Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.mft
File: GU4QqVb6UlFuj9O5MY6EpVOD1is.mft (raw, json)
Hash identifier: cqKuGRsgmgaQpmzcsYY1J7K8ntca5D3K6vrOAwKBoOk=
Subject key identifier: F6:9D:A3:B5:9C:31:64:6B:FF:73:20:B8:F6:D6:47:77:76:54:08:8C
Authority key identifier: 19:4E:10:A9:56:FA:52:51:6E:8F:D3:B9:31:8E:84:A5:53:83:D6:2B
Certificate issuer: /CN=194e10a956fa52516e8fd3b9318e84a55383d62b
Certificate serial: 019CAE35142779F59DB06CB76969F8545EA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GU4QqVb6UlFuj9O5MY6EpVOD1is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.mft
Manifest number: 02EE
Signing time: Mon 02 Mar 2026 11:00:39 +0000
Manifest this update: Mon 02 Mar 2026 11:00:39 +0000
Manifest next update: Tue 03 Mar 2026 11:00:39 +0000
Files and hashes: 1: GU4QqVb6UlFuj9O5MY6EpVOD1is.crl (hash: vMUbJ+OFkQaTkepdOtoR4uTvdR782/PobwN51Fwai7Y=)
2: L6IkYa1mFzPLtO5LIkQRCCe9jl4.roa (hash: Ld5O0t2bBeigoCJRn7m3gG44EpWV7A+830bMM7yTOtE=)
3: oyVzd1gmTKT17jlRmnyP0pEMzFs.roa (hash: pAXNP3pz+CMOZzVz6ZojLzDHfBZZpShriq/ea0S+BHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.mft
rsync://rpki.ripe.net/repository/DEFAULT/GU4QqVb6UlFuj9O5MY6EpVOD1is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:14:27:79:f5:9d:b0:6c:b7:69:69:f8:54:5e:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=194e10a956fa52516e8fd3b9318e84a55383d62b
Validity
Not Before: Mar 2 11:00:39 2026 GMT
Not After : Mar 3 11:00:39 2026 GMT
Subject: CN=f69da3b59c31646bff7320b8f6d647777654088c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:52:17:b7:84:76:10:b7:d1:d5:25:d0:0d:d5:
27:f7:74:98:3d:af:58:c6:12:22:1c:82:b3:72:0e:
d9:26:43:3b:19:b6:d6:ef:76:80:d5:4a:6d:56:05:
02:15:ef:45:0c:0b:b8:d6:ff:cd:89:40:9d:b9:fb:
3f:b6:26:06:01:8c:73:74:6e:45:4b:b4:98:97:88:
cc:5c:91:c5:15:1b:1b:28:eb:cd:51:ad:60:81:3a:
bb:f4:27:3a:65:c1:ff:3f:0c:27:8e:f5:ff:89:68:
cb:dd:2b:9b:d2:bf:f6:c1:88:9d:24:0a:0b:d8:f4:
66:41:92:a8:73:c3:a5:6a:0b:9b:d5:88:e5:3e:da:
ed:59:5f:62:3d:c8:e0:a1:4c:f9:60:2b:01:87:38:
e0:bb:03:d4:e0:e2:a1:5f:41:dc:1b:96:32:c4:30:
47:99:b0:73:f0:dd:52:91:76:fa:f6:77:c1:83:1e:
a3:9c:9b:fa:c8:de:52:16:06:5e:a6:e0:8f:b9:4c:
23:b8:87:4a:d8:2a:dd:06:3e:69:b4:82:64:b4:3b:
d1:9c:f8:a0:6f:4f:7e:12:71:e0:bd:2c:f0:49:36:
30:1e:8a:41:4e:77:51:07:b9:7a:9a:a2:9b:32:13:
ac:7e:04:03:4d:cf:6a:e2:85:e2:48:29:c2:0a:92:
c0:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:9D:A3:B5:9C:31:64:6B:FF:73:20:B8:F6:D6:47:77:76:54:08:8C
X509v3 Authority Key Identifier:
keyid:19:4E:10:A9:56:FA:52:51:6E:8F:D3:B9:31:8E:84:A5:53:83:D6:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GU4QqVb6UlFuj9O5MY6EpVOD1is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d2ef5f-2ae9-486a-8bd7-51f077f30d3f/1/GU4QqVb6UlFuj9O5MY6EpVOD1is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:7e:7c:06:83:66:28:97:6b:d3:1c:9f:60:fa:37:18:ae:d7:
e1:a0:ee:ca:49:0d:fc:a4:d2:a3:25:6e:9a:49:98:ef:44:46:
dc:9e:5a:3c:db:47:10:e3:36:e4:cc:bb:ac:26:a1:0c:94:89:
bb:97:d5:28:42:c8:b0:7c:e7:46:8c:55:10:8c:7e:23:f7:a2:
53:b9:38:82:d1:8a:c6:7d:9f:2a:55:d4:90:c8:10:28:21:74:
16:3a:b5:62:28:7b:9f:10:91:bd:6c:fc:a0:06:d8:f5:4b:eb:
37:24:19:3e:b3:e2:d8:33:b1:53:c5:03:00:11:93:75:c1:48:
16:ba:92:87:e6:e4:78:4d:19:5a:66:b7:f8:a5:c0:02:bd:3c:
d4:eb:dd:6a:72:4d:47:6d:f8:a9:24:fa:2a:cf:0a:89:9a:25:
09:f6:60:31:b7:cf:7a:eb:af:eb:25:e7:6e:15:34:f5:7f:2e:
ef:99:26:2b:16:e7:e2:48:7a:0b:69:bc:80:af:f9:26:74:81:
2c:07:53:35:39:4d:75:53:8d:b7:83:fb:be:c5:9f:b9:06:f8:
d0:e6:40:4f:79:ee:55:53:52:7b:27:b5:be:2b:2c:af:82:3b:
0f:02:5e:59:5b:c2:4f:b5:ea:45:84:99:a4:0a:cf:e2:43:5d:
d6:5f:a0:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:11:20 2026 by rpki-client