Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/698bec-a0f0-42f7-99fa-28516bb7505c/1/GHpwT0heEd7avFYmTl2AwUh-CEI.mft
File: GHpwT0heEd7avFYmTl2AwUh-CEI.mft (raw, json)
Hash identifier: ZAxBx0cjKPZXaNk3PLAszqILBsXjdauXVfp8GVA3tQc=
Subject key identifier: CE:5A:B6:84:56:54:30:D3:74:5C:1B:A1:5E:EB:51:EC:C8:1E:95:47
Authority key identifier: 18:7A:70:4F:48:5E:11:DE:DA:BC:56:26:4E:5D:80:C1:48:7E:08:42
Certificate issuer: /CN=187a704f485e11dedabc56264e5d80c1487e0842
Certificate serial: 01A08CB168D4CF64488745F54DB7C5778A0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GHpwT0heEd7avFYmTl2AwUh-CEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/698bec-a0f0-42f7-99fa-28516bb7505c/1/GHpwT0heEd7avFYmTl2AwUh-CEI.mft
Manifest number: 0586
Signing time: Thu 10 Sep 2026 19:00:31 +0000
Manifest this update: Thu 10 Sep 2026 19:00:31 +0000
Manifest next update: Fri 11 Sep 2026 19:00:31 +0000
Files and hashes: 1: AEpkQkkfLG6rJm7NAyWlaxt2CMs.roa (hash: /9I8pIAZhjtu6FrEBop1PE7UbloCJoFogvxN2q8jOmU=)
2: GHpwT0heEd7avFYmTl2AwUh-CEI.crl (hash: xnNOI00q3Yf9p9Q4nmXDHODjJGMD5BFBsD02g9wfVes=)
3: aEnZIoEJkStf77dfAjgVbuSXis0.asa (hash: BGS53pukSEt/CRgtLVvrNUv1d2Wx94sdd8l5xlNSNcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/698bec-a0f0-42f7-99fa-28516bb7505c/1/GHpwT0heEd7avFYmTl2AwUh-CEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/698bec-a0f0-42f7-99fa-28516bb7505c/1/GHpwT0heEd7avFYmTl2AwUh-CEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GHpwT0heEd7avFYmTl2AwUh-CEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:b1:68:d4:cf:64:48:87:45:f5:4d:b7:c5:77:8a:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=187a704f485e11dedabc56264e5d80c1487e0842
Validity
Not Before: Sep 10 19:00:31 2026 GMT
Not After : Sep 11 19:00:31 2026 GMT
Subject: CN=ce5ab684565430d3745c1ba15eeb51ecc81e9547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:56:4a:18:3a:60:4c:d2:10:83:f1:c4:47:ca:
df:cc:d5:e3:e6:30:74:c5:70:b4:26:eb:21:3b:64:
d7:d6:25:3a:0f:ac:a9:f4:30:79:f1:3c:d7:47:36:
38:b9:16:86:5c:76:11:5f:27:26:2c:e5:34:f4:02:
5a:b2:72:4a:a6:09:6c:ed:14:a4:ac:83:ea:c8:59:
ff:de:3b:16:43:8f:94:c0:d2:a1:1c:03:c1:98:a7:
06:42:10:2a:3c:48:d6:c2:0b:0b:01:2d:5c:57:01:
6b:4f:d8:95:2f:61:96:55:91:f7:13:9b:f0:2d:5f:
ce:40:95:32:4c:cc:b2:5b:f8:3f:26:5e:72:94:f1:
58:e0:ed:5f:11:ba:e2:b2:3b:c6:2d:5f:14:9a:af:
1d:e6:65:0b:42:80:ee:9b:4d:71:99:d5:75:af:61:
8a:9f:73:66:7e:0c:60:d9:03:0d:0f:4f:91:c9:4f:
a4:b1:81:5d:c5:19:32:3c:33:db:53:80:24:51:14:
c3:c4:c0:68:76:ad:e3:b1:f4:ec:e7:7c:00:c2:5c:
c0:62:fd:50:65:0e:4e:78:16:c8:7f:f9:26:d0:f9:
ed:ab:7f:3a:85:97:fc:ce:8c:db:89:dc:0c:13:ab:
36:65:85:c6:14:a9:f7:49:8f:62:c4:e6:e7:e5:20:
a0:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:5A:B6:84:56:54:30:D3:74:5C:1B:A1:5E:EB:51:EC:C8:1E:95:47
X509v3 Authority Key Identifier:
keyid:18:7A:70:4F:48:5E:11:DE:DA:BC:56:26:4E:5D:80:C1:48:7E:08:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GHpwT0heEd7avFYmTl2AwUh-CEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/698bec-a0f0-42f7-99fa-28516bb7505c/1/GHpwT0heEd7avFYmTl2AwUh-CEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/698bec-a0f0-42f7-99fa-28516bb7505c/1/GHpwT0heEd7avFYmTl2AwUh-CEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:4a:b8:49:c3:34:05:ad:92:f0:f5:5f:81:ae:df:4c:23:fb:
a4:01:c5:12:7a:18:63:e1:ce:9e:bc:69:b9:c8:e9:45:7e:fc:
d4:ef:b3:8a:64:e9:0d:70:17:5d:af:ee:ce:97:8a:92:0f:61:
d3:cf:00:45:a0:0c:11:ef:a0:cc:9b:9c:de:91:38:72:11:c4:
11:f7:21:f4:5d:34:f6:6f:6f:ae:d3:95:1e:c0:fd:cf:36:65:
ad:e3:b2:3b:dc:d2:e1:68:d9:cd:4f:72:e7:6c:d5:b2:9a:0a:
f7:c6:1e:c9:2a:f7:db:3d:23:b1:fc:6b:d5:be:9a:ac:78:67:
aa:24:9c:0c:af:26:2a:0d:6e:a3:67:e1:a2:3a:29:26:e8:ec:
19:52:ac:26:fc:92:e6:78:b1:16:34:ee:40:b9:8b:3a:11:ef:
dc:a3:b7:38:00:d7:c6:f2:35:8d:42:6d:6e:49:7f:e7:95:cd:
6e:8f:65:26:ff:13:40:33:9c:18:4b:3d:12:ed:92:1d:e1:f6:
52:21:96:c5:5b:9e:db:92:28:4d:95:41:79:f4:c1:40:83:db:
0e:ae:70:3d:f8:9d:96:66:f3:1b:41:48:c1:47:6b:fe:5a:32:
d2:6c:77:c5:f0:49:d1:d8:f3:71:c4:62:1c:86:43:ef:79:10:
5c:34:a4:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:57:54 2026 by rpki-client