Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft
File: GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft (raw, json)
Hash identifier: pjdgbo7opo/OD4uB6aaFtsvlBf/g4MAJFwloI4KrVSM=
Subject key identifier: 51:DF:ED:37:3C:46:4A:14:04:12:E3:EA:16:56:88:D8:67:10:94:FE
Authority key identifier: 19:0E:C7:AA:B2:0F:C4:C8:01:C6:79:63:E5:9E:4F:93:60:0E:40:1D
Certificate issuer: /CN=190ec7aab20fc4c801c67963e59e4f93600e401d
Certificate serial: 019DA48B008E5A391390BB5B87F623BA4EEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft
Manifest number: 120B
Signing time: Sun 19 Apr 2026 07:01:06 +0000
Manifest this update: Sun 19 Apr 2026 07:01:06 +0000
Manifest next update: Mon 20 Apr 2026 07:01:06 +0000
Files and hashes: 1: BFsuju73p_IfTuzKMk-7j2upM6U.roa (hash: NMObEH49eiBEjgkYRi2sMCjgCjz2WvdzgCb1t201l78=)
2: GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.crl (hash: yfpZ20gWruA9RfNct9+WkG/ltN4g3X7GfCgXujGSbg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:8b:00:8e:5a:39:13:90:bb:5b:87:f6:23:ba:4e:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=190ec7aab20fc4c801c67963e59e4f93600e401d
Validity
Not Before: Apr 19 07:01:06 2026 GMT
Not After : Apr 20 07:01:06 2026 GMT
Subject: CN=51dfed373c464a140412e3ea165688d8671094fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:c6:8e:6a:16:28:e4:c9:24:9f:ed:cb:3a:73:
52:72:9f:77:78:c3:7d:23:73:2f:c7:84:23:5c:f6:
ed:60:65:80:d3:5a:cb:62:f5:75:51:82:08:8b:00:
39:88:91:87:84:8f:f6:6b:51:14:83:ef:02:70:02:
28:9a:0d:0b:03:b8:ce:08:7c:16:d9:58:72:03:a8:
c4:66:be:ab:8e:a1:9c:7d:56:1c:fb:50:4f:a2:78:
4e:5b:3c:f0:03:38:a8:ac:f7:cd:a7:c9:75:40:f6:
21:e0:8c:69:d8:45:45:98:f5:93:91:2b:ed:a3:0c:
58:6d:b1:08:5a:e8:a1:45:f2:51:05:e5:43:27:aa:
01:15:0d:3a:e7:ba:5f:6b:b8:e4:26:c0:1d:07:53:
04:4a:91:f6:d4:fe:b2:bf:84:5b:51:a2:43:bb:01:
63:79:6c:96:cc:dc:ab:47:42:31:57:05:41:30:9c:
4f:d8:01:30:61:1e:9c:2e:d1:2b:23:69:50:18:d5:
f0:f5:6f:7f:d2:a5:39:63:80:60:6d:a6:a4:11:29:
4e:fb:70:7c:56:dd:99:c5:cf:95:4b:f8:7f:7d:aa:
cc:56:e7:b7:65:7c:77:be:31:3c:d1:87:12:be:9e:
6b:6d:98:3a:14:29:84:a9:f3:5a:ea:29:4e:31:2f:
65:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:DF:ED:37:3C:46:4A:14:04:12:E3:EA:16:56:88:D8:67:10:94:FE
X509v3 Authority Key Identifier:
keyid:19:0E:C7:AA:B2:0F:C4:C8:01:C6:79:63:E5:9E:4F:93:60:0E:40:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:78:31:e8:a0:92:7b:10:6d:a9:71:00:d0:5c:23:90:2b:35:
df:dc:ca:d9:80:ba:ae:bc:e2:e9:50:21:f7:d5:ea:48:3c:42:
e7:36:e2:15:39:30:ae:14:a0:b1:54:5a:e1:93:6c:72:d7:8c:
fd:b7:31:9f:58:5e:92:2d:c2:c7:c5:18:99:9b:a3:c6:c0:73:
ae:3c:0c:ba:2f:8d:90:7b:bc:97:64:3b:bc:67:a8:88:72:95:
13:da:20:39:82:8d:54:c9:d9:76:92:28:d7:9b:95:5d:15:7f:
4e:63:05:29:4d:d7:ea:66:01:b9:02:01:67:7f:9f:8e:ae:09:
83:b2:35:e5:64:db:45:22:8e:9a:e7:27:f0:7e:1e:60:d4:2c:
7e:50:c2:e1:f4:87:38:3d:16:0e:bc:40:01:fb:bf:58:14:b1:
8a:94:61:b2:a9:e8:c5:42:41:07:73:a9:25:e1:32:6b:8a:3f:
b6:27:c3:3f:3c:05:33:50:4b:0b:66:dc:de:4d:72:0c:f0:5b:
e0:f4:a8:f1:17:43:44:c3:81:4a:1c:35:5c:94:4e:82:ce:24:
11:2b:a8:3e:92:20:86:83:6d:3c:58:5e:53:09:57:1f:b2:ca:
43:b0:c6:23:ae:11:31:fe:bb:ad:a4:fa:31:fc:21:40:20:50:
1b:5b:0f:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:53:14 2026 by rpki-client