Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/9bce97-eefb-40d4-bb1d-c7b0e0d9fdf2/1/GqsEbQ_SECaEebobnTt7_3E6P_Q.mft
File: GqsEbQ_SECaEebobnTt7_3E6P_Q.mft (raw, json)
Hash identifier: FSo/7j/IccOQcMG4IWtri8KDQH8QdiEJnUkDKpfm6LA=
Subject key identifier: 31:59:55:00:A3:A8:F2:C0:8E:04:98:62:3F:44:02:DF:49:45:CC:0B
Authority key identifier: 1A:AB:04:6D:0F:D2:10:26:84:79:BA:1B:9D:3B:7B:FF:71:3A:3F:F4
Certificate issuer: /CN=1aab046d0fd210268479ba1b9d3b7bff713a3ff4
Certificate serial: 019DA41CE67F5059D876785D94C0BCB62004
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GqsEbQ_SECaEebobnTt7_3E6P_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/9bce97-eefb-40d4-bb1d-c7b0e0d9fdf2/1/GqsEbQ_SECaEebobnTt7_3E6P_Q.mft
Manifest number: 91
Signing time: Sun 19 Apr 2026 05:00:50 +0000
Manifest this update: Sun 19 Apr 2026 05:00:50 +0000
Manifest next update: Mon 20 Apr 2026 05:00:50 +0000
Files and hashes: 1: EaA5h5-haFqykkLxdYNz4NRH894.roa (hash: 35hNbngSLdJ5Vm4Smrugp6blzXRwN2jLQFd01FhQopg=)
2: GqsEbQ_SECaEebobnTt7_3E6P_Q.crl (hash: W4h3nqRjmDzkcyWJH8hL+nldE64dhHQG1/lPwrpocJU=)
3: L0-VG23-X4StTsgFq-dM2PZQwuw.asa (hash: ewwpS9FIFmcmamiDmtIfsGxv4DqXWOWMSU2Hu4R1Y5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/9bce97-eefb-40d4-bb1d-c7b0e0d9fdf2/1/GqsEbQ_SECaEebobnTt7_3E6P_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/9bce97-eefb-40d4-bb1d-c7b0e0d9fdf2/1/GqsEbQ_SECaEebobnTt7_3E6P_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/GqsEbQ_SECaEebobnTt7_3E6P_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:1c:e6:7f:50:59:d8:76:78:5d:94:c0:bc:b6:20:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aab046d0fd210268479ba1b9d3b7bff713a3ff4
Validity
Not Before: Apr 19 05:00:50 2026 GMT
Not After : Apr 20 05:00:50 2026 GMT
Subject: CN=31595500a3a8f2c08e0498623f4402df4945cc0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fd:39:67:38:44:c2:5c:82:28:95:62:dc:ee:
54:d2:41:36:e5:41:71:77:47:4e:2a:77:6d:00:99:
5b:b1:04:e8:d0:e3:9e:bb:d3:49:6a:76:a9:50:96:
1a:ca:c5:12:a3:c9:c9:7d:08:b6:64:dd:99:eb:15:
07:69:37:fa:4a:96:3b:33:d0:d7:45:16:72:68:44:
d5:2b:77:7f:81:cb:e6:2c:75:ee:af:34:9e:3f:4d:
c9:83:81:86:fc:65:2a:a3:44:d9:e2:da:23:2b:34:
b4:7f:41:f4:4a:e4:cd:b4:71:9f:23:89:2f:6d:95:
6e:3f:69:f2:0b:ca:99:19:8a:19:6d:cd:52:05:41:
89:e0:71:0a:58:44:f4:31:7f:31:e1:c9:32:41:c8:
a1:a1:81:cf:f5:a9:1a:1f:bd:58:00:62:a7:1b:2b:
43:85:c7:f6:00:2f:60:64:41:07:79:3a:6a:6b:e2:
c9:79:f5:8f:a6:e5:c5:bf:f4:2f:b1:89:8e:72:70:
58:b1:3a:ad:c5:4a:12:4b:fa:82:f9:82:64:99:ff:
67:d2:88:6d:53:42:02:f4:01:6a:f9:ae:20:cc:93:
93:72:b7:a7:e7:49:b3:2c:1d:2f:0f:75:ac:73:54:
71:4b:65:17:dc:a4:6c:f0:3d:41:4b:12:b1:51:f4:
18:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:59:55:00:A3:A8:F2:C0:8E:04:98:62:3F:44:02:DF:49:45:CC:0B
X509v3 Authority Key Identifier:
keyid:1A:AB:04:6D:0F:D2:10:26:84:79:BA:1B:9D:3B:7B:FF:71:3A:3F:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GqsEbQ_SECaEebobnTt7_3E6P_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9bce97-eefb-40d4-bb1d-c7b0e0d9fdf2/1/GqsEbQ_SECaEebobnTt7_3E6P_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9bce97-eefb-40d4-bb1d-c7b0e0d9fdf2/1/GqsEbQ_SECaEebobnTt7_3E6P_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:90:a9:09:b5:55:1a:56:b3:15:62:52:97:fa:a9:9c:6a:7b:
ab:a0:5f:78:f3:33:ef:72:c4:f2:c1:4d:12:c9:1a:bc:76:e0:
72:e1:66:f9:e7:46:43:8c:db:d8:04:40:a6:96:46:1b:f3:24:
e2:95:f6:81:f5:53:b4:31:35:9b:db:f8:a3:7d:0c:23:98:6a:
4b:51:5c:2a:9e:45:5d:38:13:92:9c:7f:db:df:a6:28:d3:41:
10:cf:ba:d6:92:56:d5:4e:40:89:29:06:16:b6:58:7f:88:ee:
aa:2a:dd:fa:cf:82:8c:4e:85:e5:3f:c2:f1:a2:c5:62:30:a1:
86:a2:cf:37:8a:c0:86:9f:d6:e4:c6:02:91:e4:ef:d4:c4:53:
cf:25:06:72:b2:47:a4:d9:b2:ba:9c:52:93:e1:bb:c8:c9:9c:
8f:77:0f:65:6c:4b:0e:d4:b5:a8:19:68:f9:92:1d:b2:31:a7:
42:ac:73:f8:e4:42:e1:f0:2d:fd:d8:65:30:68:5d:a8:59:b5:
2a:c6:16:35:ee:b1:3b:81:0d:c5:0c:fb:45:21:85:d5:8f:f8:
b3:bb:19:a2:36:0d:30:54:1b:28:ed:a2:15:bd:72:0f:fd:07:
d3:df:32:a7:6f:11:3a:19:b3:e6:61:f6:4e:bb:88:70:54:0c:
64:27:64:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:42:28 2026 by rpki-client