Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/eaa787-a249-485f-b750-67062faef802/1/GvvUSIkW-uz94nr2PPmEUblnL_Y.mft
File: GvvUSIkW-uz94nr2PPmEUblnL_Y.mft (raw, json)
Hash identifier: EciglXVLVV0wZrY9t/q7cISRyO0qY4ilrlkE6qunBfA=
Subject key identifier: AB:2D:7E:0D:AE:B2:B8:68:F7:EC:62:57:A8:8A:DE:2B:85:AD:C6:29
Authority key identifier: 1A:FB:D4:48:89:16:FA:EC:FD:E2:7A:F6:3C:F9:84:51:B9:67:2F:F6
Certificate issuer: /CN=1afbd4488916faecfde27af63cf98451b9672ff6
Certificate serial: 019D9CD1A4A3A909D221F8BDD0FE9938CCCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GvvUSIkW-uz94nr2PPmEUblnL_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/eaa787-a249-485f-b750-67062faef802/1/GvvUSIkW-uz94nr2PPmEUblnL_Y.mft
Manifest number: 68
Signing time: Fri 17 Apr 2026 19:01:17 +0000
Manifest this update: Fri 17 Apr 2026 19:01:17 +0000
Manifest next update: Sat 18 Apr 2026 19:01:17 +0000
Files and hashes: 1: GvvUSIkW-uz94nr2PPmEUblnL_Y.crl (hash: Em5w8ElGSy2JD+InDGu+Q2Rxnbot/FVAGTFHCuJ3Tc4=)
2: LxeehfG4ABL-Mjofqe-m1zgbRF8.roa (hash: G0fIhVP6EAMZqllSYGxKMKH7WM5clIvSUyRbvtMaMHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/eaa787-a249-485f-b750-67062faef802/1/GvvUSIkW-uz94nr2PPmEUblnL_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/eaa787-a249-485f-b750-67062faef802/1/GvvUSIkW-uz94nr2PPmEUblnL_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GvvUSIkW-uz94nr2PPmEUblnL_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 19:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:d1:a4:a3:a9:09:d2:21:f8:bd:d0:fe:99:38:cc:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1afbd4488916faecfde27af63cf98451b9672ff6
Validity
Not Before: Apr 17 19:01:17 2026 GMT
Not After : Apr 18 19:01:17 2026 GMT
Subject: CN=ab2d7e0daeb2b868f7ec6257a88ade2b85adc629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d2:4b:dd:2f:d4:1f:ff:fd:c0:19:0f:04:13:
e4:11:65:59:81:36:10:cc:53:ec:82:ba:83:3e:d5:
c0:44:d0:2d:fb:3a:cd:48:c0:96:a2:82:c4:1c:44:
a8:ad:f6:f6:ed:3d:73:f5:54:6e:d5:05:4b:6a:19:
a9:a3:e1:56:a9:1d:79:45:a5:b0:3b:b8:41:d4:1e:
3e:73:0e:28:c1:2b:c7:72:a3:fd:69:67:6c:b5:8d:
97:45:e3:cc:d3:c6:6d:84:ad:59:63:93:52:b2:5e:
72:f3:55:0f:a9:af:5f:df:ee:2b:62:cf:9f:d1:5a:
af:57:84:7a:75:bf:a6:12:77:1c:5e:80:d1:74:79:
05:3e:f8:9b:c6:8e:27:3d:f5:b5:71:c1:e8:dd:b6:
7d:a0:56:12:c1:5a:38:6e:12:67:f3:21:9c:0a:68:
74:39:8b:09:45:bf:84:4e:6a:b9:e1:11:ad:25:b6:
91:54:b6:e0:e6:a9:c9:c0:72:bf:45:bf:43:f9:4d:
6f:ce:ce:33:24:d5:ac:78:29:32:fb:e5:51:dd:d1:
ca:a8:84:b4:ee:f6:2b:ac:6d:ff:ef:f5:2f:71:b3:
6d:fe:e1:87:93:b8:ef:df:1c:2d:56:13:98:61:0e:
77:8e:49:fd:fc:0f:ad:57:90:0d:8c:46:9b:fd:2f:
0a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:2D:7E:0D:AE:B2:B8:68:F7:EC:62:57:A8:8A:DE:2B:85:AD:C6:29
X509v3 Authority Key Identifier:
keyid:1A:FB:D4:48:89:16:FA:EC:FD:E2:7A:F6:3C:F9:84:51:B9:67:2F:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GvvUSIkW-uz94nr2PPmEUblnL_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/eaa787-a249-485f-b750-67062faef802/1/GvvUSIkW-uz94nr2PPmEUblnL_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/eaa787-a249-485f-b750-67062faef802/1/GvvUSIkW-uz94nr2PPmEUblnL_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:aa:b8:43:27:70:c3:86:5e:67:bd:9f:1a:16:94:5c:63:76:
0b:0f:04:74:55:f2:19:ab:bf:0e:74:22:6a:9a:92:80:03:be:
03:00:13:c7:ca:b5:2f:11:2b:88:9d:a4:6f:69:a3:d2:b8:ad:
94:77:3a:be:18:8c:6e:61:f6:5b:ae:79:c8:9d:b8:f9:53:e1:
98:f8:dc:bd:22:db:4c:e0:9d:75:97:04:47:c4:ee:fe:a1:a4:
c4:26:c4:3b:f0:84:98:39:5e:17:b6:c4:77:a7:bd:6e:54:f9:
77:70:2a:21:63:dd:ea:ee:5a:71:ec:ef:a7:5e:bd:f5:c9:9a:
31:2e:b2:e9:c2:ae:ad:85:de:68:70:e4:06:4b:31:75:f4:b3:
63:f4:57:54:e0:f5:5f:4a:38:14:2e:eb:44:85:2a:7a:66:e1:
16:00:b7:d1:10:b2:a7:f0:ab:c6:e1:75:80:f3:fa:d9:c3:a3:
9b:63:b1:ed:b4:eb:de:b6:e9:fd:d1:2e:2e:e5:1b:de:6a:c1:
50:bd:92:f6:3d:cb:78:35:06:5f:74:a1:e8:a9:12:1f:0b:87:
28:a5:31:dd:fb:41:c8:56:22:b5:93:ad:f6:4c:12:3f:d5:da:
29:03:51:35:a0:aa:b8:49:0e:e1:82:f6:69:16:5b:cf:28:ab:
aa:de:c9:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:30:40 2026 by rpki-client