Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.mft
File: GvujiocH_SMcOIfkpSvc3tqyAyM.mft (raw, json)
Hash identifier: JgP2PsfKje4s9EiSmmEetb2yFH7+rte9JAtKybs8sSo=
Subject key identifier: 65:4F:81:AA:65:E4:A3:47:08:89:B5:40:C6:AD:76:AC:B4:F0:B7:69
Authority key identifier: 1A:FB:A3:8A:87:07:FD:23:1C:38:87:E4:A5:2B:DC:DE:DA:B2:03:23
Certificate issuer: /CN=1afba38a8707fd231c3887e4a52bdcdedab20323
Certificate serial: 019DCCE240651794304D1D78DA6F0DEAEDA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GvujiocH_SMcOIfkpSvc3tqyAyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.mft
Manifest number: 0A3C
Signing time: Mon 27 Apr 2026 03:01:12 +0000
Manifest this update: Mon 27 Apr 2026 03:01:12 +0000
Manifest next update: Tue 28 Apr 2026 03:01:12 +0000
Files and hashes: 1: 0eyjF4LKH08gSHwI8t81kvl7qf4.roa (hash: OAQ9yLlIfIoZMZDTNkGDPEhOI6wA3fmO9jqPZiRRR1M=)
2: GvujiocH_SMcOIfkpSvc3tqyAyM.crl (hash: qIHS26WmcGFIDU8HTRQ4WxTENPtx75j4G81OE0UXyoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GvujiocH_SMcOIfkpSvc3tqyAyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cc:e2:40:65:17:94:30:4d:1d:78:da:6f:0d:ea:ed:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1afba38a8707fd231c3887e4a52bdcdedab20323
Validity
Not Before: Apr 27 03:01:12 2026 GMT
Not After : Apr 28 03:01:12 2026 GMT
Subject: CN=654f81aa65e4a3470889b540c6ad76acb4f0b769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a0:21:ce:a4:10:a6:ef:c7:69:66:a8:39:8e:
25:ff:8a:c1:36:2a:bc:e4:6f:82:dd:e4:ec:69:e1:
f8:2b:69:25:3c:27:ca:71:7f:91:bb:a1:a0:12:18:
dd:5c:10:a1:a4:fa:d4:0a:bb:af:21:dd:0f:46:cc:
62:19:e0:e0:20:c3:19:92:55:d9:8d:6a:35:64:d3:
fb:f8:47:e1:6f:7a:09:28:7c:ab:da:e6:d4:56:7a:
db:e4:43:08:f7:20:6b:7a:06:e8:16:17:69:0f:c6:
8d:ea:40:eb:86:1f:34:71:fd:b6:df:fd:a5:25:f5:
12:f0:d1:39:37:16:e6:75:e4:86:48:62:92:8a:b7:
ec:da:fc:3a:d1:fe:2b:94:c4:55:7f:70:ac:92:b3:
8f:ef:c6:20:b2:5a:f1:65:35:b4:c6:95:ed:66:88:
0c:b9:be:2e:5b:5d:d3:96:a4:37:26:7d:fe:23:67:
5b:15:b0:62:3a:74:c2:3b:12:a0:e0:e6:6d:5f:52:
b0:a5:a8:24:27:dc:c5:ef:bf:0f:6a:17:69:0b:0f:
4f:58:d2:8c:f7:93:a4:14:e1:6a:4e:d3:cb:f9:de:
56:86:5b:18:ff:f6:c1:4c:cb:30:7a:eb:bf:0f:a9:
66:08:db:e2:ac:19:96:e5:1b:b5:eb:b7:9d:4c:cc:
df:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:4F:81:AA:65:E4:A3:47:08:89:B5:40:C6:AD:76:AC:B4:F0:B7:69
X509v3 Authority Key Identifier:
keyid:1A:FB:A3:8A:87:07:FD:23:1C:38:87:E4:A5:2B:DC:DE:DA:B2:03:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GvujiocH_SMcOIfkpSvc3tqyAyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7a9ba2-6a6a-4c7c-882a-0996aed32f3b/1/GvujiocH_SMcOIfkpSvc3tqyAyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:a5:58:98:42:62:c3:23:0e:28:06:90:ef:1d:b2:89:8f:87:
84:4b:aa:6e:01:90:ee:ca:46:ad:f0:5c:75:50:c2:34:b0:66:
00:97:22:1f:0e:d3:06:3d:4b:e7:4f:1a:c5:2c:27:c4:53:51:
d2:25:27:fe:e8:9d:96:32:93:36:ba:b9:31:53:84:a4:40:a5:
61:2c:b6:87:ac:9c:d2:60:b0:a5:a5:d0:af:7d:f1:06:c4:86:
52:cf:de:4d:4f:ca:7a:7b:fb:07:38:df:f5:a8:1a:42:b3:14:
84:e9:9c:ad:8b:7d:db:8d:ea:b0:1a:2d:1f:c4:45:45:0d:b5:
25:1d:c6:49:90:7b:03:b1:75:fb:27:8b:d2:76:75:c4:f2:cf:
27:c8:7e:b5:83:cd:ef:92:17:a4:a3:5c:c4:b9:2e:8f:15:94:
f4:6d:bb:1f:f6:64:61:e6:85:03:14:23:e4:dc:1f:a5:88:33:
17:77:36:94:cb:ab:24:f7:93:bb:7c:66:82:b0:0a:16:d4:0e:
f0:c0:09:d6:ce:9a:46:42:9e:89:8d:c1:f3:54:86:20:b5:7b:
81:bf:40:16:11:3a:8e:0f:fd:a8:91:91:58:e6:12:43:b1:36:
6a:f1:36:0a:fb:b3:ad:8b:51:a2:50:76:b0:01:1e:8f:77:a0:
50:b3:de:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 04:42:21 2026 by rpki-client