Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/9bce97-eefb-40d4-bb1d-c7b0e0d9fdf2/1/GqsEbQ_SECaEebobnTt7_3E6P_Q.mft
File: GqsEbQ_SECaEebobnTt7_3E6P_Q.mft (raw, json)
Hash identifier: kDH+Kl19m8s4y8HDv1S4/i2o3NG3YDfvA6l/cs83vrA=
Subject key identifier: 32:9C:08:2D:3B:75:3D:6E:53:46:E2:D0:6E:8F:A8:AA:F0:97:51:22
Authority key identifier: 1A:AB:04:6D:0F:D2:10:26:84:79:BA:1B:9D:3B:7B:FF:71:3A:3F:F4
Certificate issuer: /CN=1aab046d0fd210268479ba1b9d3b7bff713a3ff4
Certificate serial: 019CA90F0F97D70118198563504EE85D01FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GqsEbQ_SECaEebobnTt7_3E6P_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/9bce97-eefb-40d4-bb1d-c7b0e0d9fdf2/1/GqsEbQ_SECaEebobnTt7_3E6P_Q.mft
Manifest number: 0F
Signing time: Sun 01 Mar 2026 11:01:02 +0000
Manifest this update: Sun 01 Mar 2026 11:01:02 +0000
Manifest next update: Mon 02 Mar 2026 11:01:02 +0000
Files and hashes: 1: EaA5h5-haFqykkLxdYNz4NRH894.roa (hash: 35hNbngSLdJ5Vm4Smrugp6blzXRwN2jLQFd01FhQopg=)
2: GqsEbQ_SECaEebobnTt7_3E6P_Q.crl (hash: x4Jx0BPSMCfKq8mgVGhzKW0igMk4wk5RCZ3CcmEMkBU=)
3: L0-VG23-X4StTsgFq-dM2PZQwuw.asa (hash: ewwpS9FIFmcmamiDmtIfsGxv4DqXWOWMSU2Hu4R1Y5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/9bce97-eefb-40d4-bb1d-c7b0e0d9fdf2/1/GqsEbQ_SECaEebobnTt7_3E6P_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/9bce97-eefb-40d4-bb1d-c7b0e0d9fdf2/1/GqsEbQ_SECaEebobnTt7_3E6P_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/GqsEbQ_SECaEebobnTt7_3E6P_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:0f:0f:97:d7:01:18:19:85:63:50:4e:e8:5d:01:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aab046d0fd210268479ba1b9d3b7bff713a3ff4
Validity
Not Before: Mar 1 11:01:02 2026 GMT
Not After : Mar 2 11:01:02 2026 GMT
Subject: CN=329c082d3b753d6e5346e2d06e8fa8aaf0975122
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:56:d2:56:96:87:dd:cc:c3:54:dd:d3:97:cb:
0f:0c:f9:ba:96:8b:d3:52:c9:68:0e:ac:e7:e2:ef:
1e:30:bb:3a:f2:71:d9:09:26:1c:90:50:61:c4:05:
f9:c2:ab:e6:c3:4d:46:b9:26:17:12:ad:65:4a:c4:
d5:16:bb:fb:04:8f:99:91:71:43:86:2f:2c:e0:08:
fe:5f:2d:07:ac:d0:a6:db:a2:8b:70:0e:80:6d:17:
14:f0:7a:c9:7e:cd:37:9f:50:ae:0e:4d:b9:29:66:
bc:a3:72:cb:88:5b:5f:73:07:e7:92:1f:ed:7f:ee:
38:ef:8d:4d:5d:da:92:7c:e6:ef:40:58:43:40:16:
cd:c1:e2:1f:e3:f1:d5:0c:07:77:2b:7c:00:3d:25:
83:ce:aa:1b:29:11:fd:10:be:fc:e9:18:06:dc:8f:
2b:d1:50:f7:e5:34:b1:fa:07:4a:66:d0:e0:d3:92:
62:77:51:84:b3:79:3e:2f:d2:bc:ca:92:29:1c:14:
c4:72:a7:99:ce:2e:90:c7:f7:92:0e:b2:b2:dc:7f:
cc:84:e7:d1:6e:fa:20:05:34:df:02:82:3b:50:54:
e1:48:cf:ea:97:25:b1:e1:1e:c0:d7:3e:cc:17:b1:
f0:cb:fa:fd:82:22:7f:ab:39:6b:fb:6d:05:d7:75:
48:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:9C:08:2D:3B:75:3D:6E:53:46:E2:D0:6E:8F:A8:AA:F0:97:51:22
X509v3 Authority Key Identifier:
keyid:1A:AB:04:6D:0F:D2:10:26:84:79:BA:1B:9D:3B:7B:FF:71:3A:3F:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GqsEbQ_SECaEebobnTt7_3E6P_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9bce97-eefb-40d4-bb1d-c7b0e0d9fdf2/1/GqsEbQ_SECaEebobnTt7_3E6P_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9bce97-eefb-40d4-bb1d-c7b0e0d9fdf2/1/GqsEbQ_SECaEebobnTt7_3E6P_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:a5:26:02:4b:9d:eb:f6:5d:57:e1:43:62:86:16:ae:2a:88:
46:31:24:85:9b:7e:49:e3:d0:30:1b:fe:bc:92:35:72:1b:3a:
ff:84:48:fe:0e:91:3e:17:39:9b:94:64:2e:0e:6e:c9:36:72:
11:1b:0c:69:9c:fe:c3:6a:a5:4f:7b:d1:63:d1:79:79:38:a8:
88:3f:c0:a1:f3:1a:43:82:17:06:b7:fa:78:75:55:f4:3c:74:
ca:99:bd:33:66:98:96:92:c0:10:81:83:75:58:5c:92:5f:b3:
e8:e9:62:95:af:0a:e1:63:dd:cc:e8:0d:aa:64:19:a7:8f:f2:
cd:4a:e2:a5:ca:af:93:5d:85:ce:6a:91:fd:0c:b2:20:12:8d:
1b:12:f5:a4:be:4c:20:e0:cf:de:07:01:ab:88:b7:2e:5c:57:
86:50:ac:16:16:e4:7c:93:d0:63:6e:1d:f6:1c:7d:dd:09:21:
61:fe:e3:0a:d0:82:b6:f4:5e:9a:60:f3:68:56:c9:23:ed:c5:
3b:5d:0b:64:67:bd:e5:1d:10:0a:87:4d:d4:2a:0d:e1:16:ef:
41:15:bb:93:84:87:4b:91:3f:27:2a:f2:a9:2c:c2:a7:90:b0:
04:4e:5a:7a:5c:9b:04:47:5f:5f:97:88:6e:68:53:e5:a9:06:
51:c0:29:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:40:59 2026 by rpki-client