Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.mft
File: GqCjKMb-DxvKXmWZBC3_WeUTsl0.mft (raw, json)
Hash identifier: EE7y7GKK6vwMLe1s2pGFVR2y2AYH9dGLfQtE/UjjvQU=
Subject key identifier: D6:8A:E7:9F:58:9C:48:30:C6:44:67:EA:B0:E8:B3:36:8F:51:DC:7A
Authority key identifier: 1A:A0:A3:28:C6:FE:0F:1B:CA:5E:65:99:04:2D:FF:59:E5:13:B2:5D
Certificate issuer: /CN=1aa0a328c6fe0f1bca5e6599042dff59e513b25d
Certificate serial: 019CAC7E190826A209AFFDD6DF36D33D36C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GqCjKMb-DxvKXmWZBC3_WeUTsl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.mft
Manifest number: 0FFE
Signing time: Mon 02 Mar 2026 03:01:10 +0000
Manifest this update: Mon 02 Mar 2026 03:01:10 +0000
Manifest next update: Tue 03 Mar 2026 03:01:10 +0000
Files and hashes: 1: 1-w__FgVbYGEvZzX5G7Wv6WpQMFc.roa (hash: YyyT93IM4vslKyEiZRnugviu0gDWs5kVRFPzXEYy/e4=)
2: GqCjKMb-DxvKXmWZBC3_WeUTsl0.crl (hash: 7hufvcGLoDG0vinVWwpKxsqdWT/YHO2lBLNLnBdslv0=)
3: Sy_QSnV4oKxcnxQ4UaY7HAFaAQY.roa (hash: mPfUVg1yW0xKUezEUlUR8Yt63tdbh4K/MBcEri0pjgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GqCjKMb-DxvKXmWZBC3_WeUTsl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 03:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:19:08:26:a2:09:af:fd:d6:df:36:d3:3d:36:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aa0a328c6fe0f1bca5e6599042dff59e513b25d
Validity
Not Before: Mar 2 03:01:10 2026 GMT
Not After : Mar 3 03:01:10 2026 GMT
Subject: CN=d68ae79f589c4830c64467eab0e8b3368f51dc7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ad:ec:3d:9b:62:93:98:91:5e:62:9e:9b:ab:
dc:d1:12:b0:bf:55:19:c9:2d:1d:3f:db:15:66:69:
c5:54:de:07:08:57:8d:43:62:57:db:ba:46:83:1f:
75:2a:a5:ea:f5:cd:cf:36:87:94:51:b9:3f:5b:4a:
e2:63:85:7b:a0:f8:14:cb:aa:2d:ce:8f:bf:6c:d1:
7f:25:4b:9d:97:19:96:68:03:9c:25:9a:3b:6b:8f:
ee:e3:87:b9:64:04:99:9c:39:97:b3:30:ea:90:a0:
0e:e0:88:8d:70:f5:e5:19:ac:57:bc:b2:35:a1:6e:
a4:de:c9:3b:61:c9:f5:29:cd:f9:ef:0e:47:1a:18:
f8:c2:9d:b7:f6:b2:00:4d:cc:d9:31:50:fa:aa:a7:
96:d1:b6:24:98:1e:c7:53:0e:7d:ba:ec:ba:d0:64:
4b:2b:06:57:10:0b:72:46:41:eb:56:fe:67:72:a1:
a4:2a:80:65:bf:07:68:67:9f:1c:dd:73:20:bd:5a:
43:ee:35:b0:54:7b:50:65:78:46:e3:ca:ae:56:7d:
5f:59:8e:1d:7e:12:86:c6:8c:10:c7:ca:dc:34:5a:
d9:5c:f2:25:5f:07:7b:ef:e1:dc:8c:b3:b8:82:63:
65:c4:28:a9:64:1c:c2:51:d0:3e:31:1a:4d:16:a8:
62:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:8A:E7:9F:58:9C:48:30:C6:44:67:EA:B0:E8:B3:36:8F:51:DC:7A
X509v3 Authority Key Identifier:
keyid:1A:A0:A3:28:C6:FE:0F:1B:CA:5E:65:99:04:2D:FF:59:E5:13:B2:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GqCjKMb-DxvKXmWZBC3_WeUTsl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:2b:f3:68:8c:f2:93:ec:95:59:40:18:51:85:1a:9f:c2:53:
a8:be:14:e1:7a:19:1b:7d:b0:3d:29:41:7e:24:63:ae:cb:e3:
03:72:3d:1c:fe:61:05:b7:11:de:97:a0:a4:69:d3:2b:c1:49:
ae:b5:2e:90:56:12:ea:09:9a:4b:6e:fd:3d:25:6f:d7:72:e0:
9a:15:95:4d:11:39:0a:d1:c9:d2:ee:18:4e:9f:8a:9b:36:3d:
63:97:19:0b:39:c1:16:f9:ce:24:f3:26:cd:af:c7:d4:ee:ac:
d5:0f:cf:d3:76:e3:04:a3:81:80:ca:0f:de:2e:e3:88:80:21:
c1:b9:be:cc:28:e5:13:f3:20:31:62:64:43:da:95:be:8a:56:
7e:3f:ce:6e:1d:db:10:89:8a:a5:f7:15:11:7a:f4:bb:dd:c6:
d3:f3:e8:d3:ae:ef:33:4b:c9:52:29:2e:c6:76:10:27:fd:c6:
b0:84:fc:7e:d0:65:33:ba:a9:7d:22:36:0d:87:f6:0e:e4:85:
b2:e8:07:5c:c2:38:94:73:5e:57:72:8a:f3:75:0d:e1:8e:76:
dd:59:ea:43:ec:1e:7f:e6:99:36:76:98:13:12:5f:e6:4a:49:
c0:f7:49:2c:83:d2:dc:8f:78:f8:dd:8a:39:39:f0:da:f9:eb:
cb:48:f5:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:49:45 2026 by rpki-client