Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.mft
File: GU4QqVb6UlFuj9O5MY6EpVOD1is.mft (raw, json)
Hash identifier: Q2Z5LXEPReLXT4vYe1iLSUMhDYGpshmJHu5ZBeUDqMs=
Subject key identifier: B0:3B:0B:63:36:8A:AD:25:0B:8A:82:46:50:FE:18:8D:0A:79:9B:57
Authority key identifier: 19:4E:10:A9:56:FA:52:51:6E:8F:D3:B9:31:8E:84:A5:53:83:D6:2B
Certificate issuer: /CN=194e10a956fa52516e8fd3b9318e84a55383d62b
Certificate serial: 01A17C603AAB8C8263258A3879A936036D77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GU4QqVb6UlFuj9O5MY6EpVOD1is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.mft
Manifest number: 056B
Signing time: Tue 27 Oct 2026 08:00:43 +0000
Manifest this update: Tue 27 Oct 2026 08:00:43 +0000
Manifest next update: Wed 28 Oct 2026 08:00:43 +0000
Files and hashes: 1: GU4QqVb6UlFuj9O5MY6EpVOD1is.crl (hash: Hix2QpH62/xMMgXshMCngvV3SWeRbuqT6jv9krjceOI=)
2: L6IkYa1mFzPLtO5LIkQRCCe9jl4.roa (hash: Ld5O0t2bBeigoCJRn7m3gG44EpWV7A+830bMM7yTOtE=)
3: oyVzd1gmTKT17jlRmnyP0pEMzFs.roa (hash: pAXNP3pz+CMOZzVz6ZojLzDHfBZZpShriq/ea0S+BHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.mft
rsync://rpki.ripe.net/repository/DEFAULT/GU4QqVb6UlFuj9O5MY6EpVOD1is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:60:3a:ab:8c:82:63:25:8a:38:79:a9:36:03:6d:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=194e10a956fa52516e8fd3b9318e84a55383d62b
Validity
Not Before: Oct 27 08:00:43 2026 GMT
Not After : Oct 28 08:00:43 2026 GMT
Subject: CN=b03b0b63368aad250b8a824650fe188d0a799b57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9f:05:cb:f3:f9:fb:09:b6:37:5a:ff:32:55:
22:26:eb:0c:be:6d:5f:d8:32:81:a7:1f:36:2c:a6:
18:de:10:4a:56:ec:93:c8:9b:13:63:17:5f:6b:36:
d6:69:d0:77:63:17:79:58:cd:91:14:52:1b:c4:cd:
fd:56:54:ad:6f:91:ba:60:c9:11:1b:c4:42:e5:e2:
b6:3b:46:9e:82:e1:d3:63:fb:6b:4f:31:c4:63:8c:
53:ec:0a:75:74:58:c9:d4:66:dc:07:dd:90:bc:cd:
df:b6:0a:a1:a8:f2:5f:53:19:12:27:bc:b3:b3:0e:
ae:6f:a6:85:7d:17:bd:ac:9c:61:da:3c:04:fa:85:
e1:5f:9d:e6:f1:d2:be:03:b3:fc:05:6e:5c:04:08:
dc:bc:b8:61:02:0d:f9:38:3c:ea:3b:a4:ba:44:be:
13:9d:bf:33:70:88:72:cf:d3:75:63:a0:a1:b7:04:
b6:02:03:52:69:5e:8a:4f:2c:9b:8b:8e:49:26:b8:
a0:7e:9d:d2:20:4c:7c:d7:b2:e0:eb:bb:54:dc:dd:
32:90:1d:34:c8:ae:e5:3f:22:fb:6d:c7:30:9e:b6:
26:7c:73:f0:9f:fb:f3:3d:2b:49:33:ce:b0:3e:88:
48:db:2d:b1:47:04:78:8f:38:5c:36:fe:8f:6b:3c:
6f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:3B:0B:63:36:8A:AD:25:0B:8A:82:46:50:FE:18:8D:0A:79:9B:57
X509v3 Authority Key Identifier:
keyid:19:4E:10:A9:56:FA:52:51:6E:8F:D3:B9:31:8E:84:A5:53:83:D6:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GU4QqVb6UlFuj9O5MY6EpVOD1is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:15:b0:23:dc:14:b5:3c:37:47:98:d3:f3:dc:df:48:20:66:
f0:a0:26:33:54:af:c3:04:47:8f:02:4f:85:9d:d3:6f:bb:81:
48:1a:75:7d:33:22:92:92:33:ac:62:da:1c:c8:35:c8:47:ae:
13:ed:11:8e:40:2e:31:c7:cf:55:d8:f1:3d:94:a0:c4:51:74:
2e:bf:fb:28:d4:6c:7a:f1:e3:45:40:94:68:b2:4a:08:43:56:
c1:f7:d3:f7:2e:6b:b2:6d:df:05:6b:e1:19:db:24:5d:5a:b5:
55:c7:9c:8b:8c:ff:91:29:62:09:6f:5c:4a:01:f0:71:36:a8:
1f:96:5c:75:94:f8:4e:93:e6:94:16:12:6d:52:86:b7:38:dc:
8f:75:90:57:27:93:a2:db:b7:47:94:bc:dd:5f:43:25:65:2e:
06:13:bc:4b:0a:68:0b:23:23:5f:27:d2:6e:fb:27:28:8a:7f:
8d:8d:9a:08:f6:a6:f2:14:93:43:b0:01:86:64:b0:63:47:3a:
39:fe:70:70:47:38:41:f0:a3:f4:73:70:2e:47:9f:13:06:85:
42:02:29:35:bc:5d:7a:cd:f5:7b:14:09:87:38:f6:58:bc:ee:
3d:bc:c5:a9:1c:5a:61:f6:e3:27:0e:49:87:cd:21:d9:b8:57:
a5:b7:e2:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:23:50 2026 by rpki-client