Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.mft
File: GQNkfvskNmLlfmHU7EW0olo36sg.mft (raw, json)
Hash identifier: JMAxAtTnFJtqq5ieODFObEeHU7hfrVUZNfO+6KIa4rk=
Subject key identifier: 59:91:1D:1E:AA:2F:00:DF:CA:8C:EB:C9:4A:4C:82:5E:22:76:CC:6E
Authority key identifier: 19:03:64:7E:FB:24:36:62:E5:7E:61:D4:EC:45:B4:A2:5A:37:EA:C8
Certificate issuer: /CN=1903647efb243662e57e61d4ec45b4a25a37eac8
Certificate serial: 019F92B63BD8C4D84797CFAF4236E468F61F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQNkfvskNmLlfmHU7EW0olo36sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.mft
Manifest number: 19C6
Signing time: Fri 24 Jul 2026 06:00:44 +0000
Manifest this update: Fri 24 Jul 2026 06:00:44 +0000
Manifest next update: Sat 25 Jul 2026 06:00:44 +0000
Files and hashes: 1: GQNkfvskNmLlfmHU7EW0olo36sg.crl (hash: TAajerapIv5f9ZZTJtxVjSB4GYjGfZMvezS6hd4Chps=)
2: J0rH9JX0KbdTKOcoRoiVFom0Vhs.roa (hash: A8dP+OxNgGQqU96bazfRlPshwZe7IJ50JSO2KL6IocU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GQNkfvskNmLlfmHU7EW0olo36sg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:3b:d8:c4:d8:47:97:cf:af:42:36:e4:68:f6:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1903647efb243662e57e61d4ec45b4a25a37eac8
Validity
Not Before: Jul 24 06:00:44 2026 GMT
Not After : Jul 25 06:00:44 2026 GMT
Subject: CN=59911d1eaa2f00dfca8cebc94a4c825e2276cc6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:92:a4:84:1c:8c:60:14:47:0f:76:de:ff:1e:
7a:bf:21:0c:06:3c:6b:4c:ca:d7:20:81:68:c0:1e:
c3:02:b8:78:06:4d:d6:d2:2f:cd:c8:5a:61:07:d6:
6a:d5:fe:26:31:8d:df:ef:f8:df:54:27:bc:df:bc:
36:44:ea:76:f5:ca:e6:ed:43:88:1b:a6:a9:17:e3:
22:38:6d:65:0d:6c:c3:1e:26:c3:77:61:07:e6:0b:
95:6b:db:48:48:26:34:1b:1f:20:a0:3d:ea:b6:79:
b8:eb:79:f9:ce:4e:7b:83:fe:13:1e:76:46:2f:39:
f2:bb:ea:d0:d1:6f:78:84:49:ff:aa:b6:32:8f:37:
e5:c7:59:a9:ac:bc:52:3d:03:11:94:58:18:dd:df:
53:55:6e:5c:7f:ca:7f:9c:f2:a4:b3:8a:43:de:04:
72:8b:b8:36:76:ef:dc:4a:45:1c:9f:37:f7:9d:c4:
79:59:cf:39:20:a2:a6:21:99:e1:32:eb:e9:5a:74:
c2:24:19:89:ef:9d:61:81:99:0d:97:7c:ff:61:5e:
1b:4a:9c:42:66:00:7f:2a:a2:d1:1e:d2:f5:09:48:
d9:a7:56:c1:c8:2f:10:a4:44:3b:df:c9:2f:12:5e:
bb:32:84:9c:7c:67:ca:b9:1d:39:6c:04:ff:59:b9:
d2:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:91:1D:1E:AA:2F:00:DF:CA:8C:EB:C9:4A:4C:82:5E:22:76:CC:6E
X509v3 Authority Key Identifier:
keyid:19:03:64:7E:FB:24:36:62:E5:7E:61:D4:EC:45:B4:A2:5A:37:EA:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQNkfvskNmLlfmHU7EW0olo36sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:5b:59:20:4f:db:c4:be:d7:99:83:5f:58:cc:ce:61:ea:42:
fe:f1:dd:59:d5:e6:85:e0:b9:05:75:fc:a8:c4:b5:85:ec:4b:
4c:8c:04:34:d8:3a:f7:23:5e:ef:80:66:95:f5:fd:9c:74:33:
5a:f4:57:69:3b:53:33:f7:0d:44:8d:80:cc:ba:9b:25:f7:ed:
b3:df:25:35:c1:b3:7e:30:13:a0:2d:9b:d8:4e:60:68:e0:74:
e2:c0:cc:dd:71:79:73:71:c1:70:e5:3c:6a:72:9c:73:1b:3f:
90:38:77:69:1b:71:73:41:07:5d:ff:23:1c:7f:ca:67:2f:86:
ed:01:9b:27:5a:0c:9f:ff:dd:7c:6d:5b:23:74:a1:5a:b1:f4:
bf:5e:4c:d0:7d:a8:9b:7b:3a:73:93:c2:5c:42:56:ff:ca:83:
dd:00:8c:83:1d:28:f2:dd:41:13:81:b0:47:b1:06:82:e1:c4:
40:1c:83:3d:8f:d3:62:94:0e:8a:ae:00:51:fe:39:4c:bd:18:
85:b8:b9:b2:6b:5c:5f:4b:9c:48:32:dc:c1:c7:b2:41:95:09:
91:9e:b9:4d:11:c6:b3:a9:75:f5:ad:f8:aa:95:fb:31:da:a5:
ea:d6:8c:5c:48:f4:69:c7:c1:81:08:08:02:70:03:15:fc:6d:
75:08:27:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:19:07 2026 by rpki-client