Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/6007ff-5f0c-4a73-a3f2-ccc5814094ad/1/GQ1bBUO9hajs-WmruFA8nerQ35g.mft
File: GQ1bBUO9hajs-WmruFA8nerQ35g.mft (raw, json)
Hash identifier: AO2VqrZDgfVoRPFR8Dzg4uRnLaXHOQuriDqGjReeHiw=
Subject key identifier: 25:A9:89:AD:B7:3F:69:8D:D5:41:34:66:49:59:A0:23:E4:25:E1:A3
Authority key identifier: 19:0D:5B:05:43:BD:85:A8:EC:F9:69:AB:B8:50:3C:9D:EA:D0:DF:98
Certificate issuer: /CN=190d5b0543bd85a8ecf969abb8503c9dead0df98
Certificate serial: 019D2960EB8F35962BD376D06757D67B6DC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQ1bBUO9hajs-WmruFA8nerQ35g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/6007ff-5f0c-4a73-a3f2-ccc5814094ad/1/GQ1bBUO9hajs-WmruFA8nerQ35g.mft
Manifest number: 0F69
Signing time: Thu 26 Mar 2026 09:01:50 +0000
Manifest this update: Thu 26 Mar 2026 09:01:50 +0000
Manifest next update: Fri 27 Mar 2026 09:01:50 +0000
Files and hashes: 1: GQ1bBUO9hajs-WmruFA8nerQ35g.crl (hash: mh3fcXz1nd/uuNdJ1P+l70ikhWgyWg7jZ//DHD/kdk4=)
2: jNFKZnTVsRBfGEaululoyvE8Qj4.roa (hash: cDGBqBzjQl/F2yNxNBLw+PS6D4K8fmbzN48Xq8oZa6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/6007ff-5f0c-4a73-a3f2-ccc5814094ad/1/GQ1bBUO9hajs-WmruFA8nerQ35g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/6007ff-5f0c-4a73-a3f2-ccc5814094ad/1/GQ1bBUO9hajs-WmruFA8nerQ35g.mft
rsync://rpki.ripe.net/repository/DEFAULT/GQ1bBUO9hajs-WmruFA8nerQ35g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:eb:8f:35:96:2b:d3:76:d0:67:57:d6:7b:6d:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=190d5b0543bd85a8ecf969abb8503c9dead0df98
Validity
Not Before: Mar 26 09:01:50 2026 GMT
Not After : Mar 27 09:01:50 2026 GMT
Subject: CN=25a989adb73f698dd54134664959a023e425e1a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1a:72:56:a4:2e:b4:91:a9:cf:a6:5b:a2:ca:
19:47:da:cd:49:a1:c2:ef:3f:53:a4:10:82:ce:f2:
da:28:e7:cc:72:d4:a4:6e:f0:7a:6a:29:f6:f0:8c:
11:e5:14:9a:a9:4d:5b:e7:2d:4c:f1:f5:5c:a4:de:
e1:48:20:15:62:1f:0d:ed:5a:2e:a6:46:4b:91:ce:
31:dd:84:91:9b:59:9a:65:07:b6:c2:af:8e:07:9f:
9f:dd:37:c6:95:48:fb:c5:ef:d8:1a:8d:63:c0:67:
05:4d:55:79:61:2a:c9:3c:1f:25:d1:4d:bc:b3:62:
1c:59:fe:e4:f6:b3:b0:69:37:42:f4:c4:ca:3e:6b:
6d:9d:77:e0:bb:e6:b8:98:f6:ba:71:34:c5:8b:ca:
c9:9a:f8:20:ef:4e:da:0f:57:68:72:9b:de:9e:bf:
ec:a1:e6:7b:2a:21:f9:11:ae:a9:0f:0d:17:90:e9:
40:59:0d:2f:74:0a:cf:3c:72:cf:bc:2e:0a:a0:98:
d1:99:d5:83:6f:0b:89:a5:04:4d:39:ce:db:3e:a7:
ea:b1:ca:68:0e:71:06:b1:97:2d:49:55:ed:a0:32:
d0:a5:49:bb:b1:50:74:18:5d:fa:89:b5:e9:02:8c:
76:f9:67:de:1e:de:8d:24:45:cf:5a:ba:cd:c3:f2:
72:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:A9:89:AD:B7:3F:69:8D:D5:41:34:66:49:59:A0:23:E4:25:E1:A3
X509v3 Authority Key Identifier:
keyid:19:0D:5B:05:43:BD:85:A8:EC:F9:69:AB:B8:50:3C:9D:EA:D0:DF:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQ1bBUO9hajs-WmruFA8nerQ35g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6007ff-5f0c-4a73-a3f2-ccc5814094ad/1/GQ1bBUO9hajs-WmruFA8nerQ35g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6007ff-5f0c-4a73-a3f2-ccc5814094ad/1/GQ1bBUO9hajs-WmruFA8nerQ35g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:e7:3e:ea:e9:7f:7b:d0:8f:f2:44:cf:d6:79:17:01:98:1d:
13:51:55:98:cb:d3:70:d9:46:d6:36:83:b7:e7:c4:ba:de:4c:
1a:44:98:3f:9d:7a:db:1a:55:b7:51:c1:34:53:6e:76:65:27:
29:c5:ab:66:3c:bd:64:04:5f:58:c2:ff:c2:fc:2c:42:e8:2c:
b3:3d:55:8e:57:19:ea:2b:e6:df:ca:bc:87:40:2f:9e:64:ea:
4b:39:77:43:cc:b4:6e:62:a0:93:45:d5:b7:4a:a6:0e:66:cd:
66:24:5c:41:e8:16:5a:f1:b8:66:fd:c5:04:54:6c:4e:ac:33:
b4:e3:b8:03:8d:50:81:cc:1f:35:85:c1:8c:d9:38:8e:b1:e9:
e8:fa:33:62:f6:46:e8:25:82:96:02:c4:f5:d7:5d:9f:75:91:
34:85:1b:46:01:63:15:67:36:71:6d:11:1c:4b:83:0b:e0:d1:
ab:0b:52:95:7c:c7:78:0d:cb:51:3e:62:54:c3:bf:88:85:8a:
6b:b1:c2:6d:79:0c:ad:35:b5:fd:19:b1:39:c1:72:03:ac:87:
b8:ca:b3:e4:1f:42:e0:dd:c7:83:38:46:33:2f:95:05:2a:8c:
f6:d1:7f:93:f2:7b:b9:1b:ee:58:2b:a2:1b:7b:6f:ce:77:6a:
7a:ed:30:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:31:52 2026 by rpki-client