Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/Gqq6fafI82yLJ1ynOEkc7cy14xI.mft
File: Gqq6fafI82yLJ1ynOEkc7cy14xI.mft (raw, json)
Hash identifier: ZgBqKLFO2C2fkSOs1kEBOn7ut6tQJe+KvpAIYWnsSBg=
Subject key identifier: 88:88:DB:35:9E:06:3D:1D:E5:4F:B1:2C:F4:42:76:8E:82:59:4B:69
Authority key identifier: 1A:AA:BA:7D:A7:C8:F3:6C:8B:27:5C:A7:38:49:1C:ED:CC:B5:E3:12
Certificate issuer: /CN=1aaaba7da7c8f36c8b275ca738491cedccb5e312
Certificate serial: 01A0F8AA2CEF6126641D1A693298331DB7BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gqq6fafI82yLJ1ynOEkc7cy14xI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/Gqq6fafI82yLJ1ynOEkc7cy14xI.mft
Manifest number: 0E8F
Signing time: Thu 01 Oct 2026 18:11:37 +0000
Manifest this update: Thu 01 Oct 2026 18:11:37 +0000
Manifest next update: Fri 02 Oct 2026 18:11:37 +0000
Files and hashes: 1: Gqq6fafI82yLJ1ynOEkc7cy14xI.crl (hash: wRqrlQW50QbtWkRHzo6gg/EvUSl8izlHRz7bxci36WA=)
2: I5ZIgX6iDK3oX7v-xFIQ7pdLpMo.roa (hash: 6PLpfxFxy8Nk7yedlc7CM9dTIiIgGRRx4WDgW5TY2yA=)
3: bs3te7njxydTnYWSP4ChGEGcJkQ.roa (hash: XPxWLnbyz8Llb8yCU48yi3z2ezc69lq+HL61zB6vbh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/Gqq6fafI82yLJ1ynOEkc7cy14xI.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/Gqq6fafI82yLJ1ynOEkc7cy14xI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gqq6fafI82yLJ1ynOEkc7cy14xI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 16:22:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f8:aa:2c:ef:61:26:64:1d:1a:69:32:98:33:1d:b7:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aaaba7da7c8f36c8b275ca738491cedccb5e312
Validity
Not Before: Oct 1 18:11:37 2026 GMT
Not After : Oct 2 18:11:37 2026 GMT
Subject: CN=8888db359e063d1de54fb12cf442768e82594b69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d3:be:74:b5:4a:10:33:e9:b7:68:63:b3:08:
7a:d2:da:71:46:03:a1:61:9f:c6:03:44:53:09:c1:
5f:3b:4b:b0:b3:1e:13:b6:90:fa:eb:08:63:44:57:
57:3d:87:ce:99:d9:24:f5:9a:1f:3a:49:0a:ba:8c:
03:81:c7:5b:20:38:cf:4f:40:53:92:40:8d:88:e6:
a6:98:8f:bf:a3:24:00:a3:4e:73:b8:f8:29:01:9b:
d6:07:02:c9:dd:22:2d:ca:56:02:97:44:ea:90:c9:
19:bc:04:df:e1:53:8a:3c:e2:5b:09:c9:a2:2f:f7:
d9:d8:98:58:36:d4:87:e4:f7:29:fd:4a:34:02:1c:
4e:26:46:da:95:b6:6d:b3:ca:87:55:93:9f:ba:67:
98:db:9d:c8:28:04:58:fd:a5:79:82:9e:86:04:84:
04:33:07:6b:12:a5:30:b2:0f:35:20:44:29:89:de:
df:5f:16:5c:b5:cb:74:98:4a:0a:31:c2:2b:cb:d6:
00:e0:3b:44:5c:08:ac:76:3c:f2:10:19:04:2e:61:
8c:db:9f:4c:eb:90:b1:5f:88:56:60:b8:af:e8:34:
f0:be:aa:ac:73:84:81:ec:0b:66:af:2c:0e:1f:76:
08:d9:13:d3:cc:42:db:e3:29:e8:83:fa:de:fc:22:
2f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:88:DB:35:9E:06:3D:1D:E5:4F:B1:2C:F4:42:76:8E:82:59:4B:69
X509v3 Authority Key Identifier:
keyid:1A:AA:BA:7D:A7:C8:F3:6C:8B:27:5C:A7:38:49:1C:ED:CC:B5:E3:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gqq6fafI82yLJ1ynOEkc7cy14xI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/Gqq6fafI82yLJ1ynOEkc7cy14xI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/Gqq6fafI82yLJ1ynOEkc7cy14xI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:6d:21:96:81:6a:92:99:f5:25:14:d7:1f:f6:f3:e9:cd:b4:
99:6a:cd:f5:67:70:74:12:47:37:32:b9:3e:09:f0:38:1d:34:
0d:79:b6:f7:74:60:e1:2f:21:ee:85:0b:75:19:97:80:c4:ec:
58:55:c0:d3:c5:59:ce:6a:c2:04:72:bd:36:75:5a:9b:b9:26:
de:86:a7:49:45:a8:fa:a6:e3:e4:ba:15:4d:d4:eb:db:e2:62:
34:05:3d:80:2f:f6:27:30:76:a0:ba:99:2c:1a:13:9b:41:14:
19:48:61:b7:02:fc:a1:15:bb:13:24:46:b6:08:6d:ff:79:96:
d9:fc:22:03:1b:2f:ea:ae:9f:a5:93:a5:0e:b4:fc:76:4e:81:
4a:65:44:33:7a:ba:d3:e6:4e:10:2c:8e:fa:6e:06:ba:67:fb:
2f:86:71:d5:1a:c8:49:3b:0a:e3:b1:7b:71:d2:eb:22:ba:84:
3d:5b:18:75:aa:98:df:4f:4e:bf:8c:fd:06:ef:64:c4:57:b4:
ad:90:fa:d9:45:c0:d4:db:07:19:5f:d2:38:29:23:63:2d:28:
6d:b2:1f:71:d5:b6:39:20:67:17:55:8f:74:cc:65:90:21:c4:
5a:71:59:c3:fd:a3:fa:22:65:7d:19:ee:ff:e8:37:ff:7b:46:
16:bd:83:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 08:35:33 2026 by rpki-client