Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.mft
File: GU4yqC6Y8i2Tn_mYRFWBO-K6apE.mft (raw, json)
Hash identifier: LZ09wN4JDEy93bBMpchJcP9/lI+gDw70QkGXFWN3GDY=
Subject key identifier: 1A:86:5D:3D:FA:A2:F4:A4:7F:43:A2:E8:86:AE:AD:88:0E:5C:98:4E
Authority key identifier: 19:4E:32:A8:2E:98:F2:2D:93:9F:F9:98:44:55:81:3B:E2:BA:6A:91
Certificate issuer: /CN=194e32a82e98f22d939ff9984455813be2ba6a91
Certificate serial: 019D39411918807C951FA74F08F444F11280
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.mft
Manifest number: 03AE
Signing time: Sun 29 Mar 2026 11:01:00 +0000
Manifest this update: Sun 29 Mar 2026 11:01:00 +0000
Manifest next update: Mon 30 Mar 2026 11:01:00 +0000
Files and hashes: 1: BZBAahTREA8Q_3coOvyfGf9sdjY.roa (hash: jde/2VQaoII8kUESbj5JRDjPMDFmOdYKULZBf+Xi1JA=)
2: GU4yqC6Y8i2Tn_mYRFWBO-K6apE.crl (hash: XsRLNTdssPZHv9EOja6KTP9csEo6uiTg+D62KVG7LEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:19:18:80:7c:95:1f:a7:4f:08:f4:44:f1:12:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=194e32a82e98f22d939ff9984455813be2ba6a91
Validity
Not Before: Mar 29 11:01:00 2026 GMT
Not After : Mar 30 11:01:00 2026 GMT
Subject: CN=1a865d3dfaa2f4a47f43a2e886aead880e5c984e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ce:4b:a7:4f:c5:cf:9b:87:83:cf:ff:5a:01:
cc:f3:fe:3c:4d:55:0d:b0:93:49:42:6a:d4:2e:ef:
4a:1b:d6:02:6b:f7:c9:5f:a3:d4:69:05:e9:8f:00:
82:01:e0:0e:87:3c:79:9a:90:87:3d:8a:80:52:83:
21:99:57:5a:b0:28:af:fb:61:fa:4a:eb:5b:d3:2b:
5c:d1:51:be:94:88:c1:30:b1:28:b0:44:b5:8c:c4:
bc:e7:68:3f:fe:5c:d3:e3:95:56:93:0d:3d:ba:74:
a2:a0:68:8d:74:0e:38:e6:e0:46:84:36:8b:f9:b4:
93:f4:9d:77:06:48:1e:27:4b:6f:6c:c7:41:4b:cb:
9b:43:ec:e0:00:a0:0b:88:34:d5:94:6e:60:4b:6d:
0e:41:7e:d7:d7:f0:ba:83:1d:50:b7:84:57:6f:c6:
22:ea:0f:5b:11:42:2a:0b:20:c9:49:a4:5e:a0:79:
07:e6:59:79:84:12:28:69:96:4d:b9:0e:10:f7:5c:
19:78:e1:63:b3:a0:5e:bd:f0:c6:94:fd:9a:be:00:
e5:87:b3:ad:9a:3f:9d:46:01:d0:d5:8a:19:31:4d:
64:44:f9:00:d9:9e:45:97:c1:69:32:c7:bd:a6:3b:
0a:e1:b6:14:49:ad:8e:8e:db:b1:04:4a:0c:e7:0a:
6c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:86:5D:3D:FA:A2:F4:A4:7F:43:A2:E8:86:AE:AD:88:0E:5C:98:4E
X509v3 Authority Key Identifier:
keyid:19:4E:32:A8:2E:98:F2:2D:93:9F:F9:98:44:55:81:3B:E2:BA:6A:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/f36b9c-7e37-4f18-8865-13e73f66397b/1/GU4yqC6Y8i2Tn_mYRFWBO-K6apE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:cd:2a:18:f0:80:9a:8e:c1:e7:53:e5:84:42:13:1a:51:2d:
51:0b:3a:c7:f4:2f:3a:b5:ec:c9:ff:fb:33:44:72:96:64:23:
6f:78:f3:8e:44:5d:92:19:93:74:b9:60:2e:f6:f9:5f:33:e7:
45:a1:8b:8a:ab:5d:4e:85:10:3e:9c:d0:6c:22:30:34:a8:1b:
b8:67:e7:0f:70:a6:e8:10:05:77:cf:1f:45:c7:98:b1:33:c5:
f1:e7:5a:79:57:e4:69:39:4d:3a:3d:b6:7e:63:9b:7e:6b:4c:
d1:c2:ed:94:33:1f:e6:af:84:19:1d:6e:83:2d:e1:99:dd:37:
82:60:58:a1:b8:92:1a:e6:85:2f:64:89:a1:b9:dc:ca:d7:d0:
c0:58:96:be:8d:87:2a:42:1d:9d:d2:7f:a6:bc:9e:a7:30:0a:
9d:d7:22:13:c9:1e:c1:3b:51:a2:b0:8c:3d:a9:79:f9:25:42:
67:5c:b8:40:55:cb:40:62:10:32:1f:cd:9e:a4:f0:f5:a5:dd:
99:ba:bc:72:98:5e:0b:d1:c3:d4:a2:a1:7b:2f:0d:81:6c:2e:
34:12:8e:48:61:8d:4f:a5:f7:f1:2a:68:8a:be:b3:9c:03:6a:
95:85:85:96:2c:cc:6a:2c:95:5d:f6:46:85:c7:ca:a4:56:51:
82:2b:83:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:56:51 2026 by rpki-client