Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/7021e2-effe-4163-8bb3-58e7db30ea44/1/GQn2DIuF7-02HfW2tRyf7a4cf5Y.mft
File: GQn2DIuF7-02HfW2tRyf7a4cf5Y.mft (raw, json)
Hash identifier: AHwF1UiqMCXlQI1V3BCaj53Qbvj0pBaWQz8wP1r4b6Y=
Subject key identifier: 95:1A:0E:59:7F:88:26:99:1D:83:F9:7E:C8:2B:12:9F:8A:83:2F:EA
Authority key identifier: 19:09:F6:0C:8B:85:EF:ED:36:1D:F5:B6:B5:1C:9F:ED:AE:1C:7F:96
Certificate issuer: /CN=1909f60c8b85efed361df5b6b51c9fedae1c7f96
Certificate serial: 019CAC46A9044881364FC9AABBDF59D09EF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQn2DIuF7-02HfW2tRyf7a4cf5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/7021e2-effe-4163-8bb3-58e7db30ea44/1/GQn2DIuF7-02HfW2tRyf7a4cf5Y.mft
Manifest number: 0AB0
Signing time: Mon 02 Mar 2026 02:00:37 +0000
Manifest this update: Mon 02 Mar 2026 02:00:37 +0000
Manifest next update: Tue 03 Mar 2026 02:00:37 +0000
Files and hashes: 1: GQn2DIuF7-02HfW2tRyf7a4cf5Y.crl (hash: IU8BMG1qUKc5dweQKiM9IXadnVqH5IyWbtPQYthw2Mg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/7021e2-effe-4163-8bb3-58e7db30ea44/1/GQn2DIuF7-02HfW2tRyf7a4cf5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/7021e2-effe-4163-8bb3-58e7db30ea44/1/GQn2DIuF7-02HfW2tRyf7a4cf5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GQn2DIuF7-02HfW2tRyf7a4cf5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:a9:04:48:81:36:4f:c9:aa:bb:df:59:d0:9e:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1909f60c8b85efed361df5b6b51c9fedae1c7f96
Validity
Not Before: Mar 2 02:00:37 2026 GMT
Not After : Mar 3 02:00:37 2026 GMT
Subject: CN=951a0e597f8826991d83f97ec82b129f8a832fea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:be:fd:49:07:42:89:ed:5a:f4:a3:0f:d4:95:
e1:fd:c5:c8:18:74:7a:59:14:9b:4a:f2:e0:0d:4a:
52:08:5d:11:ee:87:33:2b:38:f8:b3:ba:28:87:41:
e9:57:35:cf:c6:2a:22:02:76:f8:07:8c:4e:ee:c0:
37:b5:af:51:82:7a:8b:d2:ae:8d:92:82:19:48:e7:
65:70:fe:16:67:38:c2:76:ba:bd:bd:36:80:ac:f9:
11:05:53:a5:21:27:b0:e3:d9:59:b4:f5:0a:a8:d5:
20:4f:cf:93:49:f7:87:2e:a5:bd:d1:85:06:42:94:
d3:01:40:e8:a0:3d:0b:95:ec:e5:0b:46:8b:69:5f:
00:28:2c:8e:e3:ac:9d:a1:ac:e4:e5:80:05:b6:45:
d6:57:75:db:6b:99:a4:a7:0c:dc:c7:bb:f0:31:a2:
bb:c0:a4:56:eb:88:c9:0a:5b:63:2f:08:89:e6:24:
64:35:d3:ef:cd:93:df:7b:b8:a4:c2:d2:38:65:bf:
3a:38:e9:3e:c4:8b:ff:f4:d3:df:74:9f:88:81:55:
3f:01:fc:2f:38:72:38:4b:44:38:54:80:f8:80:b8:
0b:9b:ff:fc:af:42:74:f6:a7:84:41:f7:c9:24:7a:
e3:58:54:d5:f1:ef:27:f6:d3:69:39:b0:93:c5:dd:
32:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:1A:0E:59:7F:88:26:99:1D:83:F9:7E:C8:2B:12:9F:8A:83:2F:EA
X509v3 Authority Key Identifier:
keyid:19:09:F6:0C:8B:85:EF:ED:36:1D:F5:B6:B5:1C:9F:ED:AE:1C:7F:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQn2DIuF7-02HfW2tRyf7a4cf5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/7021e2-effe-4163-8bb3-58e7db30ea44/1/GQn2DIuF7-02HfW2tRyf7a4cf5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/7021e2-effe-4163-8bb3-58e7db30ea44/1/GQn2DIuF7-02HfW2tRyf7a4cf5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:e9:98:18:b8:50:a4:c0:0c:67:b7:70:1a:12:89:25:5c:95:
24:67:13:0f:51:86:d7:27:2c:4e:d4:3c:51:c5:16:d5:64:3c:
a0:06:1d:92:e7:08:ff:1b:e1:49:cc:36:d5:6c:b1:ed:f6:fc:
c7:3a:9a:cf:ee:ee:48:b4:ca:c8:14:8c:71:3b:70:dc:75:b2:
78:f0:8c:cd:85:26:a0:e7:da:65:e3:f0:72:0c:3c:a2:23:71:
4f:c1:aa:98:f8:05:82:c8:64:61:8b:98:22:ae:50:ef:58:a1:
2c:6a:c5:1f:46:9b:58:e9:58:28:17:18:c2:7c:b9:86:64:15:
63:b9:01:bb:b2:71:38:e2:5a:6a:3c:6f:6c:65:eb:7e:b4:b2:
c8:9e:e7:8f:10:79:46:32:5c:f6:5c:09:99:5c:35:11:3b:13:
fc:e9:35:47:e7:fc:af:b2:ad:d2:df:f7:7c:ea:2b:ca:0e:4c:
95:e2:17:57:b1:15:98:a3:f8:66:82:9c:a6:1c:68:b8:98:ae:
f8:04:bc:f1:c4:e4:f5:26:36:b9:9c:23:2d:94:d1:9d:90:79:
ae:b5:9e:40:19:b5:c5:73:3e:38:55:a7:90:fe:05:a1:f3:cf:
ca:fb:b3:39:a3:cd:88:c5:f4:00:d9:61:8c:b2:58:fc:a6:03:
dc:20:80:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:25:18 2026 by rpki-client