Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.mft
File: GU4QqVb6UlFuj9O5MY6EpVOD1is.mft (raw, json)
Hash identifier: 4DVTNjFLw0Uaosq8DBAXPcTRVzZVegD9VJndLFpvyWo=
Subject key identifier: 8E:C2:77:72:A6:21:60:52:9D:20:E2:74:C6:00:09:26:5C:C8:6F:54
Authority key identifier: 19:4E:10:A9:56:FA:52:51:6E:8F:D3:B9:31:8E:84:A5:53:83:D6:2B
Certificate issuer: /CN=194e10a956fa52516e8fd3b9318e84a55383d62b
Certificate serial: 019D337561C6B797E2AC8CA48F257544202D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GU4QqVb6UlFuj9O5MY6EpVOD1is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.mft
Manifest number: 0333
Signing time: Sat 28 Mar 2026 08:00:23 +0000
Manifest this update: Sat 28 Mar 2026 08:00:23 +0000
Manifest next update: Sun 29 Mar 2026 08:00:23 +0000
Files and hashes: 1: GU4QqVb6UlFuj9O5MY6EpVOD1is.crl (hash: PyyHxS1JpFWo3kitN3t0QMQE2khQcbWyZgfUQbVBdFA=)
2: L6IkYa1mFzPLtO5LIkQRCCe9jl4.roa (hash: Ld5O0t2bBeigoCJRn7m3gG44EpWV7A+830bMM7yTOtE=)
3: oyVzd1gmTKT17jlRmnyP0pEMzFs.roa (hash: pAXNP3pz+CMOZzVz6ZojLzDHfBZZpShriq/ea0S+BHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.mft
rsync://rpki.ripe.net/repository/DEFAULT/GU4QqVb6UlFuj9O5MY6EpVOD1is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:75:61:c6:b7:97:e2:ac:8c:a4:8f:25:75:44:20:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=194e10a956fa52516e8fd3b9318e84a55383d62b
Validity
Not Before: Mar 28 08:00:23 2026 GMT
Not After : Mar 29 08:00:23 2026 GMT
Subject: CN=8ec27772a62160529d20e274c60009265cc86f54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ff:69:a9:3f:04:4b:35:b3:09:9a:f2:e1:41:
fd:7f:53:a6:a1:47:d8:e1:04:97:c2:c4:5b:4f:f4:
8d:ef:b4:2d:1f:35:38:7f:17:41:1d:32:42:56:ab:
99:ba:8d:6c:35:75:e8:e5:36:bd:1c:7e:49:f7:b0:
aa:86:83:e1:9f:47:3b:0f:56:9e:87:77:ba:61:fe:
3e:af:39:59:9f:2f:35:7d:d6:93:af:7d:ea:17:08:
db:fe:a5:40:d3:0a:39:29:6b:e4:de:3c:20:f5:93:
ba:88:4f:29:81:1d:a8:6d:f0:6e:e8:4d:91:18:d1:
46:22:36:77:13:ba:40:1c:76:5c:4c:9c:4d:f4:cb:
40:47:41:ad:2d:15:74:2a:34:9f:a5:32:62:63:7b:
b8:60:cd:bf:1a:05:f4:7f:af:ae:60:c3:69:7d:c2:
00:b0:4d:98:ec:04:30:18:df:08:e9:0b:16:49:41:
a1:73:8f:c0:d3:ab:5e:69:27:40:47:4a:ac:1a:7d:
55:5c:20:fd:10:80:21:4f:f1:70:f2:4a:6e:5c:b7:
3c:7d:24:05:ae:f8:f8:33:7d:fe:05:8e:50:94:aa:
b8:71:cd:58:fe:be:f1:02:9e:36:54:9b:96:67:56:
b8:8f:62:d5:2f:78:6b:78:d6:00:a0:86:ac:a2:08:
30:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:C2:77:72:A6:21:60:52:9D:20:E2:74:C6:00:09:26:5C:C8:6F:54
X509v3 Authority Key Identifier:
keyid:19:4E:10:A9:56:FA:52:51:6E:8F:D3:B9:31:8E:84:A5:53:83:D6:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GU4QqVb6UlFuj9O5MY6EpVOD1is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:b1:2e:5b:f4:a9:d2:f3:fd:60:bd:48:bd:72:1b:24:a4:4f:
29:cc:36:26:90:c3:09:5f:ac:43:47:ad:36:c4:2a:d8:3d:77:
7f:29:ed:3c:98:9e:a3:41:38:3c:11:89:6d:a1:18:74:1d:d0:
b0:6b:b1:4a:41:ad:c8:ca:da:bc:aa:82:2c:35:f6:44:9d:bc:
29:9c:d1:87:18:3a:f0:15:64:0a:dc:67:86:98:06:32:f2:9c:
9f:87:be:ac:a6:f5:b8:a9:a9:cd:e0:57:70:86:5c:53:9f:f2:
1f:62:c0:68:90:f6:9c:9b:a1:00:fb:fd:39:1a:50:29:0d:43:
69:7d:ea:bc:35:11:55:80:84:41:b9:6e:a3:64:f5:85:28:24:
9c:ee:db:64:3b:71:c8:91:83:85:c1:5a:37:9a:ac:52:a7:6d:
e1:d9:3d:8d:96:99:19:b8:b2:44:23:2e:3d:98:44:dc:98:ee:
fc:b4:4e:e2:09:30:82:d6:a4:55:2b:a0:32:71:c0:85:65:46:
e2:56:2b:27:82:57:4c:ac:9d:81:48:d0:73:6d:4a:90:74:c7:
4a:95:24:16:ad:4a:91:19:ce:cd:ef:81:1c:54:61:d8:49:45:
0d:45:a8:5e:6d:2a:fe:7d:5a:50:8b:4f:18:cf:59:13:45:5d:
0c:70:fe:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:31:14 2026 by rpki-client