Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft
File: GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft (raw, json)
Hash identifier: 7bdvpswHA/JO8hkUtZuhi0fSLFiMuZ840CvZmOxI02c=
Subject key identifier: 14:87:46:9A:27:71:9B:97:1C:DD:BE:D1:FC:35:84:43:B2:B4:71:F6
Authority key identifier: 19:0E:C7:AA:B2:0F:C4:C8:01:C6:79:63:E5:9E:4F:93:60:0E:40:1D
Certificate issuer: /CN=190ec7aab20fc4c801c67963e59e4f93600e401d
Certificate serial: 019E1E34EFD8333A9E2B3022FA99557CFE5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft
Manifest number: 124A
Signing time: Tue 12 May 2026 22:00:46 +0000
Manifest this update: Tue 12 May 2026 22:00:46 +0000
Manifest next update: Wed 13 May 2026 22:00:46 +0000
Files and hashes: 1: BFsuju73p_IfTuzKMk-7j2upM6U.roa (hash: NMObEH49eiBEjgkYRi2sMCjgCjz2WvdzgCb1t201l78=)
2: GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.crl (hash: I8C2hSszeNMqtr37H3rfSHS71BcDFmHmQolIjTx+srk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:34:ef:d8:33:3a:9e:2b:30:22:fa:99:55:7c:fe:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=190ec7aab20fc4c801c67963e59e4f93600e401d
Validity
Not Before: May 12 22:00:46 2026 GMT
Not After : May 13 22:00:46 2026 GMT
Subject: CN=1487469a27719b971cddbed1fc358443b2b471f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:10:31:88:d9:53:72:d0:f7:d8:64:b1:75:10:
b4:19:1f:2f:76:17:7c:0d:43:af:75:1f:df:fa:30:
33:10:f8:02:00:5c:ed:e1:ec:5a:dc:5c:3a:83:5a:
5b:9f:56:ac:42:77:14:53:dd:bd:fe:4c:a5:e8:b0:
ac:81:96:5a:da:7e:18:be:b0:a4:13:b9:ef:e8:d6:
73:88:5e:35:61:c9:97:5f:98:32:fb:3a:23:dc:06:
d2:ae:93:3f:b7:36:fc:27:81:b3:d8:51:5f:fd:8e:
9f:ed:dd:b8:8b:44:5b:7f:c2:87:cd:5d:00:4e:22:
8d:83:02:75:00:ab:93:21:92:53:aa:fe:48:01:fe:
cc:54:38:e5:74:91:a7:35:29:31:a7:2d:bb:8e:b1:
d5:06:e2:8a:68:ba:a3:04:52:81:74:78:16:6f:df:
0b:1f:64:d6:8c:1b:5a:55:d7:4d:5d:18:36:9d:99:
e9:64:8b:8c:59:1a:32:60:20:f5:33:21:ec:ec:1d:
de:9f:b1:5d:d6:60:29:38:2e:27:ca:39:96:bd:4d:
23:52:4e:3c:e9:0d:7f:7e:86:2a:f7:9c:87:24:47:
9f:28:6f:65:37:0c:3c:8c:ed:35:c3:d8:9a:fb:6b:
f8:e6:93:a4:eb:8d:0c:7f:a0:1d:1e:cd:84:a9:5a:
4a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:87:46:9A:27:71:9B:97:1C:DD:BE:D1:FC:35:84:43:B2:B4:71:F6
X509v3 Authority Key Identifier:
keyid:19:0E:C7:AA:B2:0F:C4:C8:01:C6:79:63:E5:9E:4F:93:60:0E:40:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:1d:cd:17:c9:c1:a7:88:c9:70:4a:cd:85:68:b0:d9:92:e1:
95:e5:c6:58:91:75:db:be:3b:cb:74:1b:8a:aa:8b:06:bf:29:
60:a5:75:6e:f0:32:8f:f2:cf:a5:8d:5c:ec:6c:69:b1:75:d1:
99:30:6d:17:db:70:96:34:5f:9e:e1:67:9f:5f:2b:55:76:fe:
46:d4:1b:9c:97:e9:5d:2f:3d:dd:b4:83:4f:46:ef:46:80:66:
38:ad:90:6e:06:a8:80:01:09:41:f7:5c:73:42:28:b4:75:cc:
00:2c:18:64:72:aa:27:9c:87:a4:92:e8:96:47:f6:d7:7c:8c:
cb:e1:5d:fd:dc:cf:f8:8f:ef:5b:29:10:d5:8a:54:63:04:80:
83:b6:a6:0e:87:73:5a:bb:a8:38:89:64:d3:de:fa:ac:d4:b6:
67:21:6a:66:1e:b5:92:11:be:55:28:45:b5:6a:87:82:d8:cb:
9b:bc:35:18:b8:42:c3:5e:ef:e6:fc:3d:be:b1:12:69:a9:69:
af:4d:cc:1f:b3:77:05:df:7d:3e:68:6a:85:3f:cd:17:cc:1f:
f2:99:e0:ec:31:8f:a0:72:54:16:d8:67:46:86:4c:a5:02:c3:
aa:5a:03:9f:c7:8f:81:11:26:5d:ee:29:07:3d:6f:08:49:54:
9a:cf:1f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:36:42 2026 by rpki-client