Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/GpFU4cVXiw_virt3n4EX5k6ITRg.mft
File: GpFU4cVXiw_virt3n4EX5k6ITRg.mft (raw, json)
Hash identifier: 1wny+IFCDbeet76nxHdN9VXidOrWLsU5azDM7+35fjo=
Subject key identifier: 7F:FA:17:C0:8E:7B:0C:FC:E2:44:65:0D:5F:56:74:0C:0A:0F:43:90
Authority key identifier: 1A:91:54:E1:C5:57:8B:0F:EF:8A:BB:77:9F:81:17:E6:4E:88:4D:18
Certificate issuer: /CN=1a9154e1c5578b0fef8abb779f8117e64e884d18
Certificate serial: 019E1E35A7D8B176134E3BF0D1FCAAF039A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GpFU4cVXiw_virt3n4EX5k6ITRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/GpFU4cVXiw_virt3n4EX5k6ITRg.mft
Manifest number: 0FB5
Signing time: Tue 12 May 2026 22:01:33 +0000
Manifest this update: Tue 12 May 2026 22:01:33 +0000
Manifest next update: Wed 13 May 2026 22:01:33 +0000
Files and hashes: 1: 3sQGG7lc8Ue6Aqs5p0AFUtAeaf4.roa (hash: xQBHQAaq9hM8X7UsWewldzkOn1BKCLRfc2H9cPBtG10=)
2: GpFU4cVXiw_virt3n4EX5k6ITRg.crl (hash: QA7G1T1QKI0RRppHg5u5im0WkZtX98fqdSDp4iA6ANY=)
3: KEfhpSYDTcA_WVzzetkfLEElZqA.roa (hash: HDmoLstVaitK+4XS6Am6UgsI3Y71lEzDuRcwxhiLGMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/GpFU4cVXiw_virt3n4EX5k6ITRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/GpFU4cVXiw_virt3n4EX5k6ITRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GpFU4cVXiw_virt3n4EX5k6ITRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:a7:d8:b1:76:13:4e:3b:f0:d1:fc:aa:f0:39:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a9154e1c5578b0fef8abb779f8117e64e884d18
Validity
Not Before: May 12 22:01:33 2026 GMT
Not After : May 13 22:01:33 2026 GMT
Subject: CN=7ffa17c08e7b0cfce244650d5f56740c0a0f4390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b2:cc:af:b3:86:2c:7a:ba:21:64:f5:05:c9:
9b:23:bd:2f:03:32:09:71:d0:ac:5f:2a:fa:75:d7:
c3:d4:1f:e3:30:10:6d:34:25:06:dc:43:d2:eb:91:
34:20:2e:b4:5f:07:b1:6b:6c:96:de:67:7a:5e:82:
26:4e:16:e2:93:85:36:67:d0:75:8e:6d:26:cb:77:
e5:07:fa:d0:bf:5e:99:29:b7:6f:3e:bf:e1:b7:59:
89:bf:0d:e2:7c:42:6f:b7:5b:94:bf:b0:0f:6e:c8:
9d:df:15:66:f0:5d:e0:4e:7e:a0:8a:c8:0e:e4:a0:
a1:6e:82:98:8f:b4:ee:f4:05:09:f8:9d:b0:41:70:
14:ac:40:db:be:5f:59:7f:a4:52:e1:de:5b:ea:9f:
ca:3a:6f:82:ea:57:1a:4c:e4:50:bf:96:f8:1a:7e:
77:eb:eb:b7:cc:89:0f:f3:69:07:62:97:be:30:44:
21:4c:d1:92:94:97:06:3a:1b:77:ca:ea:b2:77:7e:
9b:dd:83:70:4e:42:c4:69:d9:04:af:57:29:ed:3b:
e4:42:20:4d:c6:cb:54:d1:c6:9c:e8:44:0f:63:71:
ca:f6:b2:19:9c:b9:41:e9:99:20:d3:ab:d8:dc:7d:
ac:df:5c:01:ed:85:07:80:60:60:a4:bd:5b:75:ad:
68:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:FA:17:C0:8E:7B:0C:FC:E2:44:65:0D:5F:56:74:0C:0A:0F:43:90
X509v3 Authority Key Identifier:
keyid:1A:91:54:E1:C5:57:8B:0F:EF:8A:BB:77:9F:81:17:E6:4E:88:4D:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GpFU4cVXiw_virt3n4EX5k6ITRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/GpFU4cVXiw_virt3n4EX5k6ITRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/GpFU4cVXiw_virt3n4EX5k6ITRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:bd:4f:22:ba:a7:ea:d4:fe:a9:f3:7e:7d:9e:f0:10:af:84:
14:26:95:a8:ad:6a:a9:09:3a:1c:96:dd:c0:32:13:fd:74:d9:
bb:3d:3c:5e:02:ac:25:79:54:09:ad:ff:84:ed:d3:6b:9d:84:
37:eb:57:e3:7a:00:b8:74:55:c4:49:55:70:c7:31:55:b8:8b:
a5:a5:b8:27:cf:1b:99:39:91:13:04:62:29:75:f9:21:2b:a2:
ee:87:a0:54:6d:ec:d7:aa:3b:17:98:1a:c3:60:53:2d:9b:e0:
78:90:00:2f:43:96:34:a2:bb:39:34:54:9f:fe:bb:8d:61:68:
53:41:e1:00:2b:05:68:d8:bb:bd:20:6e:97:1a:87:ec:f0:3d:
c8:a0:91:95:f5:ec:93:31:ac:70:ed:2d:b3:5b:a4:80:05:02:
7a:57:95:13:79:53:01:ae:67:87:44:2b:71:d0:03:ae:8c:fd:
09:65:d9:d6:2b:e2:d7:43:e1:00:9b:5c:51:bf:66:45:8e:7b:
a8:1a:9c:f5:d6:94:59:2c:f8:87:e2:12:3a:70:3d:d0:27:52:
40:74:a8:4f:fe:74:fa:bd:91:1a:6b:d6:fd:00:1a:d7:14:90:
25:2a:ff:a0:12:63:5a:7e:ca:47:92:c8:b6:58:13:8e:50:b8:
65:a3:9a:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:01:10 2026 by rpki-client