Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/c913dc-770f-4bd0-978f-46162786f8e1/1/GUKkFVlCay9ah3wDnu2he2ueHYk.mft
File: GUKkFVlCay9ah3wDnu2he2ueHYk.mft (raw, json)
Hash identifier: y5pMmamMf/fYKPcnGm3vJbkVlLOr8VUJzrT6CWBSNE8=
Subject key identifier: DE:BA:38:51:97:6F:94:FC:9B:95:E6:8B:40:86:9E:32:5F:E9:B3:D2
Authority key identifier: 19:42:A4:15:59:42:6B:2F:5A:87:7C:03:9E:ED:A1:7B:6B:9E:1D:89
Certificate issuer: /CN=1942a41559426b2f5a877c039eeda17b6b9e1d89
Certificate serial: 019D3909C4D928EB61767EB704ABB2FC95A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUKkFVlCay9ah3wDnu2he2ueHYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/c913dc-770f-4bd0-978f-46162786f8e1/1/GUKkFVlCay9ah3wDnu2he2ueHYk.mft
Manifest number: FE
Signing time: Sun 29 Mar 2026 10:00:34 +0000
Manifest this update: Sun 29 Mar 2026 10:00:34 +0000
Manifest next update: Mon 30 Mar 2026 10:00:34 +0000
Files and hashes: 1: GUKkFVlCay9ah3wDnu2he2ueHYk.crl (hash: 7EitkEBst7nG7ZA3PA4yXRz9qIlbF6omZlNvybq6+Xg=)
2: r176ZTDmas0yhldLsprRh3VkXas.roa (hash: VzMucYLj37iS+6RZ2k4df7JyYSsoQm5cThupVotFxBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/c913dc-770f-4bd0-978f-46162786f8e1/1/GUKkFVlCay9ah3wDnu2he2ueHYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/c913dc-770f-4bd0-978f-46162786f8e1/1/GUKkFVlCay9ah3wDnu2he2ueHYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GUKkFVlCay9ah3wDnu2he2ueHYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 10:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:c4:d9:28:eb:61:76:7e:b7:04:ab:b2:fc:95:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1942a41559426b2f5a877c039eeda17b6b9e1d89
Validity
Not Before: Mar 29 10:00:34 2026 GMT
Not After : Mar 30 10:00:34 2026 GMT
Subject: CN=deba3851976f94fc9b95e68b40869e325fe9b3d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:df:c3:67:b6:f2:03:fc:4d:df:fb:39:9f:4d:
70:1d:53:e1:7c:e4:e8:e0:e8:aa:a0:9d:58:f0:c8:
43:ab:d5:0b:3f:89:3a:6b:ef:11:d0:ac:7b:f1:45:
7d:19:8e:c7:68:4f:58:b7:9d:df:c9:b1:52:a3:62:
99:78:37:7c:5c:e7:61:4c:b4:89:1d:c0:66:fb:91:
bc:2a:d9:bb:f0:41:41:09:57:97:ed:50:b1:ff:00:
9b:f5:02:ab:e3:25:c4:7a:d3:26:7a:5c:e4:ab:7f:
42:06:1b:be:d3:5d:60:4d:90:fa:c2:3b:8b:4a:5f:
4d:4d:8a:22:06:50:90:a5:09:c5:17:82:3e:e9:58:
f4:f2:c4:40:27:08:92:fd:d0:ca:47:07:5b:f0:69:
47:2b:0a:53:6f:fa:85:4f:b3:41:21:e0:50:57:bc:
d9:9d:e2:23:29:9e:49:c5:58:37:e6:6f:8f:f8:1a:
e2:40:d2:b2:61:16:c0:d1:d6:45:20:fd:92:04:0e:
22:e5:34:a2:a5:f5:3c:01:35:df:b3:75:d1:02:4a:
e9:59:6e:4b:1d:70:cc:34:35:f6:a6:b5:1e:17:59:
74:1b:eb:b8:e0:cf:0e:53:0d:f9:61:a4:d8:da:f1:
ee:1c:95:f5:fb:f8:6d:70:cf:19:46:3a:8b:8f:03:
3c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:BA:38:51:97:6F:94:FC:9B:95:E6:8B:40:86:9E:32:5F:E9:B3:D2
X509v3 Authority Key Identifier:
keyid:19:42:A4:15:59:42:6B:2F:5A:87:7C:03:9E:ED:A1:7B:6B:9E:1D:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUKkFVlCay9ah3wDnu2he2ueHYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c913dc-770f-4bd0-978f-46162786f8e1/1/GUKkFVlCay9ah3wDnu2he2ueHYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c913dc-770f-4bd0-978f-46162786f8e1/1/GUKkFVlCay9ah3wDnu2he2ueHYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:0e:d2:5d:6d:0a:00:f6:a2:01:9b:04:25:16:e8:8b:5e:6d:
5c:f0:20:d4:58:ee:b4:ed:d8:c1:b5:7c:a9:ba:6b:9b:ab:fe:
f5:8f:19:31:f9:d2:2b:4d:50:16:d2:1f:f8:71:26:3e:8b:1b:
12:10:85:8e:eb:8d:a5:46:82:0a:40:85:aa:9b:37:68:15:10:
d5:11:6c:96:83:a7:51:72:a2:20:ca:c3:b7:bd:f2:f9:47:21:
2c:09:2f:97:48:9d:85:45:5f:1d:1f:1c:0c:b1:1d:d2:d7:ff:
df:d9:a6:5c:88:0f:f2:71:3d:21:31:53:cc:50:4b:1d:3e:b3:
0f:30:08:00:29:d3:cf:30:df:b5:bf:5f:31:05:08:97:40:7e:
af:b3:62:ad:f2:2d:ee:37:0c:8d:7e:43:c8:39:4d:03:91:4f:
56:be:af:d6:1c:28:d5:ca:61:4a:bf:27:c6:a0:55:03:a6:bb:
e4:37:17:6e:b0:51:3f:a7:e4:82:af:b5:6d:70:19:db:75:a3:
6d:85:cd:b2:dd:f9:f8:21:65:3e:f9:ad:28:a8:d8:41:d9:7b:
32:77:cd:95:fa:1a:3e:37:1a:35:b4:d0:81:72:48:e9:0e:ce:
aa:a2:6e:3c:fb:2b:33:f4:07:97:3f:91:fa:47:b7:a4:67:60:
a3:73:5a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:52:25 2026 by rpki-client