Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/GUKBeimILUM78buOvFmy_yVugD8.mft
File: GUKBeimILUM78buOvFmy_yVugD8.mft (raw, json)
Hash identifier: rMCdyzR9cwJ39RiKXvsekhAy+E2QbxzwGd3ToTSZkqU=
Subject key identifier: 9C:E3:46:C0:B7:FB:1D:F9:22:04:DB:73:02:35:E1:00:EA:79:4D:59
Authority key identifier: 19:42:81:7A:29:88:2D:43:3B:F1:BB:8E:BC:59:B2:FF:25:6E:80:3F
Certificate issuer: /CN=1942817a29882d433bf1bb8ebc59b2ff256e803f
Certificate serial: 019F8F7FA267E0381842431B5E01EF6694D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUKBeimILUM78buOvFmy_yVugD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/GUKBeimILUM78buOvFmy_yVugD8.mft
Manifest number: 0EFD
Signing time: Thu 23 Jul 2026 15:02:14 +0000
Manifest this update: Thu 23 Jul 2026 15:02:14 +0000
Manifest next update: Fri 24 Jul 2026 15:02:14 +0000
Files and hashes: 1: 1AlRjHDHPerXd5ndCFjnN-RkvrM.roa (hash: ZLKTq9Q4KNpxNVoqpx9iO6C2WOOfE/x2d5mOP6ZbGXQ=)
2: GUKBeimILUM78buOvFmy_yVugD8.crl (hash: tHzBUQ1IxP4R7iTHL9eZIgwrdVvRI0TTkoDD9I/+5rY=)
3: p93Yo32LiS86tKNIIJTFqRsTAc4.roa (hash: rKHZxZkQ1DlZz92HShvQ6VMO1LR9WfPRGqIp6geZ5io=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/GUKBeimILUM78buOvFmy_yVugD8.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/GUKBeimILUM78buOvFmy_yVugD8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GUKBeimILUM78buOvFmy_yVugD8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7f:a2:67:e0:38:18:42:43:1b:5e:01:ef:66:94:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1942817a29882d433bf1bb8ebc59b2ff256e803f
Validity
Not Before: Jul 23 15:02:14 2026 GMT
Not After : Jul 24 15:02:14 2026 GMT
Subject: CN=9ce346c0b7fb1df92204db730235e100ea794d59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:43:dc:11:ea:fc:41:20:99:ec:f4:81:42:d6:
ea:f8:60:96:55:10:fa:93:aa:1b:bc:c7:03:49:30:
d1:7c:02:7f:3c:6d:f0:d1:2f:73:f6:ab:80:f2:d5:
20:fc:55:37:f4:4b:7b:3b:80:ac:c8:09:4e:4b:6e:
07:3e:0a:42:db:02:08:39:a6:f2:d0:73:09:bf:0a:
02:e7:f5:28:b3:57:87:d2:17:e5:a6:6d:3a:ae:ee:
61:f1:6a:4c:6e:78:1f:ee:25:c9:29:a0:31:35:db:
ed:52:dc:3d:8b:b5:2f:9b:00:7b:40:be:a9:63:d3:
8f:eb:ec:21:93:48:c1:0b:23:6f:a6:d6:36:94:59:
48:7b:6f:57:ad:1f:be:12:97:f6:0a:bd:5f:ab:b0:
37:1a:8d:a9:ea:7c:b8:96:c4:80:56:47:ac:ea:13:
06:01:6c:e7:a2:85:36:f0:48:88:21:5d:bd:ff:36:
8c:8e:55:e3:8f:96:72:d3:34:bc:d0:d7:2a:03:ea:
df:df:e7:7a:eb:63:52:23:ce:c2:55:58:91:cf:b1:
2b:cf:b5:9a:fc:5b:d8:e7:8d:cd:9c:91:55:42:5a:
47:67:bc:b4:59:77:14:f6:fe:02:bb:b8:a7:09:2e:
e8:6f:c7:8c:e0:d5:67:1f:ab:8e:b0:9f:ce:da:f7:
e8:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:E3:46:C0:B7:FB:1D:F9:22:04:DB:73:02:35:E1:00:EA:79:4D:59
X509v3 Authority Key Identifier:
keyid:19:42:81:7A:29:88:2D:43:3B:F1:BB:8E:BC:59:B2:FF:25:6E:80:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUKBeimILUM78buOvFmy_yVugD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/GUKBeimILUM78buOvFmy_yVugD8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/GUKBeimILUM78buOvFmy_yVugD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:2d:59:5d:d3:96:f6:00:35:3e:92:8d:e3:18:1e:95:25:31:
48:87:ce:ee:cd:a5:7a:8d:4c:34:05:9c:88:56:42:d2:4c:03:
0a:4c:7b:25:17:0d:b4:47:ca:18:79:df:d9:e7:b3:7c:fd:2e:
97:48:21:fe:5e:cf:9c:76:b9:dd:16:c1:86:9b:51:08:a6:f5:
90:24:ed:d9:31:d7:ff:65:6e:03:1e:28:1e:cd:47:e6:be:d0:
71:e8:39:46:db:ed:fb:f6:11:de:e6:6e:ca:a1:93:2a:d6:50:
f7:8f:5c:c7:65:f7:4a:54:3c:37:59:8b:8b:ed:2e:79:9f:72:
91:16:c6:22:d7:d5:16:87:18:e4:39:5a:60:61:79:eb:ab:a6:
92:25:dc:79:c9:73:84:8f:2d:26:48:a3:68:48:fa:5f:f4:de:
e0:b3:34:1d:bd:76:12:a9:b9:2e:ac:cb:f2:f1:4d:7b:31:08:
de:fd:bb:4e:18:2d:8b:af:a3:65:ef:7c:2c:69:7d:80:02:92:
8f:bc:36:1d:1e:a1:70:d2:c9:81:c6:22:2a:1e:48:f4:50:42:
0d:47:52:72:46:42:4e:3d:dd:22:c0:9d:c3:f6:d9:6a:5c:b9:
57:d3:ba:0f:42:ce:78:e3:71:c2:c5:da:07:a7:45:ab:79:36:
44:f9:4e:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Pf6Jn4DgYQkMbXgHvZpTRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5NDI4MTdhMjk4ODJkNDMzYmYxYmI4ZWJjNTliMmZmMjU2
ZTgwM2YwHhcNMjYwNzIzMTUwMjE0WhcNMjYwNzI0MTUwMjE0WjAzMTEwLwYDVQQD
Eyg5Y2UzNDZjMGI3ZmIxZGY5MjIwNGRiNzMwMjM1ZTEwMGVhNzk0ZDU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0PcEer8QSCZ7PSBQtbq+GCWVRD6
k6obvMcDSTDRfAJ/PG3w0S9z9quA8tUg/FU39Et7O4CsyAlOS24HPgpC2wIIOaby
0HMJvwoC5/Uos1eH0hflpm06ru5h8WpMbngf7iXJKaAxNdvtUtw9i7UvmwB7QL6p
Y9OP6+whk0jBCyNvptY2lFlIe29XrR++Epf2Cr1fq7A3Go2p6ny4lsSAVkes6hMG
AWznooU28EiIIV29/zaMjlXjj5Zy0zS80NcqA+rf3+d662NSI87CVViRz7Erz7Wa
/FvY543NnJFVQlpHZ7y0WXcU9v4Cu7inCS7ob8eM4NVnH6uOsJ/O2vfoYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJzjRsC3+x35IgTbcwI14QDqeU1ZMB8GA1UdIwQY
MBaAFBlCgXopiC1DO/G7jrxZsv8lboA/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1VLQmVpbUlMVU03OGJ1T3ZGbXlfeVZ1Z0Q4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS81MzAwNjQtMjQ4Mi00NWJlLWJmZmUt
ZmRkZTU4YWIyOWY5LzEvR1VLQmVpbUlMVU03OGJ1T3ZGbXlfeVZ1Z0Q4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS81MzAwNjQtMjQ4Mi00NWJlLWJmZmUtZmRkZTU4YWIyOWY5
LzEvR1VLQmVpbUlMVU03OGJ1T3ZGbXlfeVZ1Z0Q4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGC1ZXdOW
9gA1PpKN4xgelSUxSIfO7s2leo1MNAWciFZC0kwDCkx7JRcNtEfKGHnf2eezfP0u
l0gh/l7PnHa53RbBhptRCKb1kCTt2THX/2VuAx4oHs1H5r7Qceg5Rtvt+/YR3uZu
yqGTKtZQ949cx2X3SlQ8N1mLi+0ueZ9ykRbGItfVFocY5DlaYGF566umkiXceclz
hI8tJkijaEj6X/Te4LM0Hb12Eqm5LqzL8vFNezEI3v27Thgti6+jZe98LGl9gAKS
j7w2HR6hcNLJgcYiKh5I9FBCDUdSckZCTj3dIsCdw/bZaly5V9O6D0LOeONxwsXa
B6dFq3k2RPlOvg==
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:02:45 2026 by rpki-client