Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/a53d34-c3d6-49db-ab7f-a9cce56a0668/1/GU8LJy4kOs-vNjRglOWDlcwTg7Q.mft
File: GU8LJy4kOs-vNjRglOWDlcwTg7Q.mft (raw, json)
Hash identifier: 1ylBEfBDa3K4C+uRBKUo0bsuYzdIIxXJ834Kt8rXi1g=
Subject key identifier: 17:71:8B:94:F5:76:F2:CC:71:FB:E7:F3:69:B4:DD:A5:38:0E:E5:29
Authority key identifier: 19:4F:0B:27:2E:24:3A:CF:AF:36:34:60:94:E5:83:95:CC:13:83:B4
Certificate issuer: /CN=194f0b272e243acfaf36346094e58395cc1383b4
Certificate serial: 019CAA58AC50A338CE1A658B02EA001984EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GU8LJy4kOs-vNjRglOWDlcwTg7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/a53d34-c3d6-49db-ab7f-a9cce56a0668/1/GU8LJy4kOs-vNjRglOWDlcwTg7Q.mft
Manifest number: 13BC
Signing time: Sun 01 Mar 2026 17:01:03 +0000
Manifest this update: Sun 01 Mar 2026 17:01:03 +0000
Manifest next update: Mon 02 Mar 2026 17:01:03 +0000
Files and hashes: 1: GU8LJy4kOs-vNjRglOWDlcwTg7Q.crl (hash: MEGoqsnXloJMLAOEndBOeReBXNNPLCAhdZ0/9FJrvrA=)
2: WssjpVtFq9SbbTrTZ-iHVvx9vP0.roa (hash: 8JmzB8yBULopBubbEFm3Pf3YeySRdQmevymiDMry08o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/a53d34-c3d6-49db-ab7f-a9cce56a0668/1/GU8LJy4kOs-vNjRglOWDlcwTg7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/a53d34-c3d6-49db-ab7f-a9cce56a0668/1/GU8LJy4kOs-vNjRglOWDlcwTg7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/GU8LJy4kOs-vNjRglOWDlcwTg7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:ac:50:a3:38:ce:1a:65:8b:02:ea:00:19:84:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=194f0b272e243acfaf36346094e58395cc1383b4
Validity
Not Before: Mar 1 17:01:03 2026 GMT
Not After : Mar 2 17:01:03 2026 GMT
Subject: CN=17718b94f576f2cc71fbe7f369b4dda5380ee529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:30:3e:c2:66:0f:eb:9d:a6:28:b7:1c:2d:7e:
fa:d0:f8:a7:71:01:3d:07:ea:e5:59:18:35:53:c5:
48:81:2b:cc:50:2c:18:fb:36:da:11:33:50:c0:e1:
4e:42:2a:44:89:07:d3:ac:de:39:36:bf:dc:85:48:
24:5d:d2:81:9e:01:25:b0:24:e3:b8:5a:44:80:f7:
4c:e4:2a:eb:f9:2c:6b:74:4f:dd:2f:72:7c:d1:22:
1a:de:d0:e8:f8:67:c4:d2:81:d3:d0:0c:05:49:06:
b6:fb:50:f0:ba:a4:d8:d4:78:4e:0c:b6:e7:10:b2:
34:d5:da:8b:7d:e7:1e:c5:72:85:4c:34:ab:ee:ad:
9c:62:6f:ec:fd:13:44:39:60:f1:76:67:45:74:9c:
ed:7c:f8:d0:c8:57:35:9d:e8:95:f0:62:84:da:b5:
22:9e:72:bb:98:b1:17:f9:02:03:2e:ac:a5:2a:5b:
1e:b2:21:be:39:65:74:50:7a:cc:2a:cf:60:a3:33:
bd:88:2b:61:03:d6:9c:51:9d:7c:d2:78:25:e3:fd:
b1:19:85:28:9c:b4:83:1f:51:0a:ed:69:4e:e1:46:
c4:c1:2a:16:39:a0:b8:ad:fc:10:92:81:3c:02:a9:
08:82:2b:6f:ca:2e:b7:c9:a3:0b:d6:05:f8:db:08:
7f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:71:8B:94:F5:76:F2:CC:71:FB:E7:F3:69:B4:DD:A5:38:0E:E5:29
X509v3 Authority Key Identifier:
keyid:19:4F:0B:27:2E:24:3A:CF:AF:36:34:60:94:E5:83:95:CC:13:83:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GU8LJy4kOs-vNjRglOWDlcwTg7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a53d34-c3d6-49db-ab7f-a9cce56a0668/1/GU8LJy4kOs-vNjRglOWDlcwTg7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a53d34-c3d6-49db-ab7f-a9cce56a0668/1/GU8LJy4kOs-vNjRglOWDlcwTg7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:85:fb:86:36:a8:59:cb:58:4d:f4:c7:44:c8:76:21:ba:9a:
b3:c9:21:f9:3c:cd:e6:19:d6:2c:92:ff:31:69:11:e0:b5:ac:
77:06:e4:59:3f:d7:f9:79:7a:13:81:b0:de:51:a8:78:5e:85:
ef:95:ea:67:ff:d7:df:e8:95:e0:10:90:bd:b8:f5:24:9b:9c:
f0:ea:56:35:da:4d:28:f0:c4:84:57:1c:83:3c:78:fe:63:ff:
32:67:13:c0:25:5d:e8:33:47:ab:b4:be:0e:8f:71:a5:b4:6e:
7b:02:a4:3c:05:18:bd:d3:4a:56:de:50:2d:e2:8a:aa:6a:c8:
40:4e:c1:25:1f:a7:71:09:7c:75:45:bb:37:8c:28:86:04:30:
69:c7:51:33:b2:0b:7a:5c:52:b9:23:a0:a4:7f:a6:21:5d:94:
f5:4b:b2:4b:dd:f8:21:9b:14:3f:6c:68:59:30:15:2a:1c:2f:
84:2b:a0:9f:ac:a3:7c:ce:86:5d:3e:c1:50:d5:9f:65:90:9e:
01:41:e2:ab:c5:2a:25:9a:5f:d6:7a:bd:c7:7d:bd:5d:b9:92:
b8:66:c5:03:7d:d0:6c:30:4b:55:89:01:3a:04:c0:61:02:d9:
3e:58:22:80:67:b9:73:96:fa:f3:d7:a3:77:59:7f:e3:73:e2:
84:76:3c:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqWKxQozjOGmWLAuoAGYTuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5NGYwYjI3MmUyNDNhY2ZhZjM2MzQ2MDk0ZTU4Mzk1Y2Mx
MzgzYjQwHhcNMjYwMzAxMTcwMTAzWhcNMjYwMzAyMTcwMTAzWjAzMTEwLwYDVQQD
EygxNzcxOGI5NGY1NzZmMmNjNzFmYmU3ZjM2OWI0ZGRhNTM4MGVlNTI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzA+wmYP652mKLccLX760PincQE9
B+rlWRg1U8VIgSvMUCwY+zbaETNQwOFOQipEiQfTrN45Nr/chUgkXdKBngElsCTj
uFpEgPdM5Crr+SxrdE/dL3J80SIa3tDo+GfE0oHT0AwFSQa2+1DwuqTY1HhODLbn
ELI01dqLfecexXKFTDSr7q2cYm/s/RNEOWDxdmdFdJztfPjQyFc1neiV8GKE2rUi
nnK7mLEX+QIDLqylKlsesiG+OWV0UHrMKs9gozO9iCthA9acUZ180ngl4/2xGYUo
nLSDH1EK7WlO4UbEwSoWOaC4rfwQkoE8AqkIgitvyi63yaML1gX42wh/PQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBdxi5T1dvLMcfvn82m03aU4DuUpMB8GA1UdIwQY
MBaAFBlPCycuJDrPrzY0YJTlg5XME4O0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1U4TEp5NGtPcy12TmpSZ2xPV0RsY3dUZzdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9hNTNkMzQtYzNkNi00OWRiLWFiN2Yt
YTljY2U1NmEwNjY4LzEvR1U4TEp5NGtPcy12TmpSZ2xPV0RsY3dUZzdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9hNTNkMzQtYzNkNi00OWRiLWFiN2YtYTljY2U1NmEwNjY4
LzEvR1U4TEp5NGtPcy12TmpSZ2xPV0RsY3dUZzdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFIX7hjao
WctYTfTHRMh2Ibqas8kh+TzN5hnWLJL/MWkR4LWsdwbkWT/X+Xl6E4Gw3lGoeF6F
75XqZ//X3+iV4BCQvbj1JJuc8OpWNdpNKPDEhFccgzx4/mP/MmcTwCVd6DNHq7S+
Do9xpbRuewKkPAUYvdNKVt5QLeKKqmrIQE7BJR+ncQl8dUW7N4wohgQwacdRM7IL
elxSuSOgpH+mIV2U9UuyS934IZsUP2xoWTAVKhwvhCugn6yjfM6GXT7BUNWfZZCe
AUHiq8UqJZpf1nq9x329XbmSuGbFA33QbDBLVYkBOgTAYQLZPlgigGe5c5b689ej
d1l/43PihHY8dg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:42:09 2026 by rpki-client