Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft
File: GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft (raw, json)
Hash identifier: sh8MjHXiaQMGdvRtpotXY1yGZnNOszXVfhTdhS1Jr2g=
Subject key identifier: EB:0C:B0:C0:C5:72:4F:04:5C:C2:CB:F7:07:0A:8F:A0:AC:F8:86:26
Authority key identifier: 19:0E:C7:AA:B2:0F:C4:C8:01:C6:79:63:E5:9E:4F:93:60:0E:40:1D
Certificate issuer: /CN=190ec7aab20fc4c801c67963e59e4f93600e401d
Certificate serial: 019D28F2B0F379E3C687EC8FF97F547D2005
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft
Manifest number: 11CB
Signing time: Thu 26 Mar 2026 07:01:26 +0000
Manifest this update: Thu 26 Mar 2026 07:01:26 +0000
Manifest next update: Fri 27 Mar 2026 07:01:26 +0000
Files and hashes: 1: BFsuju73p_IfTuzKMk-7j2upM6U.roa (hash: NMObEH49eiBEjgkYRi2sMCjgCjz2WvdzgCb1t201l78=)
2: GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.crl (hash: Yp+5rlHuBUaJBsWwH76ispA3PGmd7f4K+nJ4KIfeHTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:b0:f3:79:e3:c6:87:ec:8f:f9:7f:54:7d:20:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=190ec7aab20fc4c801c67963e59e4f93600e401d
Validity
Not Before: Mar 26 07:01:26 2026 GMT
Not After : Mar 27 07:01:26 2026 GMT
Subject: CN=eb0cb0c0c5724f045cc2cbf7070a8fa0acf88626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:bc:c8:53:20:1d:71:9c:f4:2d:3d:f3:26:75:
69:bc:64:5c:d5:c4:fa:f4:b2:85:91:99:4f:3f:a1:
b4:f7:fb:f8:80:f1:95:89:c3:bb:c1:83:f1:f3:aa:
36:21:e1:db:05:d5:27:da:89:64:e7:45:b5:31:d2:
2e:51:1b:af:f7:43:da:d7:90:40:1d:04:bc:a4:ba:
ed:b4:bb:74:74:c2:62:a0:b5:c4:fd:45:5a:ef:c1:
af:cf:37:b3:2a:22:03:9c:72:f4:f5:94:26:27:e7:
fd:c2:64:e4:32:78:49:9b:df:ab:e1:d9:fb:85:bc:
a5:f1:61:6c:6c:f9:be:e6:79:c0:83:c2:ca:3d:71:
e3:5c:42:85:09:5e:84:49:eb:56:d9:cb:a3:c2:05:
f4:3c:af:a5:3b:84:c6:da:d4:2d:c7:59:7d:6d:b6:
f0:0c:b5:05:42:5a:1d:c3:3f:da:02:f7:50:5d:a9:
79:19:7b:7e:ec:d3:02:29:cc:26:a7:28:42:e8:77:
16:e1:26:5f:e3:f0:6f:fa:59:83:2f:a6:c6:61:9c:
32:93:1f:c2:c4:a4:6c:e9:8f:86:00:30:61:2a:02:
3c:08:70:44:fc:14:a8:61:82:06:f2:dd:07:79:09:
71:c5:c4:66:7f:b4:a2:86:99:a5:01:e9:40:01:c9:
f6:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:0C:B0:C0:C5:72:4F:04:5C:C2:CB:F7:07:0A:8F:A0:AC:F8:86:26
X509v3 Authority Key Identifier:
keyid:19:0E:C7:AA:B2:0F:C4:C8:01:C6:79:63:E5:9E:4F:93:60:0E:40:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:d4:34:ac:85:a1:e5:29:c5:fc:e3:8b:ac:3e:ff:10:81:01:
5f:46:f6:90:a2:76:d9:c1:4c:80:55:08:19:c0:45:88:58:03:
53:ac:62:7e:97:92:29:31:fc:b2:a4:c5:13:82:bb:22:3e:54:
36:8b:a8:3c:25:8e:82:fa:b5:ec:fd:4a:8e:26:5f:94:9e:d8:
6d:45:79:5e:9d:58:86:01:ec:6f:44:37:c7:b8:1f:98:89:65:
e9:06:70:3c:94:ef:06:8d:a6:06:66:e0:f0:c5:3c:04:7a:f9:
b8:ac:f3:3d:a6:16:12:a4:81:17:3c:34:55:03:39:78:c8:14:
76:12:f0:3b:23:ae:ef:38:02:0c:4c:ea:df:de:a8:2e:03:ea:
f5:80:f3:b8:00:01:61:e4:2a:e8:86:64:95:2c:c1:a0:9a:44:
8b:5a:27:65:44:5f:ae:9e:c5:0b:50:f5:68:14:70:fd:3a:a3:
bf:d0:1e:26:b4:8b:2f:b3:74:96:87:f5:72:61:26:a0:b5:54:
c2:79:d3:ec:da:3c:6a:2c:60:5d:73:f7:e3:d5:d9:86:a1:a8:
98:40:f2:0b:73:70:37:46:f6:d8:50:7f:1f:3d:d3:31:fa:7d:
fb:2b:fb:26:44:af:71:c4:ac:3c:60:d8:08:12:48:28:ee:ec:
76:bb:df:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:00:58 2026 by rpki-client