Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/Gqq6fafI82yLJ1ynOEkc7cy14xI.mft
File: Gqq6fafI82yLJ1ynOEkc7cy14xI.mft (raw, json)
Hash identifier: S2PYqgMBoi4AgGLg0In4u0QoK92dOrCKA1TPciBJfSk=
Subject key identifier: A2:DE:93:34:3D:98:46:37:81:D3:A9:55:C3:AA:10:E9:0C:BF:30:F5
Authority key identifier: 1A:AA:BA:7D:A7:C8:F3:6C:8B:27:5C:A7:38:49:1C:ED:CC:B5:E3:12
Certificate issuer: /CN=1aaaba7da7c8f36c8b275ca738491cedccb5e312
Certificate serial: 01A0E3637AE2C66A9329D2476E8C14A551DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gqq6fafI82yLJ1ynOEkc7cy14xI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/Gqq6fafI82yLJ1ynOEkc7cy14xI.mft
Manifest number: 0E84
Signing time: Sun 27 Sep 2026 15:02:22 +0000
Manifest this update: Sun 27 Sep 2026 15:02:22 +0000
Manifest next update: Mon 28 Sep 2026 15:02:22 +0000
Files and hashes: 1: Gqq6fafI82yLJ1ynOEkc7cy14xI.crl (hash: 4+gZoSPqQxnqFMAN+OlLl8gTSLU96WHVuyL3haCLL9M=)
2: I5ZIgX6iDK3oX7v-xFIQ7pdLpMo.roa (hash: 6PLpfxFxy8Nk7yedlc7CM9dTIiIgGRRx4WDgW5TY2yA=)
3: bs3te7njxydTnYWSP4ChGEGcJkQ.roa (hash: XPxWLnbyz8Llb8yCU48yi3z2ezc69lq+HL61zB6vbh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/Gqq6fafI82yLJ1ynOEkc7cy14xI.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/Gqq6fafI82yLJ1ynOEkc7cy14xI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gqq6fafI82yLJ1ynOEkc7cy14xI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 10:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:63:7a:e2:c6:6a:93:29:d2:47:6e:8c:14:a5:51:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aaaba7da7c8f36c8b275ca738491cedccb5e312
Validity
Not Before: Sep 27 15:02:22 2026 GMT
Not After : Sep 28 15:02:22 2026 GMT
Subject: CN=a2de93343d98463781d3a955c3aa10e90cbf30f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:88:48:1a:ad:6a:93:36:2f:e5:96:90:3c:d7:
45:fe:61:c4:37:1a:6f:6f:31:09:f7:7b:cc:43:e9:
4a:9d:7c:f5:4d:f0:74:f6:cb:de:f3:04:8c:2a:38:
8e:4a:8b:3f:b0:0c:24:c0:1a:ff:a7:fc:4f:a5:26:
d6:89:c8:8c:7a:b9:c2:a7:64:00:f1:fa:5f:f4:36:
80:36:ea:8f:21:36:7c:a3:d7:43:97:2d:f8:98:e7:
c1:99:7a:ad:11:67:fd:f3:77:ac:5b:35:36:91:42:
c4:e4:c9:59:49:f6:c3:73:5e:fd:2a:0c:29:a3:4a:
ff:ad:20:c1:7a:1a:2f:58:fd:75:d1:e7:54:62:68:
96:4d:25:f6:65:f1:9a:a3:7e:48:a9:23:a9:97:6f:
04:40:3c:80:84:dc:32:12:6c:6e:34:80:a3:51:54:
9d:7b:e8:7c:8a:0d:cc:6e:c1:ac:01:e3:04:07:17:
6a:a3:8a:26:97:dc:87:8f:ad:1d:67:d5:50:11:7c:
5a:0b:27:ab:6f:8a:30:44:3b:56:9a:ab:de:4f:41:
e7:8c:0b:b1:95:41:e3:b6:63:7c:0f:cd:46:cd:7d:
c1:ce:b1:69:41:99:55:0e:10:12:63:a5:36:2c:d5:
3e:c4:6c:bb:15:16:c0:75:33:77:86:a8:f2:0c:9b:
79:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:DE:93:34:3D:98:46:37:81:D3:A9:55:C3:AA:10:E9:0C:BF:30:F5
X509v3 Authority Key Identifier:
keyid:1A:AA:BA:7D:A7:C8:F3:6C:8B:27:5C:A7:38:49:1C:ED:CC:B5:E3:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gqq6fafI82yLJ1ynOEkc7cy14xI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/Gqq6fafI82yLJ1ynOEkc7cy14xI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/Gqq6fafI82yLJ1ynOEkc7cy14xI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:f7:90:2b:c7:2f:97:47:e6:da:89:fc:28:97:e5:cc:fb:91:
9d:a0:37:6c:b1:43:11:e0:df:ef:0f:ae:5b:98:6e:a4:83:3f:
a8:72:ab:00:2d:e3:c6:00:2b:d2:12:28:ab:23:98:a2:30:f8:
83:1e:d6:8d:34:fc:81:8f:b1:bc:f4:48:3d:2f:0d:ff:6c:42:
4b:c5:69:28:98:f4:f2:0c:ae:cd:98:d1:57:ed:54:91:4f:e9:
e2:cf:8d:69:b3:f5:e1:15:38:94:ec:62:2d:43:34:d0:6c:ba:
d8:07:ac:57:cf:96:b8:39:ec:b4:d8:76:2a:6c:28:7d:d9:8e:
99:a7:5e:c9:1b:7b:9d:d3:50:32:b6:f2:b8:46:35:2a:b6:e4:
6b:f8:ff:24:02:9a:7b:c7:ed:21:cf:9b:0a:cc:5e:92:5a:ef:
6e:aa:ef:be:d7:e2:c8:c1:96:18:a6:e6:3c:53:8c:19:36:b4:
b5:95:34:02:5b:82:6a:79:b4:4d:bc:e1:58:1f:71:a2:35:58:
ae:61:e9:15:b3:13:9b:72:dc:94:50:56:a6:13:4d:a3:de:7f:
4e:05:5a:43:2c:82:13:5e:b5:68:8e:71:ee:8b:50:6e:fe:df:
5e:48:13:18:b3:a7:7b:59:9d:19:a7:09:8a:6a:95:5e:2d:e5:
31:fc:be:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 21:53:44 2026 by rpki-client