Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/6285f1-8c1d-4844-be0e-be8e651c51f6/1/Xq_GD000CftGyKW_ldOYHxShQ7A.mft
File: Xq_GD000CftGyKW_ldOYHxShQ7A.mft (raw, json)
Hash identifier: u2lTuVqGyoS2Pxi5MlF/lB2pq0cHR+g0ul1mD41ipf0=
Subject key identifier: 2C:EB:B7:05:3B:36:0C:88:49:1D:B8:D9:FF:30:38:96:76:D0:B7:24
Authority key identifier: 5E:AF:C6:0F:4D:34:09:FB:46:C8:A5:BF:95:D3:98:1F:14:A1:43:B0
Certificate issuer: /CN=5eafc60f4d3409fb46c8a5bf95d3981f14a143b0
Certificate serial: 019CAB3484456E14691E5FB7F3836A66F752
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xq_GD000CftGyKW_ldOYHxShQ7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/6285f1-8c1d-4844-be0e-be8e651c51f6/1/Xq_GD000CftGyKW_ldOYHxShQ7A.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 21:01:11 +0000
Manifest this update: Sun 01 Mar 2026 21:01:11 +0000
Manifest next update: Mon 02 Mar 2026 21:01:11 +0000
Files and hashes: 1: GUgLg3-BRyvvd7IU0mKTRz8HLQo.roa (hash: QrRBGrDD9ZKqKp1YwsfRb3TUqSdKHluo6aJuZoI6754=)
2: Xq_GD000CftGyKW_ldOYHxShQ7A.crl (hash: dQIzl6fpJmOumT9wHcmUXpYO6/MvmQqMHK9E2HZebGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/6285f1-8c1d-4844-be0e-be8e651c51f6/1/Xq_GD000CftGyKW_ldOYHxShQ7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/6285f1-8c1d-4844-be0e-be8e651c51f6/1/Xq_GD000CftGyKW_ldOYHxShQ7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xq_GD000CftGyKW_ldOYHxShQ7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:84:45:6e:14:69:1e:5f:b7:f3:83:6a:66:f7:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eafc60f4d3409fb46c8a5bf95d3981f14a143b0
Validity
Not Before: Mar 1 21:01:11 2026 GMT
Not After : Mar 2 21:01:11 2026 GMT
Subject: CN=2cebb7053b360c88491db8d9ff30389676d0b724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:84:d5:0a:ab:22:6d:7d:5d:e8:ba:87:14:aa:
b0:a4:41:a4:d2:39:92:d6:9d:0e:d1:46:56:04:4f:
ce:f1:ac:5b:3a:d9:bb:83:f5:34:fb:c9:ae:b9:09:
da:82:83:f0:34:10:4d:e9:de:c0:62:03:9c:ec:bc:
c3:a1:2b:18:0b:79:91:12:2f:cf:40:30:f7:35:1b:
b4:a7:a7:80:4c:8b:72:a7:30:d0:c7:60:ba:58:4f:
f0:e8:55:33:39:45:ea:87:fc:9a:2d:63:96:a5:5b:
c0:d9:f5:12:b5:3c:82:97:8b:91:5c:2c:07:a5:36:
e7:10:0d:1b:0d:00:ec:9a:65:ec:49:15:db:f0:ff:
30:c4:0b:b7:b6:97:7e:84:81:a7:6d:65:62:62:b9:
2c:4c:4a:b8:fc:f2:0d:52:72:84:eb:fa:0e:57:a8:
73:5b:d1:80:a1:a7:42:36:10:1d:46:f2:09:ed:ac:
fa:29:e6:0d:0b:d4:87:6e:13:62:ad:4e:48:ec:1e:
c9:f4:3f:5f:58:95:5c:9d:b8:60:67:a1:ce:19:d3:
2b:f2:41:ee:eb:4d:51:70:cf:b9:98:97:3b:c1:89:
c2:c1:c2:2e:e7:4d:d1:d6:dd:c6:c1:43:f6:c6:2c:
ec:e0:3f:b3:ad:c6:53:95:19:a3:95:90:b1:c9:3e:
a6:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:EB:B7:05:3B:36:0C:88:49:1D:B8:D9:FF:30:38:96:76:D0:B7:24
X509v3 Authority Key Identifier:
keyid:5E:AF:C6:0F:4D:34:09:FB:46:C8:A5:BF:95:D3:98:1F:14:A1:43:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xq_GD000CftGyKW_ldOYHxShQ7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/6285f1-8c1d-4844-be0e-be8e651c51f6/1/Xq_GD000CftGyKW_ldOYHxShQ7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/6285f1-8c1d-4844-be0e-be8e651c51f6/1/Xq_GD000CftGyKW_ldOYHxShQ7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:39:25:ee:05:bb:49:7c:6b:45:d9:22:9f:d8:7b:f1:66:3a:
68:5c:77:ac:e6:34:17:3a:9c:31:34:50:7b:93:ce:b4:53:d9:
dd:79:c7:be:9d:d1:98:48:24:a8:0f:51:c2:64:ea:ac:36:ab:
9a:cd:5a:ab:d2:3d:c5:a0:fb:69:fa:9e:f9:fb:5f:c7:07:46:
26:77:d9:fd:67:43:62:63:be:ed:a1:ae:4b:9a:93:5a:5d:77:
b4:9a:60:ee:4e:43:08:d5:eb:25:39:d5:6b:4e:69:a8:8c:3a:
5c:82:d6:26:bf:ef:1c:1e:8c:15:73:94:10:46:54:9e:cb:ac:
9a:8e:9b:2d:42:a8:d2:1c:8c:46:0c:70:c9:7d:63:18:9b:fa:
c3:4d:e4:b0:23:41:11:d7:98:9b:ff:0a:5b:0a:7f:8a:d6:5e:
26:b4:ee:6a:cc:78:65:89:1b:5c:03:53:58:27:f2:42:d0:7c:
27:6d:16:20:75:7e:ad:61:3b:12:e9:e7:d2:06:11:78:e1:82:
48:ff:2e:34:d0:5e:7e:dc:ee:3b:6f:57:92:1d:86:f5:14:ec:
71:d6:74:c4:21:a0:b4:89:35:47:7f:ea:c5:b4:8c:82:0f:1b:
5a:45:03:cd:36:52:32:15:9c:8c:aa:55:1d:5d:34:6b:b9:70:
42:08:1c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:52:07 2026 by rpki-client