Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.mft
File: GvzYfmH5F2XCwQAgQUG1lNMsey4.mft (raw, json)
Hash identifier: S2IhORunFS6+k7KNFWUcQK21SpsPFSuiJ9eMavzcdic=
Subject key identifier: D7:F7:8A:7B:E0:2D:30:B2:B4:24:DD:82:7C:45:98:D8:98:12:2A:EE
Authority key identifier: 1A:FC:D8:7E:61:F9:17:65:C2:C1:00:20:41:41:B5:94:D3:2C:7B:2E
Certificate issuer: /CN=1afcd87e61f91765c2c100204141b594d32c7b2e
Certificate serial: 019E7C9F51F820EE465EC6306EC670C63552
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GvzYfmH5F2XCwQAgQUG1lNMsey4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.mft
Manifest number: 0460
Signing time: Sun 31 May 2026 06:01:16 +0000
Manifest this update: Sun 31 May 2026 06:01:16 +0000
Manifest next update: Mon 01 Jun 2026 06:01:16 +0000
Files and hashes: 1: GvzYfmH5F2XCwQAgQUG1lNMsey4.crl (hash: wvRkvAwx7kDO00GcaipD/bH+Y+OLKNB6DWsE85yUiY8=)
2: tW75xisNBw44jYns_Y3WtNvzf4M.roa (hash: 1hevvajdIYdR4n3mWoJRqh1PcCq2VWdl5U2HS1l2lMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.mft
rsync://rpki.ripe.net/repository/DEFAULT/GvzYfmH5F2XCwQAgQUG1lNMsey4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 01 Jun 2026 04:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:7c:9f:51:f8:20:ee:46:5e:c6:30:6e:c6:70:c6:35:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1afcd87e61f91765c2c100204141b594d32c7b2e
Validity
Not Before: May 31 06:01:16 2026 GMT
Not After : Jun 1 06:01:16 2026 GMT
Subject: CN=d7f78a7be02d30b2b424dd827c4598d898122aee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4c:03:b7:8b:08:73:55:02:a3:fc:13:75:a7:
54:7e:12:d5:c7:29:1b:b1:ba:d0:a6:dc:25:01:4b:
a0:ee:61:f6:c4:79:39:a8:40:b7:fa:3e:3a:11:8b:
79:a4:d2:df:54:cb:b8:33:a0:10:6e:7e:7d:c7:f6:
05:a7:e9:53:2d:83:a6:57:b6:ed:5a:53:8b:ba:1a:
26:de:75:62:40:18:4a:db:9b:d1:e8:38:06:d7:bb:
29:dd:10:07:38:64:04:cd:0f:32:e4:46:31:5b:12:
b5:cb:e5:f9:e0:2c:65:b9:d5:8f:d7:4f:02:10:29:
b1:82:1c:df:14:cc:8b:4a:f6:d5:2a:9c:d7:09:1b:
d2:63:24:85:28:f4:03:fa:22:49:8e:a1:ec:10:d0:
dd:5e:85:d1:83:c8:10:91:26:a6:da:8b:5a:c1:a2:
67:b7:f9:84:ef:d6:97:4a:d4:73:13:e8:90:08:4e:
16:ab:e1:4d:ab:86:43:1a:41:d4:61:79:f3:e7:9d:
0f:30:83:22:19:6b:65:8d:02:9c:85:fe:1e:fd:90:
c2:6f:94:24:6f:b9:27:59:c9:32:b8:88:82:ce:a0:
b5:77:47:ac:25:ac:96:f8:39:0e:ef:bb:18:a0:5d:
4a:11:c8:e8:24:94:50:9b:dc:aa:87:e7:a4:2b:a7:
de:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:F7:8A:7B:E0:2D:30:B2:B4:24:DD:82:7C:45:98:D8:98:12:2A:EE
X509v3 Authority Key Identifier:
keyid:1A:FC:D8:7E:61:F9:17:65:C2:C1:00:20:41:41:B5:94:D3:2C:7B:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GvzYfmH5F2XCwQAgQUG1lNMsey4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/54274b-61cb-4686-ab8a-4cf8cf4ff6cd/1/GvzYfmH5F2XCwQAgQUG1lNMsey4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:29:50:6d:cb:ff:7d:9a:78:32:f2:7a:51:45:e2:2b:6c:a2:
70:83:70:05:d0:5c:fd:4f:42:c2:00:cc:ba:7d:20:e6:29:bc:
b4:48:7d:dc:fb:49:f2:58:47:99:28:4d:e9:89:34:66:37:76:
af:72:e1:73:f8:e8:94:a8:68:c9:a9:60:4a:98:73:42:89:18:
1e:37:eb:e4:be:f1:13:1f:d4:43:31:42:b6:4e:a0:0e:10:e8:
79:ed:b0:02:61:d4:88:a6:21:9e:ce:56:e6:20:b2:b8:97:d2:
a3:1c:09:31:8b:dd:46:e3:88:68:35:8c:e2:66:8c:2a:5d:72:
52:bb:47:c2:45:82:2a:eb:c8:2e:5c:e7:f3:7d:4f:57:2d:34:
7f:92:3b:83:b4:6a:51:ec:0e:c6:7d:f9:5c:41:2f:25:bb:fc:
5e:f9:71:eb:1c:8a:ef:6b:42:ec:ff:e1:0e:03:14:b4:af:dc:
d4:55:1d:08:b1:e1:de:ca:a8:e3:8d:5c:ff:da:3f:58:5c:c5:
98:1f:52:5a:d0:2c:68:85:7b:12:41:c3:4e:98:7c:62:53:72:
3d:50:9b:0e:25:11:7f:bc:7c:65:70:89:ac:64:13:22:9c:9e:
cc:eb:cc:20:e8:6f:75:08:58:72:17:1e:87:5c:79:0e:d1:29:
f2:04:63:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 31 10:47:52 2026 by rpki-client