Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/698bec-a0f0-42f7-99fa-28516bb7505c/1/GHpwT0heEd7avFYmTl2AwUh-CEI.mft
File: GHpwT0heEd7avFYmTl2AwUh-CEI.mft (raw, json)
Hash identifier: ZRw7jFBhcwcuimgzYso4A85/jJ4raVJmr0XGp8RTmpk=
Subject key identifier: 27:05:04:75:98:89:08:35:21:B4:54:B6:34:9C:74:9C:5E:12:A4:97
Authority key identifier: 18:7A:70:4F:48:5E:11:DE:DA:BC:56:26:4E:5D:80:C1:48:7E:08:42
Certificate issuer: /CN=187a704f485e11dedabc56264e5d80c1487e0842
Certificate serial: 01A17E184A7E919564AB189521117307FF7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GHpwT0heEd7avFYmTl2AwUh-CEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/698bec-a0f0-42f7-99fa-28516bb7505c/1/GHpwT0heEd7avFYmTl2AwUh-CEI.mft
Manifest number: 0603
Signing time: Tue 27 Oct 2026 16:01:23 +0000
Manifest this update: Tue 27 Oct 2026 16:01:23 +0000
Manifest next update: Wed 28 Oct 2026 16:01:23 +0000
Files and hashes: 1: AEpkQkkfLG6rJm7NAyWlaxt2CMs.roa (hash: /9I8pIAZhjtu6FrEBop1PE7UbloCJoFogvxN2q8jOmU=)
2: GHpwT0heEd7avFYmTl2AwUh-CEI.crl (hash: f+8xExaOTOTGMn9rApYO9LJYsyY5FdqKKAL1O7MuJjw=)
3: aEnZIoEJkStf77dfAjgVbuSXis0.asa (hash: BGS53pukSEt/CRgtLVvrNUv1d2Wx94sdd8l5xlNSNcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/698bec-a0f0-42f7-99fa-28516bb7505c/1/GHpwT0heEd7avFYmTl2AwUh-CEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/698bec-a0f0-42f7-99fa-28516bb7505c/1/GHpwT0heEd7avFYmTl2AwUh-CEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GHpwT0heEd7avFYmTl2AwUh-CEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:18:4a:7e:91:95:64:ab:18:95:21:11:73:07:ff:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=187a704f485e11dedabc56264e5d80c1487e0842
Validity
Not Before: Oct 27 16:01:23 2026 GMT
Not After : Oct 28 16:01:23 2026 GMT
Subject: CN=270504759889083521b454b6349c749c5e12a497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:37:45:38:bd:8d:2a:99:32:aa:7d:13:27:7f:
80:87:97:d3:9c:21:3d:10:ee:e6:83:18:c5:ab:7d:
25:66:db:33:a8:94:aa:13:bd:92:2d:8d:57:5b:be:
2c:18:c8:c7:13:7e:aa:fa:3c:f1:ed:e9:1b:ff:01:
d4:c7:db:3c:83:2e:56:c4:66:5c:ce:92:1d:cf:22:
10:15:63:21:2e:56:b9:07:06:ec:8c:44:77:d8:86:
81:5d:6a:38:15:1e:e9:5c:27:30:c8:2f:02:d2:ce:
34:e8:44:92:79:33:e2:39:eb:96:e2:8c:8b:97:87:
1d:f6:6e:d8:ad:d3:b6:f0:70:5c:18:96:e8:4e:17:
32:db:31:b5:82:37:3c:0d:d0:73:6a:0f:ac:4c:2d:
d2:eb:23:15:75:07:c3:34:cc:07:3b:b0:fe:34:e8:
dd:78:56:be:bb:83:0a:89:ea:a7:98:c5:12:c1:52:
38:ac:c2:d6:9f:ca:ab:9d:4c:3e:89:f9:a8:b8:fd:
21:51:17:11:a9:58:ec:a5:ff:ca:be:ab:b7:96:9b:
d5:8e:03:80:f6:29:45:6d:f0:6d:7a:e8:f0:ca:e1:
bd:b9:99:0c:07:cb:04:ff:4a:13:cd:94:8f:e6:64:
53:2f:32:99:30:5c:f9:98:4a:bc:b4:d8:20:0d:df:
6e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:05:04:75:98:89:08:35:21:B4:54:B6:34:9C:74:9C:5E:12:A4:97
X509v3 Authority Key Identifier:
keyid:18:7A:70:4F:48:5E:11:DE:DA:BC:56:26:4E:5D:80:C1:48:7E:08:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GHpwT0heEd7avFYmTl2AwUh-CEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/698bec-a0f0-42f7-99fa-28516bb7505c/1/GHpwT0heEd7avFYmTl2AwUh-CEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/698bec-a0f0-42f7-99fa-28516bb7505c/1/GHpwT0heEd7avFYmTl2AwUh-CEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:ce:6e:c1:32:b7:cd:95:31:a2:9f:b6:72:04:dc:fc:3f:d0:
3d:9c:50:d9:f4:d9:e8:10:52:f0:05:dc:70:b0:0c:db:0e:7f:
7c:fa:8f:29:24:83:a0:1c:7e:6f:5d:c1:e2:e3:9f:c5:c6:59:
0a:e5:b8:07:ad:ca:85:a0:74:1e:43:42:1c:b5:dc:9d:92:57:
c3:62:cf:cc:72:ae:8e:2d:20:15:60:e9:d3:6e:da:58:e6:a3:
93:9e:65:56:74:d4:84:7e:7f:d4:f6:46:2c:06:d6:bd:af:1a:
6b:68:fb:47:db:41:21:e8:b2:48:33:af:ed:2f:35:3e:6c:68:
ce:08:a5:02:1f:53:c9:1a:dd:39:47:fc:8a:08:4a:2b:a9:0c:
0e:af:8d:28:3b:9f:48:23:2b:5c:e8:bd:5b:89:3c:10:74:cc:
14:c3:c9:5a:25:47:61:bc:75:41:6d:e8:75:c6:86:5f:6e:6a:
22:78:c8:14:33:cb:c4:3e:2d:d8:cf:53:35:5b:e2:59:9b:62:
da:f4:39:4c:3e:40:74:2b:a1:e2:a8:d0:9a:d1:99:28:44:97:
4b:00:73:fe:94:58:83:1d:e3:7e:e7:04:c0:6e:a2:7b:e8:7b:
a3:d2:fa:8a:d3:c6:41:e7:f5:c4:1c:c6:35:06:60:a5:2a:33:
ca:f3:6f:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 23:29:36 2026 by rpki-client