Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.mft
File: GqCjKMb-DxvKXmWZBC3_WeUTsl0.mft (raw, json)
Hash identifier: DnaqP7RXRGFZbiAyhkTQfk7BOQa3uXsA2Z720EG7QcE=
Subject key identifier: 3F:48:C3:18:9F:D8:13:C5:83:EA:D9:FF:C6:DF:1C:4A:BD:7F:F0:49
Authority key identifier: 1A:A0:A3:28:C6:FE:0F:1B:CA:5E:65:99:04:2D:FF:59:E5:13:B2:5D
Certificate issuer: /CN=1aa0a328c6fe0f1bca5e6599042dff59e513b25d
Certificate serial: 019CAE6C5A9FE97EDCA90A17C6B438F63C56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GqCjKMb-DxvKXmWZBC3_WeUTsl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.mft
Manifest number: 0FFF
Signing time: Mon 02 Mar 2026 12:01:02 +0000
Manifest this update: Mon 02 Mar 2026 12:01:02 +0000
Manifest next update: Tue 03 Mar 2026 12:01:02 +0000
Files and hashes: 1: 1-w__FgVbYGEvZzX5G7Wv6WpQMFc.roa (hash: YyyT93IM4vslKyEiZRnugviu0gDWs5kVRFPzXEYy/e4=)
2: GqCjKMb-DxvKXmWZBC3_WeUTsl0.crl (hash: dN73vQdWS4BC0FgyeV/Xip4va7esf5Zlhb+tQh4dJRc=)
3: Sy_QSnV4oKxcnxQ4UaY7HAFaAQY.roa (hash: mPfUVg1yW0xKUezEUlUR8Yt63tdbh4K/MBcEri0pjgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GqCjKMb-DxvKXmWZBC3_WeUTsl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:6c:5a:9f:e9:7e:dc:a9:0a:17:c6:b4:38:f6:3c:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aa0a328c6fe0f1bca5e6599042dff59e513b25d
Validity
Not Before: Mar 2 12:01:02 2026 GMT
Not After : Mar 3 12:01:02 2026 GMT
Subject: CN=3f48c3189fd813c583ead9ffc6df1c4abd7ff049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4f:78:2e:22:51:0a:93:20:a3:ce:f7:13:db:
2f:f1:50:da:b1:54:f6:88:22:70:c6:49:1b:38:5b:
27:66:dd:7f:10:5b:a4:c0:8b:b1:99:4c:de:a2:50:
28:99:36:69:d2:93:20:5a:e3:15:42:17:84:bc:ac:
38:37:07:75:77:c0:35:bb:bf:5e:65:1a:cb:86:13:
6a:7c:c9:4c:29:9f:89:13:c5:cf:77:28:e2:36:a8:
ef:06:93:29:68:4f:0d:4b:ee:5d:d6:fb:19:18:a8:
2a:7e:e9:ee:a9:ba:d2:78:ff:66:0b:cb:38:1b:19:
7c:7e:16:58:90:7d:0e:52:c2:c9:17:ce:67:09:bb:
bc:92:e4:5e:8d:2e:94:39:4e:ed:28:e0:0b:37:88:
51:bb:5f:07:59:d8:40:ac:35:b9:d7:73:a4:8d:54:
63:07:fc:39:b8:ce:bc:3d:5a:af:16:26:b2:90:af:
62:14:43:3f:3e:09:27:a0:29:3a:dd:97:9d:94:b7:
99:91:90:5d:2e:ce:7e:53:bf:5e:da:00:ab:49:24:
3d:73:29:97:26:62:f6:e5:58:2b:84:91:a1:fd:e0:
c7:e8:6e:29:b1:34:cf:8b:78:cc:00:62:67:c5:b0:
cc:c7:b6:04:6a:a5:d5:66:44:c5:09:ee:0d:c0:8e:
67:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:48:C3:18:9F:D8:13:C5:83:EA:D9:FF:C6:DF:1C:4A:BD:7F:F0:49
X509v3 Authority Key Identifier:
keyid:1A:A0:A3:28:C6:FE:0F:1B:CA:5E:65:99:04:2D:FF:59:E5:13:B2:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GqCjKMb-DxvKXmWZBC3_WeUTsl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:92:ea:56:0e:ea:5b:25:a9:21:ee:47:c3:c0:60:88:76:f2:
57:eb:bc:70:1f:e7:e7:ea:59:4f:01:c0:fa:65:4e:88:f7:40:
ec:45:a2:7e:a8:f0:34:14:f9:4c:05:d0:48:2d:e0:79:a7:55:
36:01:85:29:70:dd:cb:cc:cb:08:a8:31:19:90:f7:e3:e6:55:
fd:a9:af:28:92:38:d2:0e:ff:d1:b6:5e:4b:13:c2:4b:2e:5b:
24:d4:a8:77:73:c1:6c:94:b3:44:48:71:56:9e:72:dc:41:7b:
e3:6c:3f:35:b8:91:d9:51:2b:bf:62:05:50:51:81:55:57:92:
04:10:e9:54:80:bf:57:f1:3c:ab:2e:65:6b:b5:8e:16:68:ff:
3a:85:83:de:67:76:0e:c3:b4:7c:42:e7:a3:2a:df:16:db:0c:
97:36:14:b4:fe:1f:3f:4d:17:42:3f:e5:6d:7f:ba:e1:a5:ff:
6a:87:83:e3:f1:d3:4b:17:a1:96:74:28:15:29:4e:00:fd:a5:
aa:96:8f:97:73:f7:8a:c6:d2:04:81:0a:44:cd:14:54:3f:94:
25:58:21:9c:31:0b:5e:67:75:ea:de:9d:83:67:71:2a:a4:d4:
a4:c2:c3:75:74:ed:01:7c:5f:28:f0:90:f0:b8:1a:7b:2d:dd:
10:0c:76:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:25:58 2026 by rpki-client