Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.mft
File: GU4QqVb6UlFuj9O5MY6EpVOD1is.mft (raw, json)
Hash identifier: nt8lDUCI3zL1eCQ5aymSBXMP3TjbumJXPGHSJVr7DgY=
Subject key identifier: DF:F3:19:EC:AE:E1:14:86:BB:6A:7F:E1:97:A0:33:57:8D:F1:40:15
Authority key identifier: 19:4E:10:A9:56:FA:52:51:6E:8F:D3:B9:31:8E:84:A5:53:83:D6:2B
Certificate issuer: /CN=194e10a956fa52516e8fd3b9318e84a55383d62b
Certificate serial: 01A0DA28B2F80F7268848585759AD44AA745
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GU4QqVb6UlFuj9O5MY6EpVOD1is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.mft
Manifest number: 0517
Signing time: Fri 25 Sep 2026 20:01:35 +0000
Manifest this update: Fri 25 Sep 2026 20:01:35 +0000
Manifest next update: Sat 26 Sep 2026 20:01:35 +0000
Files and hashes: 1: GU4QqVb6UlFuj9O5MY6EpVOD1is.crl (hash: uQAvIykpYxULaIOpAkU9PiF2BPDdXda2sxKJ0grvZbE=)
2: L6IkYa1mFzPLtO5LIkQRCCe9jl4.roa (hash: Ld5O0t2bBeigoCJRn7m3gG44EpWV7A+830bMM7yTOtE=)
3: oyVzd1gmTKT17jlRmnyP0pEMzFs.roa (hash: pAXNP3pz+CMOZzVz6ZojLzDHfBZZpShriq/ea0S+BHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.mft
rsync://rpki.ripe.net/repository/DEFAULT/GU4QqVb6UlFuj9O5MY6EpVOD1is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:28:b2:f8:0f:72:68:84:85:85:75:9a:d4:4a:a7:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=194e10a956fa52516e8fd3b9318e84a55383d62b
Validity
Not Before: Sep 25 20:01:35 2026 GMT
Not After : Sep 26 20:01:35 2026 GMT
Subject: CN=dff319ecaee11486bb6a7fe197a033578df14015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:72:b7:72:3f:c2:f1:ee:d4:8d:ba:d8:c8:d7:
a7:d6:12:16:3f:48:52:61:d7:36:bf:88:d4:ad:d5:
4c:73:f7:02:fc:0c:36:9c:71:75:b7:4d:72:95:4e:
e3:80:c7:50:e0:0c:1b:ea:3d:8c:41:01:c4:35:3e:
8f:02:bf:b8:1c:0a:32:27:c9:98:a0:56:5d:68:9e:
84:b3:89:5b:d4:64:29:a4:93:83:a3:1d:95:95:06:
83:52:b4:f6:95:05:36:65:2d:28:4f:1e:d2:25:ec:
f5:da:14:c8:b9:6a:7a:09:e2:f5:e8:ff:35:57:02:
2b:23:1b:e6:0c:18:ea:cf:d4:db:9c:2f:66:d1:bf:
c4:a1:fa:20:7b:e0:b8:fd:70:9b:40:c7:b5:79:82:
fd:53:4f:f9:e2:cb:b9:e6:e3:79:cc:ef:23:4d:e4:
07:81:b5:00:f6:69:f6:79:70:f6:7e:f0:8e:bf:fb:
55:2d:f9:d9:f8:7f:1e:96:f5:cf:cc:4e:7f:7e:95:
43:b4:28:57:67:b5:91:7f:7c:43:d9:3d:70:93:86:
62:e4:f5:5f:73:89:bd:64:e1:09:35:06:3b:15:86:
b6:59:4b:d4:4d:d5:64:db:91:06:a6:75:99:cb:e5:
01:29:66:36:24:96:c4:fa:8e:aa:c6:80:9e:98:ce:
53:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:F3:19:EC:AE:E1:14:86:BB:6A:7F:E1:97:A0:33:57:8D:F1:40:15
X509v3 Authority Key Identifier:
keyid:19:4E:10:A9:56:FA:52:51:6E:8F:D3:B9:31:8E:84:A5:53:83:D6:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GU4QqVb6UlFuj9O5MY6EpVOD1is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:a5:d7:e7:28:d9:1f:b3:cc:ab:54:90:72:c4:2f:8a:a3:71:
f5:8f:94:d5:78:1b:c0:78:4b:ad:aa:11:f5:51:35:30:73:bb:
d2:e5:3a:74:80:c6:26:96:98:a0:09:22:92:94:c1:9e:af:46:
9e:d3:8a:39:b2:75:07:2a:e2:38:a6:36:9c:12:04:a9:a6:d3:
f8:0b:33:f2:f9:22:82:ab:53:58:62:61:9d:90:f8:02:94:11:
4e:97:1c:eb:63:72:49:5a:69:01:29:75:e3:a3:f6:98:d6:de:
9d:2a:10:f9:2b:fb:43:db:10:2d:a6:ea:eb:fb:ad:1b:e0:4f:
5e:2e:6b:2c:f8:e2:bd:4e:f6:e0:85:09:0a:15:16:f1:9b:b7:
e9:45:60:f3:0d:e6:0c:4f:a7:f5:56:3d:b0:80:06:61:54:40:
4c:5c:b3:86:88:6e:23:34:bc:33:cc:9d:af:c0:69:5c:aa:98:
04:66:6e:79:5e:15:d2:63:63:49:7f:eb:8e:72:c6:6e:35:15:
fa:79:54:1b:76:df:e7:5a:f3:77:56:43:bc:be:b1:b9:1e:83:
5b:c7:f3:c7:35:1c:af:ab:33:12:c7:d2:c1:fa:9d:98:62:1e:
b1:d4:e1:1a:7f:15:c8:9f:55:b8:84:57:c4:78:f5:3e:12:34:
9c:31:af:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 01:43:08 2026 by rpki-client