Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.mft
File: gQYKUYUo6GqOp38YigJjeQwI9rk.mft (raw, json)
Hash identifier: covOCe9TdnyQp1ffC7n2Zq50sim2+XuAmGasuFana7A=
Subject key identifier: 07:C5:7C:A4:99:CA:DC:35:62:24:C0:8C:1F:70:31:09:12:80:BE:92
Authority key identifier: 81:06:0A:51:85:28:E8:6A:8E:A7:7F:18:8A:02:63:79:0C:08:F6:B9
Certificate issuer: /CN=81060a518528e86a8ea77f188a0263790c08f6b9
Certificate serial: 019CAE6BEF420EBF534E288C1F578D67334E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQYKUYUo6GqOp38YigJjeQwI9rk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.mft
Manifest number: 1242
Signing time: Mon 02 Mar 2026 12:00:35 +0000
Manifest this update: Mon 02 Mar 2026 12:00:35 +0000
Manifest next update: Tue 03 Mar 2026 12:00:35 +0000
Files and hashes: 1: _znAllcUhDUk5vaonzcpuUajgfo.roa (hash: qYtkv42oHHUxBFtOZdOaS3DV/fsi8LFPD+D7XK8B1uc=)
2: gQYKUYUo6GqOp38YigJjeQwI9rk.crl (hash: 4QcSQ9J3fKxqaNlAeyPqaY9Ib6sBs21aOkg2ze5cPpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gQYKUYUo6GqOp38YigJjeQwI9rk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 12:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:6b:ef:42:0e:bf:53:4e:28:8c:1f:57:8d:67:33:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81060a518528e86a8ea77f188a0263790c08f6b9
Validity
Not Before: Mar 2 12:00:35 2026 GMT
Not After : Mar 3 12:00:35 2026 GMT
Subject: CN=07c57ca499cadc356224c08c1f7031091280be92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ed:17:92:2d:0b:74:ef:ae:f8:c8:f4:db:24:
6f:d1:b1:91:f5:87:85:e8:57:ed:8f:ec:de:5f:09:
be:6d:e2:ec:00:8a:cd:d0:e0:03:55:d0:03:3d:eb:
09:b1:b7:8d:1d:8a:28:fd:d6:d1:8d:e1:7f:da:47:
d4:93:cb:cf:41:e5:f0:78:88:b5:3d:84:3c:f4:61:
4c:d5:5b:55:d2:da:34:43:35:5f:88:32:de:e8:f6:
51:d8:f5:ac:53:d9:8d:61:0b:45:29:17:cd:9e:f9:
04:48:60:94:8e:f7:45:d7:e7:db:0f:da:12:5f:f0:
01:4d:e6:3c:d1:25:ed:65:b6:d9:cc:e5:3b:15:64:
f5:e4:86:fb:69:a8:5d:0f:60:f3:64:b8:e2:b8:93:
0b:5b:12:21:a3:b7:94:9f:e1:a9:36:4c:5f:75:51:
26:dd:6d:0d:f2:44:f0:f5:00:98:c5:49:7f:1b:ab:
94:a8:38:b2:33:76:51:ea:ed:98:da:f5:70:f8:66:
0d:69:6c:1f:92:e1:bc:96:16:21:30:bb:90:52:22:
42:11:4b:e9:34:10:b3:76:7b:79:58:dd:77:e6:51:
d0:f2:e7:29:2d:54:0c:70:a3:5a:16:19:bb:b5:1b:
dc:de:17:90:4d:fe:8c:18:08:4d:21:10:1a:55:f3:
d9:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:C5:7C:A4:99:CA:DC:35:62:24:C0:8C:1F:70:31:09:12:80:BE:92
X509v3 Authority Key Identifier:
keyid:81:06:0A:51:85:28:E8:6A:8E:A7:7F:18:8A:02:63:79:0C:08:F6:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQYKUYUo6GqOp38YigJjeQwI9rk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/e5e2d0-f439-45e4-8540-f19600c7ad54/1/gQYKUYUo6GqOp38YigJjeQwI9rk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:72:06:0a:c6:43:45:ba:99:3b:c6:2d:62:6f:4d:cf:69:b8:
7e:39:8b:f6:39:b8:67:93:45:8b:ec:19:db:55:78:ff:ae:89:
8d:0e:c4:2c:1f:b3:f5:4e:ec:85:54:32:63:c5:7a:7d:79:a5:
76:7a:fd:e8:82:84:05:e7:42:d3:4b:a9:6c:6c:15:81:c7:34:
6b:f7:9d:21:c2:58:99:61:7d:8a:ae:df:ba:04:7d:09:10:3d:
9c:58:83:8b:bc:6a:68:1b:f1:71:25:9e:9e:c4:46:15:8b:da:
6a:bc:c4:4e:14:a2:af:4e:c2:84:55:22:96:f4:b3:36:f6:34:
27:d6:26:1d:cf:13:c8:34:03:50:5d:71:03:a2:f2:72:5e:60:
eb:22:a1:d6:7d:d4:28:21:7a:03:df:24:24:8c:4c:d0:2c:f7:
e1:fd:bf:5e:f4:f6:73:1a:26:bf:a5:1f:d9:04:19:e2:57:e0:
f9:b7:9c:b9:8b:a4:b7:e2:7c:c8:e8:4b:f9:cd:43:77:39:df:
5c:ab:e3:7e:66:1e:dd:e5:1b:bc:88:6d:77:d9:30:6d:b2:51:
88:79:51:41:14:82:b7:36:d3:13:e6:d4:d6:eb:5b:0a:3d:ec:
ce:f6:c4:cb:b4:e7:17:88:3b:59:ec:ac:58:63:d5:7c:d3:d6:
38:84:fc:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:01:01 2026 by rpki-client