Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.mft
File: GU4QqVb6UlFuj9O5MY6EpVOD1is.mft (raw, json)
Hash identifier: afCgMWmg6mVk9keRMmwc+5Ag+7kM1zhYvWxVfGCUdgU=
Subject key identifier: 99:08:08:02:DD:77:67:7C:8D:F2:1E:6B:25:41:67:D9:D4:89:BE:57
Authority key identifier: 19:4E:10:A9:56:FA:52:51:6E:8F:D3:B9:31:8E:84:A5:53:83:D6:2B
Certificate issuer: /CN=194e10a956fa52516e8fd3b9318e84a55383d62b
Certificate serial: 019ED49A095E717176DA39FA4F8320A551B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GU4QqVb6UlFuj9O5MY6EpVOD1is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.mft
Manifest number: 040B
Signing time: Wed 17 Jun 2026 08:02:05 +0000
Manifest this update: Wed 17 Jun 2026 08:02:05 +0000
Manifest next update: Thu 18 Jun 2026 08:02:05 +0000
Files and hashes: 1: GU4QqVb6UlFuj9O5MY6EpVOD1is.crl (hash: 20yvIWbJ6p4YMESUUPj6+jueU+xwTceelwGfYUfK/YI=)
2: L6IkYa1mFzPLtO5LIkQRCCe9jl4.roa (hash: Ld5O0t2bBeigoCJRn7m3gG44EpWV7A+830bMM7yTOtE=)
3: oyVzd1gmTKT17jlRmnyP0pEMzFs.roa (hash: pAXNP3pz+CMOZzVz6ZojLzDHfBZZpShriq/ea0S+BHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.mft
rsync://rpki.ripe.net/repository/DEFAULT/GU4QqVb6UlFuj9O5MY6EpVOD1is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 08:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d4:9a:09:5e:71:71:76:da:39:fa:4f:83:20:a5:51:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=194e10a956fa52516e8fd3b9318e84a55383d62b
Validity
Not Before: Jun 17 08:02:05 2026 GMT
Not After : Jun 18 08:02:05 2026 GMT
Subject: CN=99080802dd77677c8df21e6b254167d9d489be57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fe:d2:37:28:47:b2:3a:25:77:86:14:37:8f:
34:cc:dd:d2:50:31:bf:85:47:21:68:ea:ed:cb:16:
74:9f:43:fd:a7:1d:ea:86:4e:a2:06:1f:5c:a6:39:
6d:b7:fa:c8:69:72:4e:09:71:21:62:88:ee:1b:63:
8d:7a:8a:7e:d0:0d:fd:07:81:8d:60:8b:a6:0b:87:
e9:b6:b8:82:5a:0c:d0:bc:64:ee:c7:ae:e3:bd:c9:
10:d4:d8:de:ea:f4:35:6c:a3:f2:a3:05:aa:f0:29:
24:b7:cd:da:47:20:c9:87:9a:6d:eb:94:59:91:e6:
97:99:01:d8:7a:c7:7f:2d:9a:b2:75:02:4f:a8:12:
4c:2c:c5:71:bf:d3:72:16:e0:44:59:2a:bf:46:aa:
56:95:3f:2c:04:1a:60:51:bf:4b:95:fe:7b:b2:8b:
be:a0:89:eb:93:6a:1e:e2:25:3a:be:dc:5a:c3:99:
97:84:1e:84:0e:e1:87:d8:6c:6e:06:d0:5d:23:da:
97:15:25:9f:cc:8f:19:e6:d0:52:d8:32:c8:ff:74:
85:4a:21:fa:5c:51:f8:1d:10:22:7a:d8:50:0a:ec:
c4:9f:0f:c0:ec:1b:ae:bd:d1:fa:0a:2a:cf:6d:3e:
b4:e5:67:55:6f:e7:11:6e:11:cb:7b:9c:c5:0a:fd:
bd:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:08:08:02:DD:77:67:7C:8D:F2:1E:6B:25:41:67:D9:D4:89:BE:57
X509v3 Authority Key Identifier:
keyid:19:4E:10:A9:56:FA:52:51:6E:8F:D3:B9:31:8E:84:A5:53:83:D6:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GU4QqVb6UlFuj9O5MY6EpVOD1is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:92:58:6e:58:e9:e5:2f:16:d5:b4:27:48:d0:41:cd:10:b8:
2b:33:b3:30:31:0a:b2:73:7b:03:56:78:44:30:2c:14:15:b7:
7d:60:44:fa:85:78:c5:1f:ae:2d:a9:de:cb:44:41:1a:36:95:
a0:0c:79:cf:6b:95:b5:2c:dd:ef:f7:6c:64:22:41:e2:0e:50:
54:0a:cb:80:d9:2d:aa:88:87:c8:03:55:ba:52:45:bb:be:7a:
01:96:89:e4:fe:20:c7:d2:00:47:ac:6a:60:9b:38:d2:07:0e:
06:34:6d:67:08:d9:d4:22:65:94:3b:05:46:f1:02:d4:46:d8:
ba:73:75:cb:e4:77:4f:8d:6f:db:fb:0a:b3:78:af:71:43:81:
29:e4:af:96:67:9b:8c:51:6c:c5:a2:fe:09:59:51:b5:c3:15:
93:8b:dc:8d:02:ad:a6:d3:76:01:31:a1:6e:34:59:7f:ce:b7:
c1:45:fc:3b:93:a6:7e:3a:f0:24:96:bf:e1:e5:d4:46:d8:df:
02:2a:ba:1e:9f:39:f2:83:ae:da:de:ef:3b:5d:46:9a:57:26:
37:a9:1c:6e:4d:0f:e9:d8:f0:72:11:64:f9:cd:46:65:b3:1f:
4d:d1:e7:44:40:42:4f:38:c2:62:a7:73:e4:15:ee:93:fd:c7:
ec:ff:fd:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 12:25:49 2026 by rpki-client