Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft
File: GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft (raw, json)
Hash identifier: yGzVLmf3I5hYorTPs51UVrvA2Ii0Npvs4+4xAJyfFk4=
Subject key identifier: 33:D0:5F:DD:0E:79:C8:0C:2A:C5:A5:C8:3F:A4:52:FF:2D:EA:1A:1E
Authority key identifier: 19:0E:C7:AA:B2:0F:C4:C8:01:C6:79:63:E5:9E:4F:93:60:0E:40:1D
Certificate issuer: /CN=190ec7aab20fc4c801c67963e59e4f93600e401d
Certificate serial: 01A0E8C19A4217898DF6B6774709B20D7D30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft
Manifest number: 13BC
Signing time: Mon 28 Sep 2026 16:03:16 +0000
Manifest this update: Mon 28 Sep 2026 16:03:16 +0000
Manifest next update: Tue 29 Sep 2026 16:03:16 +0000
Files and hashes: 1: BFsuju73p_IfTuzKMk-7j2upM6U.roa (hash: NMObEH49eiBEjgkYRi2sMCjgCjz2WvdzgCb1t201l78=)
2: GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.crl (hash: LMZfZrdBFrcDLr6ADVWa2mPQ6/jRrpCddL90/wVIp4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:c1:9a:42:17:89:8d:f6:b6:77:47:09:b2:0d:7d:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=190ec7aab20fc4c801c67963e59e4f93600e401d
Validity
Not Before: Sep 28 16:03:16 2026 GMT
Not After : Sep 29 16:03:16 2026 GMT
Subject: CN=33d05fdd0e79c80c2ac5a5c83fa452ff2dea1a1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7a:91:25:37:a3:32:83:27:bf:91:ec:64:5f:
7d:68:71:96:0a:03:ea:ca:c3:3e:ac:cf:7f:cd:dc:
11:2d:77:e5:0e:dd:6e:59:66:94:07:de:7f:97:d2:
72:f7:e6:1b:8b:83:05:c3:c9:57:8a:a7:21:62:ec:
b0:ac:ca:8b:38:67:1d:59:ef:33:04:0b:80:78:33:
da:f3:e9:38:30:56:b8:0e:62:8e:c0:0c:64:c1:41:
b6:9a:61:bf:26:62:99:f2:be:fc:1c:ae:20:c5:41:
e3:de:96:15:7c:0b:31:de:a5:9f:cf:93:c9:ac:ab:
bf:f3:91:83:37:29:06:dd:85:bf:80:5a:aa:98:34:
50:26:6f:98:0f:38:b6:c7:a7:70:86:77:a6:5f:75:
da:ee:b6:ce:ad:b2:3a:98:74:87:20:f6:60:67:d5:
b5:3a:0a:4a:51:47:b5:c4:a3:16:12:4f:3e:05:d3:
d3:f1:5a:1b:72:73:6b:2c:a3:3a:83:c8:1e:2f:01:
1c:25:0a:3c:ce:c4:be:61:76:4b:88:e7:1d:ad:30:
08:71:8a:f5:8e:9a:da:ef:74:16:ff:25:d7:73:95:
2f:c9:55:d2:b7:c7:bb:d0:fa:50:2f:94:b8:70:ba:
b3:db:7c:fa:1a:8c:a6:b3:3c:6a:1a:09:2d:bd:37:
46:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:D0:5F:DD:0E:79:C8:0C:2A:C5:A5:C8:3F:A4:52:FF:2D:EA:1A:1E
X509v3 Authority Key Identifier:
keyid:19:0E:C7:AA:B2:0F:C4:C8:01:C6:79:63:E5:9E:4F:93:60:0E:40:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:99:53:7d:e2:8d:43:f3:da:83:62:50:e5:cd:e2:80:de:61:
91:01:ef:4d:94:13:46:b1:8e:f3:9f:00:fd:f9:86:04:47:73:
e3:94:66:5c:7d:c9:e8:03:25:ae:7c:f3:dc:54:1d:3f:d8:92:
60:06:23:c4:53:5d:50:49:eb:d7:95:8f:3a:e4:9b:9a:ea:fe:
b4:12:fa:2d:b8:2a:44:ef:cd:aa:91:a8:03:cb:95:03:cd:2b:
e5:9d:b5:c5:cb:6a:6c:1e:5f:7b:f8:72:d1:0d:b6:96:16:cf:
17:16:2e:0c:60:a6:e1:df:a6:87:86:03:78:b4:ae:15:c7:f5:
50:3b:2b:00:b5:cc:fe:45:22:d7:f8:62:ab:43:94:ab:e8:d3:
3f:82:c7:71:79:8e:4b:60:cf:08:71:c0:79:1c:31:4b:19:b8:
02:1f:7c:15:81:69:ab:f4:0a:44:52:65:22:d4:62:29:d4:85:
58:38:5b:60:81:74:0d:d8:1b:4f:cc:43:77:44:97:70:9c:0f:
9f:75:6c:39:17:60:42:47:3b:45:39:75:76:61:50:14:11:80:
4e:0b:8b:17:8d:39:0e:bf:46:ed:0b:13:23:b6:37:11:4f:ea:
81:d9:56:76:c6:f8:7e:36:20:d4:50:13:a0:2c:8e:2f:c8:d9:
7d:07:34:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDowZpCF4mN9rZ3RwmyDX0wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5MGVjN2FhYjIwZmM0YzgwMWM2Nzk2M2U1OWU0ZjkzNjAw
ZTQwMWQwHhcNMjYwOTI4MTYwMzE2WhcNMjYwOTI5MTYwMzE2WjAzMTEwLwYDVQQD
EygzM2QwNWZkZDBlNzljODBjMmFjNWE1YzgzZmE0NTJmZjJkZWExYTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHqRJTejMoMnv5HsZF99aHGWCgPq
ysM+rM9/zdwRLXflDt1uWWaUB95/l9Jy9+Ybi4MFw8lXiqchYuywrMqLOGcdWe8z
BAuAeDPa8+k4MFa4DmKOwAxkwUG2mmG/JmKZ8r78HK4gxUHj3pYVfAsx3qWfz5PJ
rKu/85GDNykG3YW/gFqqmDRQJm+YDzi2x6dwhnemX3Xa7rbOrbI6mHSHIPZgZ9W1
OgpKUUe1xKMWEk8+BdPT8VobcnNrLKM6g8geLwEcJQo8zsS+YXZLiOcdrTAIcYr1
jpra73QW/yXXc5UvyVXSt8e70PpQL5S4cLqz23z6GoymszxqGgktvTdGUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDPQX90OecgMKsWlyD+kUv8t6hoeMB8GA1UdIwQY
MBaAFBkOx6qyD8TIAcZ5Y+WeT5NgDkAdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1E3SHFySVB4TWdCeG5sajVaNVBrMkFPUUIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9iYTNiNjktNjVlNS00OThlLWJhMDgt
ZGFiOWI0ODNjMTIzLzEvR1E3SHFySVB4TWdCeG5sajVaNVBrMkFPUUIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi9iYTNiNjktNjVlNS00OThlLWJhMDgtZGFiOWI0ODNjMTIz
LzEvR1E3SHFySVB4TWdCeG5sajVaNVBrMkFPUUIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT5lTfeKN
Q/Pag2JQ5c3igN5hkQHvTZQTRrGO858A/fmGBEdz45RmXH3J6AMlrnzz3FQdP9iS
YAYjxFNdUEnr15WPOuSbmur+tBL6LbgqRO/NqpGoA8uVA80r5Z21xctqbB5fe/hy
0Q22lhbPFxYuDGCm4d+mh4YDeLSuFcf1UDsrALXM/kUi1/hiq0OUq+jTP4LHcXmO
S2DPCHHAeRwxSxm4Ah98FYFpq/QKRFJlItRiKdSFWDhbYIF0DdgbT8xDd0SXcJwP
n3VsORdgQkc7RTl1dmFQFBGATguLF405Dr9G7QsTI7Y3EU/qgdlWdsb4fjYg1FAT
oCyOL8jZfQc0hg==
-----END CERTIFICATE-----
Generated at Mon Sep 28 19:07:50 2026 by rpki-client