Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft
File: GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft (raw, json)
Hash identifier: UAiL6+9cVzjTh5z8rLbeBLYWU4qGUDPNNwZjF3gApPc=
Subject key identifier: D0:73:32:7F:01:B5:02:FA:2A:1A:68:FE:97:59:00:6A:25:74:44:F6
Authority key identifier: 19:0E:C7:AA:B2:0F:C4:C8:01:C6:79:63:E5:9E:4F:93:60:0E:40:1D
Certificate issuer: /CN=190ec7aab20fc4c801c67963e59e4f93600e401d
Certificate serial: 019FAC0881476A62D9D4278A77B9EE7C4FA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft
Manifest number: 1318
Signing time: Wed 29 Jul 2026 04:01:06 +0000
Manifest this update: Wed 29 Jul 2026 04:01:06 +0000
Manifest next update: Thu 30 Jul 2026 04:01:06 +0000
Files and hashes: 1: BFsuju73p_IfTuzKMk-7j2upM6U.roa (hash: NMObEH49eiBEjgkYRi2sMCjgCjz2WvdzgCb1t201l78=)
2: GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.crl (hash: seGSrQjfEmxU8iW/iOtJTGLVaMrs5tt6GOJ0SBmx2Vo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:08:81:47:6a:62:d9:d4:27:8a:77:b9:ee:7c:4f:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=190ec7aab20fc4c801c67963e59e4f93600e401d
Validity
Not Before: Jul 29 04:01:06 2026 GMT
Not After : Jul 30 04:01:06 2026 GMT
Subject: CN=d073327f01b502fa2a1a68fe9759006a257444f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e0:ab:58:5e:ba:42:f3:2e:f2:56:34:c1:1d:
ad:ff:bd:57:a4:c2:c5:79:08:d7:4f:e6:2d:3b:91:
6e:90:2a:70:94:97:a1:bf:b9:da:08:23:e0:9d:77:
7d:2b:dc:aa:ab:06:8a:a2:8e:24:8b:82:eb:ea:fc:
b4:8b:f7:73:b6:d4:5a:30:da:7d:c5:db:fc:6e:ac:
e7:0e:8c:3d:e4:7f:db:43:6d:8b:6d:22:51:cb:7d:
75:98:f9:6a:94:42:b6:e9:61:9a:a7:6e:e8:46:ed:
d1:ea:5d:4e:09:50:73:06:e3:58:cb:77:84:b4:51:
99:65:be:a9:b5:1d:d1:f8:22:91:0f:c0:d8:0d:1c:
6c:00:98:a9:f8:df:6d:e8:76:e4:a7:56:92:81:bc:
55:d0:24:bd:9f:3f:b7:c1:8c:58:db:50:10:a7:0d:
31:01:03:7b:31:a2:c1:1e:9a:ca:01:12:18:73:9b:
b6:66:45:4e:f7:cc:01:98:3f:26:ef:74:bb:fa:ba:
98:ae:a1:2d:de:a0:37:a4:81:9c:d2:8a:a2:92:ed:
3e:23:77:28:4f:96:79:95:74:49:c8:d6:b6:7e:7d:
aa:1b:c1:41:83:7c:70:4b:8d:44:6a:74:ff:ab:93:
65:f4:ec:c6:fc:89:42:8b:5c:7e:06:22:8e:52:ee:
de:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:73:32:7F:01:B5:02:FA:2A:1A:68:FE:97:59:00:6A:25:74:44:F6
X509v3 Authority Key Identifier:
keyid:19:0E:C7:AA:B2:0F:C4:C8:01:C6:79:63:E5:9E:4F:93:60:0E:40:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:93:1e:e4:56:f4:c4:26:b4:cb:44:e6:68:55:26:e4:79:ed:
2e:10:f8:9b:5d:85:e8:1c:e7:08:3c:23:30:15:7f:cf:b2:76:
8d:14:c6:69:ce:74:79:32:84:e5:6b:71:af:08:bd:ee:9b:d5:
00:f7:60:05:50:2b:34:79:ac:ed:c0:d5:07:b8:58:b4:b0:8b:
87:c4:f7:e3:e1:45:27:e7:81:41:4b:c3:3d:ed:87:b1:f2:a1:
f1:ad:8c:23:d7:84:85:c4:4d:95:a0:d3:5b:89:37:c7:9f:08:
6f:17:86:ac:56:24:8d:6c:e1:1f:b7:30:c2:13:94:5f:04:26:
54:fd:3b:0b:7f:f4:bb:b9:67:ab:b5:5b:20:b2:ee:bc:0b:1c:
75:10:d2:1a:80:b8:02:3d:2d:74:e3:d0:8f:ce:f0:2b:68:dd:
58:c0:4f:76:56:f5:d0:27:d3:58:c9:1c:6c:07:33:9a:84:d8:
eb:97:e4:ea:62:39:84:e8:77:fd:9b:7d:7a:fa:6b:fd:67:0e:
b7:1b:2c:cc:f3:84:2e:97:99:b9:28:77:75:8a:28:84:b4:e7:
70:de:f7:1e:68:91:4c:24:d3:87:60:66:a6:9c:5f:52:ba:2d:
27:32:bd:13:a7:16:ac:8a:82:99:4d:36:ea:5d:85:ad:f7:72:
b3:c9:62:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:21:58 2026 by rpki-client