Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/gQrwAiUQayCW6bIdmsLyBAaI3qI.mft
File: gQrwAiUQayCW6bIdmsLyBAaI3qI.mft (raw, json)
Hash identifier: qQHmIr3AUiBLmIJLRBpt9YU18228/3a8ko1ZPsofDe8=
Subject key identifier: 46:3A:68:B9:E1:48:DD:C9:95:CE:8B:2E:F7:4E:46:08:C0:AE:36:74
Authority key identifier: 81:0A:F0:02:25:10:6B:20:96:E9:B2:1D:9A:C2:F2:04:06:88:DE:A2
Certificate issuer: /CN=810af00225106b2096e9b21d9ac2f2040688dea2
Certificate serial: 019CAAC6C61587165DC6191DB0CAEBD56B70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQrwAiUQayCW6bIdmsLyBAaI3qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/gQrwAiUQayCW6bIdmsLyBAaI3qI.mft
Manifest number: 0B8E
Signing time: Sun 01 Mar 2026 19:01:19 +0000
Manifest this update: Sun 01 Mar 2026 19:01:19 +0000
Manifest next update: Mon 02 Mar 2026 19:01:19 +0000
Files and hashes: 1: Dg5PEYmKpTVI2DCPpp7B0MOqhXQ.roa (hash: 0r9Wvfa6jCmlqCpm1KLg+xpqhpapVEOAPFkYXdbs38g=)
2: H-gl84k76iOlzZYYJCblbDHN-l8.roa (hash: 9kM+SrqoWq0lxyCjUYdOI+zgBattq8/xzQWtVJ/ldQQ=)
3: gQrwAiUQayCW6bIdmsLyBAaI3qI.crl (hash: FXs3LTxajO5NsR6f/3DO/bveYDsgF/4y8QQQbFSDfGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/gQrwAiUQayCW6bIdmsLyBAaI3qI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/gQrwAiUQayCW6bIdmsLyBAaI3qI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gQrwAiUQayCW6bIdmsLyBAaI3qI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:c6:15:87:16:5d:c6:19:1d:b0:ca:eb:d5:6b:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=810af00225106b2096e9b21d9ac2f2040688dea2
Validity
Not Before: Mar 1 19:01:19 2026 GMT
Not After : Mar 2 19:01:19 2026 GMT
Subject: CN=463a68b9e148ddc995ce8b2ef74e4608c0ae3674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b8:7c:dd:6f:05:5a:91:aa:a1:58:83:68:48:
27:31:91:ba:a7:da:52:76:39:30:ef:e2:e9:ac:9a:
34:22:04:59:56:e6:cc:12:78:36:25:28:4c:ec:6c:
8e:ba:6b:df:6e:28:6a:23:84:3c:da:e2:cb:a2:0d:
18:31:3f:28:7f:44:0a:70:98:79:7b:70:b0:71:28:
7f:08:52:f0:e7:e4:66:62:1b:51:be:d1:05:09:32:
13:be:25:2d:9b:24:81:22:52:2d:b3:ad:89:8b:5c:
90:a2:98:68:98:59:7b:4e:bd:01:ed:8c:de:70:fa:
94:bf:65:17:74:e1:cb:83:49:b1:1f:3e:5d:b8:e5:
31:b4:4c:85:a3:f0:23:01:78:77:dd:fd:c5:1a:11:
22:b1:ce:ec:cf:ec:1d:16:75:e3:91:72:07:d8:09:
af:9d:4f:77:5e:17:20:14:f4:83:4a:15:2a:f7:14:
15:c0:5d:4c:7c:f7:a2:68:a7:43:b5:89:82:f6:96:
bf:6c:bb:8a:0b:21:4c:b3:96:17:b0:57:42:1d:bc:
a2:fe:b3:f4:73:02:41:58:d9:88:de:6b:05:b1:57:
27:4e:fa:ce:44:39:a0:59:b3:37:a8:9f:88:b2:40:
49:e1:63:4d:6a:fa:33:d2:fa:a7:89:2b:bb:29:b4:
d2:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:3A:68:B9:E1:48:DD:C9:95:CE:8B:2E:F7:4E:46:08:C0:AE:36:74
X509v3 Authority Key Identifier:
keyid:81:0A:F0:02:25:10:6B:20:96:E9:B2:1D:9A:C2:F2:04:06:88:DE:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQrwAiUQayCW6bIdmsLyBAaI3qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/gQrwAiUQayCW6bIdmsLyBAaI3qI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/gQrwAiUQayCW6bIdmsLyBAaI3qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:c5:6b:3c:4f:38:c1:f1:9b:c4:ad:45:f5:39:2b:db:6c:f8:
45:f6:aa:36:44:73:bc:51:80:f5:4d:57:fe:31:b8:2d:ad:50:
a0:cb:61:8f:a9:3f:7e:94:1a:b6:2d:b6:a8:31:bc:ea:5e:39:
fc:5b:5b:dc:d7:81:72:30:54:d0:17:5b:0d:30:4e:9d:9d:c4:
26:23:9f:0d:f5:a9:85:76:5c:a1:3f:0b:68:b6:42:f8:5c:e2:
4f:f0:37:f3:f2:b5:ee:26:9c:be:56:1d:86:31:37:72:d7:8f:
8f:d2:40:96:68:97:4f:55:ec:bf:b3:ce:d7:e7:3e:74:37:5e:
7c:f2:02:03:c5:99:a1:88:f8:23:53:33:d3:9e:2c:b4:cc:2c:
37:79:08:ed:8d:ff:60:d7:f1:a2:31:ae:59:04:6f:e2:ff:98:
16:da:53:b8:a4:e7:7d:f8:26:4f:1e:0e:76:ed:48:a8:d0:d4:
bf:84:f0:a6:dc:85:e8:d0:2d:47:e5:ad:68:6a:49:57:ad:66:
8c:f5:a9:e7:44:3d:ee:b9:49:ac:22:c4:95:24:54:74:50:bd:
8f:05:20:ed:52:3b:63:97:b2:ae:9e:2c:04:17:5c:9f:35:db:
60:ea:80:93:16:97:a6:7f:b2:d6:c8:16:87:7b:2c:48:6f:34:
66:c5:73:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:38:20 2026 by rpki-client