Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/eaa787-a249-485f-b750-67062faef802/1/GvvUSIkW-uz94nr2PPmEUblnL_Y.mft
File: GvvUSIkW-uz94nr2PPmEUblnL_Y.mft (raw, json)
Hash identifier: yTis/0XXOCIoCSrXZS/TBp/n+6raLkO8/nWOq2DlYGo=
Subject key identifier: 7B:15:48:FE:E8:18:78:50:4D:BF:BD:ED:72:41:27:6E:42:03:3A:6C
Authority key identifier: 1A:FB:D4:48:89:16:FA:EC:FD:E2:7A:F6:3C:F9:84:51:B9:67:2F:F6
Certificate issuer: /CN=1afbd4488916faecfde27af63cf98451b9672ff6
Certificate serial: 019D1BA4E84A18B5E5956C3DDE0C81E130CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GvvUSIkW-uz94nr2PPmEUblnL_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/eaa787-a249-485f-b750-67062faef802/1/GvvUSIkW-uz94nr2PPmEUblnL_Y.mft
Manifest number: 24
Signing time: Mon 23 Mar 2026 17:01:25 +0000
Manifest this update: Mon 23 Mar 2026 17:01:25 +0000
Manifest next update: Tue 24 Mar 2026 17:01:25 +0000
Files and hashes: 1: GvvUSIkW-uz94nr2PPmEUblnL_Y.crl (hash: w5nczZFihARW2sixHnPwDRBAuY9TzQ2Lr5pJvTC+46Q=)
2: HIyIUJSBJUIjO3Nq8uFKc2lakKE.roa (hash: H/aTQCtUo9ZsKqh3rYnzy03zPhA2U/tPcSPNzM5Lhas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/eaa787-a249-485f-b750-67062faef802/1/GvvUSIkW-uz94nr2PPmEUblnL_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/eaa787-a249-485f-b750-67062faef802/1/GvvUSIkW-uz94nr2PPmEUblnL_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GvvUSIkW-uz94nr2PPmEUblnL_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 24 Mar 2026 17:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1b:a4:e8:4a:18:b5:e5:95:6c:3d:de:0c:81:e1:30:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1afbd4488916faecfde27af63cf98451b9672ff6
Validity
Not Before: Mar 23 17:01:25 2026 GMT
Not After : Mar 24 17:01:25 2026 GMT
Subject: CN=7b1548fee81878504dbfbded7241276e42033a6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:2d:4b:af:bb:fd:7e:dd:ef:79:95:e4:db:ee:
21:f0:c3:15:c1:62:da:b6:c6:71:b6:08:09:63:f7:
0b:a4:37:ff:65:0c:a1:20:3f:e9:33:a1:46:c0:05:
22:41:47:a2:fa:f7:ad:8a:aa:a9:26:39:fc:82:6f:
94:f7:70:da:52:aa:57:eb:46:ae:47:d5:5c:26:a1:
e4:bf:b3:31:7e:ea:b9:ec:57:17:fc:0d:e8:c0:d2:
df:83:a6:18:81:ca:c2:7a:9a:d0:b8:d6:15:3d:15:
cd:9d:9f:60:0d:74:b4:3f:ed:51:be:71:ee:9b:6e:
db:a8:86:85:d0:1b:be:f0:ac:45:02:41:3c:c4:a4:
5c:10:24:9e:aa:6c:f7:fe:d8:bc:7b:83:16:bd:4e:
77:f2:61:f6:ad:b8:74:af:a5:d0:fc:d1:5f:61:82:
2e:8e:a7:ce:b4:67:2f:4b:66:49:a8:62:ef:7f:a1:
78:8e:16:e5:62:cb:c0:be:f4:d9:3f:dc:41:9b:80:
5b:72:92:8e:9b:d4:58:8d:6c:49:95:38:dd:19:6e:
69:f6:67:11:8e:74:f3:8c:89:b4:79:b0:07:0b:67:
b9:7e:25:b0:4e:f2:0a:0d:4b:08:53:d1:77:1d:fb:
b5:71:fe:2c:7e:3b:da:01:63:49:ce:10:c6:d2:ed:
7a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:15:48:FE:E8:18:78:50:4D:BF:BD:ED:72:41:27:6E:42:03:3A:6C
X509v3 Authority Key Identifier:
keyid:1A:FB:D4:48:89:16:FA:EC:FD:E2:7A:F6:3C:F9:84:51:B9:67:2F:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GvvUSIkW-uz94nr2PPmEUblnL_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/eaa787-a249-485f-b750-67062faef802/1/GvvUSIkW-uz94nr2PPmEUblnL_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/eaa787-a249-485f-b750-67062faef802/1/GvvUSIkW-uz94nr2PPmEUblnL_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:e5:e8:03:85:36:41:e4:d1:05:0f:eb:7b:f8:cb:53:f9:69:
61:99:14:1c:db:c0:14:57:2a:51:ae:a7:4b:6e:6b:6e:3a:88:
0c:84:59:c6:8c:b7:08:34:56:68:3a:ee:21:7f:75:35:2a:d5:
2b:5e:2b:e2:b9:d2:91:26:64:5b:e2:d6:1f:0f:3e:d1:8d:6e:
c7:1f:2d:a2:87:51:ee:98:20:27:6d:36:f2:90:66:cf:4d:7b:
c0:48:c6:ec:67:65:04:af:72:8f:52:42:c1:97:bb:c7:b2:cb:
2a:95:c4:50:cd:6a:43:0d:8d:bc:9d:b5:af:38:8f:77:cc:a1:
57:ef:36:04:54:6e:79:fd:c9:95:c2:71:0f:5a:25:82:90:cf:
a0:73:10:ca:d3:26:36:98:6c:cc:55:f9:96:de:0f:22:1d:e1:
0f:43:f5:20:93:7b:27:b0:19:ce:7b:54:c5:01:d5:84:0c:ec:
18:ab:17:a3:fe:63:4b:2c:40:ae:f5:b5:61:e1:67:bf:9a:c3:
9c:34:48:9b:9c:84:38:df:f8:e5:46:ba:db:2f:76:df:fa:54:
c9:ee:32:2b:fe:ee:06:82:6a:65:c5:05:a3:94:be:a2:d5:1c:
12:f3:9b:b9:d9:99:2f:ee:07:d4:0a:c9:57:96:2a:69:c7:8c:
7f:9a:d3:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0bpOhKGLXllWw93gyB4TDKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhZmJkNDQ4ODkxNmZhZWNmZGUyN2FmNjNjZjk4NDUxYjk2
NzJmZjYwHhcNMjYwMzIzMTcwMTI1WhcNMjYwMzI0MTcwMTI1WjAzMTEwLwYDVQQD
Eyg3YjE1NDhmZWU4MTg3ODUwNGRiZmJkZWQ3MjQxMjc2ZTQyMDMzYTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8y1Lr7v9ft3veZXk2+4h8MMVwWLa
tsZxtggJY/cLpDf/ZQyhID/pM6FGwAUiQUei+vetiqqpJjn8gm+U93DaUqpX60au
R9VcJqHkv7Mxfuq57FcX/A3owNLfg6YYgcrCeprQuNYVPRXNnZ9gDXS0P+1RvnHu
m27bqIaF0Bu+8KxFAkE8xKRcECSeqmz3/ti8e4MWvU538mH2rbh0r6XQ/NFfYYIu
jqfOtGcvS2ZJqGLvf6F4jhblYsvAvvTZP9xBm4BbcpKOm9RYjWxJlTjdGW5p9mcR
jnTzjIm0ebAHC2e5fiWwTvIKDUsIU9F3Hfu1cf4sfjvaAWNJzhDG0u16AwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHsVSP7oGHhQTb+97XJBJ25CAzpsMB8GA1UdIwQY
MBaAFBr71EiJFvrs/eJ69jz5hFG5Zy/2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3Z2VVNJa1ctdXo5NG5yMlBQbUVVYmxuTF9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9lYWE3ODctYTI0OS00ODVmLWI3NTAt
NjcwNjJmYWVmODAyLzEvR3Z2VVNJa1ctdXo5NG5yMlBQbUVVYmxuTF9ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9lYWE3ODctYTI0OS00ODVmLWI3NTAtNjcwNjJmYWVmODAy
LzEvR3Z2VVNJa1ctdXo5NG5yMlBQbUVVYmxuTF9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALuXoA4U2
QeTRBQ/re/jLU/lpYZkUHNvAFFcqUa6nS25rbjqIDIRZxoy3CDRWaDruIX91NSrV
K14r4rnSkSZkW+LWHw8+0Y1uxx8toodR7pggJ2028pBmz017wEjG7GdlBK9yj1JC
wZe7x7LLKpXEUM1qQw2NvJ21rziPd8yhV+82BFRuef3JlcJxD1olgpDPoHMQytMm
NphszFX5lt4PIh3hD0P1IJN7J7AZzntUxQHVhAzsGKsXo/5jSyxArvW1YeFnv5rD
nDRIm5yEON/45Ua62y923/pUye4yK/7uBoJqZcUFo5S+otUcEvObudmZL+4H1ArJ
V5YqaceMf5rTPg==
-----END CERTIFICATE-----
Generated at Tue Mar 24 02:50:58 2026 by rpki-client