Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.mft
File: GU4QqVb6UlFuj9O5MY6EpVOD1is.mft (raw, json)
Hash identifier: yTOwXDSStO91i998Ju0KKW4p/+5BUvmQDh2WAbo0+4w=
Subject key identifier: 0D:B4:0B:F6:21:DE:AB:87:EB:3D:2E:F7:7A:61:97:05:8D:85:42:C7
Authority key identifier: 19:4E:10:A9:56:FA:52:51:6E:8F:D3:B9:31:8E:84:A5:53:83:D6:2B
Certificate issuer: /CN=194e10a956fa52516e8fd3b9318e84a55383d62b
Certificate serial: 019FA14DB7DD6DC3815B7B5FF2AC5A24B0F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GU4QqVb6UlFuj9O5MY6EpVOD1is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.mft
Manifest number: 0475
Signing time: Mon 27 Jul 2026 02:00:52 +0000
Manifest this update: Mon 27 Jul 2026 02:00:52 +0000
Manifest next update: Tue 28 Jul 2026 02:00:52 +0000
Files and hashes: 1: GU4QqVb6UlFuj9O5MY6EpVOD1is.crl (hash: 2+r9NpQImyb1ePzghn9x8P7+Y3TSRosbBKf6B8nhTPM=)
2: L6IkYa1mFzPLtO5LIkQRCCe9jl4.roa (hash: Ld5O0t2bBeigoCJRn7m3gG44EpWV7A+830bMM7yTOtE=)
3: oyVzd1gmTKT17jlRmnyP0pEMzFs.roa (hash: pAXNP3pz+CMOZzVz6ZojLzDHfBZZpShriq/ea0S+BHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.mft
rsync://rpki.ripe.net/repository/DEFAULT/GU4QqVb6UlFuj9O5MY6EpVOD1is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 02:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:4d:b7:dd:6d:c3:81:5b:7b:5f:f2:ac:5a:24:b0:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=194e10a956fa52516e8fd3b9318e84a55383d62b
Validity
Not Before: Jul 27 02:00:52 2026 GMT
Not After : Jul 28 02:00:52 2026 GMT
Subject: CN=0db40bf621deab87eb3d2ef77a6197058d8542c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:75:f1:86:f4:57:01:a2:64:d3:ef:5b:e0:d0:
71:ac:7c:52:76:01:d5:3e:d4:25:7e:4e:ce:df:f2:
8b:bc:48:4d:00:6e:d6:f2:8e:7b:df:17:24:f8:c2:
7c:7a:42:c1:4d:39:36:6e:59:2b:81:a2:77:2f:f4:
3c:65:79:54:f4:a1:c6:de:3d:62:63:58:b0:44:0d:
9f:5a:23:f3:09:a7:79:5c:44:65:55:ab:b6:82:58:
9b:55:ec:b6:0d:99:f6:a5:c0:ce:75:18:7e:f9:40:
50:d5:41:3a:eb:70:17:7c:e6:56:2c:63:42:6d:7c:
1f:cd:60:ff:f7:49:3d:bc:a4:68:eb:81:ca:4d:7a:
8d:fd:ae:d4:1a:8a:22:43:43:52:33:c3:5e:5e:7e:
92:a7:77:90:b8:42:2a:61:c3:58:e4:59:26:41:bb:
d1:39:87:84:10:27:ff:61:7c:a3:52:0b:e4:d8:06:
c9:ad:0d:f8:c0:e6:58:ac:47:ee:9d:79:1f:96:00:
40:de:d5:0d:50:1d:0c:00:d3:bf:64:00:0c:8b:00:
c6:ab:90:d7:b2:0e:9c:ac:08:11:5d:84:e2:98:63:
5d:97:e4:e4:c9:b5:8b:c9:53:dc:8f:a1:4b:f2:b4:
04:aa:16:1b:3f:2e:34:e3:e0:ff:76:f3:76:38:55:
ea:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:B4:0B:F6:21:DE:AB:87:EB:3D:2E:F7:7A:61:97:05:8D:85:42:C7
X509v3 Authority Key Identifier:
keyid:19:4E:10:A9:56:FA:52:51:6E:8F:D3:B9:31:8E:84:A5:53:83:D6:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GU4QqVb6UlFuj9O5MY6EpVOD1is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:4e:aa:56:ff:51:7a:a4:0e:95:5c:99:6c:8b:66:31:de:7f:
41:04:1c:1f:f3:26:f9:fb:4a:79:4c:4e:30:df:d3:2d:9c:21:
d8:a0:85:b7:5e:e0:f5:d9:3a:cb:a2:98:cf:db:6a:2b:c7:ce:
98:0d:51:11:24:c6:b1:4f:7c:f2:03:af:54:c4:33:a3:80:aa:
08:c6:0a:c7:bb:b1:b4:63:44:d4:10:f5:53:dd:42:4a:24:19:
67:ef:ba:c6:1c:db:64:07:5b:cf:00:81:00:1c:6a:e9:24:10:
6d:d0:f5:a0:06:57:f8:56:3c:c2:ad:34:ed:4c:63:ab:75:bc:
e4:a4:ce:b2:6a:8d:10:de:a2:9d:eb:0a:94:da:54:13:e3:9b:
a5:6b:45:4b:c1:a6:f5:fe:42:99:a3:db:35:66:2e:3d:35:49:
de:be:00:4f:b0:e1:24:7d:a2:0e:a3:43:ea:e1:09:5f:bf:26:
69:5c:f4:40:1b:b3:ea:5d:38:25:73:93:f2:28:de:60:aa:9c:
0b:0c:97:ec:d7:6c:c6:23:4f:26:3d:62:01:3d:8f:32:87:c8:
98:8c:b1:5f:5b:6f:7d:cd:e3:e7:4a:df:f0:53:59:52:bb:38:
76:4e:08:6e:8b:76:cb:cb:6a:8a:b5:ee:57:5e:36:e8:d1:fe:
6c:fc:e6:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+hTbfdbcOBW3tf8qxaJLD2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5NGUxMGE5NTZmYTUyNTE2ZThmZDNiOTMxOGU4NGE1NTM4
M2Q2MmIwHhcNMjYwNzI3MDIwMDUyWhcNMjYwNzI4MDIwMDUyWjAzMTEwLwYDVQQD
EygwZGI0MGJmNjIxZGVhYjg3ZWIzZDJlZjc3YTYxOTcwNThkODU0MmM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnXxhvRXAaJk0+9b4NBxrHxSdgHV
PtQlfk7O3/KLvEhNAG7W8o573xck+MJ8ekLBTTk2blkrgaJ3L/Q8ZXlU9KHG3j1i
Y1iwRA2fWiPzCad5XERlVau2glibVey2DZn2pcDOdRh++UBQ1UE663AXfOZWLGNC
bXwfzWD/90k9vKRo64HKTXqN/a7UGooiQ0NSM8NeXn6Sp3eQuEIqYcNY5FkmQbvR
OYeEECf/YXyjUgvk2AbJrQ34wOZYrEfunXkflgBA3tUNUB0MANO/ZAAMiwDGq5DX
sg6crAgRXYTimGNdl+TkybWLyVPcj6FL8rQEqhYbPy404+D/dvN2OFXqfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA20C/Yh3quH6z0u93phlwWNhULHMB8GA1UdIwQY
MBaAFBlOEKlW+lJRbo/TuTGOhKVTg9YrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1U0UXFWYjZVbEZ1ajlPNU1ZNkVwVk9EMWlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9kMmVmNWYtMmFlOS00ODZhLThiZDct
NTFmMDc3ZjMwZDNmLzEvR1U0UXFWYjZVbEZ1ajlPNU1ZNkVwVk9EMWlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi9kMmVmNWYtMmFlOS00ODZhLThiZDctNTFmMDc3ZjMwZDNm
LzEvR1U0UXFWYjZVbEZ1ajlPNU1ZNkVwVk9EMWlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOk6qVv9R
eqQOlVyZbItmMd5/QQQcH/Mm+ftKeUxOMN/TLZwh2KCFt17g9dk6y6KYz9tqK8fO
mA1RESTGsU988gOvVMQzo4CqCMYKx7uxtGNE1BD1U91CSiQZZ++6xhzbZAdbzwCB
ABxq6SQQbdD1oAZX+FY8wq007Uxjq3W85KTOsmqNEN6inesKlNpUE+ObpWtFS8Gm
9f5CmaPbNWYuPTVJ3r4AT7DhJH2iDqND6uEJX78maVz0QBuz6l04JXOT8ijeYKqc
CwyX7NdsxiNPJj1iAT2PMofImIyxX1tvfc3j50rf8FNZUrs4dk4Ibot2y8tqirXu
V1426NH+bPzmgw==
-----END CERTIFICATE-----
Generated at Mon Jul 27 11:34:49 2026 by rpki-client