Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/7021e2-effe-4163-8bb3-58e7db30ea44/1/GQn2DIuF7-02HfW2tRyf7a4cf5Y.mft
File: GQn2DIuF7-02HfW2tRyf7a4cf5Y.mft (raw, json)
Hash identifier: 038ZtXv/Ehi+rQKYiNT/BlZtuyPpJgUXET7Cw8rXbDA=
Subject key identifier: C4:5F:30:E5:E6:5A:72:C1:9F:92:0F:D3:B9:6C:BF:5B:53:8E:9C:F9
Authority key identifier: 19:09:F6:0C:8B:85:EF:ED:36:1D:F5:B6:B5:1C:9F:ED:AE:1C:7F:96
Certificate issuer: /CN=1909f60c8b85efed361df5b6b51c9fedae1c7f96
Certificate serial: 019DA378E324D5BC7BDC990A7A4C505CD380
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQn2DIuF7-02HfW2tRyf7a4cf5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/7021e2-effe-4163-8bb3-58e7db30ea44/1/GQn2DIuF7-02HfW2tRyf7a4cf5Y.mft
Manifest number: 0B30
Signing time: Sun 19 Apr 2026 02:01:41 +0000
Manifest this update: Sun 19 Apr 2026 02:01:41 +0000
Manifest next update: Mon 20 Apr 2026 02:01:41 +0000
Files and hashes: 1: GQn2DIuF7-02HfW2tRyf7a4cf5Y.crl (hash: gJQMjWV2UFhgUYmfZGjEX4EFNqKEMUDV0JqAoxZ0sKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/7021e2-effe-4163-8bb3-58e7db30ea44/1/GQn2DIuF7-02HfW2tRyf7a4cf5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/7021e2-effe-4163-8bb3-58e7db30ea44/1/GQn2DIuF7-02HfW2tRyf7a4cf5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GQn2DIuF7-02HfW2tRyf7a4cf5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:78:e3:24:d5:bc:7b:dc:99:0a:7a:4c:50:5c:d3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1909f60c8b85efed361df5b6b51c9fedae1c7f96
Validity
Not Before: Apr 19 02:01:41 2026 GMT
Not After : Apr 20 02:01:41 2026 GMT
Subject: CN=c45f30e5e65a72c19f920fd3b96cbf5b538e9cf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c1:49:7c:1d:0b:57:34:10:97:b9:21:eb:ec:
e1:9d:f6:d6:d8:0d:1e:52:3f:e9:f5:b4:77:de:63:
e1:d2:30:68:a5:2e:18:3e:86:81:d2:2c:65:dd:1c:
e5:9e:76:95:7e:95:b5:1d:88:91:e7:26:49:f8:e4:
00:1f:08:3c:51:be:8f:4b:05:00:56:f6:52:00:3d:
c2:55:d0:63:3a:30:f4:31:e6:da:59:0b:d4:45:5a:
76:98:d5:53:64:09:54:41:43:33:2d:09:45:a4:bc:
d3:3b:86:32:9a:dd:94:9d:d3:ed:ac:3b:97:0c:ff:
1a:6e:16:d1:91:a6:e2:9e:63:1f:39:a4:06:9c:fe:
fe:02:62:b5:48:da:a3:40:6b:96:5d:59:29:22:00:
6b:e2:14:1b:b0:ab:a0:cd:22:5f:dd:7c:a9:64:62:
e8:17:b3:24:0e:7c:20:a6:56:a0:5b:19:67:52:b5:
49:0b:ab:f8:23:f2:d2:d8:d2:91:69:52:a7:a5:32:
04:2a:ee:af:6b:11:f2:a9:f8:4d:47:dd:2d:75:2a:
1d:0f:52:62:f0:40:31:a2:4b:1f:84:8f:79:f8:a6:
2a:c3:3b:6b:a2:2a:6e:48:78:a9:8a:34:78:f7:40:
80:7c:af:c1:0f:6a:13:6d:b2:f7:1c:d6:c2:9f:51:
54:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:5F:30:E5:E6:5A:72:C1:9F:92:0F:D3:B9:6C:BF:5B:53:8E:9C:F9
X509v3 Authority Key Identifier:
keyid:19:09:F6:0C:8B:85:EF:ED:36:1D:F5:B6:B5:1C:9F:ED:AE:1C:7F:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQn2DIuF7-02HfW2tRyf7a4cf5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/7021e2-effe-4163-8bb3-58e7db30ea44/1/GQn2DIuF7-02HfW2tRyf7a4cf5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/7021e2-effe-4163-8bb3-58e7db30ea44/1/GQn2DIuF7-02HfW2tRyf7a4cf5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:99:5a:b7:73:e2:f8:22:5e:59:be:44:9f:52:e5:de:30:e6:
f4:20:e7:0e:0e:a4:fc:36:d3:16:11:fb:b3:ca:eb:20:03:30:
15:3f:0c:e0:3a:d0:1e:1a:3c:ce:51:1f:2d:d5:ee:72:0e:bb:
26:6b:fe:6b:c6:29:78:fa:11:27:90:f2:30:22:62:de:40:f5:
52:5f:23:8c:77:d3:e9:0e:4f:dc:91:cb:53:cb:43:72:34:9c:
9e:7c:05:bc:af:3d:a4:b9:11:79:9b:3b:31:e5:93:37:ce:00:
1e:e8:e0:57:c5:19:f9:cf:5d:98:9d:a1:b6:84:c0:bf:b9:6d:
67:d7:c4:55:5e:ee:4d:5c:09:6b:45:3d:f4:47:08:01:57:e9:
89:d0:7a:c3:e9:e9:1b:46:08:59:72:a4:f2:7a:51:06:72:89:
61:68:92:74:12:51:e6:e9:61:2c:ca:1e:67:77:ce:43:6a:d7:
80:cb:1a:cd:08:ef:6e:85:68:3a:1e:03:32:14:08:68:fd:e7:
13:b4:0f:db:9f:22:e8:e6:68:6a:49:4a:e5:b5:40:65:04:e6:
ba:95:9b:4c:1d:0c:57:be:44:cb:e0:a2:b7:26:73:d9:f4:f0:
34:ab:9c:4e:a2:c5:4f:8d:e1:72:ed:6a:7a:8e:ce:42:4e:3e:
96:13:37:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:30:02 2026 by rpki-client