Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/GpFU4cVXiw_virt3n4EX5k6ITRg.mft
File: GpFU4cVXiw_virt3n4EX5k6ITRg.mft (raw, json)
Hash identifier: pcMDUuD/2aH47+k+/uMe2PbKnnMl7Fwf8JR6iie4U/4=
Subject key identifier: 87:C4:4E:15:A5:3C:06:A9:8B:3F:15:00:1F:61:5C:D5:9F:9D:5B:02
Authority key identifier: 1A:91:54:E1:C5:57:8B:0F:EF:8A:BB:77:9F:81:17:E6:4E:88:4D:18
Certificate issuer: /CN=1a9154e1c5578b0fef8abb779f8117e64e884d18
Certificate serial: 019D329ACD00322F7C91D8794624C89E2DBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GpFU4cVXiw_virt3n4EX5k6ITRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/GpFU4cVXiw_virt3n4EX5k6ITRg.mft
Manifest number: 0F3B
Signing time: Sat 28 Mar 2026 04:01:38 +0000
Manifest this update: Sat 28 Mar 2026 04:01:38 +0000
Manifest next update: Sun 29 Mar 2026 04:01:38 +0000
Files and hashes: 1: 3sQGG7lc8Ue6Aqs5p0AFUtAeaf4.roa (hash: xQBHQAaq9hM8X7UsWewldzkOn1BKCLRfc2H9cPBtG10=)
2: GpFU4cVXiw_virt3n4EX5k6ITRg.crl (hash: zVc75diu9SJwZrkklZw4FeexJ8GmR36Rykt6EZqV2iY=)
3: KEfhpSYDTcA_WVzzetkfLEElZqA.roa (hash: HDmoLstVaitK+4XS6Am6UgsI3Y71lEzDuRcwxhiLGMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/GpFU4cVXiw_virt3n4EX5k6ITRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/GpFU4cVXiw_virt3n4EX5k6ITRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GpFU4cVXiw_virt3n4EX5k6ITRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:9a:cd:00:32:2f:7c:91:d8:79:46:24:c8:9e:2d:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a9154e1c5578b0fef8abb779f8117e64e884d18
Validity
Not Before: Mar 28 04:01:38 2026 GMT
Not After : Mar 29 04:01:38 2026 GMT
Subject: CN=87c44e15a53c06a98b3f15001f615cd59f9d5b02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b4:be:6d:bf:7a:27:1c:1f:c6:e0:de:81:69:
72:8f:8c:c7:a9:2a:c7:e4:65:cc:0b:ba:62:49:24:
46:b3:60:d0:8e:49:25:b6:12:65:56:7d:73:2b:ec:
dc:d6:60:ea:ae:cb:d1:b5:07:45:29:76:bb:10:1b:
5d:0b:7b:af:21:f4:57:5c:69:b2:fd:25:6f:3f:d2:
1f:08:1d:6f:ae:9b:04:55:95:03:75:c8:05:f9:e0:
08:0c:37:52:1a:cd:02:94:69:bf:52:a3:b0:26:4f:
d8:29:df:d3:61:37:ac:ee:67:42:df:ff:d9:f2:78:
0f:64:2f:31:b8:1b:e8:7c:a3:d1:bf:09:58:37:ab:
d7:af:d3:f7:fe:ce:64:69:68:18:a9:55:3e:d8:ac:
ed:19:2a:ba:a0:51:1e:0e:e7:6b:ca:59:16:af:0f:
93:99:39:24:c7:18:89:70:47:51:3a:73:b8:5e:0d:
ce:12:ef:e6:20:61:40:0f:7b:98:2d:64:62:22:eb:
55:13:f9:9b:2c:d5:6d:50:f6:4d:57:15:40:d4:4e:
a7:7a:7c:ab:e0:c0:07:9d:47:3c:93:53:be:58:d1:
9c:12:37:f2:3f:25:17:61:72:05:59:1d:83:0e:d8:
b6:b0:6c:63:e6:e2:20:d8:a9:a2:98:48:1f:d9:e1:
4d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:C4:4E:15:A5:3C:06:A9:8B:3F:15:00:1F:61:5C:D5:9F:9D:5B:02
X509v3 Authority Key Identifier:
keyid:1A:91:54:E1:C5:57:8B:0F:EF:8A:BB:77:9F:81:17:E6:4E:88:4D:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GpFU4cVXiw_virt3n4EX5k6ITRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/GpFU4cVXiw_virt3n4EX5k6ITRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/GpFU4cVXiw_virt3n4EX5k6ITRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:6d:fa:a3:1b:a9:d7:6d:c2:62:aa:09:fd:61:3c:6c:3a:1d:
78:64:72:f7:7d:92:91:b7:ba:04:f5:73:3d:5a:21:05:65:50:
b2:92:28:54:0c:22:83:a8:40:f1:25:fd:4d:8f:33:94:f9:7e:
6c:26:3b:cb:a2:79:02:c1:82:34:05:8d:81:0d:c2:af:a2:7a:
ad:f4:78:a5:d0:37:bc:4c:4c:ab:1d:14:06:dd:75:8f:6d:08:
44:e9:a8:ac:b6:4d:58:ce:7e:3b:27:b8:3f:2d:bd:20:68:c4:
f7:df:f0:71:9f:e3:fc:10:ce:a3:4c:d5:7a:ed:ba:ea:65:a1:
bc:56:79:fd:d3:8c:37:d4:64:7b:8b:ab:18:b8:57:19:60:5f:
c0:9a:82:c6:58:08:07:ba:84:63:2e:80:de:4d:6d:a2:60:12:
7b:fa:d6:6b:58:49:80:15:d7:91:10:2c:23:bf:65:04:1c:ef:
e5:1d:9c:b4:19:8b:d0:93:2f:9a:7e:36:88:cd:cd:29:fc:78:
f9:bc:67:15:f2:f8:fc:cf:7e:9a:9b:f8:df:12:09:71:55:ea:
7f:fa:d8:61:a7:f6:91:d0:66:9d:d7:91:30:53:82:c1:eb:b9:
88:1a:17:f9:17:cc:28:66:ce:f1:b9:73:5e:af:8f:b1:05:9f:
a6:c3:30:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 08:43:02 2026 by rpki-client