Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/Gqq6fafI82yLJ1ynOEkc7cy14xI.mft
File: Gqq6fafI82yLJ1ynOEkc7cy14xI.mft (raw, json)
Hash identifier: ngx46zQyVF3sVR0cVCaAcK4GZyW0UyRHzqYp1y+z7oY=
Subject key identifier: 5F:A6:18:75:24:A3:03:15:37:C4:B6:F3:4A:0E:EA:79:2B:16:38:6D
Authority key identifier: 1A:AA:BA:7D:A7:C8:F3:6C:8B:27:5C:A7:38:49:1C:ED:CC:B5:E3:12
Certificate issuer: /CN=1aaaba7da7c8f36c8b275ca738491cedccb5e312
Certificate serial: 019D99622DC0830541C86B9DF92CDC9770B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gqq6fafI82yLJ1ynOEkc7cy14xI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/Gqq6fafI82yLJ1ynOEkc7cy14xI.mft
Manifest number: 0CD0
Signing time: Fri 17 Apr 2026 03:00:41 +0000
Manifest this update: Fri 17 Apr 2026 03:00:41 +0000
Manifest next update: Sat 18 Apr 2026 03:00:41 +0000
Files and hashes: 1: Gqq6fafI82yLJ1ynOEkc7cy14xI.crl (hash: QX82aggF7wk4sLyCVNgQOH39L1Sv8zWOG7NpqcRzoM4=)
2: I5ZIgX6iDK3oX7v-xFIQ7pdLpMo.roa (hash: 6PLpfxFxy8Nk7yedlc7CM9dTIiIgGRRx4WDgW5TY2yA=)
3: bs3te7njxydTnYWSP4ChGEGcJkQ.roa (hash: XPxWLnbyz8Llb8yCU48yi3z2ezc69lq+HL61zB6vbh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/Gqq6fafI82yLJ1ynOEkc7cy14xI.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/Gqq6fafI82yLJ1ynOEkc7cy14xI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gqq6fafI82yLJ1ynOEkc7cy14xI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:2d:c0:83:05:41:c8:6b:9d:f9:2c:dc:97:70:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aaaba7da7c8f36c8b275ca738491cedccb5e312
Validity
Not Before: Apr 17 03:00:41 2026 GMT
Not After : Apr 18 03:00:41 2026 GMT
Subject: CN=5fa6187524a3031537c4b6f34a0eea792b16386d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:83:31:29:0d:ca:19:a7:7a:4d:ea:9c:16:0c:
43:d7:83:5d:29:18:46:dd:04:94:a5:c8:c4:d5:17:
a4:bb:ea:45:64:80:d6:96:8d:32:82:0b:0f:b7:33:
df:a0:4c:d3:b0:6c:d7:42:7b:f5:3c:ff:da:76:00:
d1:6b:62:2d:c9:fa:d1:c2:a7:d4:7c:75:f5:e3:9a:
b3:a9:34:d3:cc:df:bf:21:a3:23:ac:fd:82:55:4b:
5c:a8:41:8f:3e:c6:4f:be:3a:cf:08:bd:39:62:1f:
85:53:ba:73:27:15:46:7f:68:d7:76:09:a3:48:3e:
2e:93:c7:d2:6d:c7:24:a2:05:dc:91:fa:46:b9:bd:
f2:18:03:87:5a:fd:93:32:b7:be:d0:e4:ef:e4:c8:
e0:e8:b3:9a:88:99:f0:b3:04:3e:a6:39:0a:61:6e:
b0:2f:a9:1b:34:d7:fa:cd:b1:6a:56:c7:d3:ab:f6:
cd:6b:0c:3d:9a:af:6c:c0:a3:ec:56:59:cd:d5:af:
ac:db:f7:da:ae:f4:b9:06:b0:2e:a2:ef:8e:11:38:
74:9c:0e:a0:ee:ed:57:2b:16:b3:38:e0:15:31:4e:
be:be:2b:9b:61:69:a1:4b:0c:92:3f:fe:36:58:e2:
fc:45:71:d3:b9:85:8e:be:b6:b0:c7:ed:73:5d:aa:
95:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:A6:18:75:24:A3:03:15:37:C4:B6:F3:4A:0E:EA:79:2B:16:38:6D
X509v3 Authority Key Identifier:
keyid:1A:AA:BA:7D:A7:C8:F3:6C:8B:27:5C:A7:38:49:1C:ED:CC:B5:E3:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gqq6fafI82yLJ1ynOEkc7cy14xI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/Gqq6fafI82yLJ1ynOEkc7cy14xI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/Gqq6fafI82yLJ1ynOEkc7cy14xI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:ad:d1:fe:46:7f:63:77:d7:e6:65:37:40:92:80:97:a2:f2:
c5:92:79:80:18:84:70:11:58:b8:ae:58:46:55:79:9e:c2:bd:
d6:b4:f5:93:7c:4e:2f:6c:dd:90:d0:a2:ba:b2:33:4d:c5:e4:
62:1d:3d:80:fa:db:fd:e9:31:05:5a:55:b3:89:36:57:c4:a3:
6d:f8:dd:e0:ab:29:b4:85:94:3c:b3:6f:3d:e6:39:c4:c5:2f:
24:d5:5e:ff:2b:70:83:c2:24:80:d1:fe:98:1a:6a:34:d8:ee:
26:b9:f3:9a:26:41:ec:9a:db:b1:00:30:b1:dd:3e:3d:65:fa:
01:95:5d:16:9e:9e:b9:06:da:0f:63:9c:1a:ee:a3:13:d5:ae:
7a:df:a6:f4:d4:7b:75:81:5d:fd:67:e5:7c:0a:de:ba:22:28:
d7:c2:1c:dd:a5:b6:d9:ce:ee:15:5f:99:64:8e:f9:b6:b6:3d:
63:a0:b6:48:db:f4:22:71:25:98:e2:04:e6:81:09:2e:b0:85:
93:29:3b:0d:bd:03:5e:d0:c5:56:6e:4c:de:6b:bb:f0:d6:d6:
2f:0e:03:04:c6:51:5f:e2:6e:9d:9a:77:4b:28:c0:90:d9:7e:
57:01:9f:d2:36:53:b3:f5:a4:95:b6:1d:0c:bf:1c:f2:18:3f:
7e:22:e9:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:35:30 2026 by rpki-client