Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/974ea2-40af-4ef6-b6c7-fdcd9fd9bb03/1/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.mft
File: GQ0wDmrNH5iV_OO1q-OKXwBYTVU.mft (raw, json)
Hash identifier: iGGRv5LJEpB50Zqx61thOZGRo4NWz8TuyN1RCOo9gQY=
Subject key identifier: FA:2C:9A:C1:93:BB:B5:EB:D8:A3:A9:C4:BB:E1:19:4A:C0:BA:6D:F0
Authority key identifier: 19:0D:30:0E:6A:CD:1F:98:95:FC:E3:B5:AB:E3:8A:5F:00:58:4D:55
Certificate issuer: /CN=190d300e6acd1f9895fce3b5abe38a5f00584d55
Certificate serial: 019D27040014A51069AFD28869160329589C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/974ea2-40af-4ef6-b6c7-fdcd9fd9bb03/1/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.mft
Manifest number: 1882
Signing time: Wed 25 Mar 2026 22:01:06 +0000
Manifest this update: Wed 25 Mar 2026 22:01:06 +0000
Manifest next update: Thu 26 Mar 2026 22:01:06 +0000
Files and hashes: 1: GQ0wDmrNH5iV_OO1q-OKXwBYTVU.crl (hash: drUxVVZv/bQb9n3Cw+3pLlXjdthzf6rssnnJqcCsni4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/974ea2-40af-4ef6-b6c7-fdcd9fd9bb03/1/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/974ea2-40af-4ef6-b6c7-fdcd9fd9bb03/1/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:00:14:a5:10:69:af:d2:88:69:16:03:29:58:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=190d300e6acd1f9895fce3b5abe38a5f00584d55
Validity
Not Before: Mar 25 22:01:06 2026 GMT
Not After : Mar 26 22:01:06 2026 GMT
Subject: CN=fa2c9ac193bbb5ebd8a3a9c4bbe1194ac0ba6df0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a4:bb:6a:92:c2:e9:46:b3:b8:c3:65:4a:6f:
92:a3:6e:44:74:4d:5c:e1:3e:8a:12:34:c9:fc:6a:
5e:51:06:84:e2:25:a1:e3:38:ec:3c:25:2a:5b:eb:
5a:24:7a:4f:6d:e2:08:e3:c0:20:dd:e2:53:12:c9:
d4:13:8d:f6:16:b3:a8:12:94:b2:32:ff:ab:9c:8e:
19:24:43:a7:cd:29:c6:e5:64:4a:42:28:9d:d0:f9:
23:3a:f1:9a:b8:a4:66:71:bc:2f:32:10:f7:04:7e:
dc:48:90:d0:97:04:b2:1d:31:84:0d:e3:d6:a4:7f:
4d:27:29:ee:3e:a1:20:46:b6:cb:1c:7e:97:83:8c:
f7:9c:2d:4c:2a:5f:e9:63:8b:38:35:90:db:ac:a2:
45:3f:68:de:2a:6c:d0:16:55:f8:b6:31:ae:c6:2a:
11:11:a5:b7:a1:b5:a3:5b:38:3f:d9:f4:0c:60:e9:
6e:7a:2b:66:7b:e1:d2:55:8f:89:de:f8:26:cc:34:
43:05:3c:5c:b6:55:61:ac:46:4b:40:6d:ee:83:11:
ea:f4:54:e0:b3:4d:4d:07:e8:8c:02:08:f2:a4:8f:
6c:d0:06:ce:3a:49:63:66:d5:07:c6:45:a4:6f:b5:
3f:44:ed:43:f9:8d:b7:f4:0c:d6:5c:00:38:10:ee:
f4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:2C:9A:C1:93:BB:B5:EB:D8:A3:A9:C4:BB:E1:19:4A:C0:BA:6D:F0
X509v3 Authority Key Identifier:
keyid:19:0D:30:0E:6A:CD:1F:98:95:FC:E3:B5:AB:E3:8A:5F:00:58:4D:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/974ea2-40af-4ef6-b6c7-fdcd9fd9bb03/1/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/974ea2-40af-4ef6-b6c7-fdcd9fd9bb03/1/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:58:e5:35:1a:50:15:c5:2e:8f:c0:b6:54:96:bb:08:d8:2f:
0a:75:bf:ee:94:99:86:60:29:41:b2:e0:f2:b0:8d:ce:e3:3a:
b7:89:10:89:79:b5:f5:76:36:79:7d:3a:72:f3:f8:12:00:23:
df:82:a8:e2:0c:29:57:9b:74:41:97:8e:44:48:50:96:ed:3a:
05:41:8b:a4:d2:7a:1c:92:c2:6d:17:66:a4:a6:fb:ed:03:d0:
ca:7d:03:89:6a:69:25:d0:da:5f:6b:8c:38:36:fc:a7:71:37:
df:c0:15:3c:3b:27:04:c9:39:4a:6e:af:d8:75:bf:41:27:7f:
d1:75:5a:81:1b:77:4b:e3:99:65:3d:d0:70:6b:08:89:6e:31:
90:df:99:ec:16:d6:07:79:dd:56:c9:39:14:74:bd:e0:46:81:
17:66:ca:9e:84:86:76:ae:9c:74:96:a2:b7:20:e4:e2:e8:fd:
2d:48:c2:96:8e:61:24:06:76:78:48:d7:06:98:73:fc:2f:17:
ce:bd:42:28:44:6a:44:88:18:51:39:03:de:44:6d:e1:38:0f:
50:ef:ae:ce:cd:6f:58:dc:72:8c:10:49:08:d4:24:d0:65:41:
40:d5:6d:80:5b:42:0a:78:4e:db:24:35:9c:61:14:d4:a7:03:
34:a4:93:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:38:54 2026 by rpki-client