Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.mft
File: GU4QqVb6UlFuj9O5MY6EpVOD1is.mft (raw, json)
Hash identifier: gYB5+SqVybl8+uXe8Au7SVraZ94aKPtHhBGzgjtC1SI=
Subject key identifier: 52:BE:86:4F:27:35:F6:E2:38:46:FC:D5:E3:BA:1F:9D:41:BF:61:57
Authority key identifier: 19:4E:10:A9:56:FA:52:51:6E:8F:D3:B9:31:8E:84:A5:53:83:D6:2B
Certificate issuer: /CN=194e10a956fa52516e8fd3b9318e84a55383d62b
Certificate serial: 01A0CAB55AD94DD641B97460A41393E02C09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GU4QqVb6UlFuj9O5MY6EpVOD1is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.mft
Manifest number: 050F
Signing time: Tue 22 Sep 2026 20:01:17 +0000
Manifest this update: Tue 22 Sep 2026 20:01:17 +0000
Manifest next update: Wed 23 Sep 2026 20:01:17 +0000
Files and hashes: 1: GU4QqVb6UlFuj9O5MY6EpVOD1is.crl (hash: tTnlJBDqjkADXdIf1I7pQUDPbEZZhWgRR7DyyDB12Z0=)
2: L6IkYa1mFzPLtO5LIkQRCCe9jl4.roa (hash: Ld5O0t2bBeigoCJRn7m3gG44EpWV7A+830bMM7yTOtE=)
3: oyVzd1gmTKT17jlRmnyP0pEMzFs.roa (hash: pAXNP3pz+CMOZzVz6ZojLzDHfBZZpShriq/ea0S+BHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.mft
rsync://rpki.ripe.net/repository/DEFAULT/GU4QqVb6UlFuj9O5MY6EpVOD1is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 20:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:b5:5a:d9:4d:d6:41:b9:74:60:a4:13:93:e0:2c:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=194e10a956fa52516e8fd3b9318e84a55383d62b
Validity
Not Before: Sep 22 20:01:17 2026 GMT
Not After : Sep 23 20:01:17 2026 GMT
Subject: CN=52be864f2735f6e23846fcd5e3ba1f9d41bf6157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:10:e4:cb:0d:56:96:e5:f4:5f:c8:5a:fb:11:
3c:a9:17:32:21:37:c1:86:68:54:74:ef:ab:17:1f:
0c:ea:4f:0a:32:54:65:14:cd:9b:44:7f:f3:0c:82:
b5:af:8e:74:07:14:30:ef:35:c0:00:9a:50:4a:1c:
8e:46:22:f4:aa:bf:6e:bc:db:16:96:52:d0:7c:97:
cd:c9:bf:89:75:59:30:f5:95:07:14:c6:84:b8:e2:
86:b2:d1:3c:92:97:c8:4f:e2:47:46:a2:09:e8:01:
3b:d4:7f:69:41:af:d8:53:48:36:62:21:c2:aa:f6:
b8:37:5e:75:be:67:b1:79:8f:34:99:ee:59:17:e1:
51:58:8a:e5:55:e9:af:90:b4:c5:f7:8b:1f:6f:30:
a0:61:72:8f:82:6b:11:2d:68:96:8c:45:33:4a:e9:
43:f0:24:e9:33:d4:6d:93:51:6f:d6:96:a3:f6:4b:
08:38:a8:46:82:fd:aa:25:5b:0b:74:48:47:38:36:
a4:0e:cd:23:18:96:bf:ac:e9:c8:36:ab:15:4a:5a:
59:e8:0b:4d:08:e0:7f:d2:bd:d8:1e:74:b5:d5:8b:
30:95:b5:e7:a8:a8:9e:11:19:d3:9c:07:02:82:fa:
92:9c:ac:cc:61:c3:44:cf:47:1d:ed:02:81:da:7c:
61:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:BE:86:4F:27:35:F6:E2:38:46:FC:D5:E3:BA:1F:9D:41:BF:61:57
X509v3 Authority Key Identifier:
keyid:19:4E:10:A9:56:FA:52:51:6E:8F:D3:B9:31:8E:84:A5:53:83:D6:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GU4QqVb6UlFuj9O5MY6EpVOD1is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:14:db:2a:d3:bc:32:f5:1f:66:bb:5b:96:95:f9:92:0f:60:
89:75:42:ba:eb:38:74:d5:0d:e8:76:22:22:5e:1c:13:fc:2f:
f7:e6:e9:20:0b:35:01:b0:52:c8:92:ef:5b:79:40:6b:0a:5b:
db:bb:42:00:25:f6:9b:1a:dc:75:f9:6f:7c:fc:4e:65:e8:74:
47:19:25:33:14:af:99:8b:ca:1f:5b:42:f9:62:68:19:af:1e:
9d:c0:bb:94:6c:74:6e:38:9f:24:a7:a7:89:fc:29:2e:06:fb:
24:8a:cb:f6:21:ca:21:d6:ca:6f:67:f6:cb:6d:89:8a:9a:47:
e2:0d:39:b9:d6:d0:c6:4d:d4:1d:29:e1:f5:91:8e:04:cc:b3:
40:28:4f:c9:57:ae:4e:50:a8:b7:f9:3b:77:93:01:c1:2a:db:
58:1d:b1:7e:3c:ad:b6:ba:2a:43:d8:6f:75:75:af:cd:81:24:
6d:20:bd:57:a6:14:7f:67:2f:eb:f3:76:e3:c7:5d:94:dc:16:
ec:7e:06:39:3b:28:f7:71:95:f6:4d:2f:c5:04:23:4a:59:1e:
df:21:0d:43:0d:bd:a5:1c:3d:ef:13:70:62:e5:6e:93:ed:54:
25:89:db:83:b1:4f:6b:92:6e:cc:e5:07:a7:cb:fd:2d:d5:56:
d5:47:90:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:55:53 2026 by rpki-client