Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/698bec-a0f0-42f7-99fa-28516bb7505c/1/GHpwT0heEd7avFYmTl2AwUh-CEI.mft
File: GHpwT0heEd7avFYmTl2AwUh-CEI.mft (raw, json)
Hash identifier: yDdqay4sJd7NYo5n0/dS0tQAo/WU1tJOhjoDFhvG3L0=
Subject key identifier: 76:06:E2:4F:24:42:AF:9D:20:9C:1A:FC:ED:B9:2D:73:DE:5C:26:CA
Authority key identifier: 18:7A:70:4F:48:5E:11:DE:DA:BC:56:26:4E:5D:80:C1:48:7E:08:42
Certificate issuer: /CN=187a704f485e11dedabc56264e5d80c1487e0842
Certificate serial: 019D3940753BC1D929F4FB5066404DA6D957
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GHpwT0heEd7avFYmTl2AwUh-CEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/698bec-a0f0-42f7-99fa-28516bb7505c/1/GHpwT0heEd7avFYmTl2AwUh-CEI.mft
Manifest number: 03CA
Signing time: Sun 29 Mar 2026 11:00:18 +0000
Manifest this update: Sun 29 Mar 2026 11:00:18 +0000
Manifest next update: Mon 30 Mar 2026 11:00:18 +0000
Files and hashes: 1: GHpwT0heEd7avFYmTl2AwUh-CEI.crl (hash: 59mvu2p5Mt37In37ic8V0nxTFD3uiVVbkCdt+WeuxT4=)
2: uevpehLgWf1goDveIaAf_RWmFqo.roa (hash: 6gDUveXYOEUjPreD5zKGNwaO5HHi1e9vD8LKnyRtvSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/698bec-a0f0-42f7-99fa-28516bb7505c/1/GHpwT0heEd7avFYmTl2AwUh-CEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/698bec-a0f0-42f7-99fa-28516bb7505c/1/GHpwT0heEd7avFYmTl2AwUh-CEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GHpwT0heEd7avFYmTl2AwUh-CEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 11:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:75:3b:c1:d9:29:f4:fb:50:66:40:4d:a6:d9:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=187a704f485e11dedabc56264e5d80c1487e0842
Validity
Not Before: Mar 29 11:00:18 2026 GMT
Not After : Mar 30 11:00:18 2026 GMT
Subject: CN=7606e24f2442af9d209c1afcedb92d73de5c26ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:45:ef:21:50:2c:b8:32:38:fe:41:fe:8d:68:
dc:10:1f:39:06:5e:ed:f5:28:a0:69:a7:4b:83:6f:
1d:8c:4a:62:cb:33:70:da:99:62:35:a3:93:bd:90:
ad:4f:37:1b:1e:87:76:a0:94:cb:38:be:67:f8:09:
01:e1:c1:f6:d2:40:ea:c1:92:47:c7:96:e9:af:48:
82:65:8e:ba:72:8e:27:6d:0e:2a:5d:dc:b6:8d:20:
a8:9d:82:fc:fb:0c:fb:d9:b1:b1:61:ae:8d:45:ca:
ed:d8:8b:0d:2f:83:7d:1f:36:8c:e9:16:fc:1b:b3:
93:36:b5:a5:a2:01:fc:a3:7b:06:56:f1:c4:8e:e6:
2d:41:79:72:05:75:a4:3b:c8:dc:05:64:52:6c:77:
c6:21:eb:c4:4f:fd:92:6b:c2:76:7d:f3:7b:ac:9c:
fc:9b:3e:76:9c:47:12:96:59:27:76:4c:98:13:86:
ec:dd:71:21:48:b5:42:b5:ed:8c:28:d9:78:15:53:
df:a8:37:87:e2:f3:76:92:01:64:34:8b:c9:05:4a:
f8:30:77:35:1e:51:9f:7a:c2:12:74:d6:29:e8:03:
27:0f:00:76:40:6d:73:93:c6:3c:ef:60:d2:0f:bc:
bc:63:6d:67:e0:f5:42:bf:2d:c2:ec:ae:00:93:25:
e1:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:06:E2:4F:24:42:AF:9D:20:9C:1A:FC:ED:B9:2D:73:DE:5C:26:CA
X509v3 Authority Key Identifier:
keyid:18:7A:70:4F:48:5E:11:DE:DA:BC:56:26:4E:5D:80:C1:48:7E:08:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GHpwT0heEd7avFYmTl2AwUh-CEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/698bec-a0f0-42f7-99fa-28516bb7505c/1/GHpwT0heEd7avFYmTl2AwUh-CEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/698bec-a0f0-42f7-99fa-28516bb7505c/1/GHpwT0heEd7avFYmTl2AwUh-CEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:97:d6:bc:af:d8:ed:e8:f1:ea:44:63:5e:36:c3:03:90:1b:
eb:a3:d3:77:19:bd:84:2d:42:9a:b3:eb:bf:5c:92:1d:5a:ab:
df:e0:66:f6:e0:b6:fb:cb:9b:ba:98:5e:bb:7c:7d:cb:d2:66:
71:2c:96:8e:67:39:30:6a:3b:e3:2d:1e:db:b2:89:4d:19:6d:
c0:a3:33:e0:44:8b:d5:65:72:6a:72:d5:d5:a8:e7:36:62:e7:
8d:4d:f5:9b:19:f8:d7:b8:25:72:83:30:5b:a6:8f:a9:a8:b3:
c5:fc:72:1b:07:c1:e7:ef:42:e9:cf:34:f7:80:ee:35:6a:72:
2a:d9:03:88:6f:e5:75:32:06:76:b0:e3:31:da:e6:91:72:b8:
5c:59:f0:f9:95:b7:94:33:2c:ac:c9:f0:89:99:8a:7f:00:29:
63:78:55:e0:14:b8:c4:9a:ac:6f:7a:08:82:6d:3e:47:c9:03:
97:52:2e:34:ed:17:99:4a:50:42:88:76:8d:c2:d7:34:28:0d:
52:33:45:ad:ae:2f:e1:f1:d9:85:91:2c:00:4f:5d:6c:52:5f:
ba:f8:92:9f:1e:a3:40:d0:78:64:8b:48:04:25:99:b5:2a:46:
44:78:fc:df:d5:73:1c:0c:51:1f:03:ef:f8:35:c2:6d:95:96:
84:fc:fd:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:13:19 2026 by rpki-client