Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/Gu0CBP9R8olCGFT6YrPCMcNer2w.mft
File: Gu0CBP9R8olCGFT6YrPCMcNer2w.mft (raw, json)
Hash identifier: HKPr+972D76TejOyHrz2G13HcxaVsqGJlcd8Qt4cGeY=
Subject key identifier: 06:2E:CB:1A:DA:9F:27:A0:ED:52:F8:F7:4F:59:A2:1E:BA:59:92:F6
Authority key identifier: 1A:ED:02:04:FF:51:F2:89:42:18:54:FA:62:B3:C2:31:C3:5E:AF:6C
Certificate issuer: /CN=1aed0204ff51f289421854fa62b3c231c35eaf6c
Certificate serial: 019FAC76A3638497E565C3CA6EA2A56A5D18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gu0CBP9R8olCGFT6YrPCMcNer2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/Gu0CBP9R8olCGFT6YrPCMcNer2w.mft
Manifest number: 4E
Signing time: Wed 29 Jul 2026 06:01:23 +0000
Manifest this update: Wed 29 Jul 2026 06:01:23 +0000
Manifest next update: Thu 30 Jul 2026 06:01:23 +0000
Files and hashes: 1: Gu0CBP9R8olCGFT6YrPCMcNer2w.crl (hash: cWCEOUSK7tpHUhdjXTxOXpEduRzVqHVKrNn7Ku1uBNE=)
2: MXiJymlWnPv8K0_SYeg14AvCims.roa (hash: VJrJz4Yf0xl1z5pYVZXPPsSfyBh8RWLcRUu/3SlQW5M=)
3: TSXqej0WW_9xcvEDJRvBI7pt5LE.roa (hash: ZTp/vNt08nHTq/Tb6B374ia403187ADNP0tAFEOnaq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/Gu0CBP9R8olCGFT6YrPCMcNer2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/Gu0CBP9R8olCGFT6YrPCMcNer2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gu0CBP9R8olCGFT6YrPCMcNer2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:76:a3:63:84:97:e5:65:c3:ca:6e:a2:a5:6a:5d:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aed0204ff51f289421854fa62b3c231c35eaf6c
Validity
Not Before: Jul 29 06:01:23 2026 GMT
Not After : Jul 30 06:01:23 2026 GMT
Subject: CN=062ecb1ada9f27a0ed52f8f74f59a21eba5992f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a4:10:36:9c:85:18:4d:44:4f:99:fd:c7:90:
e7:5e:9d:49:cd:91:ca:42:cd:a9:ec:4b:ad:59:6b:
4b:12:ec:e3:52:35:24:54:ff:8a:a1:7b:4f:7d:ee:
d4:5f:56:ff:c7:27:dd:31:c2:12:69:87:b9:18:dd:
81:43:93:a4:23:89:6e:18:9f:12:9b:da:d0:c3:a4:
da:eb:b4:07:60:50:b8:cf:2a:28:80:82:da:5e:00:
11:6e:64:ec:35:63:54:18:89:f6:bc:2e:78:a4:f8:
32:69:7d:9b:07:75:21:09:60:cb:8c:68:d9:44:5c:
07:f3:37:9d:4a:74:f6:6f:6c:53:b5:f4:e9:7b:5c:
38:ea:9c:13:1c:b6:c6:43:9e:71:1d:ab:99:1c:d0:
4c:71:f8:5c:a7:7c:8b:71:05:99:ce:76:fd:b5:4f:
1c:a2:f7:fd:4c:42:f5:b1:ec:b9:b8:c3:50:58:3e:
fa:11:54:2b:35:ca:fc:47:ae:2d:d8:1b:28:c2:d7:
d3:2a:16:4a:b7:8d:b6:97:35:fd:dd:ce:96:ae:29:
8a:58:35:03:fe:a3:d1:77:10:0c:be:3a:48:bf:45:
92:19:54:73:95:68:02:60:ee:7c:e9:5b:bd:5d:70:
e3:7e:ce:71:49:04:30:fc:98:1f:c0:69:a2:03:34:
58:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:2E:CB:1A:DA:9F:27:A0:ED:52:F8:F7:4F:59:A2:1E:BA:59:92:F6
X509v3 Authority Key Identifier:
keyid:1A:ED:02:04:FF:51:F2:89:42:18:54:FA:62:B3:C2:31:C3:5E:AF:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gu0CBP9R8olCGFT6YrPCMcNer2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/Gu0CBP9R8olCGFT6YrPCMcNer2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/Gu0CBP9R8olCGFT6YrPCMcNer2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:af:14:6f:5a:2b:38:c5:f1:b5:2f:bf:d8:e4:09:90:15:1a:
08:eb:33:8c:aa:2f:8a:91:42:a3:0f:ac:6a:7a:42:61:6e:fc:
b4:f6:bc:64:7e:80:6f:5e:86:72:99:9e:6d:d1:da:b8:c0:83:
34:62:0a:cd:b4:3e:3f:05:fd:1a:a6:70:25:4d:1e:1d:11:dd:
b9:a8:07:e2:7d:8f:d8:12:e6:1a:11:94:32:8b:a6:27:c6:77:
28:5d:16:a8:5a:1e:65:25:da:0f:da:1c:e6:79:f9:cb:f1:91:
5f:42:95:31:ca:f4:aa:f6:64:46:bd:95:65:da:9c:91:ca:4e:
e8:20:15:0a:25:26:39:ff:4b:a0:54:91:8f:78:48:8b:25:63:
74:cd:9e:30:98:89:d9:9f:01:84:17:28:cb:0b:39:a6:03:10:
4f:59:3b:56:39:52:41:75:5c:7c:fd:f1:35:a7:f4:47:0c:12:
24:17:61:8a:e0:02:9a:84:9c:34:d5:c5:ec:59:e0:43:93:28:
23:60:b2:f0:73:17:f4:51:25:a2:b8:dd:8e:68:cc:1c:08:43:
61:74:45:65:1f:a0:e2:6b:27:c6:f5:6b:db:e6:cd:e9:2f:6f:
c5:44:04:1e:5d:1b:18:39:2b:25:65:78:fa:75:6b:83:64:50:
bd:ef:10:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:06:46 2026 by rpki-client