Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.mft
File: GqCjKMb-DxvKXmWZBC3_WeUTsl0.mft (raw, json)
Hash identifier: IQmF4SUbU/9x0uM09UqYhPvnyJuDseSYnczIsQ5Ld94=
Subject key identifier: 01:8A:46:80:F6:79:4C:7F:85:8F:53:9E:23:FF:0C:F8:3A:77:67:11
Authority key identifier: 1A:A0:A3:28:C6:FE:0F:1B:CA:5E:65:99:04:2D:FF:59:E5:13:B2:5D
Certificate issuer: /CN=1aa0a328c6fe0f1bca5e6599042dff59e513b25d
Certificate serial: 01A0DA5FAF1A55A52969C9698CEEF091CAF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GqCjKMb-DxvKXmWZBC3_WeUTsl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.mft
Manifest number: 1228
Signing time: Fri 25 Sep 2026 21:01:38 +0000
Manifest this update: Fri 25 Sep 2026 21:01:38 +0000
Manifest next update: Sat 26 Sep 2026 21:01:38 +0000
Files and hashes: 1: 1-w__FgVbYGEvZzX5G7Wv6WpQMFc.roa (hash: YyyT93IM4vslKyEiZRnugviu0gDWs5kVRFPzXEYy/e4=)
2: GqCjKMb-DxvKXmWZBC3_WeUTsl0.crl (hash: QbWdkRnCmPrSAQ1TcJvBQtXClHQaoAgP3buppUMAzTA=)
3: Sy_QSnV4oKxcnxQ4UaY7HAFaAQY.roa (hash: mPfUVg1yW0xKUezEUlUR8Yt63tdbh4K/MBcEri0pjgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GqCjKMb-DxvKXmWZBC3_WeUTsl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 21:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:5f:af:1a:55:a5:29:69:c9:69:8c:ee:f0:91:ca:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aa0a328c6fe0f1bca5e6599042dff59e513b25d
Validity
Not Before: Sep 25 21:01:38 2026 GMT
Not After : Sep 26 21:01:38 2026 GMT
Subject: CN=018a4680f6794c7f858f539e23ff0cf83a776711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:b4:bd:73:58:87:72:ad:a1:57:a2:47:20:22:
04:0a:ff:e6:78:bb:fa:cb:c8:38:7e:95:b3:c4:73:
32:41:4e:36:51:8e:b0:a8:d9:23:fb:36:cf:bc:5b:
f6:5b:47:f9:a4:b3:0c:5c:1e:fc:6e:a6:92:aa:33:
ba:9e:a1:25:01:fe:5e:51:19:84:8e:db:13:a5:f4:
7c:93:c7:55:94:c9:06:dd:08:f7:e7:82:a5:14:69:
e7:9c:25:7f:96:2d:43:2a:82:32:ea:8a:22:b8:0f:
6f:35:76:97:d0:18:07:69:21:3e:0d:aa:69:40:fd:
96:bc:a9:5b:3f:36:1a:b7:31:f5:ba:3a:95:a2:3b:
8c:e2:2f:3d:fe:aa:ef:7b:d5:40:35:bb:f3:5f:db:
9c:f8:26:21:2f:ad:12:2c:75:7a:7b:d6:34:1f:1a:
78:a5:65:c4:1f:b7:d0:de:35:d1:79:42:b9:ec:61:
23:26:02:2b:ab:06:47:aa:65:f0:a6:4f:28:b4:c6:
be:05:c5:3f:b9:60:5c:66:d7:bb:40:fb:f1:0e:52:
85:9b:18:f0:87:f0:78:27:8d:d1:fc:29:b3:50:aa:
be:10:ad:c0:a2:18:4c:59:43:3a:8a:a5:4e:0e:25:
69:d9:4b:43:3d:3a:47:a3:7c:80:a7:88:fb:5c:25:
43:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:8A:46:80:F6:79:4C:7F:85:8F:53:9E:23:FF:0C:F8:3A:77:67:11
X509v3 Authority Key Identifier:
keyid:1A:A0:A3:28:C6:FE:0F:1B:CA:5E:65:99:04:2D:FF:59:E5:13:B2:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GqCjKMb-DxvKXmWZBC3_WeUTsl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:09:db:ca:56:b4:a3:a2:c0:62:38:1f:e1:32:a3:4f:13:ab:
36:29:5d:7d:ee:94:fd:21:cf:8a:b6:9a:24:e0:3f:89:a9:cd:
98:79:a7:41:66:83:87:83:96:ef:37:b9:b0:2d:cd:46:8c:56:
af:1b:98:8c:fc:7a:0c:c0:c5:27:97:a6:b0:4c:55:3a:e0:da:
a6:4f:7c:ce:b9:d0:61:cf:59:4a:af:f4:4b:76:d8:62:6a:b8:
c2:26:01:30:c4:5c:9c:9c:1b:83:6d:c0:33:01:a5:01:83:eb:
64:e3:5c:21:8a:33:20:fc:12:ba:c1:36:92:7b:52:de:df:18:
76:24:80:5a:ee:4f:77:be:9d:88:3a:69:3c:4c:07:1f:19:ec:
b1:31:dc:85:88:96:de:00:de:7c:f3:2e:6c:79:78:14:62:dc:
1e:c6:6f:50:64:76:8f:4b:15:a5:ce:b2:b3:7e:ac:a3:64:aa:
7e:8f:ae:33:e9:c8:94:c5:94:1a:e4:c8:fa:4e:23:0a:a4:c2:
9c:9e:05:a5:a0:8b:72:98:f6:bc:27:1e:a8:08:b0:c3:f9:b6:
39:23:fd:f8:49:a4:68:09:a3:71:3f:6c:26:91:a2:e3:77:40:
e5:c2:75:74:0d:0a:39:77:5c:cb:85:47:d9:83:9e:d6:8e:7a:
bb:ae:64:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:21:47 2026 by rpki-client