Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/GUKBeimILUM78buOvFmy_yVugD8.mft
File: GUKBeimILUM78buOvFmy_yVugD8.mft (raw, json)
Hash identifier: RVPZ/jgrgxHTZ0bOHuyVv2pUghWZOig4t2VvSQgqzA4=
Subject key identifier: F6:62:23:45:FD:8F:BD:BB:CA:EE:04:65:7E:2B:9E:23:AA:88:6A:B0
Authority key identifier: 19:42:81:7A:29:88:2D:43:3B:F1:BB:8E:BC:59:B2:FF:25:6E:80:3F
Certificate issuer: /CN=1942817a29882d433bf1bb8ebc59b2ff256e803f
Certificate serial: 019D2F2B08335B3CA856BD89C1E2DCC934AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUKBeimILUM78buOvFmy_yVugD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/GUKBeimILUM78buOvFmy_yVugD8.mft
Manifest number: 0DC2
Signing time: Fri 27 Mar 2026 12:00:42 +0000
Manifest this update: Fri 27 Mar 2026 12:00:42 +0000
Manifest next update: Sat 28 Mar 2026 12:00:42 +0000
Files and hashes: 1: 1AlRjHDHPerXd5ndCFjnN-RkvrM.roa (hash: ZLKTq9Q4KNpxNVoqpx9iO6C2WOOfE/x2d5mOP6ZbGXQ=)
2: GUKBeimILUM78buOvFmy_yVugD8.crl (hash: v0+qfBuqyzSLX/+i00LqvYOgaqAllWclcIv2afL9URE=)
3: p93Yo32LiS86tKNIIJTFqRsTAc4.roa (hash: rKHZxZkQ1DlZz92HShvQ6VMO1LR9WfPRGqIp6geZ5io=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/GUKBeimILUM78buOvFmy_yVugD8.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/GUKBeimILUM78buOvFmy_yVugD8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GUKBeimILUM78buOvFmy_yVugD8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Mar 2026 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2f:2b:08:33:5b:3c:a8:56:bd:89:c1:e2:dc:c9:34:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1942817a29882d433bf1bb8ebc59b2ff256e803f
Validity
Not Before: Mar 27 12:00:42 2026 GMT
Not After : Mar 28 12:00:42 2026 GMT
Subject: CN=f6622345fd8fbdbbcaee04657e2b9e23aa886ab0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c2:25:e2:d1:dc:58:c1:95:30:98:70:9d:e4:
76:5f:a1:d0:dc:e9:9e:e2:e5:55:24:e2:5e:c2:a0:
d2:81:78:14:43:da:90:8c:06:e8:eb:36:cf:99:24:
96:6b:1d:b2:b5:93:26:e5:97:84:08:d9:16:02:68:
be:65:34:29:66:0a:01:1a:ae:ec:2e:a0:55:4b:41:
1c:02:7b:fe:97:53:1f:f2:1d:f4:b4:ed:09:4f:05:
06:3d:81:1d:9c:6c:a7:96:ef:71:ba:c2:af:11:29:
19:2e:b9:95:60:5d:c3:63:30:e5:e5:12:ef:da:db:
8f:8b:a7:27:ca:de:16:26:0c:82:18:f8:e6:35:9f:
4b:03:de:5c:86:5f:1d:0a:91:25:5d:95:fc:db:8b:
a4:a8:ce:6c:c8:68:88:a2:1a:c8:9c:31:d0:96:2d:
76:41:1c:7f:4f:08:24:83:40:9f:38:f0:0e:14:50:
1c:06:62:b3:3b:64:ff:2c:bf:0f:f9:c7:94:4b:89:
46:d8:a4:25:56:f2:ce:db:11:27:c6:61:5b:18:a1:
08:84:82:8a:d6:37:25:4c:06:da:eb:40:8d:66:8e:
e9:72:18:5a:fb:b6:31:83:ed:91:a7:5e:3e:c7:87:
74:18:1a:5c:12:f7:e3:cd:83:fc:8e:e5:15:31:f5:
20:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:62:23:45:FD:8F:BD:BB:CA:EE:04:65:7E:2B:9E:23:AA:88:6A:B0
X509v3 Authority Key Identifier:
keyid:19:42:81:7A:29:88:2D:43:3B:F1:BB:8E:BC:59:B2:FF:25:6E:80:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUKBeimILUM78buOvFmy_yVugD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/GUKBeimILUM78buOvFmy_yVugD8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/GUKBeimILUM78buOvFmy_yVugD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:04:06:2e:5d:3d:91:bf:bc:90:f0:f5:72:ff:8f:8c:2d:2b:
45:88:10:45:8c:5d:15:1c:5e:90:ff:95:83:22:c3:7e:36:5c:
26:7c:bc:67:38:17:4c:cc:31:c2:47:92:cf:5a:ef:80:67:56:
ac:af:76:84:09:0f:e0:7c:d1:f6:5e:0d:51:57:32:09:17:c2:
82:29:4f:fb:e4:64:95:45:01:e9:af:57:af:f4:7f:4e:bb:84:
bb:a9:cb:6e:e8:a6:7d:de:d6:05:53:b3:4b:d5:45:ee:d5:8d:
9d:4d:d8:c6:cc:6f:dc:69:42:99:83:8d:1c:55:00:d9:14:69:
e8:04:23:d7:4d:1c:2b:4f:8c:64:56:c0:b0:4e:ba:3a:97:88:
f4:5e:dc:b2:ab:7a:c3:14:ce:2f:af:6d:db:7f:c5:d9:b3:6d:
e9:ca:9c:85:cd:d3:a4:e7:0a:18:2b:76:13:dc:fb:72:e4:a4:
8f:b7:19:99:6e:f4:14:a1:95:ea:a0:86:91:cc:14:05:ee:d2:
a6:13:69:78:af:f8:cf:1a:c5:fc:bb:2a:d9:e2:0e:7b:f1:72:
de:00:e1:6e:eb:cc:45:32:f5:5b:ef:d2:bd:72:b4:22:4c:65:
5e:70:8e:e6:51:9f:c0:ff:a2:50:62:7d:ac:38:37:be:b3:46:
9d:e2:68:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 17:42:59 2026 by rpki-client