Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.mft
File: GU4QqVb6UlFuj9O5MY6EpVOD1is.mft (raw, json)
Hash identifier: B7TDqu6A7+ItL8bGrETDkBxWlo1qyJeLfPtg2iFNdEY=
Subject key identifier: A8:BE:B8:D1:6E:50:F1:93:9F:C7:94:07:13:05:6D:F0:7C:46:07:4C
Authority key identifier: 19:4E:10:A9:56:FA:52:51:6E:8F:D3:B9:31:8E:84:A5:53:83:D6:2B
Certificate issuer: /CN=194e10a956fa52516e8fd3b9318e84a55383d62b
Certificate serial: 019DCFE33766879975A10298A7E51C1E3187
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GU4QqVb6UlFuj9O5MY6EpVOD1is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.mft
Manifest number: 0384
Signing time: Mon 27 Apr 2026 17:01:07 +0000
Manifest this update: Mon 27 Apr 2026 17:01:07 +0000
Manifest next update: Tue 28 Apr 2026 17:01:07 +0000
Files and hashes: 1: GU4QqVb6UlFuj9O5MY6EpVOD1is.crl (hash: Jgr4AYLm6wGy641OICi3u1pZZIe9ZMHPVc7E7pE3bA8=)
2: L6IkYa1mFzPLtO5LIkQRCCe9jl4.roa (hash: Ld5O0t2bBeigoCJRn7m3gG44EpWV7A+830bMM7yTOtE=)
3: oyVzd1gmTKT17jlRmnyP0pEMzFs.roa (hash: pAXNP3pz+CMOZzVz6ZojLzDHfBZZpShriq/ea0S+BHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.mft
rsync://rpki.ripe.net/repository/DEFAULT/GU4QqVb6UlFuj9O5MY6EpVOD1is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:e3:37:66:87:99:75:a1:02:98:a7:e5:1c:1e:31:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=194e10a956fa52516e8fd3b9318e84a55383d62b
Validity
Not Before: Apr 27 17:01:07 2026 GMT
Not After : Apr 28 17:01:07 2026 GMT
Subject: CN=a8beb8d16e50f1939fc7940713056df07c46074c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d8:20:4d:64:13:f7:55:35:e0:67:b9:6d:92:
8f:13:8c:f5:58:4c:a4:bc:08:39:b6:30:bb:fc:6a:
34:d9:cd:d3:10:92:14:b4:68:4e:17:eb:8e:b3:d8:
c0:66:ff:52:7a:af:3d:50:88:6b:af:79:aa:a6:84:
5a:6b:67:39:12:9f:a1:fc:09:24:3f:75:1f:8f:6c:
3e:31:04:45:9a:e3:d3:5d:a5:91:0d:ea:38:bf:59:
69:43:12:1d:7e:41:d8:e3:3b:83:84:84:62:9e:bd:
7c:af:15:16:f1:9c:3f:32:36:f5:75:cc:01:fe:f8:
54:8d:cc:e1:74:9b:5c:3b:aa:65:9a:bb:a4:b5:05:
86:8f:15:4c:c9:54:7e:98:2e:08:b6:1f:ce:79:3b:
9c:00:f6:74:51:b2:31:31:db:70:a4:70:f2:ab:82:
2d:4a:04:da:8b:36:c2:c8:2f:be:74:4d:ba:e8:31:
fc:0b:61:6a:bf:f8:8b:f6:fe:01:93:ae:19:5e:85:
38:0a:53:0d:f8:19:6a:e6:cb:a5:0b:eb:ae:7f:ca:
d1:e7:ac:ad:5c:c3:95:0d:2a:a8:ae:74:ee:33:c8:
f4:98:0d:1e:28:34:f6:44:be:bc:91:9e:89:d6:5e:
5a:85:d8:e5:b9:29:6d:eb:03:00:ea:1e:c6:e4:97:
8d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:BE:B8:D1:6E:50:F1:93:9F:C7:94:07:13:05:6D:F0:7C:46:07:4C
X509v3 Authority Key Identifier:
keyid:19:4E:10:A9:56:FA:52:51:6E:8F:D3:B9:31:8E:84:A5:53:83:D6:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GU4QqVb6UlFuj9O5MY6EpVOD1is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:fe:1c:49:4b:7f:d0:d9:f2:ec:03:5a:2a:34:83:5c:97:fb:
76:ab:a1:54:4c:4d:cd:fc:f4:7c:2d:1c:fd:38:c5:01:3d:48:
6e:95:c0:ff:18:f6:82:5f:2a:a3:fc:dc:f3:c5:78:f4:49:ef:
a8:84:97:b9:49:b6:cb:d8:51:88:27:14:31:6b:ff:0c:25:22:
87:ac:4c:37:0c:4f:7c:71:0f:d8:52:87:e8:ae:5a:86:bb:2d:
d8:24:5e:bc:1c:e3:ea:e2:cd:2f:0d:86:2c:ec:07:51:94:0c:
b6:75:0a:eb:1f:2c:a5:bb:63:7d:7f:54:94:8f:7b:0f:41:3a:
4b:5a:93:a5:ba:e0:5e:fa:bd:85:18:2e:82:f9:27:bf:ed:79:
76:e5:1e:db:57:4e:90:96:45:4b:9e:8d:bb:6a:20:00:f4:bc:
1c:78:bd:7f:41:c4:b6:3e:b8:3d:d0:6c:33:62:69:a0:2b:fb:
0a:2f:bb:98:05:05:b9:02:0a:a9:a5:0e:12:eb:8c:fa:7e:53:
49:c1:c2:56:c7:9e:03:37:ab:52:ad:e6:c4:bb:c5:56:7b:6c:
56:c5:26:45:e2:68:cb:84:c6:2a:42:e7:48:67:86:a3:f2:8c:
ea:7c:69:29:14:d8:6f:e8:d9:e1:70:be:78:ca:b0:70:eb:f0:
2f:a3:2a:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 03:47:56 2026 by rpki-client