Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/ef22db-e3b0-439f-a0c2-bf4d457e9518/1/GYe7aFnJOMi2PlqqVtkHvQRE484.mft
File: GYe7aFnJOMi2PlqqVtkHvQRE484.mft (raw, json)
Hash identifier: Kqk0jeJ/gWLrgIDbsFgde++IAiNpZBE5h5u0r67Oaek=
Subject key identifier: A6:13:D5:74:50:5B:BF:B7:0F:6F:49:64:6C:3A:C9:5F:78:56:E2:8C
Authority key identifier: 19:87:BB:68:59:C9:38:C8:B6:3E:5A:AA:56:D9:07:BD:04:44:E3:CE
Certificate issuer: /CN=1987bb6859c938c8b63e5aaa56d907bd0444e3ce
Certificate serial: 019D37BFEEF721D16E639CF61FA74885801E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GYe7aFnJOMi2PlqqVtkHvQRE484.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/ef22db-e3b0-439f-a0c2-bf4d457e9518/1/GYe7aFnJOMi2PlqqVtkHvQRE484.mft
Manifest number: 17CD
Signing time: Sun 29 Mar 2026 04:00:18 +0000
Manifest this update: Sun 29 Mar 2026 04:00:18 +0000
Manifest next update: Mon 30 Mar 2026 04:00:18 +0000
Files and hashes: 1: GYe7aFnJOMi2PlqqVtkHvQRE484.crl (hash: XqlXNfquv1zxg1moYGXJxxqEDJVUepSMY6G4uGhMulo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/ef22db-e3b0-439f-a0c2-bf4d457e9518/1/GYe7aFnJOMi2PlqqVtkHvQRE484.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/ef22db-e3b0-439f-a0c2-bf4d457e9518/1/GYe7aFnJOMi2PlqqVtkHvQRE484.mft
rsync://rpki.ripe.net/repository/DEFAULT/GYe7aFnJOMi2PlqqVtkHvQRE484.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:bf:ee:f7:21:d1:6e:63:9c:f6:1f:a7:48:85:80:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1987bb6859c938c8b63e5aaa56d907bd0444e3ce
Validity
Not Before: Mar 29 04:00:18 2026 GMT
Not After : Mar 30 04:00:18 2026 GMT
Subject: CN=a613d574505bbfb70f6f49646c3ac95f7856e28c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:90:37:9b:85:88:b7:16:89:b2:9a:7a:a0:5f:
7b:64:bb:cf:31:06:9c:47:90:8d:4b:b5:34:55:51:
67:f4:cd:f2:6a:02:cd:20:4c:9f:cc:fe:6b:49:e7:
3c:4d:09:e9:48:6a:16:a1:a2:14:e0:b3:0a:58:ab:
1c:7e:27:91:9a:6b:06:20:c0:d9:bc:5a:6f:74:23:
26:57:be:2c:31:3f:84:15:3b:3c:aa:b4:9c:31:6f:
0f:a3:57:7f:c2:85:fc:63:f3:ec:22:77:30:8b:6b:
84:3c:60:85:f1:3e:4e:42:b2:fd:cc:9f:46:94:c4:
cd:79:53:ad:53:42:1b:b1:da:a9:cd:24:1d:e7:36:
d4:9c:43:25:4c:17:99:0e:b9:7c:aa:7e:80:f9:22:
f5:40:bf:36:5c:47:e4:91:e3:7d:ab:a4:b8:a4:ed:
55:ca:2e:e7:ab:00:be:29:bc:a3:4a:3c:aa:64:4e:
47:e8:d7:36:ba:84:33:16:23:7e:dd:de:72:0a:d2:
05:50:3b:06:99:8c:0f:3f:ad:78:f3:6c:0a:e6:94:
57:68:e6:b9:b9:48:a5:82:de:af:22:56:9d:21:b2:
bb:26:38:26:dc:55:04:48:7d:54:4f:54:fb:eb:ca:
ea:dc:f9:b2:b7:23:11:8f:5f:e9:ae:cc:b7:8a:76:
6a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:13:D5:74:50:5B:BF:B7:0F:6F:49:64:6C:3A:C9:5F:78:56:E2:8C
X509v3 Authority Key Identifier:
keyid:19:87:BB:68:59:C9:38:C8:B6:3E:5A:AA:56:D9:07:BD:04:44:E3:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GYe7aFnJOMi2PlqqVtkHvQRE484.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ef22db-e3b0-439f-a0c2-bf4d457e9518/1/GYe7aFnJOMi2PlqqVtkHvQRE484.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ef22db-e3b0-439f-a0c2-bf4d457e9518/1/GYe7aFnJOMi2PlqqVtkHvQRE484.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:b1:4b:e9:06:ca:d1:39:a3:cb:28:25:41:21:2a:bb:15:01:
c9:d8:66:13:0a:d5:69:da:20:ac:24:f0:64:5b:91:fa:93:d5:
43:45:58:48:8e:45:83:e8:37:5e:09:ed:68:50:3f:49:20:3d:
ab:c6:a5:ba:a6:62:2c:b3:80:ce:fc:10:69:d8:b0:19:d4:57:
ee:02:ee:5c:f6:a7:58:af:a1:82:ce:6f:20:da:6a:7c:eb:4a:
48:c4:ec:74:20:9e:ca:0d:47:88:ae:11:4c:96:50:03:10:02:
7b:24:91:76:c0:b7:ac:73:92:fc:03:42:a9:b0:c2:8d:7f:52:
b4:ce:56:24:34:79:07:7e:c0:e1:ef:d3:b2:68:9f:de:4d:96:
45:c6:34:91:5d:9b:44:b9:45:bb:ec:84:bf:1a:a1:da:a1:01:
be:0a:14:c5:5d:c7:e6:10:c0:c2:22:bb:26:9b:c9:d5:25:4c:
a9:ca:63:b6:f0:91:02:46:24:6a:fa:4c:88:f1:a0:d0:4b:e2:
b9:0f:55:5a:d1:9c:1f:86:f8:62:c5:a7:3f:e7:fd:f0:70:df:
ed:62:f5:3c:f4:99:cf:ff:9b:5a:75:39:04:ac:24:17:25:ae:
05:19:0a:79:4c:8c:ed:8c:12:c6:78:0a:b9:5e:7a:d7:ca:1a:
95:93:fb:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03v+73IdFuY5z2H6dIhYAeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5ODdiYjY4NTljOTM4YzhiNjNlNWFhYTU2ZDkwN2JkMDQ0
NGUzY2UwHhcNMjYwMzI5MDQwMDE4WhcNMjYwMzMwMDQwMDE4WjAzMTEwLwYDVQQD
EyhhNjEzZDU3NDUwNWJiZmI3MGY2ZjQ5NjQ2YzNhYzk1Zjc4NTZlMjhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpA3m4WItxaJspp6oF97ZLvPMQac
R5CNS7U0VVFn9M3yagLNIEyfzP5rSec8TQnpSGoWoaIU4LMKWKscfieRmmsGIMDZ
vFpvdCMmV74sMT+EFTs8qrScMW8Po1d/woX8Y/PsIncwi2uEPGCF8T5OQrL9zJ9G
lMTNeVOtU0IbsdqpzSQd5zbUnEMlTBeZDrl8qn6A+SL1QL82XEfkkeN9q6S4pO1V
yi7nqwC+KbyjSjyqZE5H6Nc2uoQzFiN+3d5yCtIFUDsGmYwPP61482wK5pRXaOa5
uUilgt6vIladIbK7Jjgm3FUESH1UT1T768rq3PmytyMRj1/prsy3inZqowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKYT1XRQW7+3D29JZGw6yV94VuKMMB8GA1UdIwQY
MBaAFBmHu2hZyTjItj5aqlbZB70EROPOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1llN2FGbkpPTWkyUGxxcVZ0a0h2UVJFNDg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9lZjIyZGItZTNiMC00MzlmLWEwYzIt
YmY0ZDQ1N2U5NTE4LzEvR1llN2FGbkpPTWkyUGxxcVZ0a0h2UVJFNDg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi9lZjIyZGItZTNiMC00MzlmLWEwYzItYmY0ZDQ1N2U5NTE4
LzEvR1llN2FGbkpPTWkyUGxxcVZ0a0h2UVJFNDg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAALFL6QbK
0TmjyyglQSEquxUBydhmEwrVadogrCTwZFuR+pPVQ0VYSI5Fg+g3XgntaFA/SSA9
q8aluqZiLLOAzvwQadiwGdRX7gLuXPanWK+hgs5vINpqfOtKSMTsdCCeyg1HiK4R
TJZQAxACeySRdsC3rHOS/ANCqbDCjX9StM5WJDR5B37A4e/Tsmif3k2WRcY0kV2b
RLlFu+yEvxqh2qEBvgoUxV3H5hDAwiK7JpvJ1SVMqcpjtvCRAkYkavpMiPGg0Evi
uQ9VWtGcH4b4YsWnP+f98HDf7WL1PPSZz/+bWnU5BKwkFyWuBRkKeUyM7YwSxngK
uV5618oalZP7dw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:02 2026 by rpki-client