Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.mft
File: GU4QqVb6UlFuj9O5MY6EpVOD1is.mft (raw, json)
Hash identifier: sYrQuMFfpvnDwY19pPG7DmOdntbUrtBjSEiLScZ8nto=
Subject key identifier: 45:44:7E:7E:31:DB:2C:C8:16:C4:6A:48:C8:20:50:B3:92:A6:5F:10
Authority key identifier: 19:4E:10:A9:56:FA:52:51:6E:8F:D3:B9:31:8E:84:A5:53:83:D6:2B
Certificate issuer: /CN=194e10a956fa52516e8fd3b9318e84a55383d62b
Certificate serial: 019CE635E1C4A20E64614E8FB41148874F22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GU4QqVb6UlFuj9O5MY6EpVOD1is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.mft
Manifest number: 030B
Signing time: Fri 13 Mar 2026 08:00:16 +0000
Manifest this update: Fri 13 Mar 2026 08:00:16 +0000
Manifest next update: Sat 14 Mar 2026 08:00:16 +0000
Files and hashes: 1: GU4QqVb6UlFuj9O5MY6EpVOD1is.crl (hash: OaebE+QOLhMYZw7Rm0WBBI9CgYdz823kaoWci0yrCvE=)
2: L6IkYa1mFzPLtO5LIkQRCCe9jl4.roa (hash: Ld5O0t2bBeigoCJRn7m3gG44EpWV7A+830bMM7yTOtE=)
3: oyVzd1gmTKT17jlRmnyP0pEMzFs.roa (hash: pAXNP3pz+CMOZzVz6ZojLzDHfBZZpShriq/ea0S+BHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.mft
rsync://rpki.ripe.net/repository/DEFAULT/GU4QqVb6UlFuj9O5MY6EpVOD1is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 08:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:35:e1:c4:a2:0e:64:61:4e:8f:b4:11:48:87:4f:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=194e10a956fa52516e8fd3b9318e84a55383d62b
Validity
Not Before: Mar 13 08:00:16 2026 GMT
Not After : Mar 14 08:00:16 2026 GMT
Subject: CN=45447e7e31db2cc816c46a48c82050b392a65f10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:2d:af:b6:37:6c:6a:cf:6b:01:f6:60:d7:39:
52:10:ed:58:65:4c:32:35:27:27:ca:09:62:5f:9b:
82:5b:02:70:bb:61:dd:5a:df:43:9a:cb:07:8a:74:
57:e0:6b:79:f4:f5:c9:56:2c:6c:a0:25:58:45:4d:
1c:14:b5:c4:f7:11:ac:04:c1:61:30:91:fb:fe:48:
2a:a2:3c:4e:26:52:ca:7f:00:13:5e:6e:f0:df:7a:
18:8d:01:fb:f6:08:d8:e2:d3:cc:7a:b0:ee:59:e7:
ca:b5:57:b1:62:ab:d6:5f:13:0f:aa:38:1c:84:68:
c2:27:de:b5:93:03:d7:8f:1d:1b:24:01:2c:cc:53:
91:75:cc:d1:2a:49:2f:35:25:13:5c:2a:27:b1:48:
80:f7:45:e2:ae:80:eb:fb:f9:68:3c:25:8e:7a:b3:
ff:cd:7c:23:1c:cb:30:2f:af:af:06:f7:5c:06:7e:
d7:cf:e5:42:32:3c:e3:ae:33:b3:f7:27:54:16:c6:
d2:01:cc:71:27:f2:c3:74:86:ca:d5:64:fe:0d:10:
6c:25:18:e1:4b:6c:25:63:38:d8:36:10:3a:4f:0b:
bb:8c:04:30:a6:b6:28:e2:89:68:5a:1e:99:05:a5:
e2:3c:61:18:3b:e9:1a:dc:04:c9:77:c2:ee:d6:b7:
a6:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:44:7E:7E:31:DB:2C:C8:16:C4:6A:48:C8:20:50:B3:92:A6:5F:10
X509v3 Authority Key Identifier:
keyid:19:4E:10:A9:56:FA:52:51:6E:8F:D3:B9:31:8E:84:A5:53:83:D6:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GU4QqVb6UlFuj9O5MY6EpVOD1is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:9e:0e:38:c5:22:30:51:d0:e9:22:3e:0e:8f:be:3d:69:eb:
e9:44:49:1b:ab:cd:72:40:ed:c0:75:98:f6:9e:d5:85:8b:c9:
08:6d:38:ef:14:20:81:c9:7b:32:99:aa:7b:8c:5c:ae:b2:f0:
da:55:c2:46:96:1c:2c:3d:ed:29:41:ac:7d:ec:d9:3f:fd:ff:
c7:63:fa:54:f6:d6:59:1d:0d:84:ad:7f:fe:9a:e3:a7:b7:92:
9a:f0:cc:0e:c2:15:73:f3:93:a4:f2:e6:c2:3b:3f:87:b1:34:
5a:76:7a:a4:43:7a:a0:f1:d3:91:92:37:d3:58:f9:55:02:cd:
d0:8e:af:b4:9c:d7:16:c3:2c:12:73:70:df:dd:3e:f2:08:0d:
bf:9e:7e:47:74:f1:94:db:29:a6:fa:4f:db:89:f8:ab:e6:de:
d2:50:53:f2:1e:d0:04:30:b6:f5:1c:d4:54:ac:6e:c3:65:fc:
fc:b2:90:f5:9c:47:4c:67:8e:08:8b:11:13:e9:a4:8d:e5:af:
8b:15:fb:d8:50:9a:6d:6a:53:e0:4f:a8:c6:56:e3:af:9c:99:
e5:59:b1:7f:7c:7e:44:02:93:6f:d7:ef:e5:e2:76:08:8f:b1:
54:5d:15:26:71:ef:aa:9d:88:4d:74:9d:30:85:8f:78:2a:e3:
d1:dc:bc:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 13:45:49 2026 by rpki-client