Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/GSQAhBXKGFuO3e3C3N2NCUQad5Q.mft
File: GSQAhBXKGFuO3e3C3N2NCUQad5Q.mft (raw, json)
Hash identifier: kWuF6NsDSJxcLKW7wrf8lIE7ZYvIvo+oc6xGRbgwnjY=
Subject key identifier: 52:9C:46:85:8E:7B:C8:B8:3C:38:DF:49:1F:F4:A8:6E:E1:2F:16:CC
Authority key identifier: 19:24:00:84:15:CA:18:5B:8E:DD:ED:C2:DC:DD:8D:09:44:1A:77:94
Certificate issuer: /CN=1924008415ca185b8eddedc2dcdd8d09441a7794
Certificate serial: 019D26CD5C7589A0A3974BCC1B9E07E57151
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GSQAhBXKGFuO3e3C3N2NCUQad5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/GSQAhBXKGFuO3e3C3N2NCUQad5Q.mft
Manifest number: 16A5
Signing time: Wed 25 Mar 2026 21:01:25 +0000
Manifest this update: Wed 25 Mar 2026 21:01:25 +0000
Manifest next update: Thu 26 Mar 2026 21:01:25 +0000
Files and hashes: 1: C_loy0B7_p9VbknMqKT5_-soGMw.roa (hash: lXBtx5TCEhT3yUAY172G+wMVb0Mu6qGMrAg/+UmSriM=)
2: GSQAhBXKGFuO3e3C3N2NCUQad5Q.crl (hash: JywkLlcw0ds2hX418ieecnmgvEWs/wNUeW506PpNSvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/GSQAhBXKGFuO3e3C3N2NCUQad5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/GSQAhBXKGFuO3e3C3N2NCUQad5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/GSQAhBXKGFuO3e3C3N2NCUQad5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:5c:75:89:a0:a3:97:4b:cc:1b:9e:07:e5:71:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1924008415ca185b8eddedc2dcdd8d09441a7794
Validity
Not Before: Mar 25 21:01:25 2026 GMT
Not After : Mar 26 21:01:25 2026 GMT
Subject: CN=529c46858e7bc8b83c38df491ff4a86ee12f16cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:10:a2:f0:b8:58:0d:e5:fb:aa:00:f7:9d:22:
3b:ec:95:b4:ac:3d:98:1d:16:b1:77:60:73:d7:cb:
ee:61:54:60:9d:28:aa:3b:a4:7a:9f:d4:ed:3b:c4:
7e:fa:97:db:f1:44:ab:38:7f:22:9e:40:ae:c6:26:
fa:78:68:19:0a:b8:95:b8:17:32:5e:63:d3:8e:bb:
24:dc:7f:94:9c:03:dd:b3:28:7b:e7:63:22:57:ac:
f9:c1:cf:50:5f:de:19:f0:59:c4:22:9c:59:3b:c0:
aa:ea:1c:d8:a5:c1:82:4c:78:fa:a8:da:9a:40:d3:
1f:af:8c:34:b0:cf:25:83:22:a3:b2:78:ff:53:47:
ef:fb:bd:2e:50:31:0e:b8:5a:86:14:ad:52:41:54:
85:e2:1d:37:7e:ca:2a:84:71:f0:e4:18:c6:1c:fb:
a5:c5:ea:a4:e5:71:3d:54:b2:58:a5:2b:58:31:d2:
83:13:8b:ba:be:de:f2:04:bf:14:38:f0:35:56:27:
ee:3c:c7:70:5c:3f:81:7c:0a:33:c3:20:b7:7b:c6:
67:55:2b:ca:64:9c:90:c7:99:f7:e1:00:9d:9c:60:
63:2e:18:c6:cd:53:11:0c:c6:04:ab:2f:b9:f2:58:
4f:ab:de:df:98:b4:c2:03:c0:02:1f:7d:99:23:53:
bc:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:9C:46:85:8E:7B:C8:B8:3C:38:DF:49:1F:F4:A8:6E:E1:2F:16:CC
X509v3 Authority Key Identifier:
keyid:19:24:00:84:15:CA:18:5B:8E:DD:ED:C2:DC:DD:8D:09:44:1A:77:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GSQAhBXKGFuO3e3C3N2NCUQad5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/GSQAhBXKGFuO3e3C3N2NCUQad5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/GSQAhBXKGFuO3e3C3N2NCUQad5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:d5:e3:2c:12:13:ca:4b:d0:b7:11:c4:e7:b7:6c:ab:d2:a2:
0f:b8:7b:f5:7a:c1:ef:08:e2:99:bf:5e:26:b2:7b:64:63:7c:
d6:be:67:99:54:82:ea:09:2e:ec:9e:61:9f:76:4f:48:98:9a:
79:63:17:57:b8:30:13:c0:97:71:8a:b2:7d:af:c0:76:13:02:
d7:54:3d:49:43:b0:5d:e6:62:39:f4:1e:3d:2f:51:33:c6:6c:
e4:d4:25:e4:f8:a5:22:09:1e:b9:9b:0c:2f:3a:59:7b:99:c9:
48:ef:02:74:19:74:d6:c2:b8:28:0c:f4:c1:f9:f3:44:5e:11:
68:1a:b0:66:7f:01:e7:90:79:39:55:51:f3:21:63:c8:68:c2:
08:5f:62:cc:cb:37:97:9d:e8:ae:e3:fa:e7:c7:8d:e3:b4:df:
05:78:17:89:d1:df:fd:ba:65:d6:7c:1a:1f:3b:da:be:70:b3:
8f:68:fe:c8:1d:ec:76:e2:f9:39:d3:06:76:a8:36:66:00:50:
46:a5:28:9d:5d:ea:14:71:6f:a6:80:93:a2:ed:24:e0:5a:02:
03:fe:cb:18:2a:d9:b4:d7:c5:5e:2e:eb:35:fe:ea:2c:79:62:
30:b2:f8:2a:0a:0f:06:48:bd:0a:93:4b:5d:3e:6f:e1:a7:49:
0f:3e:c7:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:11:08 2026 by rpki-client