Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/a53d34-c3d6-49db-ab7f-a9cce56a0668/1/GU8LJy4kOs-vNjRglOWDlcwTg7Q.mft
File: GU8LJy4kOs-vNjRglOWDlcwTg7Q.mft (raw, json)
Hash identifier: e963MNK28VDftDiKkL05EU+RHGVFtMjz9MewGKSepi8=
Subject key identifier: 7F:72:39:F4:09:53:BF:84:43:3D:E7:71:2F:8E:00:26:BA:FD:1B:6B
Authority key identifier: 19:4F:0B:27:2E:24:3A:CF:AF:36:34:60:94:E5:83:95:CC:13:83:B4
Certificate issuer: /CN=194f0b272e243acfaf36346094e58395cc1383b4
Certificate serial: 019D3752C2ECB53A78CC0DD0FEBF22C40225
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GU8LJy4kOs-vNjRglOWDlcwTg7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/a53d34-c3d6-49db-ab7f-a9cce56a0668/1/GU8LJy4kOs-vNjRglOWDlcwTg7Q.mft
Manifest number: 1405
Signing time: Sun 29 Mar 2026 02:01:03 +0000
Manifest this update: Sun 29 Mar 2026 02:01:03 +0000
Manifest next update: Mon 30 Mar 2026 02:01:03 +0000
Files and hashes: 1: GU8LJy4kOs-vNjRglOWDlcwTg7Q.crl (hash: ikaGcbcmh434K89HarZWU69I8v38FmulLK8mNTHWjRE=)
2: WssjpVtFq9SbbTrTZ-iHVvx9vP0.roa (hash: 8JmzB8yBULopBubbEFm3Pf3YeySRdQmevymiDMry08o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/a53d34-c3d6-49db-ab7f-a9cce56a0668/1/GU8LJy4kOs-vNjRglOWDlcwTg7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/a53d34-c3d6-49db-ab7f-a9cce56a0668/1/GU8LJy4kOs-vNjRglOWDlcwTg7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/GU8LJy4kOs-vNjRglOWDlcwTg7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:c2:ec:b5:3a:78:cc:0d:d0:fe:bf:22:c4:02:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=194f0b272e243acfaf36346094e58395cc1383b4
Validity
Not Before: Mar 29 02:01:03 2026 GMT
Not After : Mar 30 02:01:03 2026 GMT
Subject: CN=7f7239f40953bf84433de7712f8e0026bafd1b6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:bd:14:74:8a:df:e3:a9:86:68:a9:cb:3d:88:
18:5d:f6:56:da:8d:66:39:ec:92:92:fb:8d:0f:84:
b4:10:b1:47:a3:57:0b:d8:5d:fb:e1:4c:85:55:d4:
78:79:46:50:b0:71:8b:0b:e2:58:93:7d:41:b3:5c:
27:85:d5:de:bb:bb:b3:7d:97:d2:d6:8b:b6:3d:64:
30:db:75:e5:6f:dd:71:c3:39:0e:8a:28:c6:b5:e3:
f1:30:23:9a:da:37:6c:2e:ff:3a:4d:7b:c3:95:9b:
8b:80:36:c6:f0:ca:98:b4:46:0a:77:93:96:0b:eb:
a9:f4:ef:9f:8a:ab:a3:88:a3:63:05:2b:63:37:6f:
eb:8c:a3:9e:0b:3d:9f:02:47:c1:e0:ae:fa:ff:92:
c0:24:26:ff:61:ef:73:5d:be:d0:30:f7:76:19:b8:
70:61:4c:3f:2d:35:6c:fa:7e:5e:02:a3:c7:dd:df:
df:83:53:95:a1:2d:9c:f1:24:ec:36:ae:46:59:43:
52:cc:e6:32:4f:4b:bb:3a:cc:10:85:05:07:18:a3:
c9:66:89:5e:b4:54:f7:20:74:7f:98:2f:4e:50:e7:
06:4d:2f:a7:d2:fd:da:d7:07:b5:c7:48:34:75:a2:
87:c6:1c:9b:e0:bb:27:1a:9a:be:9d:cb:71:84:4e:
12:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:72:39:F4:09:53:BF:84:43:3D:E7:71:2F:8E:00:26:BA:FD:1B:6B
X509v3 Authority Key Identifier:
keyid:19:4F:0B:27:2E:24:3A:CF:AF:36:34:60:94:E5:83:95:CC:13:83:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GU8LJy4kOs-vNjRglOWDlcwTg7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a53d34-c3d6-49db-ab7f-a9cce56a0668/1/GU8LJy4kOs-vNjRglOWDlcwTg7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a53d34-c3d6-49db-ab7f-a9cce56a0668/1/GU8LJy4kOs-vNjRglOWDlcwTg7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:15:d3:0d:d2:3a:77:21:5b:cb:2a:01:3e:ce:f6:ba:77:7d:
58:81:83:a6:20:d6:6c:22:13:86:c7:5f:26:f0:8e:2e:31:af:
c1:1c:e2:d3:37:d6:05:65:1d:e7:55:18:4f:95:b3:78:05:60:
9d:cf:9b:48:7d:3c:73:c5:64:8d:0a:b7:11:4a:11:bd:57:66:
66:88:84:d8:65:04:54:85:96:fc:d8:74:79:3d:bf:07:fa:b1:
d3:33:13:13:24:11:3a:da:59:31:39:53:f7:a9:78:75:59:18:
6f:d2:95:89:18:64:06:98:95:c2:b4:ee:f2:f3:51:be:82:74:
ca:f9:ef:2a:31:53:74:c7:bf:0b:9d:81:a1:cf:e4:52:11:0e:
6e:1d:c6:86:46:b1:71:86:71:b6:90:e3:25:1a:0b:6a:86:f2:
62:68:51:9e:21:62:ab:52:dc:6c:9e:ea:4b:e9:cc:6c:21:25:
a6:37:e4:bd:a5:7e:99:6e:53:a9:8f:51:76:90:88:8f:e3:97:
6e:a3:88:25:65:46:8f:d1:f4:d0:06:7f:db:9c:67:6c:8a:0b:
2d:74:d7:2d:2f:84:31:da:5d:1f:b4:20:e2:79:92:59:c7:b4:
f5:56:b4:a5:b7:b8:e2:63:4d:dd:c5:4e:00:f2:00:9f:06:4d:
f6:56:04:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03UsLstTp4zA3Q/r8ixAIlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5NGYwYjI3MmUyNDNhY2ZhZjM2MzQ2MDk0ZTU4Mzk1Y2Mx
MzgzYjQwHhcNMjYwMzI5MDIwMTAzWhcNMjYwMzMwMDIwMTAzWjAzMTEwLwYDVQQD
Eyg3ZjcyMzlmNDA5NTNiZjg0NDMzZGU3NzEyZjhlMDAyNmJhZmQxYjZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAur0UdIrf46mGaKnLPYgYXfZW2o1m
OeySkvuND4S0ELFHo1cL2F374UyFVdR4eUZQsHGLC+JYk31Bs1wnhdXeu7uzfZfS
1ou2PWQw23Xlb91xwzkOiijGtePxMCOa2jdsLv86TXvDlZuLgDbG8MqYtEYKd5OW
C+up9O+fiqujiKNjBStjN2/rjKOeCz2fAkfB4K76/5LAJCb/Ye9zXb7QMPd2Gbhw
YUw/LTVs+n5eAqPH3d/fg1OVoS2c8STsNq5GWUNSzOYyT0u7OswQhQUHGKPJZole
tFT3IHR/mC9OUOcGTS+n0v3a1we1x0g0daKHxhyb4LsnGpq+nctxhE4SeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH9yOfQJU7+EQz3ncS+OACa6/RtrMB8GA1UdIwQY
MBaAFBlPCycuJDrPrzY0YJTlg5XME4O0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1U4TEp5NGtPcy12TmpSZ2xPV0RsY3dUZzdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9hNTNkMzQtYzNkNi00OWRiLWFiN2Yt
YTljY2U1NmEwNjY4LzEvR1U4TEp5NGtPcy12TmpSZ2xPV0RsY3dUZzdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9hNTNkMzQtYzNkNi00OWRiLWFiN2YtYTljY2U1NmEwNjY4
LzEvR1U4TEp5NGtPcy12TmpSZ2xPV0RsY3dUZzdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAERXTDdI6
dyFbyyoBPs72und9WIGDpiDWbCIThsdfJvCOLjGvwRzi0zfWBWUd51UYT5WzeAVg
nc+bSH08c8VkjQq3EUoRvVdmZoiE2GUEVIWW/Nh0eT2/B/qx0zMTEyQROtpZMTlT
96l4dVkYb9KViRhkBpiVwrTu8vNRvoJ0yvnvKjFTdMe/C52Boc/kUhEObh3Ghkax
cYZxtpDjJRoLaobyYmhRniFiq1LcbJ7qS+nMbCElpjfkvaV+mW5TqY9RdpCIj+OX
bqOIJWVGj9H00AZ/25xnbIoLLXTXLS+EMdpdH7Qg4nmSWce09Va0pbe44mNN3cVO
APIAnwZN9lYE7g==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:47 2026 by rpki-client