Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.mft
File: GQNkfvskNmLlfmHU7EW0olo36sg.mft (raw, json)
Hash identifier: CToOb//ABOD9qoTKd6BeLOCLOIE9BJrMAWsGYWe++Lg=
Subject key identifier: C7:71:87:F1:CB:6F:54:B9:B5:EB:04:6C:C7:3B:10:E7:51:5D:16:F6
Authority key identifier: 19:03:64:7E:FB:24:36:62:E5:7E:61:D4:EC:45:B4:A2:5A:37:EA:C8
Certificate issuer: /CN=1903647efb243662e57e61d4ec45b4a25a37eac8
Certificate serial: 019CAB348C9107A540BD0E8917E03907E723
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQNkfvskNmLlfmHU7EW0olo36sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.mft
Manifest number: 1845
Signing time: Sun 01 Mar 2026 21:01:13 +0000
Manifest this update: Sun 01 Mar 2026 21:01:13 +0000
Manifest next update: Mon 02 Mar 2026 21:01:13 +0000
Files and hashes: 1: GQNkfvskNmLlfmHU7EW0olo36sg.crl (hash: w3xuCMs9DRwYP1BmRvIup6YWECQU1+DKVUacdBD8qsw=)
2: J0rH9JX0KbdTKOcoRoiVFom0Vhs.roa (hash: A8dP+OxNgGQqU96bazfRlPshwZe7IJ50JSO2KL6IocU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GQNkfvskNmLlfmHU7EW0olo36sg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:8c:91:07:a5:40:bd:0e:89:17:e0:39:07:e7:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1903647efb243662e57e61d4ec45b4a25a37eac8
Validity
Not Before: Mar 1 21:01:13 2026 GMT
Not After : Mar 2 21:01:13 2026 GMT
Subject: CN=c77187f1cb6f54b9b5eb046cc73b10e7515d16f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d4:f7:df:00:1b:c9:f9:ff:7b:9b:bd:4a:40:
49:3b:21:1b:65:7d:30:c4:a7:2d:26:9d:31:fb:f0:
7c:cb:86:b6:31:5b:e2:74:cc:d9:e0:2d:a2:b0:2c:
41:13:cf:b4:10:b5:d1:2c:2c:11:de:9f:d1:f5:05:
ca:7e:09:66:10:05:90:51:82:25:55:d9:e4:43:85:
63:84:49:f9:ff:05:f4:ad:1e:a9:05:91:36:74:75:
d4:e9:59:bb:8f:e2:27:84:62:c0:0c:cd:02:65:83:
bf:94:4f:74:d0:77:23:2f:52:5f:bf:20:53:c5:41:
da:6b:51:47:a1:6a:c6:6e:ad:03:ab:16:b6:5b:a0:
a8:7a:7e:d7:6f:d5:d7:54:b6:47:ad:6c:a3:77:70:
36:66:61:a5:9e:d4:6a:b8:80:a5:77:f8:fe:a7:c2:
d3:3b:ee:81:8c:40:d2:b5:4c:c0:59:9c:cc:d4:3b:
1c:83:76:cb:02:c5:a1:7b:62:ba:86:39:3a:a5:db:
b8:6a:6a:fd:49:bc:41:cb:72:b3:28:39:1c:4f:24:
e8:68:46:3f:d1:24:f3:65:2c:b5:a2:e8:e2:43:0f:
5b:4f:24:c7:d5:75:ca:17:5f:33:a7:4e:d4:cd:2b:
d1:18:9a:62:d5:4d:77:6b:cf:26:a1:5e:d0:79:90:
33:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:71:87:F1:CB:6F:54:B9:B5:EB:04:6C:C7:3B:10:E7:51:5D:16:F6
X509v3 Authority Key Identifier:
keyid:19:03:64:7E:FB:24:36:62:E5:7E:61:D4:EC:45:B4:A2:5A:37:EA:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQNkfvskNmLlfmHU7EW0olo36sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:6d:c8:0c:54:f5:e1:19:b3:a7:94:a1:46:ca:9b:df:15:fb:
18:c1:55:16:3c:d2:3a:46:ea:10:67:c3:df:85:cc:37:c0:a2:
12:5c:b6:59:42:68:09:39:b2:a9:b4:b2:55:c4:b6:aa:ec:4a:
d2:f2:49:3d:e5:e2:93:ee:b9:23:ad:87:4f:a2:26:55:5e:1e:
8c:d0:3a:c8:4a:da:31:e0:5e:59:16:86:51:76:10:60:c6:90:
dc:9d:35:ac:58:2b:44:e8:92:a6:8f:6d:e6:d6:7d:72:cc:ac:
7b:7a:59:77:06:56:6e:ae:7c:bc:00:8b:c9:21:0d:72:87:1f:
32:5c:ab:d9:73:83:7c:8d:2e:80:81:94:80:99:49:6f:ea:b5:
bb:dc:32:c8:b6:08:ce:91:ed:fa:4f:60:94:bc:f5:92:fc:c9:
78:17:88:14:71:ef:63:37:8f:b3:64:06:39:1c:40:a7:6a:eb:
aa:fc:ba:b8:2a:bb:de:96:ac:ed:ad:c0:85:9f:37:02:03:38:
d8:a8:40:f6:31:9a:51:29:2e:b8:89:4a:c7:d8:dd:2b:8c:d6:
01:5c:b6:18:4e:1e:a7:be:9b:89:4f:ef:bb:49:38:bf:6e:2c:
09:a3:e6:d7:7a:bf:20:0a:b5:4f:20:54:75:17:ec:3d:05:14:
38:96:35:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:06:41 2026 by rpki-client