Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.mft
File: GU4QqVb6UlFuj9O5MY6EpVOD1is.mft (raw, json)
Hash identifier: 8Afj92Ndiu0+BBcxv0XHwSf0LtP9fMlELkN3q+EP4/k=
Subject key identifier: A0:9A:4F:60:F4:7B:08:C8:AB:57:FF:55:E3:36:84:C1:9B:06:AA:7F
Authority key identifier: 19:4E:10:A9:56:FA:52:51:6E:8F:D3:B9:31:8E:84:A5:53:83:D6:2B
Certificate issuer: /CN=194e10a956fa52516e8fd3b9318e84a55383d62b
Certificate serial: 01A08AFA0EACD274B89F1E403C3A04C25024
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GU4QqVb6UlFuj9O5MY6EpVOD1is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.mft
Manifest number: 04EE
Signing time: Thu 10 Sep 2026 11:00:38 +0000
Manifest this update: Thu 10 Sep 2026 11:00:38 +0000
Manifest next update: Fri 11 Sep 2026 11:00:38 +0000
Files and hashes: 1: GU4QqVb6UlFuj9O5MY6EpVOD1is.crl (hash: phRsC1+OCl/WIhZZsty8LicQkBCXXOzcm9/C6FzCUeI=)
2: L6IkYa1mFzPLtO5LIkQRCCe9jl4.roa (hash: Ld5O0t2bBeigoCJRn7m3gG44EpWV7A+830bMM7yTOtE=)
3: oyVzd1gmTKT17jlRmnyP0pEMzFs.roa (hash: pAXNP3pz+CMOZzVz6ZojLzDHfBZZpShriq/ea0S+BHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.mft
rsync://rpki.ripe.net/repository/DEFAULT/GU4QqVb6UlFuj9O5MY6EpVOD1is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 11:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:fa:0e:ac:d2:74:b8:9f:1e:40:3c:3a:04:c2:50:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=194e10a956fa52516e8fd3b9318e84a55383d62b
Validity
Not Before: Sep 10 11:00:38 2026 GMT
Not After : Sep 11 11:00:38 2026 GMT
Subject: CN=a09a4f60f47b08c8ab57ff55e33684c19b06aa7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:36:72:6f:1b:d8:7c:60:bf:82:98:69:92:87:
e2:ec:a6:fb:67:5d:4b:8c:c9:ef:21:db:a9:f3:d9:
e2:c3:a3:54:4e:0e:03:65:c7:d2:dc:70:b7:64:83:
33:d9:86:5e:fd:79:96:1a:b8:8c:4b:e3:5b:74:61:
50:f8:eb:be:26:f2:fc:db:99:18:f5:92:bc:f7:fa:
49:c3:5f:35:49:de:2e:a5:6d:2c:16:9f:42:c3:6f:
a9:18:f7:ca:75:4e:35:98:e3:07:fd:ab:f4:9c:e1:
d3:05:96:fa:cc:df:bb:c9:25:b6:fb:f2:5d:bb:db:
a2:81:99:f6:ed:af:98:0a:2e:5b:ea:0a:4f:53:b1:
d6:0e:db:dd:03:e1:d4:b3:3b:f5:13:78:82:71:73:
fe:00:86:ca:3f:5e:27:2f:89:d2:b7:77:d8:2c:e9:
14:48:57:18:c5:d6:c5:bf:5a:a3:17:37:b6:9b:f8:
92:5d:76:2f:60:8a:e7:08:1f:78:9e:1f:26:24:58:
80:ba:ac:d8:ca:68:ce:5f:01:a3:6d:9b:52:2c:6b:
23:be:14:54:7d:88:d6:38:5a:0e:75:8c:6e:b9:18:
1f:4d:07:ba:81:3d:05:db:5d:11:ca:32:76:1e:4c:
7e:0d:f6:46:9e:7e:ac:00:01:61:e0:83:68:1d:e4:
60:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:9A:4F:60:F4:7B:08:C8:AB:57:FF:55:E3:36:84:C1:9B:06:AA:7F
X509v3 Authority Key Identifier:
keyid:19:4E:10:A9:56:FA:52:51:6E:8F:D3:B9:31:8E:84:A5:53:83:D6:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GU4QqVb6UlFuj9O5MY6EpVOD1is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:32:0c:13:7e:64:18:97:aa:96:6c:e6:e6:9a:58:15:48:b4:
61:3e:68:81:40:e0:24:46:58:ba:81:7b:94:50:dd:aa:16:2f:
27:21:d3:1d:db:da:68:2a:fe:2b:c9:d7:3b:67:81:b0:95:6b:
a5:96:c3:80:d8:5c:06:3e:0b:bd:b4:2b:8f:be:63:5c:66:f2:
94:11:31:d7:cb:22:ba:df:5c:f4:68:94:dd:f0:6d:5e:3f:76:
2c:eb:46:80:28:a6:36:e4:54:2f:a7:9e:1b:a8:af:ce:b0:a4:
a7:23:4c:f4:52:05:5f:9d:3b:c6:4d:5c:ba:e4:85:e3:bc:33:
27:04:c3:33:8a:c7:c3:66:ef:5c:cd:ea:f8:15:6b:f6:35:cf:
a8:31:e7:a5:ea:1a:33:01:2d:3b:84:7c:14:93:ca:5f:21:2f:
25:43:dd:3b:8f:0f:cf:4e:c3:83:62:2c:16:67:7b:de:ad:eb:
fb:a5:d6:34:24:0a:7c:77:d7:2f:4a:cc:4c:9b:12:36:dd:14:
55:8f:1c:ec:05:8f:35:51:c7:ea:54:0a:e3:47:8c:ae:88:0f:
82:85:ef:fe:c9:56:71:bc:99:33:38:18:e6:f0:36:26:58:7c:
db:96:e7:92:4b:bb:db:f7:53:2d:20:b3:b5:08:e5:9b:5e:21:
6e:a5:e7:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:39:00 2026 by rpki-client