Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft
File: GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft (raw, json)
Hash identifier: Mnhw7hJm+ZozdFugiTPlJKwxs+CDPA97u7VbJR3czk8=
Subject key identifier: AE:8B:8E:E0:F6:BE:C2:1F:57:34:41:AF:72:40:D0:B6:28:E7:97:B4
Authority key identifier: 19:0E:C7:AA:B2:0F:C4:C8:01:C6:79:63:E5:9E:4F:93:60:0E:40:1D
Certificate issuer: /CN=190ec7aab20fc4c801c67963e59e4f93600e401d
Certificate serial: 019CB136A0ECCA749812F2B2CEA1298AAC88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft
Manifest number: 118D
Signing time: Tue 03 Mar 2026 01:01:13 +0000
Manifest this update: Tue 03 Mar 2026 01:01:13 +0000
Manifest next update: Wed 04 Mar 2026 01:01:13 +0000
Files and hashes: 1: BFsuju73p_IfTuzKMk-7j2upM6U.roa (hash: NMObEH49eiBEjgkYRi2sMCjgCjz2WvdzgCb1t201l78=)
2: GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.crl (hash: PpaXEpLcmMivGH3J52luByKffEJ/Utkz6Auw1lKRm+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 21:16:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b1:36:a0:ec:ca:74:98:12:f2:b2:ce:a1:29:8a:ac:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=190ec7aab20fc4c801c67963e59e4f93600e401d
Validity
Not Before: Mar 3 01:01:13 2026 GMT
Not After : Mar 4 01:01:13 2026 GMT
Subject: CN=ae8b8ee0f6bec21f573441af7240d0b628e797b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b0:e8:84:27:c3:6f:f2:c4:b4:cd:94:fb:aa:
0e:53:e3:5b:6e:bb:54:91:c6:26:3f:4d:30:f3:d6:
9c:69:c7:a6:31:de:5c:02:77:d4:6a:65:07:f1:45:
55:77:20:21:4a:e1:12:b6:1d:d2:cd:7a:45:fd:01:
9a:8b:f7:9d:40:c6:7c:cc:f5:c9:63:1e:9c:1b:6f:
3a:87:d1:c1:43:cd:93:87:50:7b:b9:22:13:57:24:
16:df:a2:93:93:9b:bd:be:d3:cc:7a:de:51:88:08:
6c:5f:b6:70:de:43:52:12:c9:c3:8b:c3:69:e6:3d:
24:97:37:c1:57:d4:3a:02:54:df:47:17:cd:60:9b:
95:fc:5b:23:cc:7b:e6:6f:61:fe:b3:7f:20:59:0b:
ba:91:32:6f:25:c9:a7:9c:c1:7f:77:79:34:4a:7b:
8f:ab:61:f5:d7:ba:64:a9:1c:4d:72:3d:b2:d3:2d:
d1:44:cf:6e:fc:ed:23:fd:67:58:e9:2f:55:6a:b0:
a7:f2:bd:51:7e:3d:53:54:04:74:1f:d5:39:c7:c3:
83:75:d2:ec:4c:82:fe:d0:c4:42:3a:53:fa:f0:2b:
70:d8:0f:38:e5:ed:15:3b:17:f0:4d:97:de:e4:99:
20:4c:6a:ad:d4:bf:00:e1:1d:9b:30:6e:71:b7:7b:
71:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:8B:8E:E0:F6:BE:C2:1F:57:34:41:AF:72:40:D0:B6:28:E7:97:B4
X509v3 Authority Key Identifier:
keyid:19:0E:C7:AA:B2:0F:C4:C8:01:C6:79:63:E5:9E:4F:93:60:0E:40:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:7b:19:b5:a8:c9:fc:40:b6:60:df:78:6c:1b:8c:e8:57:1c:
b4:ea:e8:99:77:d2:ad:fe:f6:b0:20:94:e2:02:15:03:75:a4:
38:91:cd:8b:14:b2:54:92:f5:fd:9c:cc:62:e7:b1:fb:d1:b2:
ed:2a:8f:cc:32:23:fd:10:1b:12:1f:6d:b0:7d:dd:61:67:0a:
4e:d8:75:be:4a:c0:0c:72:43:23:f4:49:2b:e6:a7:da:db:dd:
87:55:f1:0e:e9:ec:c7:b3:75:18:34:00:2e:2e:9f:9b:56:d1:
c3:1b:1d:d4:64:0e:27:1e:e1:9c:94:26:a2:83:31:9d:b2:df:
80:9a:24:cb:b4:3b:d9:9e:b3:74:26:af:2c:d9:15:c5:bd:dc:
51:4a:f3:dd:2e:1b:f6:03:5f:16:4e:fe:44:70:09:47:31:04:
6d:d0:7f:95:a3:43:a9:29:8f:e3:12:c6:b8:df:f6:ad:bd:1d:
3f:f2:85:9a:20:b3:c1:ac:a1:37:37:66:5d:33:8a:d5:2c:18:
63:6e:26:eb:22:91:34:49:e6:78:ce:be:69:e2:42:df:be:e0:
58:f0:ac:04:89:a1:10:9a:21:a3:13:c8:4a:5f:cd:7e:76:8d:
9f:7e:8f:58:df:28:af:5d:d4:88:6c:3f:f4:2d:ff:c6:74:a1:
6d:1f:a8:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 04:19:50 2026 by rpki-client