
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/af1126-1fc7-4131-90ef-6484f2a437de/1/GIqHq3kQGTeTuKpsPB7ma9sGpx8.mft
File: GIqHq3kQGTeTuKpsPB7ma9sGpx8.mft (raw, json)
Hash identifier: 3avhz7ZIV1QkVeecxmz9dCUz8vUjfZEiAzJCerIb/KY=
Subject key identifier: C9:78:D1:1C:1C:7A:74:71:21:9E:4D:F0:19:03:F8:64:98:A4:60:DF
Authority key identifier: 18:8A:87:AB:79:10:19:37:93:B8:AA:6C:3C:1E:E6:6B:DB:06:A7:1F
Certificate issuer: /CN=188a87ab7910193793b8aa6c3c1ee66bdb06a71f
Certificate serial: 019E1EA2F5190E24D18EF430A6E70C7838FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GIqHq3kQGTeTuKpsPB7ma9sGpx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/af1126-1fc7-4131-90ef-6484f2a437de/1/GIqHq3kQGTeTuKpsPB7ma9sGpx8.mft
Manifest number: 0188
Signing time: Wed 13 May 2026 00:00:56 +0000
Manifest this update: Wed 13 May 2026 00:00:56 +0000
Manifest next update: Thu 14 May 2026 00:00:56 +0000
Files and hashes: 1: GIqHq3kQGTeTuKpsPB7ma9sGpx8.crl (hash: 11So6UJdBTkXYo2j02WeCEMSdfW8eVTlGe3EJssg1eA=)
2: dKUSVy6IdXXRjgtpigNGU0J9jeU.asa (hash: CejzruUkEWq9zLEaoAabqikLpPGhjf75ZRntC5aAVpg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/af1126-1fc7-4131-90ef-6484f2a437de/1/GIqHq3kQGTeTuKpsPB7ma9sGpx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/af1126-1fc7-4131-90ef-6484f2a437de/1/GIqHq3kQGTeTuKpsPB7ma9sGpx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GIqHq3kQGTeTuKpsPB7ma9sGpx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a2:f5:19:0e:24:d1:8e:f4:30:a6:e7:0c:78:38:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=188a87ab7910193793b8aa6c3c1ee66bdb06a71f
Validity
Not Before: May 13 00:00:56 2026 GMT
Not After : May 14 00:00:56 2026 GMT
Subject: CN=c978d11c1c7a7471219e4df01903f86498a460df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:17:6d:75:a4:e4:b9:a4:f3:5e:2d:df:33:75:
cf:55:7a:9c:9a:5c:3d:f2:00:2a:6b:95:e8:dd:7d:
db:f6:2f:e6:c6:c6:8b:93:eb:0f:b2:7c:9b:69:27:
bb:59:05:df:0f:0d:4c:96:87:77:e1:82:0b:18:85:
ba:b8:9d:06:32:0f:f0:89:66:99:ce:26:6a:53:a9:
33:66:28:ec:81:dc:af:3a:4f:38:1d:5f:5a:22:7e:
17:86:49:0c:7b:00:b0:95:0f:e4:fb:73:72:dd:38:
be:bc:23:87:8f:41:30:b9:c2:40:eb:cc:98:9a:4b:
a2:30:47:6b:ae:15:f1:1b:ca:d8:26:2d:75:fb:9b:
35:4b:aa:19:c3:e9:b1:63:08:71:6a:15:69:ca:26:
e8:e6:86:25:3b:51:20:97:9e:c0:25:47:2d:a1:d3:
2f:3e:fa:91:f8:1a:6c:c8:cb:4f:03:c9:37:54:af:
c9:b9:36:65:02:51:e5:48:c7:56:eb:a2:56:f8:7d:
65:20:ed:0d:3e:ec:f4:5a:d4:cf:c7:b5:39:21:a7:
c6:b7:5c:cd:bb:bb:12:78:58:e1:77:b3:ad:60:cf:
92:c0:79:49:4c:8b:4d:12:25:9a:1d:cf:7b:b1:d8:
8f:73:8d:0b:02:29:8c:43:86:02:e8:a5:e7:cc:2c:
70:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:78:D1:1C:1C:7A:74:71:21:9E:4D:F0:19:03:F8:64:98:A4:60:DF
X509v3 Authority Key Identifier:
keyid:18:8A:87:AB:79:10:19:37:93:B8:AA:6C:3C:1E:E6:6B:DB:06:A7:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GIqHq3kQGTeTuKpsPB7ma9sGpx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/af1126-1fc7-4131-90ef-6484f2a437de/1/GIqHq3kQGTeTuKpsPB7ma9sGpx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/af1126-1fc7-4131-90ef-6484f2a437de/1/GIqHq3kQGTeTuKpsPB7ma9sGpx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:c3:83:09:8b:72:7f:39:f9:b9:42:f3:90:b5:5a:71:e3:e6:
ef:6b:e6:43:d0:7a:98:df:ca:79:01:b0:9f:d9:0e:fb:c9:26:
2f:b0:95:4c:53:63:c7:c2:d6:5c:53:fa:f4:d3:79:16:38:1a:
95:59:07:f6:72:2f:d1:d3:0a:ae:bf:54:ad:3e:e8:0d:47:ad:
5e:bb:87:b9:bb:ee:e4:05:51:90:51:bb:b9:a3:95:a1:b1:db:
14:c1:b9:bf:71:de:da:4a:95:66:a1:fd:8e:20:0f:a3:30:9b:
b7:c2:0f:32:2e:71:28:1d:74:c5:4f:32:f6:99:3b:06:b4:c3:
1f:d8:96:eb:bd:91:3c:00:80:bb:3b:67:1f:bc:1c:33:fe:a1:
15:1d:e6:23:55:68:24:59:61:7d:2f:d3:d3:84:31:6f:21:09:
ce:2d:8a:ab:44:23:e1:90:1d:41:4b:d3:39:c7:8a:0a:74:8a:
08:e5:39:38:10:78:66:a7:48:c2:63:a3:11:bf:ea:4a:fd:58:
aa:45:2a:6a:af:5f:c8:61:4c:ec:cc:fe:83:d7:ae:93:0d:b1:
35:46:b7:9e:e7:62:20:d7:c6:7f:56:51:cd:1e:7f:45:16:7f:
eb:c3:c6:1b:ee:ec:d1:b9:94:b7:25:fa:5e:2b:c8:50:26:c4:
fe:5b:b3:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4eovUZDiTRjvQwpucMeDj+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4OGE4N2FiNzkxMDE5Mzc5M2I4YWE2YzNjMWVlNjZiZGIw
NmE3MWYwHhcNMjYwNTEzMDAwMDU2WhcNMjYwNTE0MDAwMDU2WjAzMTEwLwYDVQQD
EyhjOTc4ZDExYzFjN2E3NDcxMjE5ZTRkZjAxOTAzZjg2NDk4YTQ2MGRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxdtdaTkuaTzXi3fM3XPVXqcmlw9
8gAqa5Xo3X3b9i/mxsaLk+sPsnybaSe7WQXfDw1Mlod34YILGIW6uJ0GMg/wiWaZ
ziZqU6kzZijsgdyvOk84HV9aIn4XhkkMewCwlQ/k+3Ny3Ti+vCOHj0EwucJA68yY
mkuiMEdrrhXxG8rYJi11+5s1S6oZw+mxYwhxahVpyibo5oYlO1Egl57AJUctodMv
PvqR+BpsyMtPA8k3VK/JuTZlAlHlSMdW66JW+H1lIO0NPuz0WtTPx7U5IafGt1zN
u7sSeFjhd7OtYM+SwHlJTItNEiWaHc97sdiPc40LAimMQ4YC6KXnzCxwQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMl40RwcenRxIZ5N8BkD+GSYpGDfMB8GA1UdIwQY
MBaAFBiKh6t5EBk3k7iqbDwe5mvbBqcfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0lxSHEza1FHVGVUdUtwc1BCN21hOXNHcHg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9hZjExMjYtMWZjNy00MTMxLTkwZWYt
NjQ4NGYyYTQzN2RlLzEvR0lxSHEza1FHVGVUdUtwc1BCN21hOXNHcHg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC9hZjExMjYtMWZjNy00MTMxLTkwZWYtNjQ4NGYyYTQzN2Rl
LzEvR0lxSHEza1FHVGVUdUtwc1BCN21hOXNHcHg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl8ODCYty
fzn5uULzkLVacePm72vmQ9B6mN/KeQGwn9kO+8kmL7CVTFNjx8LWXFP69NN5Fjga
lVkH9nIv0dMKrr9UrT7oDUetXruHubvu5AVRkFG7uaOVobHbFMG5v3He2kqVZqH9
jiAPozCbt8IPMi5xKB10xU8y9pk7BrTDH9iW672RPACAuztnH7wcM/6hFR3mI1Vo
JFlhfS/T04QxbyEJzi2Kq0Qj4ZAdQUvTOceKCnSKCOU5OBB4ZqdIwmOjEb/qSv1Y
qkUqaq9fyGFM7Mz+g9eukw2xNUa3nudiINfGf1ZRzR5/RRZ/68PGG+7s0bmUtyX6
XivIUCbE/luzjg==
-----END CERTIFICATE-----
Generated at Wed May 13 04:39:02 2026 by rpki-client