Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/7021e2-effe-4163-8bb3-58e7db30ea44/1/GQn2DIuF7-02HfW2tRyf7a4cf5Y.mft
File: GQn2DIuF7-02HfW2tRyf7a4cf5Y.mft (raw, json)
Hash identifier: /rYgil3iJKn2zN4WfL3JPLekQVmSvgVSaYrCsm5+SPA=
Subject key identifier: A8:D2:27:66:AC:B3:D8:9F:87:C8:F9:17:1A:3C:D5:30:76:AC:27:DE
Authority key identifier: 19:09:F6:0C:8B:85:EF:ED:36:1D:F5:B6:B5:1C:9F:ED:AE:1C:7F:96
Certificate issuer: /CN=1909f60c8b85efed361df5b6b51c9fedae1c7f96
Certificate serial: 019D27DFBC854FE2CA5BE9BA1E54C7DEDEC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQn2DIuF7-02HfW2tRyf7a4cf5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/7021e2-effe-4163-8bb3-58e7db30ea44/1/GQn2DIuF7-02HfW2tRyf7a4cf5Y.mft
Manifest number: 0AF0
Signing time: Thu 26 Mar 2026 02:01:07 +0000
Manifest this update: Thu 26 Mar 2026 02:01:07 +0000
Manifest next update: Fri 27 Mar 2026 02:01:07 +0000
Files and hashes: 1: GQn2DIuF7-02HfW2tRyf7a4cf5Y.crl (hash: Qgm8HxrOChOSS9XTrbiazsaUWDZLvnefj8Ei8AvoDVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/7021e2-effe-4163-8bb3-58e7db30ea44/1/GQn2DIuF7-02HfW2tRyf7a4cf5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/7021e2-effe-4163-8bb3-58e7db30ea44/1/GQn2DIuF7-02HfW2tRyf7a4cf5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GQn2DIuF7-02HfW2tRyf7a4cf5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:bc:85:4f:e2:ca:5b:e9:ba:1e:54:c7:de:de:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1909f60c8b85efed361df5b6b51c9fedae1c7f96
Validity
Not Before: Mar 26 02:01:07 2026 GMT
Not After : Mar 27 02:01:07 2026 GMT
Subject: CN=a8d22766acb3d89f87c8f9171a3cd53076ac27de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:dd:1f:05:bd:fa:dd:9c:26:55:02:26:48:cb:
97:fc:22:21:11:dd:23:11:a7:47:07:cb:dc:09:2a:
91:e8:f2:da:95:64:3e:f8:66:36:3c:90:df:94:d8:
72:d2:68:ab:56:c5:40:c1:76:3e:a6:a2:21:81:09:
c9:ec:e9:fb:08:b3:d5:08:61:20:65:f8:68:05:9f:
75:2b:24:a4:c7:72:05:87:6f:22:1b:71:6a:d9:69:
42:f4:06:f4:21:34:57:11:70:8c:c9:37:f7:2d:b7:
e1:fc:52:55:75:67:98:cb:14:2f:98:0f:73:f3:48:
ab:83:fd:3b:cb:8e:5b:5e:bc:68:d1:49:28:e4:3c:
7e:11:a3:45:ca:a2:35:bc:e6:c4:68:d5:ac:60:8b:
5b:69:a3:44:f2:8d:e8:b8:db:63:8a:59:45:df:98:
56:69:6e:d0:fd:a4:02:02:8e:e3:58:b3:ed:c6:7f:
a1:4d:e2:34:d7:10:8d:0e:bb:5d:26:ed:b2:f3:a9:
92:ad:07:47:af:d5:ed:b1:30:87:19:05:8b:0b:65:
9b:fa:93:d7:ce:1a:c5:29:2d:ae:64:8e:dc:c5:1a:
01:62:15:4e:a1:4e:80:0e:05:1b:a1:d7:62:c7:53:
42:e1:e0:f6:5c:88:23:f6:50:45:46:b6:04:75:09:
23:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:D2:27:66:AC:B3:D8:9F:87:C8:F9:17:1A:3C:D5:30:76:AC:27:DE
X509v3 Authority Key Identifier:
keyid:19:09:F6:0C:8B:85:EF:ED:36:1D:F5:B6:B5:1C:9F:ED:AE:1C:7F:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQn2DIuF7-02HfW2tRyf7a4cf5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/7021e2-effe-4163-8bb3-58e7db30ea44/1/GQn2DIuF7-02HfW2tRyf7a4cf5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/7021e2-effe-4163-8bb3-58e7db30ea44/1/GQn2DIuF7-02HfW2tRyf7a4cf5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:25:37:1d:23:7f:e8:0a:3d:40:2c:c5:cc:df:ef:c2:a7:08:
ab:95:82:2c:17:eb:2d:a4:99:25:f7:b5:67:87:c8:5b:db:80:
4f:5d:54:e3:59:72:1e:9c:42:d1:53:3a:d3:7e:09:e8:fb:d4:
ef:70:9a:d4:f0:59:74:77:99:98:6b:e0:c1:cf:6c:56:b2:49:
21:4c:3a:23:05:03:14:7f:a7:45:50:6e:3b:9a:f9:ba:59:5e:
57:c8:a6:46:44:a4:49:d9:4c:96:81:6f:10:d7:2b:87:e3:73:
3f:98:3d:f7:87:6c:4b:12:fe:44:6a:00:1b:14:eb:cc:2e:41:
56:95:a8:2f:aa:2c:23:39:b6:40:d7:c8:cb:0f:d8:d5:87:43:
36:6b:f6:53:1e:87:de:f9:72:8f:0b:71:eb:af:79:8b:5d:81:
06:12:97:61:fb:8a:9a:42:e0:90:82:6d:4d:01:64:7c:25:d1:
89:60:2f:ea:7e:93:70:be:4a:7a:37:bb:ad:1e:a8:94:c4:fd:
a0:24:50:be:ef:07:7f:9b:2d:c9:53:cb:67:8f:7e:54:65:8f:
9d:b3:39:a9:a6:1d:d6:78:3a:10:75:92:eb:d7:f4:ae:61:3b:
30:de:da:19:36:1a:bb:99:3c:35:a3:d7:d6:f8:fd:05:c6:4a:
e1:be:59:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:28:26 2026 by rpki-client