Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/Gqq6fafI82yLJ1ynOEkc7cy14xI.mft
File: Gqq6fafI82yLJ1ynOEkc7cy14xI.mft (raw, json)
Hash identifier: u3OiHdr0MF2hB88tpZmfvuOLBnZzc4/SKLjmBW6VJCw=
Subject key identifier: CF:7C:EF:98:87:57:58:95:06:AF:77:13:0C:96:7C:55:D5:2D:5C:3C
Authority key identifier: 1A:AA:BA:7D:A7:C8:F3:6C:8B:27:5C:A7:38:49:1C:ED:CC:B5:E3:12
Certificate issuer: /CN=1aaaba7da7c8f36c8b275ca738491cedccb5e312
Certificate serial: 019CA9EAFE9C0D930D37D4D6E0A4D066D9D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gqq6fafI82yLJ1ynOEkc7cy14xI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/Gqq6fafI82yLJ1ynOEkc7cy14xI.mft
Manifest number: 0C54
Signing time: Sun 01 Mar 2026 15:01:15 +0000
Manifest this update: Sun 01 Mar 2026 15:01:15 +0000
Manifest next update: Mon 02 Mar 2026 15:01:15 +0000
Files and hashes: 1: Gqq6fafI82yLJ1ynOEkc7cy14xI.crl (hash: Sjz0d+1NCMhjkXzsepoViCUlrh1hWRLY6AoT5pyZ7NY=)
2: I5ZIgX6iDK3oX7v-xFIQ7pdLpMo.roa (hash: 6PLpfxFxy8Nk7yedlc7CM9dTIiIgGRRx4WDgW5TY2yA=)
3: bs3te7njxydTnYWSP4ChGEGcJkQ.roa (hash: XPxWLnbyz8Llb8yCU48yi3z2ezc69lq+HL61zB6vbh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/Gqq6fafI82yLJ1ynOEkc7cy14xI.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/Gqq6fafI82yLJ1ynOEkc7cy14xI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gqq6fafI82yLJ1ynOEkc7cy14xI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:ea:fe:9c:0d:93:0d:37:d4:d6:e0:a4:d0:66:d9:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aaaba7da7c8f36c8b275ca738491cedccb5e312
Validity
Not Before: Mar 1 15:01:15 2026 GMT
Not After : Mar 2 15:01:15 2026 GMT
Subject: CN=cf7cef988757589506af77130c967c55d52d5c3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:3a:a3:95:d7:84:14:e8:2f:59:88:ba:67:b8:
a7:83:04:80:c9:ec:85:2e:8f:b3:f2:5d:bc:c5:61:
f1:32:76:92:19:80:24:91:25:a7:08:e7:a1:fc:87:
e0:ae:32:a9:28:da:0b:9e:1f:53:5d:c1:9f:e5:e0:
25:c0:5c:80:9b:aa:39:58:a4:80:9e:02:49:be:d2:
a9:f4:87:b8:36:15:f5:bb:c2:6a:3b:a9:a8:cb:b7:
a0:a4:cd:b4:fb:3f:8f:2f:2c:fc:e9:d4:e4:a2:33:
d4:ab:6b:25:05:f4:85:e0:d6:d1:ae:0e:5c:5c:96:
cc:2f:3c:d2:bc:11:f9:55:28:c5:e1:c0:c1:1b:19:
d6:37:c6:65:5b:8f:39:55:cc:5f:fb:79:55:4d:96:
b1:ad:d5:0e:e2:fa:24:8a:a4:f1:bf:c8:09:bb:2f:
31:f3:3f:40:84:d2:7b:4c:b6:4b:b2:7b:68:f9:44:
a6:18:dd:99:4d:d9:c6:2a:e0:b8:c9:69:ba:01:03:
3f:4f:b5:a4:97:e9:43:96:ef:22:01:64:30:cc:12:
b7:1c:30:40:17:68:32:cc:fe:c9:4a:17:e5:22:57:
bb:f3:ca:a4:ee:f1:b6:17:49:f0:7c:33:d1:ae:08:
c9:61:ed:6f:8f:5d:a8:de:43:8d:97:53:3b:63:07:
ff:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:7C:EF:98:87:57:58:95:06:AF:77:13:0C:96:7C:55:D5:2D:5C:3C
X509v3 Authority Key Identifier:
keyid:1A:AA:BA:7D:A7:C8:F3:6C:8B:27:5C:A7:38:49:1C:ED:CC:B5:E3:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gqq6fafI82yLJ1ynOEkc7cy14xI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/Gqq6fafI82yLJ1ynOEkc7cy14xI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/Gqq6fafI82yLJ1ynOEkc7cy14xI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:8a:e6:0d:d6:5d:16:c8:f4:5a:d8:bb:6e:5e:be:13:8d:ed:
9b:3c:33:04:1f:89:ba:74:9a:1e:52:9b:84:6e:82:36:c7:65:
0b:76:49:7e:69:32:eb:60:11:9c:7b:78:03:9e:77:7c:6b:bf:
82:82:ed:b8:b8:29:ed:af:44:d7:6c:3c:a9:3b:01:24:67:7a:
da:d5:ac:57:bb:d9:d8:e4:85:31:e7:9f:1b:92:08:4d:cb:3e:
a8:73:e3:32:44:7b:6e:34:12:62:6b:49:a0:62:26:d3:4d:1a:
31:32:a4:fd:e3:12:6f:86:85:57:ce:10:bc:2f:f9:5d:df:ee:
bd:3a:99:1f:3d:4e:39:21:46:85:aa:70:7c:cb:82:07:7d:60:
3e:09:d1:73:1a:48:53:e9:a4:1e:67:b6:3b:4c:08:48:b9:29:
b0:db:e6:48:42:76:aa:f5:b4:dd:9e:46:e6:77:23:59:d9:db:
de:31:b7:61:26:76:b8:16:c7:ce:3c:15:89:fa:a1:fb:98:6f:
b7:24:ee:0e:fc:03:81:46:bc:da:f3:63:58:5a:cf:12:fc:4a:
d6:3c:cb:8b:ec:a8:ae:5a:9e:90:11:8f:49:16:8c:06:e1:d9:
c4:66:d3:4d:76:ae:20:52:7c:e6:86:17:79:bf:ce:26:9b:11:
03:77:3f:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:35 2026 by rpki-client