Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/GqGckulmd_X5b2jxygqtn6MR60U.mft
File: GqGckulmd_X5b2jxygqtn6MR60U.mft (raw, json)
Hash identifier: pzaTarluhjAHDE7cINu4TCrVstPOa5oEkltyh+Zi3sA=
Subject key identifier: 3E:B0:AB:22:44:69:8A:BE:A4:25:E3:8C:92:92:6B:CA:91:6A:D4:09
Authority key identifier: 1A:A1:9C:92:E9:66:77:F5:F9:6F:68:F1:CA:0A:AD:9F:A3:11:EB:45
Certificate issuer: /CN=1aa19c92e96677f5f96f68f1ca0aad9fa311eb45
Certificate serial: 019D2A72C7708FA241640748DA8547359C7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GqGckulmd_X5b2jxygqtn6MR60U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/GqGckulmd_X5b2jxygqtn6MR60U.mft
Manifest number: 1646
Signing time: Thu 26 Mar 2026 14:00:58 +0000
Manifest this update: Thu 26 Mar 2026 14:00:58 +0000
Manifest next update: Fri 27 Mar 2026 14:00:58 +0000
Files and hashes: 1: 1-WPRdVqmtlIyUI0vqU9PWtdt-gM.roa (hash: XWiIX8j8IwmwPP0JVAl2lLSxTvvYR4DX3aF34HbG+KQ=)
2: GqGckulmd_X5b2jxygqtn6MR60U.crl (hash: jf7mRDam9LYC2TbKXEfixM04tgw2crAVv2GbC1hA1gk=)
3: WpUIGP06eptdw3HvJXEXaq0nbZE.roa (hash: htiyR7KetN+O2yvc71NkM/dclEdrNUy7FljxlennH9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/GqGckulmd_X5b2jxygqtn6MR60U.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/GqGckulmd_X5b2jxygqtn6MR60U.mft
rsync://rpki.ripe.net/repository/DEFAULT/GqGckulmd_X5b2jxygqtn6MR60U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:c7:70:8f:a2:41:64:07:48:da:85:47:35:9c:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aa19c92e96677f5f96f68f1ca0aad9fa311eb45
Validity
Not Before: Mar 26 14:00:58 2026 GMT
Not After : Mar 27 14:00:58 2026 GMT
Subject: CN=3eb0ab2244698abea425e38c92926bca916ad409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d7:f5:25:b9:99:81:4d:71:f7:ce:d3:a2:3a:
91:c6:4e:65:c1:56:ec:69:a0:cd:11:c5:a5:b5:6e:
a6:85:35:ba:73:61:16:f9:55:3c:cb:b9:7f:c3:75:
e9:62:4e:b5:f7:ef:96:23:a5:3c:a3:9c:13:71:d0:
0d:a5:d1:7b:2a:8b:b2:c3:b8:a8:50:f2:fb:d4:26:
13:f7:83:f6:5f:04:52:2f:4d:60:54:bb:b3:f4:80:
fb:c4:b1:e7:6a:0c:1e:c1:f0:31:35:cb:20:a9:69:
ee:4f:53:0a:1b:24:1d:50:9b:14:87:31:5a:dc:e0:
ff:8c:b6:3f:e3:1a:8c:57:8f:18:49:26:04:f2:0c:
19:1c:ff:2b:d5:ba:9a:a5:c7:cc:0b:74:5a:7e:15:
c2:e7:69:15:99:ad:94:10:53:e2:18:bb:4e:49:39:
34:0e:04:ab:f0:3b:7f:2a:55:9a:41:d8:b7:9b:18:
db:7c:e9:e4:ce:df:83:3d:ca:cd:0c:ca:15:11:71:
68:97:ea:a3:b9:15:aa:8e:8e:08:bc:77:10:ce:6b:
ef:58:13:26:40:60:01:a0:28:48:64:7c:35:65:c6:
44:aa:f1:cd:63:e4:da:32:53:e7:95:6a:e4:05:0e:
23:d9:5f:47:04:c0:8d:38:f9:3a:2a:d7:2c:91:ea:
8d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:B0:AB:22:44:69:8A:BE:A4:25:E3:8C:92:92:6B:CA:91:6A:D4:09
X509v3 Authority Key Identifier:
keyid:1A:A1:9C:92:E9:66:77:F5:F9:6F:68:F1:CA:0A:AD:9F:A3:11:EB:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GqGckulmd_X5b2jxygqtn6MR60U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/GqGckulmd_X5b2jxygqtn6MR60U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/GqGckulmd_X5b2jxygqtn6MR60U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:67:56:f0:db:a2:d7:dd:9c:42:3e:ec:f9:34:7a:21:f6:c8:
cb:29:a3:74:17:b7:d0:98:49:02:8d:93:9b:38:98:d4:32:04:
70:4d:e4:f8:66:2f:73:66:ee:b1:7e:6e:5d:5c:53:0f:c4:6d:
76:3b:49:a5:2d:0f:0e:4d:48:a3:25:e7:91:43:a2:14:f1:77:
21:34:88:5d:a9:8e:30:88:02:4f:a6:ae:82:c2:39:23:7f:33:
dc:fc:41:0b:63:fb:6d:76:49:4d:78:1c:13:70:f1:14:84:aa:
30:6d:67:bc:a1:60:fb:b9:ed:4b:96:16:05:e5:57:19:45:be:
dc:a7:8f:54:25:ee:13:4b:9d:3f:81:e1:0a:80:78:11:86:96:
99:ca:bc:fc:5a:81:c0:89:e9:83:65:73:1a:6a:77:79:dc:b5:
11:b6:95:c3:87:4d:38:ea:b9:ca:0e:e7:92:a7:da:13:a8:31:
df:23:32:40:e4:11:9b:71:3f:2e:61:3b:c8:1c:03:65:f0:03:
47:51:f5:a0:15:29:f6:4a:75:66:1c:93:3a:0f:15:99:4e:87:
0b:56:aa:74:c6:2c:33:c5:9c:15:af:09:07:11:8b:ad:f4:53:
fa:ac:49:53:68:57:89:e0:f8:85:fb:a1:80:c6:a3:73:71:a0:
3d:b0:bf:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:24:46 2026 by rpki-client