Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/bcdecd-6689-4cd8-a109-20de6972609b/1/GQAdVXoGmNrXfEs-3fKn02tyqwA.mft
File: GQAdVXoGmNrXfEs-3fKn02tyqwA.mft (raw, json)
Hash identifier: rBjZtz3DPq80rqynobQcEfuX65qDjdgHvkqNiPwWhUo=
Subject key identifier: 9A:CE:33:DA:B0:02:E8:1C:92:98:9E:49:F5:60:E3:3A:BA:9B:09:C3
Authority key identifier: 19:00:1D:55:7A:06:98:DA:D7:7C:4B:3E:DD:F2:A7:D3:6B:72:AB:00
Certificate issuer: /CN=19001d557a0698dad77c4b3eddf2a7d36b72ab00
Certificate serial: 019D32633FA78A7F4A206CEDA2B01DA85726
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQAdVXoGmNrXfEs-3fKn02tyqwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/bcdecd-6689-4cd8-a109-20de6972609b/1/GQAdVXoGmNrXfEs-3fKn02tyqwA.mft
Manifest number: 07CD
Signing time: Sat 28 Mar 2026 03:00:58 +0000
Manifest this update: Sat 28 Mar 2026 03:00:58 +0000
Manifest next update: Sun 29 Mar 2026 03:00:58 +0000
Files and hashes: 1: FblgizDhqR052b7Rb7HxWYg2JDU.roa (hash: ukjre2pKx9ZsNQN9DOZTFUoYV7Iqwog22EFIjKbpS9Y=)
2: GQAdVXoGmNrXfEs-3fKn02tyqwA.crl (hash: uOJp2qLZlzzdQIrIdYbnJKH3PCS6ROedZ8Z+s+FY968=)
3: N64gyRV3fyLEotYnOGpZXANVQTY.roa (hash: usaMJ60NvDnxkMJGfw4/sj/B9kuu+SgaBjkVvUD8MA4=)
4: ZhZfvojxtl0-1Vh8VOJ7rtKsO9U.roa (hash: rjeMgEmIzmO/qtzh5+aQsiRfqkpS/wbdwFYJRmTLpUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/bcdecd-6689-4cd8-a109-20de6972609b/1/GQAdVXoGmNrXfEs-3fKn02tyqwA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/bcdecd-6689-4cd8-a109-20de6972609b/1/GQAdVXoGmNrXfEs-3fKn02tyqwA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GQAdVXoGmNrXfEs-3fKn02tyqwA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 03:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:63:3f:a7:8a:7f:4a:20:6c:ed:a2:b0:1d:a8:57:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19001d557a0698dad77c4b3eddf2a7d36b72ab00
Validity
Not Before: Mar 28 03:00:58 2026 GMT
Not After : Mar 29 03:00:58 2026 GMT
Subject: CN=9ace33dab002e81c92989e49f560e33aba9b09c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b3:8f:1c:83:06:b1:c6:2c:db:e0:7d:ec:65:
b4:db:29:a6:02:39:fb:4d:c4:52:c2:bc:a2:7a:ec:
ea:af:89:e5:06:47:c1:50:bb:f6:2b:38:d0:48:d9:
68:39:3f:3d:c5:0b:53:29:05:93:26:72:62:06:8a:
cc:cc:b5:2b:ac:b2:15:8c:4b:75:41:02:de:ca:91:
96:76:94:20:29:46:55:cd:3f:db:e4:4f:ab:4d:c5:
62:e7:e7:e9:74:51:a7:89:c0:70:f4:f4:41:52:0d:
e7:86:38:d0:db:eb:f9:1c:65:10:81:cc:1f:38:72:
82:6f:76:b4:2a:b2:52:99:68:2f:de:3f:a2:85:67:
35:b2:03:33:d9:e9:e4:c9:c4:a9:5b:f2:cd:61:30:
ce:24:b3:86:3a:a5:cc:eb:1e:f4:d3:6c:ab:6d:a2:
01:3c:6a:7a:49:59:01:7b:d5:ce:24:75:35:59:52:
7e:5d:b8:a8:08:4d:3c:06:a9:9c:44:d3:ee:21:e8:
ca:7a:85:ae:c7:ee:37:00:14:1e:54:b3:be:e5:69:
67:f7:1e:35:d2:b0:11:22:19:9f:c4:07:2a:17:ed:
cf:e0:0f:02:ce:20:b6:92:9a:7b:fb:bb:d2:d6:07:
9e:b9:57:d4:3d:e2:6c:b1:1e:9c:59:5b:3c:0d:6f:
5e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:CE:33:DA:B0:02:E8:1C:92:98:9E:49:F5:60:E3:3A:BA:9B:09:C3
X509v3 Authority Key Identifier:
keyid:19:00:1D:55:7A:06:98:DA:D7:7C:4B:3E:DD:F2:A7:D3:6B:72:AB:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQAdVXoGmNrXfEs-3fKn02tyqwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/bcdecd-6689-4cd8-a109-20de6972609b/1/GQAdVXoGmNrXfEs-3fKn02tyqwA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/bcdecd-6689-4cd8-a109-20de6972609b/1/GQAdVXoGmNrXfEs-3fKn02tyqwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:93:17:67:e5:5c:2b:41:47:13:b4:3c:3f:9f:9b:cd:73:5d:
e5:9c:4f:4a:8f:61:be:70:61:86:60:2c:45:ae:6b:e3:7f:5d:
1a:1f:2d:28:51:7a:da:0a:be:d9:cd:8e:88:de:88:72:01:ad:
b8:88:1d:db:1b:da:55:57:dc:d2:0e:5b:5e:a9:66:51:3f:a3:
9a:55:d6:34:c9:fc:8f:04:76:5f:4e:24:69:5b:61:8e:02:57:
cd:e8:30:e0:46:53:d9:3a:77:81:ff:cf:de:16:9f:4e:f9:26:
f5:ee:60:74:cf:f0:46:03:c5:8a:b6:60:6e:4c:e5:bc:92:f1:
0f:96:64:76:1e:40:40:be:96:fd:7a:8a:df:b8:0f:9a:91:ef:
3e:5b:44:40:85:16:ad:9e:cb:8d:2a:33:42:b8:e0:fa:94:39:
ca:8e:0f:b4:78:07:db:09:1e:ff:69:ce:be:c6:f0:1e:7f:ae:
f1:02:25:63:01:b3:d0:d4:d6:b8:74:47:f9:34:50:a8:ea:85:
5a:ba:2c:3d:60:1b:54:91:66:bb:22:52:be:58:41:d2:21:6e:
00:a4:ad:bb:dd:33:e3:e3:6d:04:bc:0d:c3:a7:e9:e9:a9:6f:
cc:1e:93:dc:51:82:b9:bb:5e:6e:c8:a8:58:fb:13:b9:bf:78:
e9:df:70:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:47:26 2026 by rpki-client