Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft
File: GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft (raw, json)
Hash identifier: c9T8BvIUV/8+jb7gA1NYThjD1Vd9eSJaQ6DWfpqdPz4=
Subject key identifier: 12:FF:93:EE:1C:8A:F2:E2:4A:26:B8:89:0C:57:B5:FD:57:68:93:F2
Authority key identifier: 19:0E:C7:AA:B2:0F:C4:C8:01:C6:79:63:E5:9E:4F:93:60:0E:40:1D
Certificate issuer: /CN=190ec7aab20fc4c801c67963e59e4f93600e401d
Certificate serial: 019EC25C2B8E51829E66D59495D3E625E8E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft
Manifest number: 129F
Signing time: Sat 13 Jun 2026 19:01:20 +0000
Manifest this update: Sat 13 Jun 2026 19:01:20 +0000
Manifest next update: Sun 14 Jun 2026 19:01:20 +0000
Files and hashes: 1: BFsuju73p_IfTuzKMk-7j2upM6U.roa (hash: NMObEH49eiBEjgkYRi2sMCjgCjz2WvdzgCb1t201l78=)
2: GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.crl (hash: 1wRx8CVG3wNtfYBnfsGJDhEr2aPEpqsnA4ybLhVqpCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:5c:2b:8e:51:82:9e:66:d5:94:95:d3:e6:25:e8:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=190ec7aab20fc4c801c67963e59e4f93600e401d
Validity
Not Before: Jun 13 19:01:20 2026 GMT
Not After : Jun 14 19:01:20 2026 GMT
Subject: CN=12ff93ee1c8af2e24a26b8890c57b5fd576893f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8e:d4:84:b5:4b:0d:5f:3c:1f:75:8d:e2:99:
69:47:53:8b:7e:8a:8c:ba:ce:ac:17:88:33:b9:af:
4e:42:a8:9a:9f:da:40:eb:5f:90:c9:20:de:99:76:
b4:c0:23:aa:d5:56:4e:b8:ec:d4:6d:5c:29:1d:1f:
ba:02:36:85:19:ce:aa:0a:dc:8a:dc:d4:01:aa:1f:
e9:b1:9f:58:66:88:3b:00:92:d4:3a:50:6e:64:3c:
14:e5:11:b2:f5:88:29:33:12:a6:85:63:31:34:77:
ae:65:04:58:6f:66:fe:1c:01:c4:46:6f:aa:d3:2d:
3c:3f:77:50:67:3f:64:f3:a8:3b:e4:8e:22:6b:3a:
af:f0:0d:54:ae:73:da:25:b3:c0:86:e9:e3:8b:e2:
48:7e:a8:72:eb:74:ae:1e:46:0c:d1:78:e5:6f:4c:
b2:30:5a:0d:e6:02:1d:68:60:2f:0c:e6:00:75:fc:
b8:42:38:02:c9:8d:d7:8a:5c:d6:bf:33:2f:19:31:
09:75:61:44:11:38:fe:ba:6f:50:85:45:e3:94:e9:
82:89:c7:cb:75:a0:19:21:e9:11:e7:ec:c7:fb:2a:
f1:d6:dc:9e:aa:18:b6:c7:cd:b9:3b:e6:93:11:46:
72:05:39:d2:13:56:c8:87:5a:51:6c:9f:6f:0d:a8:
46:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:FF:93:EE:1C:8A:F2:E2:4A:26:B8:89:0C:57:B5:FD:57:68:93:F2
X509v3 Authority Key Identifier:
keyid:19:0E:C7:AA:B2:0F:C4:C8:01:C6:79:63:E5:9E:4F:93:60:0E:40:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:56:e9:fc:a3:54:be:ed:72:a9:be:54:71:e8:3e:c3:55:a3:
ec:1a:c1:b3:5b:8b:13:20:4a:55:9f:36:24:7e:8f:fb:2e:66:
d4:7e:bf:4e:6e:99:f7:a5:08:68:03:24:15:d3:9e:21:2e:bf:
97:b0:af:84:09:27:06:5e:fe:4a:af:7f:27:a9:38:80:5c:08:
85:f4:64:93:a7:26:d2:9e:76:f9:30:e9:8f:6c:a3:b5:31:d3:
af:5b:37:a9:dc:4c:54:13:28:71:69:bc:7e:7c:4a:95:3f:9e:
45:91:98:ca:72:fe:de:80:73:01:6f:4c:80:91:ec:61:d4:64:
7b:dd:6b:1f:5d:6e:17:98:46:7d:05:15:73:0a:3d:c9:9c:39:
db:f4:ab:7f:f9:0d:6b:93:0e:ec:6f:c5:1e:65:90:55:a9:3d:
fe:87:28:2e:fd:2d:7e:ca:fd:88:11:ad:32:2b:63:f5:49:12:
53:55:b2:9e:d8:76:ed:ee:41:d6:b0:36:41:d1:42:57:a3:6d:
a8:57:51:30:18:d7:88:24:3a:fc:45:da:c6:12:2d:bf:a7:30:
b7:28:c8:ad:91:8f:fc:b1:9a:ad:69:a8:ac:6d:a2:b6:4b:99:
2a:68:01:04:1f:6c:b8:c7:98:3d:c4:16:f9:5d:4b:e6:e2:c9:
9e:ea:60:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:46:05 2026 by rpki-client