Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/9bce97-eefb-40d4-bb1d-c7b0e0d9fdf2/1/GqsEbQ_SECaEebobnTt7_3E6P_Q.mft
File: GqsEbQ_SECaEebobnTt7_3E6P_Q.mft (raw, json)
Hash identifier: 6Yn0goOLa+ZK261nll3nFgl38MNV4j7BRO4kO9iU7eg=
Subject key identifier: 4A:C0:70:55:0A:4D:75:21:48:85:3A:30:FC:90:B3:52:95:35:64:FD
Authority key identifier: 1A:AB:04:6D:0F:D2:10:26:84:79:BA:1B:9D:3B:7B:FF:71:3A:3F:F4
Certificate issuer: /CN=1aab046d0fd210268479ba1b9d3b7bff713a3ff4
Certificate serial: 019E1BD924DDC96F2EFFEAED216862D900E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GqsEbQ_SECaEebobnTt7_3E6P_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/9bce97-eefb-40d4-bb1d-c7b0e0d9fdf2/1/GqsEbQ_SECaEebobnTt7_3E6P_Q.mft
Manifest number: CF
Signing time: Tue 12 May 2026 11:01:15 +0000
Manifest this update: Tue 12 May 2026 11:01:15 +0000
Manifest next update: Wed 13 May 2026 11:01:15 +0000
Files and hashes: 1: EaA5h5-haFqykkLxdYNz4NRH894.roa (hash: 35hNbngSLdJ5Vm4Smrugp6blzXRwN2jLQFd01FhQopg=)
2: GqsEbQ_SECaEebobnTt7_3E6P_Q.crl (hash: /NOIxw5Eg5c0wMNibGZvMiDYCWQFDNYcoCTP2iqxqgk=)
3: L0-VG23-X4StTsgFq-dM2PZQwuw.asa (hash: ewwpS9FIFmcmamiDmtIfsGxv4DqXWOWMSU2Hu4R1Y5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/9bce97-eefb-40d4-bb1d-c7b0e0d9fdf2/1/GqsEbQ_SECaEebobnTt7_3E6P_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/9bce97-eefb-40d4-bb1d-c7b0e0d9fdf2/1/GqsEbQ_SECaEebobnTt7_3E6P_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/GqsEbQ_SECaEebobnTt7_3E6P_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 11:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:d9:24:dd:c9:6f:2e:ff:ea:ed:21:68:62:d9:00:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aab046d0fd210268479ba1b9d3b7bff713a3ff4
Validity
Not Before: May 12 11:01:15 2026 GMT
Not After : May 13 11:01:15 2026 GMT
Subject: CN=4ac070550a4d752148853a30fc90b352953564fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4a:71:91:ee:ab:3d:e5:90:0f:05:00:0c:7f:
76:1b:48:cd:22:06:74:38:dd:2a:1f:ba:1e:82:0e:
bb:a4:17:fb:63:0e:54:a2:2a:32:5a:a4:c0:cd:0a:
44:34:49:63:ef:92:81:90:4e:33:c8:69:ad:6e:b0:
b5:fb:35:fc:f8:b2:3b:e1:db:01:77:ff:95:b0:eb:
7b:48:11:1d:6b:98:65:c3:7d:8d:ea:cd:70:0c:63:
33:47:aa:6e:93:95:d6:7c:7e:03:72:23:c8:61:95:
27:0d:e1:33:eb:e6:95:d8:0c:fb:56:68:48:98:ac:
b4:4e:2f:d4:8d:0e:b5:26:47:53:43:50:14:d4:21:
4f:03:06:c1:f5:6f:b2:f1:b9:74:9a:da:89:ee:76:
2d:2d:2c:83:1a:94:80:63:56:5f:53:f6:48:79:3a:
c0:e0:e0:21:bf:35:e7:8e:ac:03:6a:8a:ae:59:f8:
0e:26:e7:27:86:d7:4b:57:01:44:ca:d8:24:96:52:
d8:79:0d:36:48:87:8d:f1:52:92:f7:27:58:6e:0b:
8b:ea:08:4d:43:e1:fb:82:82:3c:63:46:27:6f:e0:
cf:f2:a2:9c:17:02:0f:ad:a1:17:0b:93:b4:d5:79:
ab:c8:b7:b6:0a:e5:17:c6:4d:20:ee:d6:fa:36:f2:
75:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:C0:70:55:0A:4D:75:21:48:85:3A:30:FC:90:B3:52:95:35:64:FD
X509v3 Authority Key Identifier:
keyid:1A:AB:04:6D:0F:D2:10:26:84:79:BA:1B:9D:3B:7B:FF:71:3A:3F:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GqsEbQ_SECaEebobnTt7_3E6P_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9bce97-eefb-40d4-bb1d-c7b0e0d9fdf2/1/GqsEbQ_SECaEebobnTt7_3E6P_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9bce97-eefb-40d4-bb1d-c7b0e0d9fdf2/1/GqsEbQ_SECaEebobnTt7_3E6P_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:fc:ae:9e:2c:ca:25:fa:22:06:75:1f:c4:23:81:c7:49:b8:
34:89:23:f6:f3:29:4f:bc:99:c9:a8:1d:88:d8:fb:e5:b2:ed:
4d:6b:69:2b:fe:97:31:fe:65:74:00:e7:28:57:25:37:69:92:
64:28:20:8f:0d:20:ee:ce:79:a1:ac:c2:04:41:f1:3e:31:be:
09:6d:9a:30:1c:2a:6b:82:26:55:49:f7:04:56:03:d8:26:63:
2a:87:e6:da:4f:4e:bc:9b:6a:de:2b:a4:15:1e:50:22:8d:56:
1a:d4:51:8d:c8:d6:1e:cc:05:ff:75:f2:d2:d1:d8:d4:d5:9b:
cf:8d:35:2a:1c:79:b9:8a:79:18:b0:54:ac:3a:93:63:7b:90:
be:5f:ca:57:c1:75:b0:65:f3:a4:14:c2:6c:e7:f4:5d:c3:1c:
ce:cb:ec:07:c7:78:b1:9c:e4:3c:5a:ee:20:4e:fb:e7:c1:21:
a6:fa:e2:ca:7f:23:a4:fd:93:30:47:77:c8:c7:21:aa:78:65:
b4:fc:ed:6a:ef:2e:f5:ee:ee:24:00:e1:4a:69:25:60:94:18:
68:a6:21:bc:89:da:e0:21:c1:f4:72:d4:d7:b4:06:48:d9:22:
da:50:14:59:24:99:e7:a9:d1:cc:ff:85:cc:14:86:85:60:a0:
7c:fb:58:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:56:49 2026 by rpki-client