Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/a52ad3-9313-4ad0-9259-3b527cb98685/1/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.mft
File: GVBDpU5iM9IuVtt0yfeOLW0cl5Q.mft (raw, json)
Hash identifier: vdSUQH6Qqq3/a0bhw98H4HSrwZ1s/456Lpb6PqQAzyw=
Subject key identifier: 06:4E:F5:B3:04:09:9D:78:EE:23:21:FA:D7:CC:3B:C6:A8:C6:63:A0
Authority key identifier: 19:50:43:A5:4E:62:33:D2:2E:56:DB:74:C9:F7:8E:2D:6D:1C:97:94
Certificate issuer: /CN=195043a54e6233d22e56db74c9f78e2d6d1c9794
Certificate serial: 019D9B8780D01986DE11ACE945BDC37EC2B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/a52ad3-9313-4ad0-9259-3b527cb98685/1/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.mft
Manifest number: 162E
Signing time: Fri 17 Apr 2026 13:00:41 +0000
Manifest this update: Fri 17 Apr 2026 13:00:41 +0000
Manifest next update: Sat 18 Apr 2026 13:00:41 +0000
Files and hashes: 1: GVBDpU5iM9IuVtt0yfeOLW0cl5Q.crl (hash: uJNsUS4VTjIkYWtbyxCrIBGcDEufJ1cDwWjUXzNMMpo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/a52ad3-9313-4ad0-9259-3b527cb98685/1/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/a52ad3-9313-4ad0-9259-3b527cb98685/1/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:80:d0:19:86:de:11:ac:e9:45:bd:c3:7e:c2:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=195043a54e6233d22e56db74c9f78e2d6d1c9794
Validity
Not Before: Apr 17 13:00:41 2026 GMT
Not After : Apr 18 13:00:41 2026 GMT
Subject: CN=064ef5b304099d78ee2321fad7cc3bc6a8c663a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:56:51:16:41:a3:d3:62:79:7d:80:4d:fa:f3:
76:c5:12:44:ab:47:81:c8:6b:5e:3e:ed:f5:9d:80:
b8:50:72:e6:c8:11:4b:db:66:de:5d:4e:77:39:fc:
a8:22:4c:b7:c7:bb:4a:fa:53:2f:af:aa:d8:b3:4e:
f0:c5:02:4c:49:67:28:dc:97:7d:46:5f:9c:d6:e5:
ab:29:0c:4c:cb:dd:df:34:78:d6:77:af:fb:1e:68:
fc:59:f1:48:9b:f2:b3:88:12:20:1d:48:73:ea:42:
6f:22:80:54:b7:67:b6:19:1f:2b:50:a8:3c:5e:c3:
2f:50:6a:5b:80:13:dc:f2:a1:46:ed:9e:71:17:b3:
69:22:d4:da:0f:8c:2c:a4:7c:bc:fb:c9:cd:ea:23:
54:ee:84:c4:7e:11:1a:30:8d:06:e7:7a:75:a1:2a:
42:85:f7:1c:9b:a8:f6:15:a7:bc:fd:f3:57:32:15:
d5:bd:44:e9:49:40:31:4f:1a:88:e7:a0:ad:fc:7e:
7e:e6:dc:2e:c6:c1:a8:8c:8d:c9:88:b1:07:ce:1a:
bf:3d:28:d0:6e:60:cf:74:f0:3d:c4:9f:ff:15:dc:
83:c0:e5:ec:77:79:5a:58:1b:ba:83:fe:ad:1a:f7:
b2:32:ad:8f:a7:75:cf:06:f1:96:cd:97:05:5b:5c:
19:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:4E:F5:B3:04:09:9D:78:EE:23:21:FA:D7:CC:3B:C6:A8:C6:63:A0
X509v3 Authority Key Identifier:
keyid:19:50:43:A5:4E:62:33:D2:2E:56:DB:74:C9:F7:8E:2D:6D:1C:97:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a52ad3-9313-4ad0-9259-3b527cb98685/1/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a52ad3-9313-4ad0-9259-3b527cb98685/1/GVBDpU5iM9IuVtt0yfeOLW0cl5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:bf:ae:a2:e8:ab:ac:20:96:0d:ed:27:0c:24:32:a6:1e:6b:
27:0e:9f:d5:6b:e2:e0:93:89:99:0c:f4:de:7d:f7:ae:24:2d:
21:f2:5d:59:e0:d9:d3:f2:a2:30:d3:ef:42:39:f9:b9:e3:b4:
36:10:64:2d:c9:42:c9:c2:76:96:06:ba:7d:44:b1:1a:0b:87:
df:8c:62:fb:24:fb:b7:2c:f3:2a:51:94:c6:39:5b:c3:01:d4:
6d:d6:a8:ac:d7:cb:73:1e:04:85:b5:12:c6:47:bb:0d:33:ae:
93:4d:a9:38:f3:52:df:59:a1:60:13:9a:b1:97:06:c5:a1:2f:
7b:df:47:12:9c:a1:e4:ee:76:e2:62:2f:6c:64:69:8b:f0:74:
5f:df:ab:a4:94:4b:2b:37:09:6a:e5:98:68:b4:01:0f:68:d1:
c5:1a:2e:13:9d:20:89:b9:aa:9e:6d:51:19:fd:fc:28:f7:eb:
f1:06:fa:cb:81:72:7c:db:c7:13:70:e0:af:68:89:14:c8:d7:
d7:6c:76:d0:69:59:e0:f1:38:de:32:1f:a5:28:fb:25:20:39:
e3:c8:ad:fb:8f:20:4b:3f:b2:0b:1e:ad:49:13:d4:ad:7e:14:
ee:20:97:f9:af:bc:54:20:86:3b:62:93:5f:81:c4:df:e6:fe:
f3:b8:2c:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:21:44 2026 by rpki-client