Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/eaa787-a249-485f-b750-67062faef802/1/GvvUSIkW-uz94nr2PPmEUblnL_Y.mft
File: GvvUSIkW-uz94nr2PPmEUblnL_Y.mft (raw, json)
Hash identifier: qPy1zx0PL3sTXBrJNRRtM0074u4N90AGEmzFWoJI4lE=
Subject key identifier: B9:25:52:8F:22:B7:8C:2B:B5:45:2D:7F:F0:E5:EA:D3:EF:68:F0:BA
Authority key identifier: 1A:FB:D4:48:89:16:FA:EC:FD:E2:7A:F6:3C:F9:84:51:B9:67:2F:F6
Certificate issuer: /CN=1afbd4488916faecfde27af63cf98451b9672ff6
Certificate serial: 019D29293B0FABB3416B14D709F2ED29A043
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GvvUSIkW-uz94nr2PPmEUblnL_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/eaa787-a249-485f-b750-67062faef802/1/GvvUSIkW-uz94nr2PPmEUblnL_Y.mft
Manifest number: 2B
Signing time: Thu 26 Mar 2026 08:01:01 +0000
Manifest this update: Thu 26 Mar 2026 08:01:01 +0000
Manifest next update: Fri 27 Mar 2026 08:01:01 +0000
Files and hashes: 1: GvvUSIkW-uz94nr2PPmEUblnL_Y.crl (hash: amjoEMZhONzVgALIChMUd1COHrcXuPQkw32daT8KApk=)
2: HIyIUJSBJUIjO3Nq8uFKc2lakKE.roa (hash: H/aTQCtUo9ZsKqh3rYnzy03zPhA2U/tPcSPNzM5Lhas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/eaa787-a249-485f-b750-67062faef802/1/GvvUSIkW-uz94nr2PPmEUblnL_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/eaa787-a249-485f-b750-67062faef802/1/GvvUSIkW-uz94nr2PPmEUblnL_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GvvUSIkW-uz94nr2PPmEUblnL_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:3b:0f:ab:b3:41:6b:14:d7:09:f2:ed:29:a0:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1afbd4488916faecfde27af63cf98451b9672ff6
Validity
Not Before: Mar 26 08:01:01 2026 GMT
Not After : Mar 27 08:01:01 2026 GMT
Subject: CN=b925528f22b78c2bb5452d7ff0e5ead3ef68f0ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:3c:5c:77:0d:f5:09:37:15:07:9d:ca:e4:d2:
cb:3b:1a:27:3a:97:5c:28:6e:30:82:0c:b6:52:a7:
8e:dd:41:f6:a4:b0:5d:eb:ff:1d:3d:5d:38:e1:97:
d8:37:6b:52:c3:b4:ec:90:0b:0d:42:81:f8:71:fc:
a4:d1:da:54:5e:ec:3d:6c:b2:ec:47:25:5a:e8:b8:
e6:13:6d:75:b0:14:6a:a3:e9:6a:0d:15:f5:ff:7a:
59:7b:7d:f7:62:d2:40:b3:3d:de:1c:c4:09:5e:0d:
93:53:23:d4:eb:b6:db:2d:38:97:5a:64:b0:34:3f:
9d:6b:09:ef:52:15:57:d7:1a:94:f6:a0:42:23:72:
06:99:e1:85:c3:3d:de:18:31:60:aa:a8:9f:c6:cd:
13:28:c6:2c:b4:6c:f7:ae:5c:8c:7f:69:e4:4f:98:
3b:17:44:4f:9d:9a:18:f6:59:17:32:94:fe:b9:4a:
04:75:c0:35:c6:aa:b6:dd:fe:2a:df:64:0b:59:27:
3d:45:54:1b:b0:91:d6:b6:6c:fd:7f:a5:ab:50:ce:
d7:ba:7e:ee:94:c1:a9:d5:45:20:e6:98:dd:28:50:
3c:ef:16:d6:fb:36:65:af:ea:99:1d:f9:eb:46:ef:
b2:17:42:4e:fe:00:b9:23:19:11:90:f4:b6:09:11:
68:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:25:52:8F:22:B7:8C:2B:B5:45:2D:7F:F0:E5:EA:D3:EF:68:F0:BA
X509v3 Authority Key Identifier:
keyid:1A:FB:D4:48:89:16:FA:EC:FD:E2:7A:F6:3C:F9:84:51:B9:67:2F:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GvvUSIkW-uz94nr2PPmEUblnL_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/eaa787-a249-485f-b750-67062faef802/1/GvvUSIkW-uz94nr2PPmEUblnL_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/eaa787-a249-485f-b750-67062faef802/1/GvvUSIkW-uz94nr2PPmEUblnL_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:61:74:2c:05:63:ac:7a:9d:e2:56:12:64:f9:58:1c:8a:76:
29:ff:11:0b:fc:36:14:f8:11:0b:aa:31:23:a8:72:f6:27:75:
70:8a:95:8b:ca:0f:45:bb:60:1d:73:ad:db:72:d2:aa:50:67:
79:e7:11:77:f2:35:a8:7e:11:55:3d:9d:b2:8f:3c:59:5a:fb:
02:14:53:f7:e3:28:63:bc:b3:63:32:80:bb:a5:e0:2d:aa:d5:
f7:64:ac:cb:4b:eb:4e:c4:7e:40:9c:d6:10:db:b6:6d:30:b1:
46:00:55:c3:40:43:11:8a:11:9e:f3:e9:80:8d:46:d5:5f:94:
73:96:ff:a1:62:65:d3:e9:e8:5d:5a:e7:55:aa:74:8c:27:0a:
e3:b7:8a:63:8b:05:47:2b:02:93:5f:b3:e3:d8:dc:33:46:d3:
df:79:61:dd:38:d8:48:40:a5:74:86:f5:d5:a5:ba:1a:73:a1:
24:22:59:f4:e0:4a:97:23:28:95:c6:2f:d6:4d:a6:58:15:af:
38:5c:ce:31:d1:21:07:45:d2:94:cc:12:1f:1d:91:b5:13:c9:
fe:45:42:5e:84:09:33:42:ed:0e:6d:c9:42:2f:7a:e6:00:86:
23:ee:ab:49:5e:5e:13:8d:e0:bf:98:97:70:9d:b4:18:c3:46:
16:01:30:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:01:10 2026 by rpki-client