Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/ef22db-e3b0-439f-a0c2-bf4d457e9518/1/GYe7aFnJOMi2PlqqVtkHvQRE484.mft
File: GYe7aFnJOMi2PlqqVtkHvQRE484.mft (raw, json)
Hash identifier: MK/jdIIGk3zidBdw1r5GoD8dvZDYyXAQ4kDfTn7DiEU=
Subject key identifier: 31:F6:FF:7F:4F:E2:55:5D:56:87:44:42:A5:7C:01:BD:71:6E:6A:35
Authority key identifier: 19:87:BB:68:59:C9:38:C8:B6:3E:5A:AA:56:D9:07:BD:04:44:E3:CE
Certificate issuer: /CN=1987bb6859c938c8b63e5aaa56d907bd0444e3ce
Certificate serial: 019D265ECE699B273CF1D9D9A62311E1551E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GYe7aFnJOMi2PlqqVtkHvQRE484.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/ef22db-e3b0-439f-a0c2-bf4d457e9518/1/GYe7aFnJOMi2PlqqVtkHvQRE484.mft
Manifest number: 17C4
Signing time: Wed 25 Mar 2026 19:00:40 +0000
Manifest this update: Wed 25 Mar 2026 19:00:40 +0000
Manifest next update: Thu 26 Mar 2026 19:00:40 +0000
Files and hashes: 1: GYe7aFnJOMi2PlqqVtkHvQRE484.crl (hash: +TYaRZXpcnYmkrgFg2unWFb9YLXW9V766GPAeERBTns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/ef22db-e3b0-439f-a0c2-bf4d457e9518/1/GYe7aFnJOMi2PlqqVtkHvQRE484.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/ef22db-e3b0-439f-a0c2-bf4d457e9518/1/GYe7aFnJOMi2PlqqVtkHvQRE484.mft
rsync://rpki.ripe.net/repository/DEFAULT/GYe7aFnJOMi2PlqqVtkHvQRE484.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5e:ce:69:9b:27:3c:f1:d9:d9:a6:23:11:e1:55:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1987bb6859c938c8b63e5aaa56d907bd0444e3ce
Validity
Not Before: Mar 25 19:00:40 2026 GMT
Not After : Mar 26 19:00:40 2026 GMT
Subject: CN=31f6ff7f4fe2555d56874442a57c01bd716e6a35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f8:3b:e9:a1:54:46:b8:95:fb:b4:82:8b:fe:
39:5c:5c:fc:42:37:67:6c:a2:51:5d:c9:14:4b:f7:
1f:dd:05:3e:23:b3:b3:df:9e:fb:65:c6:30:6d:c5:
db:ac:fc:7c:d2:9c:c9:c7:fe:da:e5:04:5f:fa:10:
06:91:d3:a0:c3:f3:7c:b8:70:84:f8:67:ca:8c:1a:
33:5e:f8:df:5a:af:fb:cb:50:52:d6:7e:0c:01:8e:
b5:11:fc:bc:61:21:4e:4a:0e:0a:51:27:7f:d7:cb:
36:a2:57:02:92:b8:b4:82:e5:71:2a:54:3a:40:2d:
0c:d4:5a:ff:96:94:9a:c0:6d:72:2b:9f:0c:dc:af:
e9:1c:2b:9b:29:e3:ca:ba:d2:fc:d4:c4:ec:95:ed:
a7:df:b8:d4:b0:6b:9e:f5:32:bc:08:be:43:3e:7c:
8f:81:c0:2e:af:ee:58:e1:cd:7c:7a:7d:0c:3d:d5:
43:08:9e:78:18:09:f8:e4:d5:13:66:79:02:e5:82:
e7:69:40:33:fe:68:44:04:c3:40:42:7d:5e:8d:aa:
f2:a0:b7:9f:56:86:23:da:ff:ec:0a:a0:03:f5:1d:
f0:60:36:cc:d8:b4:4f:63:0a:d1:cf:79:d4:d6:b4:
5a:fc:30:44:95:dc:37:e3:a7:04:6f:a1:38:48:e4:
47:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:F6:FF:7F:4F:E2:55:5D:56:87:44:42:A5:7C:01:BD:71:6E:6A:35
X509v3 Authority Key Identifier:
keyid:19:87:BB:68:59:C9:38:C8:B6:3E:5A:AA:56:D9:07:BD:04:44:E3:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GYe7aFnJOMi2PlqqVtkHvQRE484.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ef22db-e3b0-439f-a0c2-bf4d457e9518/1/GYe7aFnJOMi2PlqqVtkHvQRE484.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ef22db-e3b0-439f-a0c2-bf4d457e9518/1/GYe7aFnJOMi2PlqqVtkHvQRE484.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:bb:ca:8c:8a:f3:72:61:3b:ab:09:b1:d9:0a:39:0e:b7:8b:
7e:ee:37:f2:5e:8a:7b:08:d7:c3:72:4e:d3:f4:af:cf:c9:76:
b9:a2:22:d9:bc:e6:aa:99:1b:10:aa:db:43:33:f6:0a:2e:0c:
ba:50:9d:d3:c1:ff:34:db:1e:d6:7d:f2:53:36:be:b5:7d:01:
28:f5:a9:d5:47:9b:94:c7:d8:10:8b:90:80:b6:70:93:9a:79:
cd:37:54:cd:4e:24:c9:4c:c5:dc:37:dd:f8:b2:cc:ae:70:b6:
a2:9e:8c:b0:a5:d0:1e:7b:29:1d:48:e4:61:9c:4c:9b:e0:43:
8a:53:ca:ae:f0:1e:83:e5:29:51:cb:56:64:2d:5a:a0:6b:7f:
09:2a:b6:f2:45:aa:94:f9:da:a8:42:ae:bd:77:e2:f5:91:2a:
89:6e:33:e8:dd:88:15:53:dd:ce:e1:2d:8f:c4:cf:81:bd:cf:
9d:aa:7b:7d:6d:94:53:c5:ff:99:38:3d:cc:ae:b2:6a:ab:7f:
7b:d2:1c:cf:11:3a:71:59:16:7d:5d:23:66:b8:59:f5:71:12:
97:6e:f1:3e:dd:71:90:d8:c3:14:5f:30:8b:28:fc:7f:47:97:
63:45:54:d0:73:91:43:fb:3f:f6:fe:91:56:89:4b:0f:5d:99:
ec:1c:44:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mXs5pmyc88dnZpiMR4VUeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5ODdiYjY4NTljOTM4YzhiNjNlNWFhYTU2ZDkwN2JkMDQ0
NGUzY2UwHhcNMjYwMzI1MTkwMDQwWhcNMjYwMzI2MTkwMDQwWjAzMTEwLwYDVQQD
EygzMWY2ZmY3ZjRmZTI1NTVkNTY4NzQ0NDJhNTdjMDFiZDcxNmU2YTM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufg76aFURriV+7SCi/45XFz8Qjdn
bKJRXckUS/cf3QU+I7Oz3577ZcYwbcXbrPx80pzJx/7a5QRf+hAGkdOgw/N8uHCE
+GfKjBozXvjfWq/7y1BS1n4MAY61Efy8YSFOSg4KUSd/18s2olcCkri0guVxKlQ6
QC0M1Fr/lpSawG1yK58M3K/pHCubKePKutL81MTsle2n37jUsGue9TK8CL5DPnyP
gcAur+5Y4c18en0MPdVDCJ54GAn45NUTZnkC5YLnaUAz/mhEBMNAQn1ejaryoLef
VoYj2v/sCqAD9R3wYDbM2LRPYwrRz3nU1rRa/DBEldw346cEb6E4SORHSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDH2/39P4lVdVodEQqV8Ab1xbmo1MB8GA1UdIwQY
MBaAFBmHu2hZyTjItj5aqlbZB70EROPOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1llN2FGbkpPTWkyUGxxcVZ0a0h2UVJFNDg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9lZjIyZGItZTNiMC00MzlmLWEwYzIt
YmY0ZDQ1N2U5NTE4LzEvR1llN2FGbkpPTWkyUGxxcVZ0a0h2UVJFNDg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi9lZjIyZGItZTNiMC00MzlmLWEwYzItYmY0ZDQ1N2U5NTE4
LzEvR1llN2FGbkpPTWkyUGxxcVZ0a0h2UVJFNDg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjLvKjIrz
cmE7qwmx2Qo5DreLfu438l6KewjXw3JO0/Svz8l2uaIi2bzmqpkbEKrbQzP2Ci4M
ulCd08H/NNse1n3yUza+tX0BKPWp1UeblMfYEIuQgLZwk5p5zTdUzU4kyUzF3Dfd
+LLMrnC2op6MsKXQHnspHUjkYZxMm+BDilPKrvAeg+UpUctWZC1aoGt/CSq28kWq
lPnaqEKuvXfi9ZEqiW4z6N2IFVPdzuEtj8TPgb3Pnap7fW2UU8X/mTg9zK6yaqt/
e9IczxE6cVkWfV0jZrhZ9XESl27xPt1xkNjDFF8wiyj8f0eXY0VU0HORQ/s/9v6R
VolLD12Z7BxE6w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:20:24 2026 by rpki-client