Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft
File: GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft (raw, json)
Hash identifier: gGxMZF0uomsdvwgpd5eswdEj4PjRgEytzfJzzbJRihY=
Subject key identifier: 9F:2B:F0:53:29:B6:C3:B8:F3:8D:66:CF:5E:09:E7:D6:09:B9:B3:75
Authority key identifier: 19:0E:C7:AA:B2:0F:C4:C8:01:C6:79:63:E5:9E:4F:93:60:0E:40:1D
Certificate issuer: /CN=190ec7aab20fc4c801c67963e59e4f93600e401d
Certificate serial: 01A0DB3B6C2427B3F88E99C5AEEAFA1FB131
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft
Manifest number: 13B5
Signing time: Sat 26 Sep 2026 01:01:39 +0000
Manifest this update: Sat 26 Sep 2026 01:01:39 +0000
Manifest next update: Sun 27 Sep 2026 01:01:39 +0000
Files and hashes: 1: BFsuju73p_IfTuzKMk-7j2upM6U.roa (hash: NMObEH49eiBEjgkYRi2sMCjgCjz2WvdzgCb1t201l78=)
2: GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.crl (hash: twcyQYyEkexj3qqa3ZXVHNAZuC/EeOIPgIbJ1Q2qhUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:3b:6c:24:27:b3:f8:8e:99:c5:ae:ea:fa:1f:b1:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=190ec7aab20fc4c801c67963e59e4f93600e401d
Validity
Not Before: Sep 26 01:01:39 2026 GMT
Not After : Sep 27 01:01:39 2026 GMT
Subject: CN=9f2bf05329b6c3b8f38d66cf5e09e7d609b9b375
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e4:25:b4:93:25:a5:af:af:18:fc:36:41:4f:
87:23:78:09:ad:51:57:18:3c:d1:ab:80:0c:53:22:
5e:3d:ed:a5:0f:cf:1e:37:19:41:d5:9b:6a:18:df:
15:33:9f:63:9c:df:d2:78:7c:c8:f5:5e:28:78:68:
54:c2:67:c3:af:a4:13:23:d7:3c:83:84:6d:06:52:
c2:82:c5:ee:d3:26:d6:97:ce:cf:82:3b:92:bd:88:
61:81:a1:a3:79:28:09:e5:6d:c9:e0:05:3a:09:04:
84:33:40:f5:1c:dc:9c:93:c2:82:73:de:6e:46:81:
3d:f0:5a:a4:21:bc:16:0d:45:a6:c6:88:a2:df:6f:
b5:4f:9f:68:67:7d:b7:75:58:a8:9b:3e:82:4d:cd:
3d:38:6d:89:2d:da:b1:5e:bc:17:72:22:9b:e9:b7:
9a:ee:c4:9c:7c:3e:b4:e5:68:b2:94:1f:33:a9:b6:
66:40:32:50:6d:09:c5:b0:62:37:87:0a:70:46:df:
d9:b8:fd:37:f6:db:66:d3:69:8a:d1:f7:63:7c:ba:
bb:6b:6f:6c:25:88:6a:14:7f:c8:bb:85:72:1e:53:
2b:4e:f4:8e:9b:1c:42:f5:08:f7:c1:35:c1:34:37:
91:b1:e4:3c:a6:2b:0f:bc:66:7b:87:3a:fc:42:1b:
b5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:2B:F0:53:29:B6:C3:B8:F3:8D:66:CF:5E:09:E7:D6:09:B9:B3:75
X509v3 Authority Key Identifier:
keyid:19:0E:C7:AA:B2:0F:C4:C8:01:C6:79:63:E5:9E:4F:93:60:0E:40:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:66:0b:e2:4c:b7:71:fa:6b:e2:9a:e9:d6:58:f1:42:31:1a:
02:40:23:23:da:38:42:88:31:35:51:b8:93:9d:d6:ee:c9:1c:
77:2e:e0:a3:42:a4:e2:1c:62:07:11:28:73:9a:42:db:fe:e5:
2a:e2:0c:20:86:4d:79:92:ff:55:a8:63:76:35:0d:40:a2:f1:
0f:d1:2e:ec:5d:fa:a5:34:67:74:a5:63:ce:4a:21:d1:21:6a:
ac:bf:0d:f8:6d:fb:7c:63:02:ad:07:18:b0:5c:e4:dd:de:80:
37:d0:20:3c:16:72:33:d7:35:39:f1:bf:6c:10:7f:ee:81:8b:
5d:40:6e:cd:4b:5e:fb:d6:c3:38:4e:a5:31:4d:5e:ca:26:de:
06:3d:10:20:82:13:b1:62:a9:e7:85:b7:ce:ee:cd:44:64:06:
e6:fe:8a:1c:ff:46:ef:e9:dc:b5:a7:80:04:87:5f:95:e6:c5:
58:e0:57:0f:bb:8c:cf:b0:37:f0:b3:db:2c:28:26:33:76:c7:
99:bc:45:f1:03:8a:ee:ad:22:1e:30:3f:21:77:c2:12:ce:57:
3f:17:ba:cb:23:a5:20:9c:51:99:b9:f8:89:3b:fc:26:de:75:
a5:08:0e:cb:d1:3d:ef:4e:ad:f9:ae:b2:3d:f4:08:87:89:07:
33:9e:74:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDbO2wkJ7P4jpnFrur6H7ExMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5MGVjN2FhYjIwZmM0YzgwMWM2Nzk2M2U1OWU0ZjkzNjAw
ZTQwMWQwHhcNMjYwOTI2MDEwMTM5WhcNMjYwOTI3MDEwMTM5WjAzMTEwLwYDVQQD
Eyg5ZjJiZjA1MzI5YjZjM2I4ZjM4ZDY2Y2Y1ZTA5ZTdkNjA5YjliMzc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOQltJMlpa+vGPw2QU+HI3gJrVFX
GDzRq4AMUyJePe2lD88eNxlB1ZtqGN8VM59jnN/SeHzI9V4oeGhUwmfDr6QTI9c8
g4RtBlLCgsXu0ybWl87PgjuSvYhhgaGjeSgJ5W3J4AU6CQSEM0D1HNyck8KCc95u
RoE98FqkIbwWDUWmxoii32+1T59oZ323dViomz6CTc09OG2JLdqxXrwXciKb6bea
7sScfD605WiylB8zqbZmQDJQbQnFsGI3hwpwRt/ZuP039ttm02mK0fdjfLq7a29s
JYhqFH/Iu4VyHlMrTvSOmxxC9Qj3wTXBNDeRseQ8pisPvGZ7hzr8Qhu1lQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ8r8FMptsO4841mz14J59YJubN1MB8GA1UdIwQY
MBaAFBkOx6qyD8TIAcZ5Y+WeT5NgDkAdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1E3SHFySVB4TWdCeG5sajVaNVBrMkFPUUIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9iYTNiNjktNjVlNS00OThlLWJhMDgt
ZGFiOWI0ODNjMTIzLzEvR1E3SHFySVB4TWdCeG5sajVaNVBrMkFPUUIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi9iYTNiNjktNjVlNS00OThlLWJhMDgtZGFiOWI0ODNjMTIz
LzEvR1E3SHFySVB4TWdCeG5sajVaNVBrMkFPUUIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP2YL4ky3
cfpr4prp1ljxQjEaAkAjI9o4QogxNVG4k53W7skcdy7go0Kk4hxiBxEoc5pC2/7l
KuIMIIZNeZL/VahjdjUNQKLxD9Eu7F36pTRndKVjzkoh0SFqrL8N+G37fGMCrQcY
sFzk3d6AN9AgPBZyM9c1OfG/bBB/7oGLXUBuzUte+9bDOE6lMU1eyibeBj0QIIIT
sWKp54W3zu7NRGQG5v6KHP9G7+nctaeABIdflebFWOBXD7uMz7A38LPbLCgmM3bH
mbxF8QOK7q0iHjA/IXfCEs5XPxe6yyOlIJxRmbn4iTv8Jt51pQgOy9E9706t+a6y
PfQIh4kHM550KQ==
-----END CERTIFICATE-----
Generated at Sat Sep 26 03:36:48 2026 by rpki-client