Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/7021e2-effe-4163-8bb3-58e7db30ea44/1/GQn2DIuF7-02HfW2tRyf7a4cf5Y.mft
File: GQn2DIuF7-02HfW2tRyf7a4cf5Y.mft (raw, json)
Hash identifier: /sgkrOLW4q5XESjflGq7tzopIzUVFdt6/TFrf1bXsoM=
Subject key identifier: E3:C0:24:4A:1D:A5:85:1A:66:D2:1D:B1:1D:AE:01:4D:02:F2:A4:6A
Authority key identifier: 19:09:F6:0C:8B:85:EF:ED:36:1D:F5:B6:B5:1C:9F:ED:AE:1C:7F:96
Certificate issuer: /CN=1909f60c8b85efed361df5b6b51c9fedae1c7f96
Certificate serial: 019FA7872BB6BF3CF8427078FF715912A1E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQn2DIuF7-02HfW2tRyf7a4cf5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/7021e2-effe-4163-8bb3-58e7db30ea44/1/GQn2DIuF7-02HfW2tRyf7a4cf5Y.mft
Manifest number: 0C3C
Signing time: Tue 28 Jul 2026 07:01:21 +0000
Manifest this update: Tue 28 Jul 2026 07:01:21 +0000
Manifest next update: Wed 29 Jul 2026 07:01:21 +0000
Files and hashes: 1: GQn2DIuF7-02HfW2tRyf7a4cf5Y.crl (hash: v59DZFa782Qdj11ignN1DnRTHszbmXQUvbz8Dt8cWW4=)
2: GYVpw44ITOKKpdgG8Chd41R_mz0.asa (hash: J5xgubX/Yds4qbv3CrQ+J1gCPs+v23KHp5e5VO0cLRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/7021e2-effe-4163-8bb3-58e7db30ea44/1/GQn2DIuF7-02HfW2tRyf7a4cf5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/7021e2-effe-4163-8bb3-58e7db30ea44/1/GQn2DIuF7-02HfW2tRyf7a4cf5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GQn2DIuF7-02HfW2tRyf7a4cf5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:87:2b:b6:bf:3c:f8:42:70:78:ff:71:59:12:a1:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1909f60c8b85efed361df5b6b51c9fedae1c7f96
Validity
Not Before: Jul 28 07:01:21 2026 GMT
Not After : Jul 29 07:01:21 2026 GMT
Subject: CN=e3c0244a1da5851a66d21db11dae014d02f2a46a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:da:77:f4:e8:7d:d7:8e:22:29:be:e4:24:e3:
3d:55:12:02:15:58:6b:3e:37:01:86:d2:93:27:35:
fd:4e:24:00:75:0d:31:30:97:d6:6c:d8:fa:1a:cf:
db:71:43:dc:c0:65:de:ac:16:12:f0:6e:48:44:dc:
79:0e:6f:27:46:3e:f0:7f:9d:cc:4d:ae:ba:fa:2e:
6d:a1:4d:51:a5:e3:ef:3e:99:da:0b:d4:ae:07:5a:
73:65:5c:12:a5:8b:23:8d:c3:41:80:9e:8e:a1:52:
92:2d:73:9c:ee:5d:45:3f:47:87:2e:a4:ed:73:3d:
a2:43:04:f3:73:91:60:fd:41:db:85:04:76:79:54:
6f:1f:3f:af:e9:ff:5a:37:fd:fc:2a:65:43:1c:d1:
8d:f1:03:5e:30:65:8f:02:e4:5b:0e:8b:6a:7f:75:
23:d2:30:a6:c7:ae:9a:f2:cd:07:27:ee:1a:05:76:
6f:e7:f6:d4:e0:b7:dd:2e:83:23:c7:31:1d:4d:aa:
ea:9b:60:18:01:ca:4d:6d:40:f0:53:66:35:39:8e:
69:8d:3c:c4:d2:69:66:ff:96:d8:17:20:00:5b:10:
22:65:6d:fb:b0:da:83:c3:d5:ed:e1:66:5a:b0:b7:
fd:d2:77:59:13:45:48:a2:6c:4a:e5:2e:31:52:48:
44:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:C0:24:4A:1D:A5:85:1A:66:D2:1D:B1:1D:AE:01:4D:02:F2:A4:6A
X509v3 Authority Key Identifier:
keyid:19:09:F6:0C:8B:85:EF:ED:36:1D:F5:B6:B5:1C:9F:ED:AE:1C:7F:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQn2DIuF7-02HfW2tRyf7a4cf5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/7021e2-effe-4163-8bb3-58e7db30ea44/1/GQn2DIuF7-02HfW2tRyf7a4cf5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/7021e2-effe-4163-8bb3-58e7db30ea44/1/GQn2DIuF7-02HfW2tRyf7a4cf5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:58:eb:ea:78:df:0a:c5:61:80:a8:0b:3d:be:57:70:cc:91:
04:7c:ee:a8:e1:0b:98:c7:b5:3d:28:d3:e7:ad:7c:2a:33:1b:
a9:eb:03:86:e2:1e:65:bc:a3:09:77:6f:b9:fc:12:c6:bd:04:
18:f1:ec:5f:d9:c8:dc:65:07:43:4c:b2:f2:ab:bb:19:ca:93:
b7:33:88:48:45:d5:f7:e7:fe:83:02:a3:f4:50:b6:af:6f:be:
90:6a:bc:b5:ae:04:f4:9d:38:2f:39:2a:22:f9:55:95:dd:36:
05:a9:c4:1d:b0:76:9a:f6:e5:6b:93:58:57:60:a8:2e:0d:9e:
46:64:32:ee:17:8d:ce:32:28:7f:08:da:4e:0f:7a:8c:96:e5:
4c:4c:64:1a:9e:20:f6:49:6d:89:f1:a2:24:c1:c9:47:ac:dd:
a3:50:75:56:01:8b:61:07:69:26:84:10:83:b2:1b:58:fd:33:
ce:1a:ff:20:fe:1f:97:a3:f4:2a:ce:e1:19:3b:be:21:fc:bd:
9b:1e:83:e5:33:01:be:9f:a7:9a:6c:1d:13:13:5f:ab:f1:de:
cc:77:54:af:a4:67:3c:b6:46:9c:31:f9:c3:c3:79:73:16:b5:
4b:a4:d2:25:15:64:f8:a2:d0:1f:73:86:e1:f0:6f:5a:ac:ba:
3e:1c:f0:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:02:16 2026 by rpki-client