Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.mft
File: GqCjKMb-DxvKXmWZBC3_WeUTsl0.mft (raw, json)
Hash identifier: LYYN1m3+UfS241kKhQFzvy0zIT1s65wYK8RDQ+t4UMQ=
Subject key identifier: 5A:DE:29:2A:7B:39:73:19:F2:0E:0B:55:BF:CC:5A:17:BD:BE:F4:C4
Authority key identifier: 1A:A0:A3:28:C6:FE:0F:1B:CA:5E:65:99:04:2D:FF:59:E5:13:B2:5D
Certificate issuer: /CN=1aa0a328c6fe0f1bca5e6599042dff59e513b25d
Certificate serial: 019F9400294E9B592C21EED33DD2089CA539
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GqCjKMb-DxvKXmWZBC3_WeUTsl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.mft
Manifest number: 117F
Signing time: Fri 24 Jul 2026 12:01:06 +0000
Manifest this update: Fri 24 Jul 2026 12:01:06 +0000
Manifest next update: Sat 25 Jul 2026 12:01:06 +0000
Files and hashes: 1: 1-w__FgVbYGEvZzX5G7Wv6WpQMFc.roa (hash: YyyT93IM4vslKyEiZRnugviu0gDWs5kVRFPzXEYy/e4=)
2: GqCjKMb-DxvKXmWZBC3_WeUTsl0.crl (hash: oL5Bt39TbngFuCA/kaeElIiQYG7toI7oEzWixrHA3ac=)
3: Sy_QSnV4oKxcnxQ4UaY7HAFaAQY.roa (hash: mPfUVg1yW0xKUezEUlUR8Yt63tdbh4K/MBcEri0pjgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GqCjKMb-DxvKXmWZBC3_WeUTsl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:00:29:4e:9b:59:2c:21:ee:d3:3d:d2:08:9c:a5:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aa0a328c6fe0f1bca5e6599042dff59e513b25d
Validity
Not Before: Jul 24 12:01:06 2026 GMT
Not After : Jul 25 12:01:06 2026 GMT
Subject: CN=5ade292a7b397319f20e0b55bfcc5a17bdbef4c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:dd:b4:da:19:94:b5:52:34:eb:93:60:0a:4e:
d4:94:6b:84:7d:cd:b9:49:0a:41:18:db:b2:f0:b5:
00:ff:1d:59:46:af:75:cd:0a:50:c2:90:67:e9:10:
a6:e7:ff:8d:38:77:e7:a5:62:e4:b8:1f:2a:39:1c:
5f:07:f2:c4:76:79:8c:b8:1d:a0:40:ca:22:16:fb:
d0:75:de:1d:52:5f:f0:a2:72:78:90:79:7f:29:00:
2c:82:46:5c:5a:d3:fb:6f:69:c7:f3:6b:3d:ba:d3:
5a:8e:49:1e:45:1d:c9:f2:0b:f9:55:e1:0a:f5:e9:
8e:ff:4f:f4:19:66:4c:6c:9f:78:57:71:29:3f:63:
ef:f8:2c:a5:56:9e:da:05:bf:f0:e6:e1:91:ee:d9:
21:27:8c:c0:7b:f6:b1:da:5c:17:23:c6:60:6c:c0:
88:94:b9:c0:13:2e:fa:76:a2:43:34:2c:b3:ea:68:
65:e1:a6:31:fd:96:c2:67:ad:63:c7:34:94:40:e4:
6b:dc:76:21:6e:5d:0d:0b:fd:8f:46:32:f1:93:86:
15:6f:8f:6b:9b:b1:d8:15:0a:38:82:dd:4a:53:b2:
63:f0:00:b1:71:6b:f6:4b:8d:16:1b:8d:a4:99:94:
6e:7b:e1:6b:d6:71:b4:35:fc:84:be:14:c7:1f:a1:
01:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:DE:29:2A:7B:39:73:19:F2:0E:0B:55:BF:CC:5A:17:BD:BE:F4:C4
X509v3 Authority Key Identifier:
keyid:1A:A0:A3:28:C6:FE:0F:1B:CA:5E:65:99:04:2D:FF:59:E5:13:B2:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GqCjKMb-DxvKXmWZBC3_WeUTsl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:9f:44:5e:26:05:95:2f:86:08:2f:09:79:94:be:2d:d7:3e:
1f:b7:5b:44:74:7e:84:c9:af:b5:d7:51:a7:7d:34:e8:bb:54:
5b:b4:80:c3:c6:ef:e8:04:c0:30:ab:df:0a:50:af:48:ff:6e:
f6:9d:b5:82:d3:1d:11:0f:9a:4c:27:6f:11:97:8b:01:e6:dd:
ba:e8:db:00:e6:cf:34:65:9c:b4:65:17:4c:40:8a:17:13:84:
2a:97:b9:69:26:3c:0f:b1:eb:8c:63:b6:44:a9:f1:5b:60:79:
e1:f4:0a:ab:2f:a7:95:80:22:ac:8b:f9:99:37:c1:78:66:cc:
42:f6:00:84:63:39:de:0b:a6:25:76:83:d0:72:a3:54:00:1e:
0c:30:4f:15:81:1c:f4:ab:13:df:da:ad:73:55:b5:e5:be:36:
95:b2:03:d1:66:59:38:71:5f:97:9f:f9:b3:cb:99:6a:c7:41:
73:6a:7c:bb:a7:d4:c4:b6:67:31:03:e0:75:9d:f9:09:55:bb:
3e:1c:67:94:20:dc:de:91:ef:7e:28:47:e1:44:4e:ac:59:2f:
ec:dd:9d:f4:b9:f1:39:04:58:72:36:bc:ee:3a:36:ae:87:fe:
d6:65:45:7c:9c:5f:01:64:54:95:c1:cb:92:77:47:6d:08:8e:
6a:23:63:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:56:12 2026 by rpki-client