Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/9bce97-eefb-40d4-bb1d-c7b0e0d9fdf2/1/GqsEbQ_SECaEebobnTt7_3E6P_Q.mft
File: GqsEbQ_SECaEebobnTt7_3E6P_Q.mft (raw, json)
Hash identifier: eRlW04T6yN4+4jFfRrsIqKj7ImbNB9z5yg7MDgKVXNY=
Subject key identifier: AD:23:B7:10:FC:30:56:70:CA:5E:C7:77:CC:18:B8:2E:98:9E:21:57
Authority key identifier: 1A:AB:04:6D:0F:D2:10:26:84:79:BA:1B:9D:3B:7B:FF:71:3A:3F:F4
Certificate issuer: /CN=1aab046d0fd210268479ba1b9d3b7bff713a3ff4
Certificate serial: 01A0BDD4E8030873EBAC0161D2447A7B38B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GqsEbQ_SECaEebobnTt7_3E6P_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/9bce97-eefb-40d4-bb1d-c7b0e0d9fdf2/1/GqsEbQ_SECaEebobnTt7_3E6P_Q.mft
Manifest number: 022C
Signing time: Sun 20 Sep 2026 08:00:41 +0000
Manifest this update: Sun 20 Sep 2026 08:00:41 +0000
Manifest next update: Mon 21 Sep 2026 08:00:41 +0000
Files and hashes: 1: EaA5h5-haFqykkLxdYNz4NRH894.roa (hash: 35hNbngSLdJ5Vm4Smrugp6blzXRwN2jLQFd01FhQopg=)
2: GqsEbQ_SECaEebobnTt7_3E6P_Q.crl (hash: dVwOQtGC8KGl73+eVcn6OG71LVWwpeV06sJVsJy6/+s=)
3: L0-VG23-X4StTsgFq-dM2PZQwuw.asa (hash: ewwpS9FIFmcmamiDmtIfsGxv4DqXWOWMSU2Hu4R1Y5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/9bce97-eefb-40d4-bb1d-c7b0e0d9fdf2/1/GqsEbQ_SECaEebobnTt7_3E6P_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/9bce97-eefb-40d4-bb1d-c7b0e0d9fdf2/1/GqsEbQ_SECaEebobnTt7_3E6P_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/GqsEbQ_SECaEebobnTt7_3E6P_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bd:d4:e8:03:08:73:eb:ac:01:61:d2:44:7a:7b:38:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aab046d0fd210268479ba1b9d3b7bff713a3ff4
Validity
Not Before: Sep 20 08:00:41 2026 GMT
Not After : Sep 21 08:00:41 2026 GMT
Subject: CN=ad23b710fc305670ca5ec777cc18b82e989e2157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3a:f0:64:1a:d3:a0:bd:00:1d:18:3b:e0:42:
2a:f5:f3:7a:44:0c:f7:16:9d:17:7b:65:0f:71:5a:
62:9f:40:4c:e8:7b:a6:d9:22:8c:26:61:f4:a4:b4:
dd:eb:cd:b1:75:15:fb:e5:e6:ab:8a:47:63:02:81:
a9:bb:9e:a6:b4:2c:2e:e6:c5:73:8b:4e:f4:8c:5b:
3c:59:14:33:8e:33:63:61:78:46:82:f1:9d:28:78:
53:77:03:16:c3:7b:ef:99:bd:c0:e1:8c:ea:e5:cc:
02:42:cb:bc:cc:bf:43:a1:ef:87:11:c5:8c:75:61:
d0:4d:3d:a1:10:df:e6:2b:78:dd:54:8b:86:a6:88:
bf:e1:e7:c7:73:44:4e:5a:f3:c3:e9:2f:24:09:ae:
e1:d5:d8:41:96:50:76:25:cb:5b:4a:5a:12:ef:59:
7b:47:c7:aa:5f:20:8f:60:0c:d5:b4:ca:4e:c8:9d:
be:55:35:95:40:4f:c4:5f:13:15:c3:03:64:92:4a:
5c:01:11:25:03:22:74:41:d2:8e:5f:7e:cc:d0:05:
89:22:23:1a:36:62:6b:06:b0:84:0a:e4:24:3d:4f:
eb:e3:06:e3:8d:f9:65:69:fc:ed:4e:d1:4a:86:60:
6d:88:5c:b2:05:e5:a5:56:24:70:1e:d4:e6:27:9f:
c6:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:23:B7:10:FC:30:56:70:CA:5E:C7:77:CC:18:B8:2E:98:9E:21:57
X509v3 Authority Key Identifier:
keyid:1A:AB:04:6D:0F:D2:10:26:84:79:BA:1B:9D:3B:7B:FF:71:3A:3F:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GqsEbQ_SECaEebobnTt7_3E6P_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9bce97-eefb-40d4-bb1d-c7b0e0d9fdf2/1/GqsEbQ_SECaEebobnTt7_3E6P_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9bce97-eefb-40d4-bb1d-c7b0e0d9fdf2/1/GqsEbQ_SECaEebobnTt7_3E6P_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:77:7d:77:3a:55:5f:6b:46:61:10:8f:2c:a9:9c:9d:2e:51:
11:4c:9c:c0:4d:44:87:f8:90:f2:b8:e7:03:48:c6:7e:f2:f8:
c9:db:f5:58:7a:04:cf:78:8a:9c:5f:1a:05:69:ee:50:88:22:
16:c3:51:b3:b7:63:59:64:71:3c:1b:a8:bc:37:8e:3f:43:de:
53:aa:41:49:80:72:76:83:4b:c1:29:3e:9f:09:ca:fb:11:7f:
ac:1f:4d:c8:9d:91:14:75:46:17:07:50:12:73:8f:fd:20:ef:
7d:e1:ff:1e:71:24:10:23:96:de:b8:0c:ab:37:88:8e:1c:2f:
7b:a5:87:ff:e9:17:60:20:95:22:73:4d:68:f7:1b:cf:d9:43:
cf:00:44:c4:3a:ce:4c:6a:b8:07:dc:fd:58:f7:be:e4:4c:11:
b8:46:3f:23:03:df:59:f6:60:11:3c:99:2b:ee:ff:a3:4e:47:
b2:2a:57:52:ad:4a:1b:32:39:ef:99:51:c9:9b:2b:13:dc:c0:
0a:4a:7a:96:79:72:58:36:ec:2e:77:20:b2:ad:33:6d:93:aa:
d3:7e:86:6d:67:15:31:ef:a1:a7:7a:ab:23:b4:88:ed:4e:61:
60:a7:34:c9:54:21:a4:e4:d2:66:c5:da:0e:f2:47:e5:7b:07:
da:db:df:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 11:46:14 2026 by rpki-client