Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/0c14f4-9a47-4a5a-a37d-f3555ddf280a/1/GVoSoOc0gtmTJgWYolyPWlxJ0gE.mft
File: GVoSoOc0gtmTJgWYolyPWlxJ0gE.mft (raw, json)
Hash identifier: GW5p9UkTE3WoC+U2T7zn8qQpSH0UpIFwWqZNi1SxaJ4=
Subject key identifier: 86:FE:18:4C:56:E8:DD:0F:CE:92:4D:5D:9B:45:50:EB:59:62:6B:8A
Authority key identifier: 19:5A:12:A0:E7:34:82:D9:93:26:05:98:A2:5C:8F:5A:5C:49:D2:01
Certificate issuer: /CN=195a12a0e73482d993260598a25c8f5a5c49d201
Certificate serial: 019D38D316C47647AF98015F3B8FBDE86C88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GVoSoOc0gtmTJgWYolyPWlxJ0gE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/0c14f4-9a47-4a5a-a37d-f3555ddf280a/1/GVoSoOc0gtmTJgWYolyPWlxJ0gE.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 09:00:51 +0000
Manifest this update: Sun 29 Mar 2026 09:00:51 +0000
Manifest next update: Mon 30 Mar 2026 09:00:51 +0000
Files and hashes: 1: 3HmTEpC4VIL74bvtHgwwr4J0_bA.roa (hash: 0DTR/kx+aEJlJfsijVCjICf0fvERpyfE2z6J9TqKYQs=)
2: GVoSoOc0gtmTJgWYolyPWlxJ0gE.crl (hash: WtIkUaxNUCDdcJ9xVaKPVjdIpE2gmRJgFU/vgWAfMMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/0c14f4-9a47-4a5a-a37d-f3555ddf280a/1/GVoSoOc0gtmTJgWYolyPWlxJ0gE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/0c14f4-9a47-4a5a-a37d-f3555ddf280a/1/GVoSoOc0gtmTJgWYolyPWlxJ0gE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GVoSoOc0gtmTJgWYolyPWlxJ0gE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:16:c4:76:47:af:98:01:5f:3b:8f:bd:e8:6c:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=195a12a0e73482d993260598a25c8f5a5c49d201
Validity
Not Before: Mar 29 09:00:51 2026 GMT
Not After : Mar 30 09:00:51 2026 GMT
Subject: CN=86fe184c56e8dd0fce924d5d9b4550eb59626b8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bc:91:55:ec:69:8a:7b:24:29:31:4b:88:3a:
3e:dc:9b:80:20:79:50:46:cf:4d:dd:a8:09:b8:3f:
15:25:cd:be:7f:d5:48:73:1e:77:a6:6e:f5:bf:7d:
3c:46:2c:13:19:14:1a:52:c1:d0:c6:9c:77:53:ce:
9e:9f:29:4b:51:c4:58:fa:fe:a8:cf:dc:50:54:4c:
04:23:cf:46:63:ae:2f:85:b2:57:a2:34:e4:ee:b3:
5d:1b:bd:70:86:99:43:e2:bf:13:46:18:08:54:02:
8b:f1:df:46:b5:5a:c4:64:be:fb:92:77:48:b3:f6:
9b:dc:de:f5:d5:14:b4:d9:2a:54:a8:6a:e6:97:6e:
36:45:3d:c2:a0:67:4e:d4:34:9f:34:30:95:73:0c:
2e:3a:6c:aa:e9:43:7f:1b:12:74:a0:6e:2d:00:7c:
d6:2d:f3:d9:8c:0c:aa:73:63:c4:97:ef:87:d1:57:
53:2f:79:b1:ae:94:de:e5:6f:81:5f:19:bf:51:76:
78:3f:0b:d3:e2:d3:3d:db:b1:23:7e:5f:51:d3:14:
00:a6:09:91:1c:03:0a:d2:71:a9:cb:66:13:0b:37:
2c:be:62:c2:8c:11:6b:26:a6:2a:92:75:13:b0:94:
c1:47:61:a1:08:4f:89:c9:18:69:d2:0e:df:8c:ce:
5c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:FE:18:4C:56:E8:DD:0F:CE:92:4D:5D:9B:45:50:EB:59:62:6B:8A
X509v3 Authority Key Identifier:
keyid:19:5A:12:A0:E7:34:82:D9:93:26:05:98:A2:5C:8F:5A:5C:49:D2:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GVoSoOc0gtmTJgWYolyPWlxJ0gE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0c14f4-9a47-4a5a-a37d-f3555ddf280a/1/GVoSoOc0gtmTJgWYolyPWlxJ0gE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0c14f4-9a47-4a5a-a37d-f3555ddf280a/1/GVoSoOc0gtmTJgWYolyPWlxJ0gE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:5f:83:36:68:77:e5:f0:02:27:b6:7c:27:0c:b8:d9:b8:85:
53:bb:e7:cc:f6:30:df:96:11:f9:cd:c9:a7:11:90:d5:43:73:
d0:5b:a2:f9:59:b5:12:44:f1:1a:e0:ab:60:67:0b:9c:83:81:
ce:f6:da:7a:35:a9:77:c4:7e:19:4b:f6:89:45:43:cd:69:12:
5f:c2:63:77:19:eb:6b:da:48:3e:87:09:c4:d7:a9:fe:53:57:
bd:d5:1f:70:bb:99:d0:c2:52:a7:c4:f2:06:11:20:a4:9d:c4:
0a:5f:f6:05:fe:24:13:04:3e:85:42:f4:25:48:79:42:1e:ce:
4a:dc:e6:47:0c:4a:02:50:a1:9f:fd:d0:4b:f1:a4:a0:d2:cf:
42:6c:52:42:0d:73:11:32:e6:4b:bc:ec:3e:e5:04:52:b4:21:
42:ed:45:24:5f:47:0c:c4:94:b2:0c:61:43:d0:fe:47:9a:d4:
10:44:69:7a:a6:88:0a:b1:e6:84:91:ac:a9:90:42:ae:75:cf:
81:68:a2:da:31:60:0d:fc:e8:b3:34:66:6d:06:e4:33:45:5f:
d6:c3:c8:26:91:c9:50:88:4a:79:ad:60:75:d4:e7:84:e5:d6:
81:d7:85:cd:23:3a:78:cc:f9:12:30:99:20:52:f6:b1:21:e5:
6b:d0:21:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:47:28 2026 by rpki-client