Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/af1126-1fc7-4131-90ef-6484f2a437de/1/GIqHq3kQGTeTuKpsPB7ma9sGpx8.mft
File: GIqHq3kQGTeTuKpsPB7ma9sGpx8.mft (raw, json)
Hash identifier: hrGoTMgqktXrYH5eeLzUQNSsKSlN9NhGqk06Yvk+S4k=
Subject key identifier: BA:51:C1:57:E4:BD:1D:4E:B1:89:84:B9:CB:7D:CD:A7:47:9F:AD:C2
Authority key identifier: 18:8A:87:AB:79:10:19:37:93:B8:AA:6C:3C:1E:E6:6B:DB:06:A7:1F
Certificate issuer: /CN=188a87ab7910193793b8aa6c3c1ee66bdb06a71f
Certificate serial: 019CA7FC354AF30120D280E89E58DBFD0D53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GIqHq3kQGTeTuKpsPB7ma9sGpx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/af1126-1fc7-4131-90ef-6484f2a437de/1/GIqHq3kQGTeTuKpsPB7ma9sGpx8.mft
Manifest number: C6
Signing time: Sun 01 Mar 2026 06:00:49 +0000
Manifest this update: Sun 01 Mar 2026 06:00:49 +0000
Manifest next update: Mon 02 Mar 2026 06:00:49 +0000
Files and hashes: 1: GIqHq3kQGTeTuKpsPB7ma9sGpx8.crl (hash: b+8kFcW/dumvqx8g/eSN9SCg4qzQ0FpVTSYTKZNRFKg=)
2: dKUSVy6IdXXRjgtpigNGU0J9jeU.asa (hash: CejzruUkEWq9zLEaoAabqikLpPGhjf75ZRntC5aAVpg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/af1126-1fc7-4131-90ef-6484f2a437de/1/GIqHq3kQGTeTuKpsPB7ma9sGpx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/af1126-1fc7-4131-90ef-6484f2a437de/1/GIqHq3kQGTeTuKpsPB7ma9sGpx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GIqHq3kQGTeTuKpsPB7ma9sGpx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a7:fc:35:4a:f3:01:20:d2:80:e8:9e:58:db:fd:0d:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=188a87ab7910193793b8aa6c3c1ee66bdb06a71f
Validity
Not Before: Mar 1 06:00:49 2026 GMT
Not After : Mar 2 06:00:49 2026 GMT
Subject: CN=ba51c157e4bd1d4eb18984b9cb7dcda7479fadc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:22:24:df:2b:ef:d5:af:92:97:8e:8a:9a:b1:
f4:d6:a3:0f:a5:63:73:1f:0e:f0:48:4d:38:fa:96:
08:6b:bd:d4:4e:b9:d9:d9:23:ce:4f:db:81:96:48:
71:34:72:4b:73:c9:f9:e5:5b:0d:49:43:75:35:c4:
8a:c4:48:41:1d:0c:62:6a:1b:bc:e5:87:31:03:e7:
32:85:2d:c0:76:4c:36:c0:d9:8e:ac:b3:86:ee:d8:
45:53:d8:f1:67:55:a1:8a:8b:f9:30:6d:dd:5d:d1:
72:4f:5c:19:9e:f9:3f:5c:71:a7:79:50:ff:07:5e:
31:2d:b8:d2:21:3a:ed:df:19:4c:b5:4d:d0:ff:7c:
07:fb:d7:5c:3e:76:17:73:ae:74:d3:a9:ae:2d:b4:
bb:c0:40:7d:5c:78:ef:a2:bd:a8:3a:73:49:8b:68:
95:77:19:3d:46:86:5a:8f:df:d9:06:78:f8:62:a0:
24:2b:6b:87:80:e7:de:7a:c8:48:b2:35:51:aa:b6:
a7:01:e8:ac:e1:d0:96:6b:c8:95:e5:30:96:4d:b7:
18:f2:2e:89:7b:a6:1b:36:36:10:89:9c:f5:f2:0b:
00:42:40:46:9d:d9:73:ca:0e:61:f3:fe:60:60:05:
b3:de:fd:45:52:67:a9:53:b0:40:2c:c2:3c:e2:48:
99:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:51:C1:57:E4:BD:1D:4E:B1:89:84:B9:CB:7D:CD:A7:47:9F:AD:C2
X509v3 Authority Key Identifier:
keyid:18:8A:87:AB:79:10:19:37:93:B8:AA:6C:3C:1E:E6:6B:DB:06:A7:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GIqHq3kQGTeTuKpsPB7ma9sGpx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/af1126-1fc7-4131-90ef-6484f2a437de/1/GIqHq3kQGTeTuKpsPB7ma9sGpx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/af1126-1fc7-4131-90ef-6484f2a437de/1/GIqHq3kQGTeTuKpsPB7ma9sGpx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:ca:3e:b7:35:b0:41:b1:94:72:1b:27:e5:77:28:4f:16:10:
2a:34:a7:24:38:cf:c9:e7:44:ff:5c:bb:42:da:cd:ab:a2:87:
51:0a:9d:10:7d:33:b8:46:46:44:c0:cb:a7:7e:3a:a9:cf:a4:
3f:b7:68:d0:56:bd:f5:a7:1a:53:75:c5:46:e5:8f:1f:d4:db:
9d:ca:75:32:dd:e8:1b:16:c8:84:22:15:f0:f8:ba:5b:10:68:
26:75:d7:e5:53:d0:bd:90:b0:6b:39:7e:78:d0:2a:9e:a2:d3:
ed:54:8f:52:23:6c:c6:1f:e7:c6:a2:d4:8a:1a:76:1e:01:8a:
64:45:96:ac:d3:d5:3c:ae:cc:8c:10:e7:e9:41:fa:4c:dd:6d:
f3:b6:16:dc:3f:3b:db:6a:9d:07:cd:df:1c:26:0f:ef:42:46:
43:52:16:34:3c:f5:84:7e:f2:bd:75:b7:03:95:62:17:21:10:
55:a4:10:8d:bd:7b:3b:a3:33:2b:e8:59:fd:be:fc:13:18:66:
aa:e3:6d:e5:38:cc:dd:be:d7:7d:12:55:2d:4f:b5:55:43:16:
a5:ad:15:b5:bf:63:71:c8:b5:7e:f7:7e:11:98:78:68:d3:fd:
ea:38:45:49:a7:17:5a:d0:21:36:87:39:36:46:bb:0b:c7:41:
9f:34:19:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:37:56 2026 by rpki-client