Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.mft
File: gQbZlKEhklejzsntkc0Ym8PZOws.mft (raw, json)
Hash identifier: jWqSxEdmRTzVykYOPTqT0pMbIyWklFVbZaIUvZcu+5s=
Subject key identifier: 4E:3F:03:B9:A8:1E:35:E4:93:B8:F6:EB:61:21:AF:CD:62:B8:06:96
Authority key identifier: 81:06:D9:94:A1:21:92:57:A3:CE:C9:ED:91:CD:18:9B:C3:D9:3B:0B
Certificate issuer: /CN=8106d994a1219257a3cec9ed91cd189bc3d93b0b
Certificate serial: 019D265F347CEE52D78ECD5A91D9F055458C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQbZlKEhklejzsntkc0Ym8PZOws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.mft
Manifest number: 188A
Signing time: Wed 25 Mar 2026 19:01:06 +0000
Manifest this update: Wed 25 Mar 2026 19:01:06 +0000
Manifest next update: Thu 26 Mar 2026 19:01:06 +0000
Files and hashes: 1: F2IHJrnPyRwbzKo1HP_xqBvLdvQ.roa (hash: FgszxDdrz1FfhJ+T4y5DQNjiDZnx4cEgXP5k1Bjw7eg=)
2: gQbZlKEhklejzsntkc0Ym8PZOws.crl (hash: hk3L/eg3BZ161PX7wnJlGpq8g0Cc6KH9wfvupOJtIzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.mft
rsync://rpki.ripe.net/repository/DEFAULT/gQbZlKEhklejzsntkc0Ym8PZOws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:34:7c:ee:52:d7:8e:cd:5a:91:d9:f0:55:45:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8106d994a1219257a3cec9ed91cd189bc3d93b0b
Validity
Not Before: Mar 25 19:01:06 2026 GMT
Not After : Mar 26 19:01:06 2026 GMT
Subject: CN=4e3f03b9a81e35e493b8f6eb6121afcd62b80696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:db:d2:03:61:51:34:dd:d9:37:93:58:96:f2:
3f:09:49:39:8e:a2:85:94:04:73:7b:28:aa:e9:e3:
c6:1e:19:cb:4f:3d:3d:1e:9f:17:ba:57:f3:d1:44:
d7:f2:a1:b0:6c:ff:69:65:d2:21:14:2f:7b:ae:1d:
54:9d:21:f3:ef:50:46:11:1f:ce:ad:d3:07:64:0d:
64:dc:e4:ea:e4:df:d7:4c:c5:77:72:eb:4b:c2:2c:
02:32:f9:ea:fc:aa:7d:25:11:a1:93:d3:f7:9d:56:
a7:a9:a6:bd:fb:d9:e0:63:ef:93:4e:9d:c2:f4:e1:
db:05:c9:ca:c2:6d:9e:da:11:a2:17:55:77:d9:8b:
3c:34:61:95:31:f7:7f:43:61:9e:f8:c8:fe:1b:ca:
f0:5b:c1:87:99:5f:6e:07:f4:39:f2:00:c6:7c:5f:
bc:67:19:df:23:fb:b6:3e:0f:8b:dd:f5:1d:49:8d:
4a:79:70:b7:49:76:9f:83:d4:8e:c4:04:b1:b5:57:
21:80:71:2f:d8:d3:88:ff:d7:df:b4:92:d7:2a:1c:
83:fd:87:14:8c:ce:87:93:20:42:e8:1c:a0:f9:9a:
a1:0e:23:92:6f:f2:4e:0d:cc:32:3e:ee:d6:69:22:
7e:7f:0f:18:43:3d:69:71:5d:e8:c2:d2:c0:2b:4e:
54:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:3F:03:B9:A8:1E:35:E4:93:B8:F6:EB:61:21:AF:CD:62:B8:06:96
X509v3 Authority Key Identifier:
keyid:81:06:D9:94:A1:21:92:57:A3:CE:C9:ED:91:CD:18:9B:C3:D9:3B:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQbZlKEhklejzsntkc0Ym8PZOws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:89:77:f8:cf:26:4c:d7:99:05:c6:eb:aa:12:be:03:2f:17:
81:5b:92:fb:49:03:4e:49:c9:e6:d4:c9:8a:7b:15:93:88:5d:
a2:83:00:e3:47:51:26:3a:b2:c5:8c:fc:21:eb:78:36:92:ec:
69:11:2e:91:73:e0:27:b4:97:a3:f1:fe:d0:dc:d4:3e:2c:bc:
44:74:16:a4:ec:b0:c2:d6:81:c2:c9:3c:37:44:0f:10:bb:ad:
0f:d4:0f:5e:e0:bf:34:b9:15:e2:cc:69:3d:b5:9f:40:fb:ef:
f0:8e:23:e5:32:2e:6a:df:28:f0:64:7f:6c:39:2b:b5:96:6a:
eb:06:66:3f:9b:8c:82:c5:40:91:a6:c9:e0:8f:c6:d2:52:f8:
f4:f8:83:d5:d3:f4:99:b6:ac:48:9a:5e:f7:78:2a:4b:f1:46:
88:a9:5f:dc:a5:4a:63:7a:fd:12:44:d9:93:c6:c2:e7:2b:8a:
c7:cb:d1:c0:b6:e4:44:ee:b5:00:4d:83:16:ef:6d:88:5b:a4:
14:4b:b2:a1:4a:66:08:9e:74:06:12:3f:f6:bc:6a:80:a2:fd:
8b:28:3f:54:7b:a7:90:27:35:12:5c:68:7e:d4:4d:28:b1:2b:
c1:00:7e:dc:73:cf:f7:78:7c:5a:03:32:6c:dc:b2:ee:e0:a8:
96:8c:72:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:32 2026 by rpki-client