Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/GqGckulmd_X5b2jxygqtn6MR60U.mft
File: GqGckulmd_X5b2jxygqtn6MR60U.mft (raw, json)
Hash identifier: wScFzuMpPuqgUwyuhxUpiR8IUhzYg6m9hjUN8bRzCoE=
Subject key identifier: D4:56:CF:3C:EF:78:98:CB:21:57:ED:0C:5B:D2:57:AF:6D:DF:31:B2
Authority key identifier: 1A:A1:9C:92:E9:66:77:F5:F9:6F:68:F1:CA:0A:AD:9F:A3:11:EB:45
Certificate issuer: /CN=1aa19c92e96677f5f96f68f1ca0aad9fa311eb45
Certificate serial: 019D9C63A2C30B7B86793AE7C4350B79D5A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GqGckulmd_X5b2jxygqtn6MR60U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/GqGckulmd_X5b2jxygqtn6MR60U.mft
Manifest number: 1681
Signing time: Fri 17 Apr 2026 17:01:08 +0000
Manifest this update: Fri 17 Apr 2026 17:01:08 +0000
Manifest next update: Sat 18 Apr 2026 17:01:08 +0000
Files and hashes: 1: 1-WPRdVqmtlIyUI0vqU9PWtdt-gM.roa (hash: XWiIX8j8IwmwPP0JVAl2lLSxTvvYR4DX3aF34HbG+KQ=)
2: GqGckulmd_X5b2jxygqtn6MR60U.crl (hash: g4pjMQsTYRIyFsDMeiZs7K6cVNKgPoz7P6uu7RRMVVs=)
3: WpUIGP06eptdw3HvJXEXaq0nbZE.roa (hash: htiyR7KetN+O2yvc71NkM/dclEdrNUy7FljxlennH9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/GqGckulmd_X5b2jxygqtn6MR60U.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/GqGckulmd_X5b2jxygqtn6MR60U.mft
rsync://rpki.ripe.net/repository/DEFAULT/GqGckulmd_X5b2jxygqtn6MR60U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:63:a2:c3:0b:7b:86:79:3a:e7:c4:35:0b:79:d5:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aa19c92e96677f5f96f68f1ca0aad9fa311eb45
Validity
Not Before: Apr 17 17:01:08 2026 GMT
Not After : Apr 18 17:01:08 2026 GMT
Subject: CN=d456cf3cef7898cb2157ed0c5bd257af6ddf31b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6d:ef:36:49:a2:92:c7:40:38:e1:c2:1e:a9:
92:13:53:e0:8a:ba:61:23:9b:49:e6:a9:cc:8c:a6:
98:48:31:8d:7c:1e:7d:7d:d0:f9:12:fa:e3:1e:59:
e8:94:0b:6f:6c:45:c9:6e:5f:05:5c:e2:f8:1b:3d:
28:32:24:d8:a1:2f:49:ba:02:04:6d:69:7a:cc:34:
31:72:32:d2:78:c0:77:1f:9d:87:41:41:1f:7a:d5:
81:ff:d6:8f:65:83:d8:80:95:90:e2:d0:90:ce:f7:
de:71:06:69:6c:60:eb:dd:39:7b:4d:f3:3e:81:65:
09:25:27:76:08:9d:e9:c4:46:f5:b7:cd:b1:0a:87:
09:79:20:31:85:d4:4a:9e:2a:95:b5:38:3d:cb:4b:
35:34:b8:8f:70:fb:b9:56:25:6a:04:ec:40:fb:ed:
21:9a:17:0d:7b:50:30:63:cf:c5:22:71:9a:ca:5b:
3d:e3:f1:01:1e:88:f8:00:5f:22:f3:3a:05:77:da:
e0:15:33:2c:49:37:95:a3:7b:6e:55:b6:f3:39:ca:
43:b5:b9:f4:15:8a:7f:98:33:c4:f7:df:75:82:3c:
ff:6b:42:30:14:b2:7f:16:55:83:4d:72:f9:88:da:
cf:d5:71:25:27:02:f5:01:f7:1a:4d:40:ca:cb:57:
ad:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:56:CF:3C:EF:78:98:CB:21:57:ED:0C:5B:D2:57:AF:6D:DF:31:B2
X509v3 Authority Key Identifier:
keyid:1A:A1:9C:92:E9:66:77:F5:F9:6F:68:F1:CA:0A:AD:9F:A3:11:EB:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GqGckulmd_X5b2jxygqtn6MR60U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/GqGckulmd_X5b2jxygqtn6MR60U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/GqGckulmd_X5b2jxygqtn6MR60U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:06:c1:fe:59:88:fd:bc:b6:96:c6:ed:a5:5d:1e:77:18:14:
71:88:28:9f:f8:bf:5b:5c:da:a2:1b:8f:77:6d:f0:be:b0:51:
9c:68:d5:30:ff:ed:67:f5:0c:ac:2e:9f:f6:d0:7a:9c:07:d4:
3d:dd:35:b6:e5:04:47:58:49:f7:3a:1b:6b:4a:9c:ba:c4:8f:
39:6c:ad:89:83:31:4d:15:d8:20:82:da:b5:7a:21:38:da:ec:
a5:db:03:cc:54:d9:3a:da:02:4e:ef:4f:99:9b:7a:b4:82:39:
48:99:14:0d:bd:74:d6:07:4e:6b:80:db:d0:94:95:d7:62:bc:
99:86:51:c7:0d:9e:3e:04:97:9f:5b:a4:d4:4e:7a:c8:e6:66:
5a:d4:ea:9f:99:cf:79:fa:0d:f2:9d:eb:c9:9e:d9:67:a8:9f:
88:85:96:31:d3:53:d5:f3:d3:88:cd:91:1d:ba:fc:ae:40:53:
48:a9:57:15:a1:d1:52:08:dd:6b:18:1a:5f:bd:d8:ca:9a:d8:
f5:12:07:8f:36:0c:c3:2d:fe:3c:53:ee:11:13:2a:b7:93:40:
36:0d:67:ae:b9:87:7d:25:14:78:58:a6:4e:7c:62:b5:f2:49:
6d:d1:c9:d0:a2:92:89:1b:2a:e4:45:71:d5:7e:06:d1:0c:32:
a7:05:ae:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:42:58 2026 by rpki-client