Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/6007ff-5f0c-4a73-a3f2-ccc5814094ad/1/GQ1bBUO9hajs-WmruFA8nerQ35g.mft
File: GQ1bBUO9hajs-WmruFA8nerQ35g.mft (raw, json)
Hash identifier: bzEEqD67RfkEUCe1faHdUJQE8XRyMZ/bK1zR8Jb1DsM=
Subject key identifier: F7:63:0B:C8:7A:24:AD:DC:1C:B5:F0:E1:56:E3:F2:1A:F9:FA:C0:19
Authority key identifier: 19:0D:5B:05:43:BD:85:A8:EC:F9:69:AB:B8:50:3C:9D:EA:D0:DF:98
Certificate issuer: /CN=190d5b0543bd85a8ecf969abb8503c9dead0df98
Certificate serial: 019CABD96FF6F16C3CE3122B8DFC2B59BC9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQ1bBUO9hajs-WmruFA8nerQ35g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/6007ff-5f0c-4a73-a3f2-ccc5814094ad/1/GQ1bBUO9hajs-WmruFA8nerQ35g.mft
Manifest number: 0F28
Signing time: Mon 02 Mar 2026 00:01:19 +0000
Manifest this update: Mon 02 Mar 2026 00:01:19 +0000
Manifest next update: Tue 03 Mar 2026 00:01:19 +0000
Files and hashes: 1: GQ1bBUO9hajs-WmruFA8nerQ35g.crl (hash: Rnu8AQnUHYdEpbuKbSifUhx3gyhwWpjXJ0jmhRZo/mE=)
2: jNFKZnTVsRBfGEaululoyvE8Qj4.roa (hash: cDGBqBzjQl/F2yNxNBLw+PS6D4K8fmbzN48Xq8oZa6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/6007ff-5f0c-4a73-a3f2-ccc5814094ad/1/GQ1bBUO9hajs-WmruFA8nerQ35g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/6007ff-5f0c-4a73-a3f2-ccc5814094ad/1/GQ1bBUO9hajs-WmruFA8nerQ35g.mft
rsync://rpki.ripe.net/repository/DEFAULT/GQ1bBUO9hajs-WmruFA8nerQ35g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:6f:f6:f1:6c:3c:e3:12:2b:8d:fc:2b:59:bc:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=190d5b0543bd85a8ecf969abb8503c9dead0df98
Validity
Not Before: Mar 2 00:01:19 2026 GMT
Not After : Mar 3 00:01:19 2026 GMT
Subject: CN=f7630bc87a24addc1cb5f0e156e3f21af9fac019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:80:e3:e0:23:89:f1:b8:42:3e:f9:73:3e:04:
27:5d:c9:31:5b:cd:8a:0a:0b:97:05:97:ee:47:06:
4b:80:d3:03:e5:65:a0:ce:c1:a2:46:89:f6:d2:b4:
e7:ac:74:13:01:94:c3:61:92:70:e2:58:f6:7d:2e:
82:a8:3d:a9:99:12:65:a2:76:68:2f:12:88:47:8e:
e7:23:6b:cc:1f:bf:1f:f5:2f:f2:90:e7:f5:71:c7:
5c:b2:68:9f:c4:18:2e:ca:97:ad:4c:91:b1:e6:91:
7f:01:c0:cf:85:57:40:df:f0:97:88:6f:cd:29:5b:
b8:cf:4a:88:4c:0e:32:1c:62:17:c7:a1:73:fc:cd:
be:a8:67:c2:29:e3:49:09:fd:32:83:f3:55:ae:ab:
55:f2:69:02:84:5a:55:a3:3e:76:44:18:e4:9f:87:
7b:fb:a2:6c:ed:70:b8:58:66:8d:16:8c:5c:65:78:
42:d3:03:10:c5:9c:93:04:32:2f:71:f3:49:0c:93:
e5:65:f7:0f:1b:50:1e:05:2f:9c:5b:4d:8a:6f:17:
68:12:12:54:a3:bc:7e:34:3a:18:13:1f:25:4d:cc:
c0:3c:5e:47:d5:83:2c:ef:75:43:af:21:72:12:b0:
f7:cf:2c:7b:b5:78:db:23:bf:fb:69:6b:60:7d:e4:
34:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:63:0B:C8:7A:24:AD:DC:1C:B5:F0:E1:56:E3:F2:1A:F9:FA:C0:19
X509v3 Authority Key Identifier:
keyid:19:0D:5B:05:43:BD:85:A8:EC:F9:69:AB:B8:50:3C:9D:EA:D0:DF:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQ1bBUO9hajs-WmruFA8nerQ35g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6007ff-5f0c-4a73-a3f2-ccc5814094ad/1/GQ1bBUO9hajs-WmruFA8nerQ35g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6007ff-5f0c-4a73-a3f2-ccc5814094ad/1/GQ1bBUO9hajs-WmruFA8nerQ35g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:9c:c0:38:08:54:47:52:25:65:63:f8:5b:ce:5d:f5:bc:02:
80:18:c8:be:4b:ef:b8:e1:e2:3f:1c:b4:ca:d7:fe:b1:97:91:
27:e5:78:9f:88:8c:8c:fa:ce:f0:4a:c8:8f:bf:cf:7e:9e:8e:
33:86:d1:f5:95:80:57:b5:d1:b4:a7:d0:04:0e:80:99:2e:d1:
dc:91:4b:ca:53:7d:16:fb:03:8a:4a:cf:22:7a:ad:a7:fe:ab:
33:1a:b6:aa:10:72:ec:27:6f:a7:36:fc:62:de:84:01:52:f1:
92:28:eb:bc:bc:1c:a1:a2:d8:99:7c:af:dd:0b:44:25:0a:65:
76:3c:dd:22:c4:53:11:6d:79:af:c5:b7:60:10:aa:47:62:0b:
5a:47:3b:e0:98:40:38:49:03:d0:c1:6f:56:21:56:2a:1c:e9:
19:32:a3:11:06:5e:1a:15:a9:6b:33:5b:ba:14:3e:3e:aa:d8:
1f:91:bb:d5:14:c8:a1:46:fd:eb:67:1c:0a:e4:bf:8a:6a:8e:
57:7a:10:b8:89:23:7e:fd:d9:ea:ac:f7:9a:80:17:18:52:1b:
74:45:8b:67:89:6e:77:fa:d9:ca:6e:94:84:87:a6:c9:89:0d:
67:6d:1a:96:e6:2a:b3:4e:ef:d0:3f:42:11:7f:91:5a:91:66:
86:c0:52:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:15:22 2026 by rpki-client