Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/GqGckulmd_X5b2jxygqtn6MR60U.mft
File: GqGckulmd_X5b2jxygqtn6MR60U.mft (raw, json)
Hash identifier: zs+x/ZIcPOU1kxv737JQJ0gqI6pWlqkVCCI1wed1WRs=
Subject key identifier: 9F:9D:72:28:CD:12:FC:65:C9:9C:A7:CA:D1:C9:6B:97:4E:A5:D5:14
Authority key identifier: 1A:A1:9C:92:E9:66:77:F5:F9:6F:68:F1:CA:0A:AD:9F:A3:11:EB:45
Certificate issuer: /CN=1aa19c92e96677f5f96f68f1ca0aad9fa311eb45
Certificate serial: 019CACEBAB163750C32E9A6E0C5AB29E4123
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GqGckulmd_X5b2jxygqtn6MR60U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/GqGckulmd_X5b2jxygqtn6MR60U.mft
Manifest number: 1605
Signing time: Mon 02 Mar 2026 05:00:51 +0000
Manifest this update: Mon 02 Mar 2026 05:00:51 +0000
Manifest next update: Tue 03 Mar 2026 05:00:51 +0000
Files and hashes: 1: 1-WPRdVqmtlIyUI0vqU9PWtdt-gM.roa (hash: XWiIX8j8IwmwPP0JVAl2lLSxTvvYR4DX3aF34HbG+KQ=)
2: GqGckulmd_X5b2jxygqtn6MR60U.crl (hash: 5RYXybY7K59PGFAG+1QucDqsk3YjJKpbcKQrtkm8uII=)
3: WpUIGP06eptdw3HvJXEXaq0nbZE.roa (hash: htiyR7KetN+O2yvc71NkM/dclEdrNUy7FljxlennH9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/GqGckulmd_X5b2jxygqtn6MR60U.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/GqGckulmd_X5b2jxygqtn6MR60U.mft
rsync://rpki.ripe.net/repository/DEFAULT/GqGckulmd_X5b2jxygqtn6MR60U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 05:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:ab:16:37:50:c3:2e:9a:6e:0c:5a:b2:9e:41:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aa19c92e96677f5f96f68f1ca0aad9fa311eb45
Validity
Not Before: Mar 2 05:00:51 2026 GMT
Not After : Mar 3 05:00:51 2026 GMT
Subject: CN=9f9d7228cd12fc65c99ca7cad1c96b974ea5d514
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9d:6f:8d:0c:5e:1e:49:c2:b4:91:40:92:4d:
65:57:f4:42:6a:c5:82:45:6a:ca:35:82:c2:97:aa:
d6:31:be:a2:5f:65:23:33:5d:b8:41:df:7d:71:1a:
66:6d:ca:02:74:a2:d6:d8:a5:de:96:b4:d7:81:57:
f0:a3:83:8f:ed:c0:ff:34:74:5e:43:ea:44:39:d6:
13:ea:f7:ee:33:12:80:37:58:08:05:f4:64:d6:2b:
83:6d:81:77:64:8e:5d:77:55:e8:0e:18:0e:84:a6:
64:f6:e3:89:24:cb:87:b1:48:0c:e4:17:92:ab:26:
8d:6e:11:b9:39:0c:ea:50:81:9c:e0:ca:d2:c7:4e:
db:fa:9f:50:b6:54:1a:e9:e7:38:33:3d:86:8f:cc:
45:ae:03:95:1e:f9:aa:ab:2d:83:8c:4e:07:ff:22:
a0:14:29:0c:91:b2:50:84:3d:05:08:f1:bc:a0:6a:
9e:ae:09:71:54:cc:83:40:31:2c:db:29:b1:bf:73:
ae:d3:f0:b5:3f:2f:9d:9d:e8:73:24:53:fc:d2:20:
55:44:39:8c:6a:d3:94:d5:98:e6:fc:36:d8:bb:f9:
e9:ab:fe:cd:9a:d4:31:30:91:5a:69:b1:2c:14:26:
36:20:39:c7:da:cd:6f:98:05:11:35:f5:d9:87:b2:
d1:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:9D:72:28:CD:12:FC:65:C9:9C:A7:CA:D1:C9:6B:97:4E:A5:D5:14
X509v3 Authority Key Identifier:
keyid:1A:A1:9C:92:E9:66:77:F5:F9:6F:68:F1:CA:0A:AD:9F:A3:11:EB:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GqGckulmd_X5b2jxygqtn6MR60U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/GqGckulmd_X5b2jxygqtn6MR60U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/GqGckulmd_X5b2jxygqtn6MR60U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:fd:78:9b:cf:18:a2:25:01:9c:d7:df:04:a6:c8:d2:5b:d6:
55:69:b4:90:de:02:42:db:16:9f:13:71:01:58:2b:8e:5f:98:
7a:1e:05:3d:d2:67:ad:31:a5:13:44:31:df:7a:66:47:84:89:
86:6a:73:b3:bc:28:67:a1:31:e2:51:3c:6a:ef:e9:22:e9:a9:
1f:d1:73:f2:fd:1c:21:89:e8:77:83:29:ac:cd:b4:06:4d:0d:
9d:13:ae:0d:43:a7:ed:76:7c:5a:0c:5f:b8:24:e9:87:eb:4b:
3b:d7:71:d2:7d:56:e7:ee:86:55:a1:81:e1:18:a3:88:44:df:
ff:52:51:a9:7b:dd:ea:af:c1:5a:9c:64:e6:48:82:16:e3:9b:
06:e2:26:4b:fe:8d:b7:cb:08:e9:a8:2c:59:9d:13:c7:fc:b7:
92:32:3a:32:e1:d6:7e:0f:fa:b0:8e:b5:a6:2a:29:bb:62:32:
a6:2d:7d:1f:0f:64:76:cc:97:7d:35:58:ac:c7:b5:1b:41:a2:
73:cd:da:bc:19:5f:89:f5:32:c2:25:5c:bd:40:bf:fe:4d:8b:
b0:8d:1e:d3:4f:ef:85:32:fe:62:b3:9c:ce:47:c8:fc:4a:ee:
25:4c:f2:2a:35:19:4e:b4:ec:e6:2f:8c:2f:6b:3b:f7:29:f7:
c9:2a:fe:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:39:07 2026 by rpki-client