Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/974ea2-40af-4ef6-b6c7-fdcd9fd9bb03/1/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.mft
File: GQ0wDmrNH5iV_OO1q-OKXwBYTVU.mft (raw, json)
Hash identifier: SicRT4OSXbtWMYNQqvcvngCjpBajw5EbRY8icd1MAYw=
Subject key identifier: 7B:B2:DD:0F:16:0E:AF:C5:C3:88:30:AD:9B:E0:AC:4E:77:58:C8:B7
Authority key identifier: 19:0D:30:0E:6A:CD:1F:98:95:FC:E3:B5:AB:E3:8A:5F:00:58:4D:55
Certificate issuer: /CN=190d300e6acd1f9895fce3b5abe38a5f00584d55
Certificate serial: 019CAD5954EAA5D7507D84AB0EA37D48D0FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/974ea2-40af-4ef6-b6c7-fdcd9fd9bb03/1/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.mft
Manifest number: 1843
Signing time: Mon 02 Mar 2026 07:00:38 +0000
Manifest this update: Mon 02 Mar 2026 07:00:38 +0000
Manifest next update: Tue 03 Mar 2026 07:00:38 +0000
Files and hashes: 1: GQ0wDmrNH5iV_OO1q-OKXwBYTVU.crl (hash: hTsXxQXfAe9xU5coWbCXfjfaj06X3/fncSYDedh15v8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/974ea2-40af-4ef6-b6c7-fdcd9fd9bb03/1/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/974ea2-40af-4ef6-b6c7-fdcd9fd9bb03/1/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:54:ea:a5:d7:50:7d:84:ab:0e:a3:7d:48:d0:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=190d300e6acd1f9895fce3b5abe38a5f00584d55
Validity
Not Before: Mar 2 07:00:38 2026 GMT
Not After : Mar 3 07:00:38 2026 GMT
Subject: CN=7bb2dd0f160eafc5c38830ad9be0ac4e7758c8b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:12:42:1b:27:fd:e0:e1:6e:8a:19:d5:37:1b:
81:85:ee:03:bd:59:1a:fb:a7:b6:a8:1e:d9:25:8f:
50:db:6c:20:fa:4c:8f:ac:b7:58:7a:bd:30:1b:34:
0d:4c:3a:cd:c7:18:06:64:2c:95:1f:62:3a:57:28:
9b:49:f3:a8:0a:b1:6d:9c:cc:2d:96:93:b4:fe:2e:
57:e4:41:39:dd:5b:48:5c:15:b1:1d:79:4c:ee:61:
66:d9:d8:f4:3a:6b:58:ef:de:04:26:c0:5c:1e:ef:
1c:e8:49:b5:a7:60:94:d3:7f:ac:93:6c:6b:c3:12:
2c:08:3d:24:e9:25:38:0d:45:e7:d2:46:42:a8:9f:
df:c7:94:c4:fd:86:9b:f8:a7:6e:ac:e1:62:bf:ff:
d6:ed:70:52:65:a3:58:62:45:16:f9:5a:70:d8:cc:
fd:86:be:63:8d:65:64:92:b3:d6:47:ed:1f:f8:40:
38:a0:55:b5:1b:58:20:4d:74:36:d8:d7:98:7b:75:
b1:b8:70:3f:f0:46:96:4d:2f:c2:b3:9e:36:43:e1:
48:07:63:8c:29:ab:e3:b9:f9:93:b1:85:9e:d6:ae:
98:ba:6a:00:b9:3b:f5:4f:fc:4e:10:26:d2:6e:97:
40:41:3c:23:5b:b4:85:e6:bf:50:23:02:0b:90:bf:
24:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:B2:DD:0F:16:0E:AF:C5:C3:88:30:AD:9B:E0:AC:4E:77:58:C8:B7
X509v3 Authority Key Identifier:
keyid:19:0D:30:0E:6A:CD:1F:98:95:FC:E3:B5:AB:E3:8A:5F:00:58:4D:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/974ea2-40af-4ef6-b6c7-fdcd9fd9bb03/1/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/974ea2-40af-4ef6-b6c7-fdcd9fd9bb03/1/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:d6:c0:64:05:5f:74:b2:0f:79:8f:40:9c:87:2d:8b:27:6b:
f7:66:bf:db:cf:85:ee:3f:47:d4:f4:6b:a2:f6:6a:0e:f5:98:
ce:44:51:01:70:41:f2:2d:76:c1:20:f0:d6:88:10:85:e1:2b:
a3:5f:17:08:78:2b:63:2b:92:0d:76:8a:6d:32:3c:f8:c8:af:
bb:39:85:01:88:49:84:1c:6f:56:24:31:d5:8c:e1:b5:60:f4:
74:54:e2:98:66:7c:ca:4c:37:d5:60:a3:f9:44:27:b8:92:ea:
63:71:7e:a9:02:dd:ee:32:ca:7f:24:85:9e:ab:50:7c:61:25:
70:99:3f:66:70:a7:1c:18:d0:44:81:6e:89:de:5e:ec:46:58:
77:ed:5d:61:f4:31:8e:59:91:79:10:26:42:ff:f8:b8:f0:96:
45:99:59:29:ad:23:95:b2:1f:f2:18:23:3b:f6:05:90:a2:9a:
6d:f8:6b:cc:e0:e1:02:42:c5:e1:05:2c:bd:ae:e3:de:6f:1a:
12:1f:87:8d:3a:2f:c4:1d:05:7a:5c:3d:ef:74:37:9a:5d:58:
29:6b:db:ef:96:5b:de:2a:fb:21:40:27:fb:8d:58:5b:98:d8:
6b:a9:75:b9:f7:a5:56:6a:6d:95:4c:d4:bd:04:8c:01:c3:5b:
9a:75:fe:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:10:05 2026 by rpki-client