Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.mft
File: GU4QqVb6UlFuj9O5MY6EpVOD1is.mft (raw, json)
Hash identifier: yK9gHHyc2rSeE050u9B7NtPaJfS2RI4/yu2jqPElpvk=
Subject key identifier: 8E:5A:EB:5B:3B:D8:C5:72:BB:8C:32:FF:2C:56:FD:3C:98:3E:A9:51
Authority key identifier: 19:4E:10:A9:56:FA:52:51:6E:8F:D3:B9:31:8E:84:A5:53:83:D6:2B
Certificate issuer: /CN=194e10a956fa52516e8fd3b9318e84a55383d62b
Certificate serial: 01A1DEDE910E5A6D8BCCA0D06A9785D19E26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GU4QqVb6UlFuj9O5MY6EpVOD1is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.mft
Manifest number: 059E
Signing time: Sun 15 Nov 2026 11:01:30 +0000
Manifest this update: Sun 15 Nov 2026 11:01:30 +0000
Manifest next update: Mon 16 Nov 2026 11:01:30 +0000
Files and hashes: 1: GU4QqVb6UlFuj9O5MY6EpVOD1is.crl (hash: Uci//PN2K8fGuo0O73MNJltShGUaMsaTektDF8uBf2s=)
2: L6IkYa1mFzPLtO5LIkQRCCe9jl4.roa (hash: Ld5O0t2bBeigoCJRn7m3gG44EpWV7A+830bMM7yTOtE=)
3: oyVzd1gmTKT17jlRmnyP0pEMzFs.roa (hash: pAXNP3pz+CMOZzVz6ZojLzDHfBZZpShriq/ea0S+BHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.mft
rsync://rpki.ripe.net/repository/DEFAULT/GU4QqVb6UlFuj9O5MY6EpVOD1is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:de:91:0e:5a:6d:8b:cc:a0:d0:6a:97:85:d1:9e:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=194e10a956fa52516e8fd3b9318e84a55383d62b
Validity
Not Before: Nov 15 11:01:30 2026 GMT
Not After : Nov 16 11:01:30 2026 GMT
Subject: CN=8e5aeb5b3bd8c572bb8c32ff2c56fd3c983ea951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:75:05:e6:44:d3:86:a1:28:83:7f:9d:23:ff:
ed:d8:87:70:32:f5:b5:f0:99:a5:20:8c:00:ab:f6:
33:13:d8:7a:97:45:12:27:22:d9:e1:61:05:c2:6e:
cc:22:ac:1b:8d:2d:28:84:b2:24:b6:db:c9:88:b9:
43:cc:ac:9d:c2:08:e7:8a:3a:03:ef:28:e4:fa:3a:
d5:02:34:b7:8f:c3:bf:2a:2c:49:aa:c5:af:86:d8:
7c:94:44:e4:87:69:d0:03:ac:0f:6e:5e:58:00:0d:
c9:a1:98:08:80:f6:a2:67:55:f5:68:71:23:fd:df:
c0:c5:59:98:13:bf:71:e9:51:09:b8:29:d7:3e:ba:
13:df:ce:c4:a9:5c:a4:3d:ef:6a:66:46:44:bb:6b:
e2:14:d8:d1:98:0d:36:d6:e3:de:db:c2:04:2e:27:
2d:d6:8a:44:e8:8f:5c:96:5c:9b:de:90:e1:37:df:
e0:04:ce:7d:49:1a:4d:54:d2:76:9a:87:32:17:20:
9c:f4:59:af:ec:a4:21:d5:09:51:48:b0:17:b0:0b:
86:d6:c4:76:72:ee:90:7c:80:b6:fc:77:37:b1:c5:
62:da:04:6a:cf:4e:94:f9:0e:f4:35:51:6e:53:7a:
69:9b:b2:67:f9:a6:e8:c8:27:8f:b5:69:71:c5:fc:
81:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:5A:EB:5B:3B:D8:C5:72:BB:8C:32:FF:2C:56:FD:3C:98:3E:A9:51
X509v3 Authority Key Identifier:
keyid:19:4E:10:A9:56:FA:52:51:6E:8F:D3:B9:31:8E:84:A5:53:83:D6:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GU4QqVb6UlFuj9O5MY6EpVOD1is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:e5:64:43:ce:0b:87:93:94:3e:18:16:20:ae:3f:41:46:6f:
71:65:b7:0b:42:95:c5:b6:0f:38:04:d2:ee:d2:44:9d:af:03:
ad:13:65:3e:f9:6d:59:1d:b3:f1:ae:40:3a:df:72:86:be:45:
b4:31:02:e6:61:92:05:ff:73:62:f6:46:9c:1b:5a:3d:84:23:
df:4b:ad:44:ce:1e:4e:98:ea:64:50:d7:d2:26:cf:5d:01:fe:
ca:1a:39:cc:32:9c:80:35:5f:2c:07:0c:80:42:82:94:0a:c8:
bc:93:7a:c0:de:a6:89:7f:14:c2:a1:d5:d3:6d:e3:a8:ca:2b:
46:d7:8a:59:be:4e:64:d0:cb:ad:b7:d8:a9:de:ee:8a:7d:63:
f8:0d:ef:09:f6:70:b1:70:ad:8e:d6:11:4e:9a:af:4b:72:68:
71:54:96:4f:a4:85:bc:49:30:10:10:db:ed:65:70:5b:33:8f:
1f:26:99:5f:ed:52:0b:fb:e5:87:46:14:e8:3e:3c:4a:27:3a:
96:cf:a9:2d:62:f9:e5:4b:d3:d7:f2:d1:b2:5c:bf:16:26:c6:
d6:7f:94:37:b9:6a:96:27:66:f5:02:fc:c1:68:30:db:e8:cc:
ed:9d:c8:1a:23:55:7e:b1:2e:70:44:cd:04:f4:a4:42:d0:8a:
f0:d9:25:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:08:02 2026 by rpki-client