Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.mft
File: GU4QqVb6UlFuj9O5MY6EpVOD1is.mft (raw, json)
Hash identifier: 3N2aABerMGL67yZcBmgI0bcql23P4QOIPv7BanMFB3s=
Subject key identifier: 82:A9:0A:8D:FA:3E:BD:67:73:C5:8F:E3:49:AC:C5:45:7F:FD:E6:76
Authority key identifier: 19:4E:10:A9:56:FA:52:51:6E:8F:D3:B9:31:8E:84:A5:53:83:D6:2B
Certificate issuer: /CN=194e10a956fa52516e8fd3b9318e84a55383d62b
Certificate serial: 019E1D230FFB4334F8A9BD2ADF5019B1EDDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GU4QqVb6UlFuj9O5MY6EpVOD1is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.mft
Manifest number: 03AC
Signing time: Tue 12 May 2026 17:01:37 +0000
Manifest this update: Tue 12 May 2026 17:01:37 +0000
Manifest next update: Wed 13 May 2026 17:01:37 +0000
Files and hashes: 1: GU4QqVb6UlFuj9O5MY6EpVOD1is.crl (hash: 8fU0QJ1fHxgmv8q/MwgNfwZY3C5zjox7RJMZ/5ehpTs=)
2: L6IkYa1mFzPLtO5LIkQRCCe9jl4.roa (hash: Ld5O0t2bBeigoCJRn7m3gG44EpWV7A+830bMM7yTOtE=)
3: oyVzd1gmTKT17jlRmnyP0pEMzFs.roa (hash: pAXNP3pz+CMOZzVz6ZojLzDHfBZZpShriq/ea0S+BHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.mft
rsync://rpki.ripe.net/repository/DEFAULT/GU4QqVb6UlFuj9O5MY6EpVOD1is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 17:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:23:0f:fb:43:34:f8:a9:bd:2a:df:50:19:b1:ed:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=194e10a956fa52516e8fd3b9318e84a55383d62b
Validity
Not Before: May 12 17:01:37 2026 GMT
Not After : May 13 17:01:37 2026 GMT
Subject: CN=82a90a8dfa3ebd6773c58fe349acc5457ffde676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7d:be:8d:7b:14:7e:e8:3f:d8:53:cd:c4:00:
87:92:47:29:f0:75:6e:6d:d3:60:68:ca:7c:05:10:
9b:f6:e5:a3:da:ec:c9:45:e1:c9:6f:9a:ec:30:86:
f8:31:38:16:26:04:6a:4a:f4:73:f0:16:36:a6:ba:
e5:7d:57:69:ee:d6:d5:9f:79:77:88:2f:cc:8e:db:
20:ee:8b:b6:80:f1:4e:5f:bb:cf:05:13:f2:04:b8:
59:03:2d:df:2c:e2:c5:bb:bc:26:ae:70:cb:ce:5e:
db:3b:51:3c:ba:20:8a:91:9e:76:4f:1f:1a:43:23:
7e:ee:22:0e:a8:b8:65:2f:1b:07:2d:a4:33:b4:02:
3c:3a:0a:b2:0a:02:37:28:a0:b0:8a:b4:7f:c6:da:
3c:30:4a:41:ad:45:d5:a9:82:a8:94:da:d1:c9:38:
b8:a6:d5:e2:a0:f2:08:14:d2:31:13:0d:62:92:89:
61:c7:d5:26:ed:b8:c3:05:bb:65:e0:5d:19:0c:ab:
3f:d2:58:c6:7e:2f:70:a6:ac:9a:22:2c:05:c7:06:
c7:4e:c5:93:e1:25:73:4a:15:fd:9e:5b:7c:09:0a:
43:79:40:c9:68:23:c7:3a:e6:a6:29:4d:b6:bd:7d:
79:48:8c:7c:20:ac:19:eb:6f:48:9c:33:b6:af:c4:
aa:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:A9:0A:8D:FA:3E:BD:67:73:C5:8F:E3:49:AC:C5:45:7F:FD:E6:76
X509v3 Authority Key Identifier:
keyid:19:4E:10:A9:56:FA:52:51:6E:8F:D3:B9:31:8E:84:A5:53:83:D6:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GU4QqVb6UlFuj9O5MY6EpVOD1is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:bc:78:5c:50:df:e3:c1:d4:ec:f1:9f:67:0c:e2:d1:7f:80:
cc:1c:71:66:13:30:d0:d2:07:d7:c4:01:11:48:d1:7a:98:e9:
13:56:57:a8:44:47:a0:2e:61:21:5a:44:bd:bc:b6:3b:ae:d7:
51:b3:1d:c1:87:0b:87:62:eb:68:43:bc:9e:d7:9e:6d:0f:d3:
97:26:aa:57:31:f6:37:7e:12:9c:b0:50:e1:27:e5:49:a3:35:
a3:42:71:16:14:71:72:78:ee:8d:bf:9d:d9:5e:31:8c:a6:55:
b5:89:42:43:b9:fc:a0:92:92:09:b4:36:dc:d0:04:af:d5:db:
69:34:04:7b:e7:2a:84:8e:c9:dd:3c:c3:d0:36:de:fd:84:0c:
05:c9:6e:8c:60:95:0c:80:e5:38:b3:5b:c6:a3:17:c9:fc:8c:
0e:a4:c3:76:dd:96:df:eb:1c:f4:6a:0d:23:7a:64:dc:1a:91:
53:52:8e:1a:c1:65:72:4d:ec:9e:7e:7f:cd:c9:81:07:5d:62:
ac:0b:7d:78:50:74:97:66:1e:d8:63:bd:8f:b5:44:93:6d:73:
af:83:72:26:15:52:0c:72:c8:8e:fa:d1:d0:93:db:80:d3:63:
58:e2:a3:53:ac:fb:d4:66:cb:59:a8:ab:f9:9b:6d:a3:ab:95:
0d:28:c5:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:29:59 2026 by rpki-client