Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.mft
File: GqCjKMb-DxvKXmWZBC3_WeUTsl0.mft (raw, json)
Hash identifier: DvVyM7UOcWapKTrIpRtTWRTgndd2PyHMlmgI9ONpGjA=
Subject key identifier: F2:D9:85:44:20:D7:7F:92:17:E6:01:A5:86:8D:15:96:38:88:FC:C9
Authority key identifier: 1A:A0:A3:28:C6:FE:0F:1B:CA:5E:65:99:04:2D:FF:59:E5:13:B2:5D
Certificate issuer: /CN=1aa0a328c6fe0f1bca5e6599042dff59e513b25d
Certificate serial: 019DA3AEE16DF341DDADC8ED4D019FEF5205
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GqCjKMb-DxvKXmWZBC3_WeUTsl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.mft
Manifest number: 107E
Signing time: Sun 19 Apr 2026 03:00:40 +0000
Manifest this update: Sun 19 Apr 2026 03:00:40 +0000
Manifest next update: Mon 20 Apr 2026 03:00:40 +0000
Files and hashes: 1: 1-w__FgVbYGEvZzX5G7Wv6WpQMFc.roa (hash: YyyT93IM4vslKyEiZRnugviu0gDWs5kVRFPzXEYy/e4=)
2: GqCjKMb-DxvKXmWZBC3_WeUTsl0.crl (hash: V7vX45j9H0mRmKPUQ0GZlfEZheR/MTn14uw3aE0A7RQ=)
3: Sy_QSnV4oKxcnxQ4UaY7HAFaAQY.roa (hash: mPfUVg1yW0xKUezEUlUR8Yt63tdbh4K/MBcEri0pjgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GqCjKMb-DxvKXmWZBC3_WeUTsl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:ae:e1:6d:f3:41:dd:ad:c8:ed:4d:01:9f:ef:52:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aa0a328c6fe0f1bca5e6599042dff59e513b25d
Validity
Not Before: Apr 19 03:00:40 2026 GMT
Not After : Apr 20 03:00:40 2026 GMT
Subject: CN=f2d9854420d77f9217e601a5868d15963888fcc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:66:24:41:8d:f8:99:8c:04:2b:c4:34:b3:6f:
32:1c:b6:09:3e:2d:8b:cb:ea:84:83:1a:fb:54:63:
10:40:f2:e6:1d:7f:5e:ec:b2:9b:bc:23:d4:77:c1:
b5:00:8a:c0:01:69:c9:10:9c:b1:ca:33:6b:66:bb:
e4:6b:0c:eb:60:dd:49:eb:5a:57:86:de:ab:2b:fd:
93:10:9a:2c:44:35:b4:8f:81:22:ea:a3:49:b9:8f:
6e:06:8c:8e:6e:c1:30:6b:90:bd:6f:05:7c:79:ea:
7c:8f:55:7f:96:33:57:a8:f3:27:dc:9d:45:8d:eb:
9a:ce:1d:ae:68:e9:ab:e2:c8:1b:30:8c:44:74:84:
81:f1:f6:f0:16:9c:36:98:e4:96:11:3a:aa:6d:db:
f5:56:1a:df:de:3c:7e:2e:41:4c:d6:e7:b0:e1:79:
92:f6:67:8b:3e:4d:32:b2:2e:24:f9:45:71:a4:a1:
f2:c8:fa:a4:6a:9b:43:5d:d1:e7:7d:3c:6c:de:51:
1f:a5:24:f6:f3:e4:ba:37:bf:d3:2d:57:9c:99:e3:
f4:5b:51:9c:61:d3:6a:e9:bd:e2:f6:e7:f5:3d:2b:
f7:23:8f:c7:8f:15:7d:6d:b5:dd:b7:40:77:79:b3:
af:d6:e9:f9:a7:7d:85:14:58:a2:b6:a8:d2:ae:1e:
07:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:D9:85:44:20:D7:7F:92:17:E6:01:A5:86:8D:15:96:38:88:FC:C9
X509v3 Authority Key Identifier:
keyid:1A:A0:A3:28:C6:FE:0F:1B:CA:5E:65:99:04:2D:FF:59:E5:13:B2:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GqCjKMb-DxvKXmWZBC3_WeUTsl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:69:68:ec:97:17:09:1e:8d:37:a3:25:05:d2:e3:4c:98:6f:
e2:83:14:7d:48:c7:40:1d:7b:a3:da:e5:3e:b2:ba:15:75:03:
f4:85:6c:7d:f4:e9:17:03:0d:46:80:dd:d6:88:db:26:6d:d2:
db:21:f6:a5:45:5f:83:58:60:56:04:84:b8:b5:3b:8e:b7:e8:
ea:4d:54:12:b0:75:0f:97:78:4d:d6:5d:c4:c3:13:8f:32:23:
97:97:31:62:91:97:52:99:bd:8f:71:05:f9:26:77:0c:f8:b7:
ff:0e:9f:ab:51:49:92:dc:95:65:0e:3c:b6:85:92:ed:ec:28:
42:6f:6a:d7:dc:de:22:c0:5f:97:33:64:5b:61:6d:04:f0:c7:
81:2d:b0:0a:61:f5:61:98:f8:5a:83:1e:f4:5d:83:ea:a2:e7:
e3:62:38:e2:67:8c:11:bc:38:72:d1:a7:7d:a2:7f:80:e1:e1:
ee:00:f8:ba:50:2a:86:2f:02:74:ec:7f:dc:93:30:ed:dc:ff:
2c:62:8d:5c:7a:c9:71:33:2a:58:1a:5a:bf:22:97:7e:c2:92:
f1:6b:40:41:9a:52:b9:8f:a6:56:cb:ef:ca:85:aa:1c:0b:c4:
e4:17:24:dd:d3:8a:21:4a:0b:25:ab:2d:34:cd:0d:9d:fc:bb:
3c:ec:83:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:23:34 2026 by rpki-client