Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.mft
File: GQNkfvskNmLlfmHU7EW0olo36sg.mft (raw, json)
Hash identifier: 7O3cUoGFCXCaXni3r9PS7aC+Hmf+s+FCKfL2PQRmGIw=
Subject key identifier: 94:44:EB:6D:63:4A:68:A4:5F:E3:F2:F6:99:DA:A0:92:1D:6E:9B:1D
Authority key identifier: 19:03:64:7E:FB:24:36:62:E5:7E:61:D4:EC:45:B4:A2:5A:37:EA:C8
Certificate issuer: /CN=1903647efb243662e57e61d4ec45b4a25a37eac8
Certificate serial: 019D28BB745AB2672F4C16CFCCC08BB550C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQNkfvskNmLlfmHU7EW0olo36sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 06:01:06 +0000
Manifest this update: Thu 26 Mar 2026 06:01:06 +0000
Manifest next update: Fri 27 Mar 2026 06:01:06 +0000
Files and hashes: 1: GQNkfvskNmLlfmHU7EW0olo36sg.crl (hash: nmszBQ/SVbERx5kSLiuwODDuJlGnbXD75xu6/u10WMM=)
2: J0rH9JX0KbdTKOcoRoiVFom0Vhs.roa (hash: A8dP+OxNgGQqU96bazfRlPshwZe7IJ50JSO2KL6IocU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GQNkfvskNmLlfmHU7EW0olo36sg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:74:5a:b2:67:2f:4c:16:cf:cc:c0:8b:b5:50:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1903647efb243662e57e61d4ec45b4a25a37eac8
Validity
Not Before: Mar 26 06:01:06 2026 GMT
Not After : Mar 27 06:01:06 2026 GMT
Subject: CN=9444eb6d634a68a45fe3f2f699daa0921d6e9b1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:01:f7:5e:e4:7b:0b:8f:bd:b2:bd:23:80:8a:
3f:32:6e:e9:3a:43:51:81:1c:13:d6:99:8e:cb:25:
ca:75:db:40:0f:a3:7e:7a:07:90:78:6c:40:0a:02:
0d:b2:81:cf:5a:f5:d1:b2:cf:82:c1:bc:b1:d0:cb:
6a:1b:ce:99:de:75:fb:16:ba:ea:67:ed:71:70:e3:
7c:1d:49:cc:f0:97:11:32:d4:26:44:2b:55:a1:0f:
1b:6a:12:03:a6:e7:27:d8:79:06:9f:7f:90:ea:9b:
06:06:3c:75:82:3f:84:19:fa:b5:9e:0e:18:0e:3e:
6b:4e:87:eb:66:e4:7a:7a:59:b0:d1:ec:db:1d:d3:
33:dc:2b:1a:27:f6:9d:58:8f:92:b6:d2:29:d0:81:
d9:55:f4:d0:28:4a:ab:b0:68:45:53:e6:66:32:cc:
dd:33:a2:07:9a:b4:42:dc:ae:95:aa:01:12:be:c6:
98:20:f0:38:5c:dd:e3:43:46:ab:58:d4:36:e3:21:
7a:6b:a6:4b:67:f3:d0:de:ce:a8:ea:59:ce:35:33:
16:94:d5:27:9e:e5:f6:3e:cf:84:82:ed:06:7e:3b:
71:8e:cb:98:fa:2e:9c:77:4c:e4:c4:21:14:c4:46:
fe:60:d6:56:45:19:0c:61:c0:12:e4:66:04:fb:a3:
2d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:44:EB:6D:63:4A:68:A4:5F:E3:F2:F6:99:DA:A0:92:1D:6E:9B:1D
X509v3 Authority Key Identifier:
keyid:19:03:64:7E:FB:24:36:62:E5:7E:61:D4:EC:45:B4:A2:5A:37:EA:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQNkfvskNmLlfmHU7EW0olo36sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:b2:b8:7d:c6:52:47:8f:42:d5:80:a7:f7:4d:80:3d:19:f7:
7b:7c:47:90:64:95:a2:a9:7c:e7:f7:1c:8e:b5:2b:f2:e6:22:
7d:91:49:33:13:05:12:98:28:a9:eb:3a:26:be:69:d1:1c:85:
f2:1b:35:87:17:d0:ae:d6:bd:ff:59:b9:dc:c2:bb:97:8b:bb:
49:98:b7:1b:5c:49:5a:75:bc:20:d3:d5:e8:79:3d:46:d2:9e:
20:ce:7e:fe:cb:86:02:56:73:fd:8d:8f:41:95:3a:45:42:07:
c1:59:37:97:65:83:26:c8:8e:57:ba:35:72:c3:ff:11:01:f4:
07:10:3c:9a:f6:09:9e:87:59:7b:34:3c:0b:89:29:a8:ef:70:
a0:fe:89:a4:e4:d6:3a:4d:90:93:13:ec:98:3d:fd:e7:61:5b:
96:47:39:4b:ac:c0:95:87:e2:b3:3c:71:69:40:d4:1f:22:40:
f1:3d:1b:18:e2:bd:f0:9d:30:2e:21:81:c0:7e:cd:a4:67:b7:
67:49:7c:31:a5:3f:6a:64:b1:e4:64:58:c0:84:23:36:dd:6d:
47:39:35:e8:12:84:18:cb:e3:2f:1f:90:8e:4e:fa:66:1b:e4:
f3:96:51:2f:7f:db:d6:ed:cf:1b:22:2c:4c:90:57:81:48:48:
89:92:00:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ou3RasmcvTBbPzMCLtVDFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5MDM2NDdlZmIyNDM2NjJlNTdlNjFkNGVjNDViNGEyNWEz
N2VhYzgwHhcNMjYwMzI2MDYwMTA2WhcNMjYwMzI3MDYwMTA2WjAzMTEwLwYDVQQD
Eyg5NDQ0ZWI2ZDYzNGE2OGE0NWZlM2YyZjY5OWRhYTA5MjFkNmU5YjFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwH3XuR7C4+9sr0jgIo/Mm7pOkNR
gRwT1pmOyyXKddtAD6N+egeQeGxACgINsoHPWvXRss+Cwbyx0MtqG86Z3nX7Frrq
Z+1xcON8HUnM8JcRMtQmRCtVoQ8bahIDpucn2HkGn3+Q6psGBjx1gj+EGfq1ng4Y
Dj5rTofrZuR6elmw0ezbHdMz3CsaJ/adWI+SttIp0IHZVfTQKEqrsGhFU+ZmMszd
M6IHmrRC3K6VqgESvsaYIPA4XN3jQ0arWNQ24yF6a6ZLZ/PQ3s6o6lnONTMWlNUn
nuX2Ps+Egu0GfjtxjsuY+i6cd0zkxCEUxEb+YNZWRRkMYcAS5GYE+6MtiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJRE621jSmikX+Py9pnaoJIdbpsdMB8GA1UdIwQY
MBaAFBkDZH77JDZi5X5h1OxFtKJaN+rIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1FOa2Z2c2tObUxsZm1IVTdFVzBvbG8zNnNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS82ZWVmZWUtYzlkZS00NzI4LWFjYTgt
YTRjMzQzMmZiMDBmLzEvR1FOa2Z2c2tObUxsZm1IVTdFVzBvbG8zNnNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS82ZWVmZWUtYzlkZS00NzI4LWFjYTgtYTRjMzQzMmZiMDBm
LzEvR1FOa2Z2c2tObUxsZm1IVTdFVzBvbG8zNnNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANLK4fcZS
R49C1YCn902APRn3e3xHkGSVoql85/ccjrUr8uYifZFJMxMFEpgoqes6Jr5p0RyF
8hs1hxfQrta9/1m53MK7l4u7SZi3G1xJWnW8INPV6Hk9RtKeIM5+/suGAlZz/Y2P
QZU6RUIHwVk3l2WDJsiOV7o1csP/EQH0BxA8mvYJnodZezQ8C4kpqO9woP6JpOTW
Ok2QkxPsmD3952Fblkc5S6zAlYfiszxxaUDUHyJA8T0bGOK98J0wLiGBwH7NpGe3
Z0l8MaU/amSx5GRYwIQjNt1tRzk16BKEGMvjLx+Qjk76Zhvk85ZRL3/b1u3PGyIs
TJBXgUhIiZIAoA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:29:41 2026 by rpki-client