Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/6285f1-8c1d-4844-be0e-be8e651c51f6/1/Xq_GD000CftGyKW_ldOYHxShQ7A.mft
File: Xq_GD000CftGyKW_ldOYHxShQ7A.mft (raw, json)
Hash identifier: nqea/W+ku2oLs+QwxlWsJew0rKDwEJXuTdqAKIOyJvI=
Subject key identifier: D0:38:16:03:5D:19:39:5C:F0:14:50:95:0C:CA:28:D3:E2:3B:12:F6
Authority key identifier: 5E:AF:C6:0F:4D:34:09:FB:46:C8:A5:BF:95:D3:98:1F:14:A1:43:B0
Certificate issuer: /CN=5eafc60f4d3409fb46c8a5bf95d3981f14a143b0
Certificate serial: 019D28BB119F576A0597691185C549372A92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xq_GD000CftGyKW_ldOYHxShQ7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/6285f1-8c1d-4844-be0e-be8e651c51f6/1/Xq_GD000CftGyKW_ldOYHxShQ7A.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 06:00:41 +0000
Manifest this update: Thu 26 Mar 2026 06:00:41 +0000
Manifest next update: Fri 27 Mar 2026 06:00:41 +0000
Files and hashes: 1: GUgLg3-BRyvvd7IU0mKTRz8HLQo.roa (hash: QrRBGrDD9ZKqKp1YwsfRb3TUqSdKHluo6aJuZoI6754=)
2: Xq_GD000CftGyKW_ldOYHxShQ7A.crl (hash: IgKX4UzR60m31XKswKjOznifPjS/05HTeIpq/vU8fTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/6285f1-8c1d-4844-be0e-be8e651c51f6/1/Xq_GD000CftGyKW_ldOYHxShQ7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/6285f1-8c1d-4844-be0e-be8e651c51f6/1/Xq_GD000CftGyKW_ldOYHxShQ7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xq_GD000CftGyKW_ldOYHxShQ7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:11:9f:57:6a:05:97:69:11:85:c5:49:37:2a:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eafc60f4d3409fb46c8a5bf95d3981f14a143b0
Validity
Not Before: Mar 26 06:00:41 2026 GMT
Not After : Mar 27 06:00:41 2026 GMT
Subject: CN=d03816035d19395cf01450950cca28d3e23b12f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:11:17:2c:19:5a:05:9a:c6:fb:05:06:46:5e:
fd:76:04:5b:03:cd:06:e0:65:f8:fc:bc:b3:17:d4:
9f:97:a2:23:a5:c9:e2:d6:86:22:e0:33:c5:34:9c:
fa:18:6a:09:8e:85:bd:c3:19:24:f1:18:ca:72:61:
04:96:73:e9:cf:34:bb:c4:3c:67:44:e6:b1:66:76:
8f:fa:2e:f6:f5:c1:92:38:10:cf:f6:46:26:b2:b8:
a7:e2:31:f6:af:1c:05:20:61:60:a1:b3:16:7d:32:
aa:89:02:14:7c:f8:0b:7b:93:53:ef:f6:5d:1b:bc:
97:93:78:3e:ba:22:b5:6d:6d:42:80:24:5c:ed:06:
69:5e:6e:1e:cb:47:91:67:40:14:e7:68:fd:2d:0e:
d6:4d:ba:a6:50:b6:29:af:c5:48:1c:f7:48:33:81:
5d:f0:a1:9b:a8:c3:1c:ff:c3:b5:bc:86:5c:a0:55:
bf:86:0e:d0:47:4f:2d:51:ca:22:21:40:0a:6c:a4:
ff:fb:54:c9:3c:d2:df:9d:14:0b:d3:45:12:6c:18:
6c:20:86:e7:83:6a:78:0f:4e:35:92:9b:c6:ec:1e:
c2:31:6b:a6:ff:17:d0:24:95:bd:97:d3:87:e1:50:
cb:6f:57:53:2f:d8:b3:c2:4c:dc:65:be:89:39:95:
92:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:38:16:03:5D:19:39:5C:F0:14:50:95:0C:CA:28:D3:E2:3B:12:F6
X509v3 Authority Key Identifier:
keyid:5E:AF:C6:0F:4D:34:09:FB:46:C8:A5:BF:95:D3:98:1F:14:A1:43:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xq_GD000CftGyKW_ldOYHxShQ7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/6285f1-8c1d-4844-be0e-be8e651c51f6/1/Xq_GD000CftGyKW_ldOYHxShQ7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/6285f1-8c1d-4844-be0e-be8e651c51f6/1/Xq_GD000CftGyKW_ldOYHxShQ7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:96:a4:b3:10:4a:d3:b6:28:57:23:b4:9d:67:2b:ff:e6:d9:
16:d5:89:c7:d6:ed:04:f6:6e:41:54:a8:33:b3:a9:2b:e9:66:
37:e1:a8:4c:b9:fc:00:13:81:40:1f:de:cc:74:ee:9e:b7:36:
4d:f4:87:cc:00:3c:ad:14:68:cc:cc:9e:a3:af:81:b2:58:3c:
81:c6:cf:8e:58:ec:a5:81:d8:20:c1:df:3a:d7:d1:26:d0:68:
e5:c6:88:17:97:06:01:43:8e:83:70:f8:80:fe:0f:4a:2e:80:
48:4b:7f:c9:39:31:48:ae:34:9f:c9:5b:b1:07:0c:43:aa:d6:
3c:93:f7:17:1d:ce:6f:2e:35:52:0e:32:98:99:7d:9e:1e:8e:
c0:19:c0:0c:d4:4b:93:b5:d6:50:22:b3:f5:1a:48:99:f2:c8:
b1:7a:24:f6:ba:60:8e:47:a2:97:79:9c:ac:3f:5c:18:b5:eb:
14:fd:74:91:a1:62:ac:39:9a:fa:09:99:e8:ac:62:a9:3a:74:
e6:0b:9e:19:19:8f:c4:b4:25:62:40:56:72:cc:88:7c:d0:ec:
43:99:1f:04:1f:40:f9:7a:ff:8a:c4:d3:8f:59:bf:f0:5d:76:
6d:02:2b:64:15:95:df:cf:35:c8:f0:41:7c:05:db:d1:31:f9:
56:84:a5:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:11:40 2026 by rpki-client