a9:cd:d6:3f:09:e5:
cb:00:b4:f2:cb:24:5a:76:5d:2d:34:a5:42:b9:40:
c4:7c:03:5c:02:fd:e2:d2:db:e5:41:1b:94:5f:2e:
a4:f8:2f:4d:d8:3c:44:1e:83:82:57:26:f5:84:28:
89:88:18:26:5a:e9:e9:22:40:28:d6:ad:40:5b:cc:
9f:04:a6:90:4d:ba:cf:ba:f2:4c:0c:4c:45:3a:4e:
95:03:ce:24:66:9e:b2:d1:66:bb:47:64:78:64:6f:
39:8d:61:ea:33:89:9a:eb:78:12:ae:18:7f:2e:55:
b3:e5:4c:51:e7:7a:a3:cd:18:60:cb:9c:b5:d8:61:
b3:5a:74:54:6d:47:b4:d1:d2:46:53:1a:dd:c5:24:
7a:7c:88:20:0a:89:a2:6f:69:b8:a4:19:c6:e4:bc:
ae:49:72:3c:c0:b3:4a:82:95:c4:c0:ac:1c:0d:2f:
00:57:ee:a3:d1:c9:96:52:81:f5:73:5b:60:34:ca:
86:b1:50:35:a3:dc:81:42:a8:d5:63:5e:10:b2:80:
d1:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:EF:B7:78:84:52:37:48:CD:F0:ED:13:0A:40:8F:46:5E:DE:0A:DC
X509v3 Authority Key Identifier:
keyid:18:7A:70:4F:48:5E:11:DE:DA:BC:56:26:4E:5D:80:C1:48:7E:08:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GHpwT0heEd7avFYmTl2AwUh-CEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/698bec-a0f0-42f7-99fa-28516bb7505c/1/GHpwT0heEd7avFYmTl2AwUh-CEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/698bec-a0f0-42f7-99fa-28516bb7505c/1/GHpwT0heEd7avFYmTl2AwUh-CEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:39:19:86:8e:6f:d4:47:45:84:4d:80:00:f7:2f:e7:f8:1e:
6c:9a:19:a5:82:31:c0:0a:22:8d:c0:91:43:90:c9:b2:8b:c5:
5f:27:58:09:6a:aa:f7:ce:9c:5a:9a:4f:fd:c5:71:df:c3:05:
78:17:06:b2:35:db:e0:1f:64:db:95:c1:b6:e3:08:61:71:31:
44:e5:7b:6f:70:11:01:fa:bb:63:8e:b0:a5:2b:c9:bb:60:60:
f0:af:96:26:e4:75:5d:b7:c3:68:e2:5e:1f:6e:1c:7f:3c:5f:
cf:63:7f:f8:1c:c6:0f:52:23:c8:df:7b:bb:3b:6c:d5:fa:ad:
cd:e5:94:93:b3:69:e8:8b:10:04:e4:fe:6c:6f:76:7e:4a:b4:
be:13:b1:97:0e:04:65:fc:07:57:28:bf:69:63:36:0a:ef:e9:
86:9a:4f:17:9b:b5:df:32:80:f9:de:8c:04:b8:4a:ee:f3:d0:
66:fb:a2:22:62:cb:e0:3a:9f:ed:ab:33:1c:c1:5f:23:50:b1:
81:d8:9b:39:a1:88:0d:5c:7a:93:9d:c6:71:23:7e:8c:0b:63:
f4:8f:4f:5d:d1:ff:0e:57:0c:f3:93:73:46:42:dc:20:55:bd:
d5:76:c3:11:af:50:5e:97:1b:3f:59:6f:10:05:0b:aa:88:6a:
ca:8a:6e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:53:17 2026 by rpki-client