Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/20b3fe-eebf-42ff-b012-7a3e394c0493/1/l_GQR_Px4Fk9HDF5l77eKJCqD_s.mft
File: l_GQR_Px4Fk9HDF5l77eKJCqD_s.mft (raw, json)
Hash identifier: 99hGuCf4Pb7HJd357cH6ZXmMQbdBtuBFtAjsioRVzH0=
Subject key identifier: 52:D6:F4:77:88:ED:24:C1:38:24:B4:4D:DC:1D:D7:73:6F:DE:1E:2B
Authority key identifier: 97:F1:90:47:F3:F1:E0:59:3D:1C:31:79:97:BE:DE:28:90:AA:0F:FB
Certificate issuer: /CN=97f19047f3f1e0593d1c317997bede2890aa0ffb
Certificate serial: 01A0D4265D32F0FCB00BC45D53D9C18056EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l_GQR_Px4Fk9HDF5l77eKJCqD_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/20b3fe-eebf-42ff-b012-7a3e394c0493/1/l_GQR_Px4Fk9HDF5l77eKJCqD_s.mft
Manifest number: 03A4
Signing time: Thu 24 Sep 2026 16:01:18 +0000
Manifest this update: Thu 24 Sep 2026 16:01:18 +0000
Manifest next update: Fri 25 Sep 2026 16:01:18 +0000
Files and hashes: 1: l_GQR_Px4Fk9HDF5l77eKJCqD_s.crl (hash: 73nhV8fxnNRxKmlzDftQzINpD6zY03F5+3trZkUyluU=)
2: vhjXwUxUHjnodkfGPP9oE-wn8JQ.roa (hash: pzt6Tw+aFjj+nqYVhnhtqZPOWZ64o5R/mQIj9SS6SOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/20b3fe-eebf-42ff-b012-7a3e394c0493/1/l_GQR_Px4Fk9HDF5l77eKJCqD_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/20b3fe-eebf-42ff-b012-7a3e394c0493/1/l_GQR_Px4Fk9HDF5l77eKJCqD_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/l_GQR_Px4Fk9HDF5l77eKJCqD_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 16:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:26:5d:32:f0:fc:b0:0b:c4:5d:53:d9:c1:80:56:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97f19047f3f1e0593d1c317997bede2890aa0ffb
Validity
Not Before: Sep 24 16:01:18 2026 GMT
Not After : Sep 25 16:01:18 2026 GMT
Subject: CN=52d6f47788ed24c13824b44ddc1dd7736fde1e2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b6:91:05:68:5a:7b:7f:2b:2f:e8:1f:13:35:
a0:e9:79:43:f0:a7:30:90:52:fd:37:40:d7:72:d0:
17:12:99:5b:c4:d9:de:3a:e5:80:93:be:2d:7f:d8:
a8:d4:7d:fb:ce:ef:06:48:bf:6b:7d:55:b2:55:eb:
41:5a:56:ac:8a:9b:d8:3e:ec:d8:f4:c5:c8:36:f8:
a7:23:0f:d0:6b:6a:a3:0f:c0:21:49:64:ff:95:df:
fe:0d:7e:9c:b3:aa:8c:57:0a:49:80:34:8a:8d:60:
d2:0c:e2:b9:eb:f8:f7:cf:e3:4a:68:8b:1c:4a:8c:
37:d8:ac:32:16:a5:e7:18:f6:fa:1b:26:b8:8a:82:
7d:f2:c5:45:b5:2b:31:2b:1a:73:5c:8c:72:8d:1e:
91:02:7c:27:fe:07:b7:da:b2:57:29:9b:5f:c4:32:
38:4d:50:37:16:25:23:0b:70:43:f4:85:70:37:67:
c6:16:9d:9b:75:88:0d:07:1a:be:d5:e5:9b:99:95:
80:18:18:9d:ae:2b:65:01:a4:e8:bf:8d:e4:b1:a3:
94:72:63:19:d9:cd:20:06:bf:3c:32:9f:ae:a2:25:
68:ee:2a:40:69:32:21:d3:27:a2:d4:e3:85:dd:b5:
da:53:0a:95:09:74:c5:02:23:fe:8e:24:f6:22:2e:
be:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:D6:F4:77:88:ED:24:C1:38:24:B4:4D:DC:1D:D7:73:6F:DE:1E:2B
X509v3 Authority Key Identifier:
keyid:97:F1:90:47:F3:F1:E0:59:3D:1C:31:79:97:BE:DE:28:90:AA:0F:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l_GQR_Px4Fk9HDF5l77eKJCqD_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/20b3fe-eebf-42ff-b012-7a3e394c0493/1/l_GQR_Px4Fk9HDF5l77eKJCqD_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/20b3fe-eebf-42ff-b012-7a3e394c0493/1/l_GQR_Px4Fk9HDF5l77eKJCqD_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:d8:77:1a:35:81:5e:8f:08:8f:79:7b:d5:15:91:c9:d9:bc:
0e:85:74:b5:a4:52:88:99:f6:44:5a:43:64:57:fe:5e:9c:c6:
e0:e1:ce:81:fd:18:69:34:f6:62:88:9e:88:75:8c:a6:ae:ab:
36:d0:70:d2:c7:82:19:ad:c1:c5:53:a9:e4:d7:0b:65:c7:c5:
54:90:3b:e8:83:96:bc:de:60:e4:69:9a:61:9d:6d:6c:fd:99:
86:5e:be:51:2a:a6:4a:90:4b:3a:f0:c6:10:81:95:1e:9a:19:
2d:e1:fe:33:d3:98:69:91:c8:c5:af:47:4e:99:f8:8f:7b:22:
e5:ce:40:8a:b4:6e:0d:b3:76:30:92:f3:a0:10:e9:28:47:e7:
52:37:e4:e9:37:0f:8b:e9:f3:67:9a:13:c6:77:b8:9d:d3:18:
0c:48:64:d2:04:54:79:91:c1:e3:23:a1:a6:1c:b3:4c:2d:aa:
be:60:f5:a6:d9:b0:91:e8:1f:e0:5c:27:e2:01:43:a4:d5:cd:
f9:b2:aa:f3:2c:de:e1:f8:ff:c4:48:05:07:b9:5b:84:c0:3c:
96:ee:62:3c:3a:c9:47:6c:a7:4e:d6:c9:b1:f2:16:86:bb:dd:
77:63:a7:df:5c:b9:0b:a1:01:22:a2:1d:16:2a:85:d0:eb:5a:
e4:fb:16:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:34:21 2026 by rpki-client