Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/eaa787-a249-485f-b750-67062faef802/1/GvvUSIkW-uz94nr2PPmEUblnL_Y.mft
File: GvvUSIkW-uz94nr2PPmEUblnL_Y.mft (raw, json)
Hash identifier: 7eUIC48sX4CCOjTKNKF+lDgjYchw2M2ozW+CyLMxzhU=
Subject key identifier: 76:1B:5B:9E:8C:D4:2D:95:CB:BC:8D:08:3A:47:1C:FB:D0:79:AB:BF
Authority key identifier: 1A:FB:D4:48:89:16:FA:EC:FD:E2:7A:F6:3C:F9:84:51:B9:67:2F:F6
Certificate issuer: /CN=1afbd4488916faecfde27af63cf98451b9672ff6
Certificate serial: 019E20239EAFDD50BAB00F5A4C959BE3AE76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GvvUSIkW-uz94nr2PPmEUblnL_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/eaa787-a249-485f-b750-67062faef802/1/GvvUSIkW-uz94nr2PPmEUblnL_Y.mft
Manifest number: AC
Signing time: Wed 13 May 2026 07:01:05 +0000
Manifest this update: Wed 13 May 2026 07:01:05 +0000
Manifest next update: Thu 14 May 2026 07:01:05 +0000
Files and hashes: 1: GvvUSIkW-uz94nr2PPmEUblnL_Y.crl (hash: F+WxqFQUuPJtr65Hv5tybkPQ/uDlTuk12u6WEDqm/Bw=)
2: LxeehfG4ABL-Mjofqe-m1zgbRF8.roa (hash: G0fIhVP6EAMZqllSYGxKMKH7WM5clIvSUyRbvtMaMHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/eaa787-a249-485f-b750-67062faef802/1/GvvUSIkW-uz94nr2PPmEUblnL_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/eaa787-a249-485f-b750-67062faef802/1/GvvUSIkW-uz94nr2PPmEUblnL_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GvvUSIkW-uz94nr2PPmEUblnL_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:23:9e:af:dd:50:ba:b0:0f:5a:4c:95:9b:e3:ae:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1afbd4488916faecfde27af63cf98451b9672ff6
Validity
Not Before: May 13 07:01:05 2026 GMT
Not After : May 14 07:01:05 2026 GMT
Subject: CN=761b5b9e8cd42d95cbbc8d083a471cfbd079abbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:15:65:2c:78:a4:6d:3e:ad:a9:3e:51:99:10:
4e:6d:b7:54:d6:aa:cb:99:cc:24:7f:34:9f:be:8e:
92:32:aa:93:37:f7:bb:8d:4a:ed:68:3a:9d:99:4f:
0c:5f:a5:2b:d2:d1:61:77:d4:13:47:67:63:d8:f7:
0f:1d:6b:f7:7d:ed:79:df:73:82:63:21:a0:6a:8f:
91:06:f2:1c:39:a8:47:e2:12:86:76:7c:2f:02:8b:
03:8d:48:78:8e:ef:cd:a4:b6:d8:00:ea:be:ca:5b:
36:c8:42:17:95:1e:30:1d:ac:8a:a3:b3:45:6b:50:
46:ae:c5:e3:48:17:3c:d5:77:c4:0f:22:15:b5:f4:
89:0d:86:8e:a8:9d:3b:b9:10:cd:d2:56:be:aa:c4:
c8:3a:23:26:89:eb:06:ed:a1:0c:4f:9c:cc:1e:2e:
bc:c0:3f:69:28:3b:32:37:0e:f7:bd:1b:76:d8:08:
c0:55:2e:c2:2c:a9:9e:8c:1f:fc:f7:7b:74:21:aa:
20:33:72:fa:1b:1c:2d:41:f4:d2:f0:89:f7:17:3f:
a6:ff:e5:0c:69:db:a0:b7:dc:ad:f3:ad:8e:48:c4:
92:ed:fa:ab:b0:71:79:b7:5b:21:83:2a:8a:b4:48:
1e:2f:dd:6b:2f:a4:1c:cf:95:de:cd:3c:87:d5:19:
e5:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:1B:5B:9E:8C:D4:2D:95:CB:BC:8D:08:3A:47:1C:FB:D0:79:AB:BF
X509v3 Authority Key Identifier:
keyid:1A:FB:D4:48:89:16:FA:EC:FD:E2:7A:F6:3C:F9:84:51:B9:67:2F:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GvvUSIkW-uz94nr2PPmEUblnL_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/eaa787-a249-485f-b750-67062faef802/1/GvvUSIkW-uz94nr2PPmEUblnL_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/eaa787-a249-485f-b750-67062faef802/1/GvvUSIkW-uz94nr2PPmEUblnL_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:a4:87:a4:94:1a:cc:49:7b:ed:03:42:94:aa:63:16:64:5e:
b2:54:38:4f:30:0e:b6:17:7c:ea:a9:99:3f:f8:8a:a8:b3:33:
99:79:4f:03:c2:a1:4c:a3:10:f8:d0:c0:78:6a:18:37:65:a7:
49:c2:07:fa:b8:b8:fd:d0:05:71:49:02:7c:d9:f0:da:58:c5:
0b:6f:51:42:91:b9:60:02:3f:2e:e6:c3:0e:90:56:87:08:75:
d8:ed:d0:43:ff:3f:63:40:52:e9:be:61:69:1e:fc:e1:5b:79:
a3:e0:aa:0a:a1:0c:a9:85:17:ab:51:d0:79:c8:f7:fe:eb:0c:
8e:d8:e1:aa:4b:a1:f0:49:32:7a:7f:58:8f:88:3e:68:96:5f:
1b:4f:22:9d:a1:a6:10:5d:69:87:6e:64:2b:0a:73:a4:58:88:
35:38:7a:5a:9d:83:4d:aa:36:5e:bc:3e:1b:f4:3c:fb:22:80:
a5:43:27:d1:d5:e0:b0:08:17:b5:2e:71:c6:98:52:f7:3d:f0:
fc:d6:61:e2:5a:7b:44:d3:54:11:f3:a4:3c:58:9d:c4:b2:30:
3a:ed:30:2d:2f:78:c5:75:33:be:11:ce:ee:7d:65:0f:cd:33:
8e:e6:a1:ae:ce:43:26:06:7a:91:ae:fe:03:9b:84:27:ac:5e:
e4:3b:e7:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:08:27 2026 by rpki-client