Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/GUKBeimILUM78buOvFmy_yVugD8.mft
File: GUKBeimILUM78buOvFmy_yVugD8.mft (raw, json)
Hash identifier: epFWpsfvNaJ7uZ0yiUfPC9llyupBY9usAV1tBas6HgI=
Subject key identifier: EF:2C:E0:65:A1:31:D8:83:81:3E:C4:B8:03:A8:C8:4F:D4:C9:87:0F
Authority key identifier: 19:42:81:7A:29:88:2D:43:3B:F1:BB:8E:BC:59:B2:FF:25:6E:80:3F
Certificate issuer: /CN=1942817a29882d433bf1bb8ebc59b2ff256e803f
Certificate serial: 019D9B50959D628EEA4FFD3DF1A6162A9861
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUKBeimILUM78buOvFmy_yVugD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/GUKBeimILUM78buOvFmy_yVugD8.mft
Manifest number: 0DFA
Signing time: Fri 17 Apr 2026 12:00:42 +0000
Manifest this update: Fri 17 Apr 2026 12:00:42 +0000
Manifest next update: Sat 18 Apr 2026 12:00:42 +0000
Files and hashes: 1: 1AlRjHDHPerXd5ndCFjnN-RkvrM.roa (hash: ZLKTq9Q4KNpxNVoqpx9iO6C2WOOfE/x2d5mOP6ZbGXQ=)
2: GUKBeimILUM78buOvFmy_yVugD8.crl (hash: tNoB2qXF0FijdD0OrBla/wlWYeLcdtB8YOt254XQQ8c=)
3: p93Yo32LiS86tKNIIJTFqRsTAc4.roa (hash: rKHZxZkQ1DlZz92HShvQ6VMO1LR9WfPRGqIp6geZ5io=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/GUKBeimILUM78buOvFmy_yVugD8.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/GUKBeimILUM78buOvFmy_yVugD8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GUKBeimILUM78buOvFmy_yVugD8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:95:9d:62:8e:ea:4f:fd:3d:f1:a6:16:2a:98:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1942817a29882d433bf1bb8ebc59b2ff256e803f
Validity
Not Before: Apr 17 12:00:42 2026 GMT
Not After : Apr 18 12:00:42 2026 GMT
Subject: CN=ef2ce065a131d883813ec4b803a8c84fd4c9870f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:b9:7f:6c:ea:e0:2f:54:43:d3:26:69:ef:7c:
bd:7b:52:76:b4:4f:6b:97:5c:df:e4:7a:32:d6:f3:
37:ac:8a:fd:07:2d:ee:ec:17:09:3b:a9:7d:12:e1:
fa:6d:02:d7:3a:7c:9b:c2:fb:62:b6:6a:72:35:67:
bc:9e:9c:33:b0:06:95:aa:86:bf:e4:5d:b6:75:fd:
f1:2c:e6:52:8e:e3:bf:5a:92:01:1f:65:7b:54:02:
4d:f5:ff:7a:18:26:81:c7:f0:15:f9:b1:a3:dd:6d:
14:9e:87:d3:e5:2d:46:96:78:a3:53:d6:1a:13:37:
3e:13:aa:3f:43:57:ab:c1:03:4b:b2:bd:c8:48:41:
00:5c:fc:d7:a0:85:4c:0f:fc:6a:1f:96:46:04:25:
dd:c0:0a:86:30:fa:d9:be:5a:14:d3:24:13:6e:a9:
9f:eb:0c:92:0c:c0:4d:b1:ef:09:60:63:2f:d4:38:
15:92:2e:db:ab:7f:e7:bc:68:b3:4f:4c:a2:47:20:
8e:91:10:f1:d0:c9:c5:ad:bb:8b:14:1d:6b:bd:f9:
f5:b3:7c:70:fb:31:aa:1e:0c:c9:a0:8a:85:89:1c:
95:00:9c:d0:17:d0:8a:4e:07:14:9d:c5:fc:88:ea:
06:dc:2e:61:ab:c8:7f:0c:7f:cf:c5:ba:d6:75:1d:
3a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:2C:E0:65:A1:31:D8:83:81:3E:C4:B8:03:A8:C8:4F:D4:C9:87:0F
X509v3 Authority Key Identifier:
keyid:19:42:81:7A:29:88:2D:43:3B:F1:BB:8E:BC:59:B2:FF:25:6E:80:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUKBeimILUM78buOvFmy_yVugD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/GUKBeimILUM78buOvFmy_yVugD8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/530064-2482-45be-bffe-fdde58ab29f9/1/GUKBeimILUM78buOvFmy_yVugD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:a9:9a:0d:e3:94:6f:9b:63:ac:c9:78:43:e2:42:a5:88:2e:
d8:0f:8f:e2:46:ee:4c:ca:ca:a6:98:98:86:15:a4:94:b0:b5:
be:b6:b2:a4:d2:6e:34:8f:c9:41:59:52:bc:63:6b:5f:85:29:
6c:50:9c:fc:a9:86:ae:80:4a:e3:52:ae:79:3b:92:f7:0a:bc:
d9:bd:18:77:5f:14:e3:d1:16:8a:e3:88:45:fc:61:77:3d:c4:
1b:40:d9:b6:12:be:e8:b5:aa:be:d9:6c:df:67:4b:c6:24:2a:
b0:58:95:ac:48:1a:f2:43:e7:64:d4:da:c5:76:28:4e:78:96:
d0:2a:18:ec:24:e9:7d:5c:14:60:f1:45:24:d5:a1:68:06:99:
0f:c4:10:86:13:39:12:23:02:08:91:0a:3e:2f:0f:32:30:1a:
2c:c2:b1:e0:0c:06:6f:cf:a0:ef:20:53:f3:5b:47:63:c8:fe:
20:42:11:d8:8a:d2:d7:ab:e0:87:25:f8:9c:39:73:e1:e6:36:
f1:ee:3d:25:98:e9:f7:b5:dc:fc:cd:fa:a8:3e:c2:2d:44:0f:
35:be:30:91:34:ef:0c:60:d9:8a:db:d1:eb:ba:b4:72:aa:59:
45:4a:4b:e4:47:22:bc:fa:fc:ac:2f:0e:e1:75:d3:50:b9:7c:
70:b1:3a:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:05:25 2026 by rpki-client