Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/a9ff1a-d580-4b42-bd87-5597260f65ee/1/GQI5F5kzdgEzH1oSrxHp9PZCEVk.mft
File: GQI5F5kzdgEzH1oSrxHp9PZCEVk.mft (raw, json)
Hash identifier: ZxtNO+4n4z+dNYOPnvnqJ6liJ5Jyj5CQn6p/5qLrA/M=
Subject key identifier: A7:CD:53:14:31:1A:A8:07:CD:61:25:9C:8A:AA:33:48:AA:AC:25:6D
Authority key identifier: 19:02:39:17:99:33:76:01:33:1F:5A:12:AF:11:E9:F4:F6:42:11:59
Certificate issuer: /CN=1902391799337601331f5a12af11e9f4f6421159
Certificate serial: 019CAB344F8BFFBA9315FA29796E59B5CB84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQI5F5kzdgEzH1oSrxHp9PZCEVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/a9ff1a-d580-4b42-bd87-5597260f65ee/1/GQI5F5kzdgEzH1oSrxHp9PZCEVk.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 21:00:57 +0000
Manifest this update: Sun 01 Mar 2026 21:00:57 +0000
Manifest next update: Mon 02 Mar 2026 21:00:57 +0000
Files and hashes: 1: GQI5F5kzdgEzH1oSrxHp9PZCEVk.crl (hash: +svC0x3mQNlpsujssOHRNUErt/Y5d99uBQvcTEaXhIs=)
2: _OEYR_NlTtbmQ4jWp8KafD4MvOk.roa (hash: 4XDRL8Ii1WLuqDpCaTnrPdX+U3rQ6Em8H+bJRAAY9Nk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/a9ff1a-d580-4b42-bd87-5597260f65ee/1/GQI5F5kzdgEzH1oSrxHp9PZCEVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/a9ff1a-d580-4b42-bd87-5597260f65ee/1/GQI5F5kzdgEzH1oSrxHp9PZCEVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GQI5F5kzdgEzH1oSrxHp9PZCEVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:4f:8b:ff:ba:93:15:fa:29:79:6e:59:b5:cb:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1902391799337601331f5a12af11e9f4f6421159
Validity
Not Before: Mar 1 21:00:57 2026 GMT
Not After : Mar 2 21:00:57 2026 GMT
Subject: CN=a7cd5314311aa807cd61259c8aaa3348aaac256d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3e:6e:45:26:1e:a9:4e:1e:e0:1e:84:c2:14:
87:da:47:a3:56:c3:dd:ba:97:45:88:70:db:bd:b9:
7d:86:a5:c4:6f:af:e6:f2:45:ca:e1:99:22:2e:a6:
0f:e4:76:bc:3d:87:9d:2c:14:a4:9d:c1:50:af:8a:
ea:71:b0:22:b5:cd:06:c5:46:14:0d:f0:fb:ca:23:
3d:f0:22:ee:c5:77:23:2a:8a:18:7b:76:d3:bd:6a:
c5:14:1c:ee:94:7d:29:3b:8d:29:a1:64:2d:a6:1c:
14:5d:cf:18:7c:ef:eb:ae:60:a0:1d:4e:5d:d1:c2:
b0:bc:c5:42:67:73:f6:5d:63:f6:c4:23:4b:f8:a4:
4a:8b:fc:5e:77:22:d3:df:25:54:66:57:27:d3:82:
c8:df:70:a9:a5:2a:0f:63:8b:fd:ba:f4:0d:63:e9:
47:20:76:80:6c:5c:a6:49:c0:fc:d0:07:06:d6:35:
72:8d:d1:30:3d:ca:64:0c:7e:40:ea:a1:51:a9:48:
06:2b:53:5d:86:87:e8:c6:ce:b3:6a:70:48:68:12:
0d:65:f1:68:a7:96:1a:3b:92:ed:4a:09:ed:79:94:
5c:89:75:eb:9e:6f:74:0c:9a:33:db:3b:28:8b:f3:
57:b6:cd:48:1a:b1:b1:b2:69:ec:93:45:ca:9a:34:
c4:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:CD:53:14:31:1A:A8:07:CD:61:25:9C:8A:AA:33:48:AA:AC:25:6D
X509v3 Authority Key Identifier:
keyid:19:02:39:17:99:33:76:01:33:1F:5A:12:AF:11:E9:F4:F6:42:11:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQI5F5kzdgEzH1oSrxHp9PZCEVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a9ff1a-d580-4b42-bd87-5597260f65ee/1/GQI5F5kzdgEzH1oSrxHp9PZCEVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a9ff1a-d580-4b42-bd87-5597260f65ee/1/GQI5F5kzdgEzH1oSrxHp9PZCEVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:16:f0:48:ec:00:23:9f:5b:c6:5d:ff:6f:66:26:1f:4d:8c:
57:63:c3:59:48:35:f8:d1:ed:f6:5e:60:e6:62:95:69:d8:e5:
3b:6e:2f:9f:83:35:0c:1f:4f:ad:fd:4d:6b:6b:11:89:32:93:
4d:f5:73:50:91:1b:c6:5c:a4:29:a0:17:fc:b5:ac:96:ee:1c:
20:21:96:45:34:70:d6:2d:47:8d:0a:94:c6:ae:c6:ee:3c:a4:
c6:36:38:14:25:4a:85:c5:f7:eb:38:20:a3:8e:4a:ad:96:e2:
55:1a:ed:1a:af:cd:3c:08:5b:e1:7f:96:2c:55:d5:8f:62:62:
36:e4:30:8c:f7:63:9f:e7:96:58:d9:cd:ea:6b:8e:dd:97:5a:
e1:16:54:dd:4c:ea:0a:22:7b:3a:fd:97:9d:eb:3c:d6:fb:cb:
65:b2:12:ae:10:3b:0d:07:68:f9:73:0d:5b:82:ad:a2:6b:24:
02:c2:ac:4e:a7:85:6a:21:72:a0:7d:fb:57:bb:eb:e6:d3:cb:
fa:34:f9:6c:ca:77:7d:fe:f7:eb:67:f1:2f:aa:01:04:12:2d:
88:b2:bb:04:b6:d5:59:ca:9f:a5:f2:a7:c4:f6:d4:96:99:da:
d4:81:31:0d:e3:c7:86:1b:a6:b3:17:b2:5b:e9:3c:cb:fc:56:
08:69:c0:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:12:24 2026 by rpki-client