Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft
File: GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft (raw, json)
Hash identifier: MKYGcVB3tMElRwoN3ZF49P9KnjASocZe15GZJr6K5vc=
Subject key identifier: 39:CE:6F:6C:6B:8F:66:7F:73:79:C0:20:DB:A5:C7:22:5F:D6:36:4F
Authority key identifier: 19:0E:C7:AA:B2:0F:C4:C8:01:C6:79:63:E5:9E:4F:93:60:0E:40:1D
Certificate issuer: /CN=190ec7aab20fc4c801c67963e59e4f93600e401d
Certificate serial: 019F94DBFFD84BC5E9FE60C20B277782A903
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft
Manifest number: 130C
Signing time: Fri 24 Jul 2026 16:01:13 +0000
Manifest this update: Fri 24 Jul 2026 16:01:13 +0000
Manifest next update: Sat 25 Jul 2026 16:01:13 +0000
Files and hashes: 1: BFsuju73p_IfTuzKMk-7j2upM6U.roa (hash: NMObEH49eiBEjgkYRi2sMCjgCjz2WvdzgCb1t201l78=)
2: GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.crl (hash: pY5WTrGleSJTjyb52Dgd0TpCIWRpJnLkkg9yjCsi0p8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:db:ff:d8:4b:c5:e9:fe:60:c2:0b:27:77:82:a9:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=190ec7aab20fc4c801c67963e59e4f93600e401d
Validity
Not Before: Jul 24 16:01:13 2026 GMT
Not After : Jul 25 16:01:13 2026 GMT
Subject: CN=39ce6f6c6b8f667f7379c020dba5c7225fd6364f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a7:f6:0a:44:14:04:a7:95:6f:94:d2:63:f6:
23:56:28:ab:8b:f5:dd:e4:0e:28:fa:96:58:02:df:
3f:82:d3:72:e1:d0:e1:0d:4d:e4:b9:f8:5b:7f:57:
a4:15:5d:49:72:2d:b2:6b:4f:22:69:9f:cd:1c:d9:
32:e5:0e:63:0a:2d:ca:b5:73:55:a1:d9:0f:c1:d7:
dd:44:db:02:a0:b4:a2:de:bd:d2:78:3b:da:e3:fc:
38:cb:57:fe:3b:2c:7e:e0:1b:eb:c3:18:3d:97:4f:
5a:af:49:de:76:8a:c9:b5:94:86:78:28:f3:9c:cb:
ec:c3:6b:3a:bf:42:fb:71:68:11:57:07:ac:31:eb:
95:ca:a8:1f:59:63:1f:46:a6:84:69:a3:31:09:95:
a9:00:bb:3b:4d:bc:f0:2f:bd:7d:a4:5b:10:56:f7:
25:e7:99:57:5c:67:eb:ab:09:04:85:d8:5f:44:ba:
55:34:c2:4b:f2:d5:4f:83:49:2d:22:47:c3:c0:8b:
44:9a:0c:e6:39:25:f6:ab:f4:37:07:c9:a7:cf:b4:
3b:5f:3c:18:bc:95:88:11:ee:17:dc:be:26:2b:d0:
01:f8:b2:a5:55:89:da:e8:24:ba:9b:ff:14:e1:6f:
30:7b:1c:d9:24:9c:9b:ca:7d:55:62:7f:ff:a7:66:
8f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:CE:6F:6C:6B:8F:66:7F:73:79:C0:20:DB:A5:C7:22:5F:D6:36:4F
X509v3 Authority Key Identifier:
keyid:19:0E:C7:AA:B2:0F:C4:C8:01:C6:79:63:E5:9E:4F:93:60:0E:40:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:f1:4d:be:c3:b8:13:4a:01:fd:f6:fb:08:a4:46:8b:9d:b5:
26:35:7a:79:a5:e1:9e:64:2d:6b:37:6c:07:42:83:c0:42:c7:
ea:f6:1f:b8:b3:d8:37:b1:35:32:ee:c2:a5:c9:e0:d4:2b:be:
8a:05:ce:c2:4c:1d:39:78:f5:8d:ca:f2:c5:98:6f:73:1d:28:
0e:21:36:af:03:a0:14:73:5d:e5:b7:d1:f8:e5:bd:55:05:15:
35:98:d4:a4:63:e3:24:ac:63:3a:28:01:c1:fd:e1:83:98:d2:
a0:69:34:91:75:c8:33:af:b7:a8:8d:45:bb:cc:eb:5f:c4:ac:
18:35:3b:08:6d:e6:51:80:ef:34:17:a4:e6:bb:a0:cf:e3:45:
da:74:02:8b:07:bd:1c:ee:21:e2:66:a1:7b:d5:19:da:25:c9:
e2:a4:81:a5:3a:07:76:65:ef:a5:01:27:cc:fd:64:55:3c:ba:
04:32:27:02:6c:03:eb:ee:ca:cc:3a:1d:20:a0:47:9b:38:ff:
f0:74:3e:18:c7:90:e0:8f:01:55:40:80:de:73:be:19:c4:0f:
95:a7:70:39:d4:89:f7:32:2c:18:c4:9e:df:9e:92:b9:3c:9a:
0b:fd:74:50:ee:72:6f:8a:28:b8:e3:9a:10:8f:ee:3b:1d:36:
64:36:66:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:50:15 2026 by rpki-client