Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/af1126-1fc7-4131-90ef-6484f2a437de/1/GIqHq3kQGTeTuKpsPB7ma9sGpx8.mft
File: GIqHq3kQGTeTuKpsPB7ma9sGpx8.mft (raw, json)
Hash identifier: 5Hvig2ZhjGmN46cVz1ItlO9Y/vaaxWp09PW55jlDjnQ=
Subject key identifier: 34:A6:CC:C6:07:30:6C:4A:8D:C1:32:0D:0C:B0:8B:B7:E9:1D:59:4F
Authority key identifier: 18:8A:87:AB:79:10:19:37:93:B8:AA:6C:3C:1E:E6:6B:DB:06:A7:1F
Certificate issuer: /CN=188a87ab7910193793b8aa6c3c1ee66bdb06a71f
Certificate serial: 019D258366AC8079F434ECCA78825BD6CF8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GIqHq3kQGTeTuKpsPB7ma9sGpx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/af1126-1fc7-4131-90ef-6484f2a437de/1/GIqHq3kQGTeTuKpsPB7ma9sGpx8.mft
Manifest number: 0107
Signing time: Wed 25 Mar 2026 15:01:01 +0000
Manifest this update: Wed 25 Mar 2026 15:01:01 +0000
Manifest next update: Thu 26 Mar 2026 15:01:01 +0000
Files and hashes: 1: GIqHq3kQGTeTuKpsPB7ma9sGpx8.crl (hash: eZPvq+wcE5DSXS/Dusn7ZSV8KshYJRVeGilWjUxzzeA=)
2: dKUSVy6IdXXRjgtpigNGU0J9jeU.asa (hash: CejzruUkEWq9zLEaoAabqikLpPGhjf75ZRntC5aAVpg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/af1126-1fc7-4131-90ef-6484f2a437de/1/GIqHq3kQGTeTuKpsPB7ma9sGpx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/af1126-1fc7-4131-90ef-6484f2a437de/1/GIqHq3kQGTeTuKpsPB7ma9sGpx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GIqHq3kQGTeTuKpsPB7ma9sGpx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:66:ac:80:79:f4:34:ec:ca:78:82:5b:d6:cf:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=188a87ab7910193793b8aa6c3c1ee66bdb06a71f
Validity
Not Before: Mar 25 15:01:01 2026 GMT
Not After : Mar 26 15:01:01 2026 GMT
Subject: CN=34a6ccc607306c4a8dc1320d0cb08bb7e91d594f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:07:20:67:7c:a6:c0:40:16:16:83:46:f1:0f:
62:cb:77:b6:9c:60:91:17:b9:c7:ef:51:08:a8:73:
92:52:d6:21:bc:ee:d4:7e:b2:f7:bf:e5:73:cf:17:
e7:6a:19:50:62:e2:28:ae:9f:07:54:46:22:9b:fe:
6e:86:12:9d:1b:9d:c5:ba:b3:31:7d:12:29:a8:44:
b7:07:2e:b0:7d:1e:0d:f4:b3:78:27:d5:6f:64:ca:
99:0e:41:80:59:b1:21:02:b2:ff:a7:4f:5e:64:2a:
0c:06:f3:fd:1c:17:0a:00:3e:82:ca:1b:3e:54:7b:
02:9e:57:f9:04:60:52:c5:65:7a:71:cd:fa:42:c9:
72:4d:fe:e2:44:42:fa:77:ab:1a:55:03:40:3a:a1:
72:03:36:4a:6b:76:0b:16:e0:c3:8e:4a:ec:68:d3:
2f:14:8c:e6:5f:b2:60:e4:ca:a5:eb:70:3b:e5:27:
b5:fd:68:c6:b6:ad:b9:4e:9f:88:e2:e1:51:7c:39:
7f:ad:6a:11:4f:97:f8:f6:11:cd:68:76:ee:df:d2:
b0:e9:1a:8b:3b:9a:3a:0c:ef:3b:d6:6d:f0:94:f5:
2d:b1:76:bc:95:b2:5c:b9:48:7a:ce:c0:fe:1b:aa:
f7:4e:09:aa:36:bc:ca:7f:22:a4:51:50:b4:3f:e4:
db:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:A6:CC:C6:07:30:6C:4A:8D:C1:32:0D:0C:B0:8B:B7:E9:1D:59:4F
X509v3 Authority Key Identifier:
keyid:18:8A:87:AB:79:10:19:37:93:B8:AA:6C:3C:1E:E6:6B:DB:06:A7:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GIqHq3kQGTeTuKpsPB7ma9sGpx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/af1126-1fc7-4131-90ef-6484f2a437de/1/GIqHq3kQGTeTuKpsPB7ma9sGpx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/af1126-1fc7-4131-90ef-6484f2a437de/1/GIqHq3kQGTeTuKpsPB7ma9sGpx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:db:1f:19:15:b4:b4:f2:b9:ff:55:20:19:d0:ea:e8:ce:c8:
52:1a:bd:fa:23:7f:d5:f3:91:fe:f4:c5:09:91:12:33:d7:c7:
75:46:1e:19:e0:a3:df:bc:53:1d:a5:3a:4b:15:80:6b:e1:1d:
17:97:ba:d3:10:ec:c4:ed:b0:1c:94:b8:c9:5d:c9:75:72:41:
39:82:46:83:ed:00:ad:dd:6d:bb:1c:74:41:a0:a6:a0:4f:16:
8d:48:98:0a:e2:df:6b:fc:46:0c:b3:0b:3e:09:59:2d:0f:fb:
79:43:50:bc:70:25:59:d1:61:23:de:cd:49:30:d5:35:68:3a:
b9:ef:2d:6c:6b:5e:38:0d:e1:f7:fe:ad:79:bd:48:9c:c5:e1:
37:45:dc:27:7b:3e:c6:57:4f:6a:1d:05:11:44:25:0e:c0:86:
99:72:bd:4f:81:29:1a:11:2a:e2:4b:4f:fa:e8:28:3d:2a:7d:
62:0e:bf:40:e0:8c:58:58:f4:55:ee:c7:19:37:a5:61:21:52:
ea:88:96:1f:d9:85:bc:c9:dd:fd:10:4f:a2:9d:e9:2c:ac:12:
94:dd:f2:de:4d:ed:d1:dc:83:01:77:de:89:59:99:b6:ca:7c:
53:af:ed:ec:39:1b:f4:e9:cd:94:ea:d0:2e:8b:44:48:c9:20:
b9:d3:9c:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:25:10 2026 by rpki-client