Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/20b3fe-eebf-42ff-b012-7a3e394c0493/1/l_GQR_Px4Fk9HDF5l77eKJCqD_s.mft
File: l_GQR_Px4Fk9HDF5l77eKJCqD_s.mft (raw, json)
Hash identifier: GYkfO1DZsx0vFScv6aNynvgUD4VUJNEs1en0n0386Vc=
Subject key identifier: 53:3D:7B:47:1D:06:CC:EF:E0:5D:95:99:75:99:19:47:0A:59:37:FD
Authority key identifier: 97:F1:90:47:F3:F1:E0:59:3D:1C:31:79:97:BE:DE:28:90:AA:0F:FB
Certificate issuer: /CN=97f19047f3f1e0593d1c317997bede2890aa0ffb
Certificate serial: 019F91A3C28DF5ACD653AAD26A322D9AB3B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l_GQR_Px4Fk9HDF5l77eKJCqD_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/20b3fe-eebf-42ff-b012-7a3e394c0493/1/l_GQR_Px4Fk9HDF5l77eKJCqD_s.mft
Manifest number: 02FD
Signing time: Fri 24 Jul 2026 01:00:56 +0000
Manifest this update: Fri 24 Jul 2026 01:00:56 +0000
Manifest next update: Sat 25 Jul 2026 01:00:56 +0000
Files and hashes: 1: l_GQR_Px4Fk9HDF5l77eKJCqD_s.crl (hash: kWjbagAIdWUJr9KRKZk4AVhH6yT7co5/GYOqyF0fujw=)
2: vhjXwUxUHjnodkfGPP9oE-wn8JQ.roa (hash: pzt6Tw+aFjj+nqYVhnhtqZPOWZ64o5R/mQIj9SS6SOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/20b3fe-eebf-42ff-b012-7a3e394c0493/1/l_GQR_Px4Fk9HDF5l77eKJCqD_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/20b3fe-eebf-42ff-b012-7a3e394c0493/1/l_GQR_Px4Fk9HDF5l77eKJCqD_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/l_GQR_Px4Fk9HDF5l77eKJCqD_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a3:c2:8d:f5:ac:d6:53:aa:d2:6a:32:2d:9a:b3:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97f19047f3f1e0593d1c317997bede2890aa0ffb
Validity
Not Before: Jul 24 01:00:56 2026 GMT
Not After : Jul 25 01:00:56 2026 GMT
Subject: CN=533d7b471d06ccefe05d9599759919470a5937fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:00:0a:dd:04:31:a6:d6:3f:96:52:9e:56:ac:
1a:28:1f:cb:bf:a1:51:f4:d9:b4:2e:c3:b6:1a:98:
f6:fa:bb:f1:06:b2:18:7b:b4:7f:c0:3e:df:41:91:
a2:d1:44:c8:b0:f0:ba:34:db:28:d8:59:2a:63:4a:
64:3e:53:3a:ac:5c:79:c7:e2:6d:b3:2e:69:cb:26:
ec:9c:02:91:15:3c:bd:6d:b6:f7:9d:e8:84:45:74:
f1:7a:3f:6b:a4:d1:69:33:78:bc:25:1f:59:bf:a3:
a9:e6:6f:e5:76:d3:17:08:26:ac:8f:2a:97:0c:37:
31:60:75:da:05:94:bf:3a:75:03:75:9a:4a:77:9b:
a2:85:d2:96:2d:e4:13:e9:1b:c6:e0:5f:05:29:20:
f4:fc:a9:04:e1:a3:a3:25:48:e0:7b:7d:52:ed:02:
f7:0c:31:9d:f2:90:9b:24:7a:04:ea:20:36:40:cb:
0b:a1:f5:58:c7:0e:d1:8c:be:4a:56:59:6a:49:70:
84:39:9f:ac:f7:98:1d:c7:9b:60:27:09:58:6c:f6:
56:0d:89:a3:01:ec:55:4f:45:af:44:c6:1e:48:46:
99:d4:c1:9d:43:0c:0f:10:89:10:03:cc:5c:18:78:
ca:c7:11:d6:2e:57:c5:49:5e:05:97:e9:ed:2c:be:
d2:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:3D:7B:47:1D:06:CC:EF:E0:5D:95:99:75:99:19:47:0A:59:37:FD
X509v3 Authority Key Identifier:
keyid:97:F1:90:47:F3:F1:E0:59:3D:1C:31:79:97:BE:DE:28:90:AA:0F:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l_GQR_Px4Fk9HDF5l77eKJCqD_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/20b3fe-eebf-42ff-b012-7a3e394c0493/1/l_GQR_Px4Fk9HDF5l77eKJCqD_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/20b3fe-eebf-42ff-b012-7a3e394c0493/1/l_GQR_Px4Fk9HDF5l77eKJCqD_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:25:1c:99:cc:f4:96:f3:5b:75:6f:a8:cd:e4:c8:e2:f5:54:
ec:2a:fa:1a:a1:b7:e4:31:18:10:fb:0c:9c:cc:99:63:18:7d:
32:8c:24:8a:22:ab:a2:d2:b2:0f:3c:62:d1:4e:6b:bc:0b:f9:
54:5d:7b:d7:d1:08:0e:28:63:87:b8:96:f1:6f:06:ff:45:7f:
42:30:d1:8b:58:a4:b5:87:fb:cb:d8:1b:14:d5:eb:6a:64:6e:
fb:2a:cb:28:72:19:63:c3:da:a5:d9:6a:8a:ed:7e:44:39:92:
8e:87:cc:4a:38:bd:ed:ae:03:15:81:87:03:fd:21:03:4f:c7:
7f:3a:1f:1a:1f:bc:60:58:a7:21:fa:3a:e6:be:46:e9:18:97:
8b:a3:a0:f0:db:0f:68:01:0f:0d:4b:de:34:bb:58:e1:95:2c:
ff:9a:14:be:5d:99:e5:64:82:d5:68:9f:ac:f0:58:51:94:25:
30:2d:c1:a8:d4:ad:2d:a4:f1:8d:3d:c3:5d:e2:86:0c:14:53:
10:23:6d:c7:2d:b4:25:3e:76:49:64:b0:fa:14:38:24:38:bf:
dd:8e:88:40:94:b7:d5:a2:c3:a6:ed:c8:2a:f2:2d:c1:c5:0f:
61:bd:e3:65:e2:70:6d:f0:9d:36:0f:4f:b6:b3:ee:f7:3a:1a:
42:87:f8:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Ro8KN9azWU6rSajItmrO2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3ZjE5MDQ3ZjNmMWUwNTkzZDFjMzE3OTk3YmVkZTI4OTBh
YTBmZmIwHhcNMjYwNzI0MDEwMDU2WhcNMjYwNzI1MDEwMDU2WjAzMTEwLwYDVQQD
Eyg1MzNkN2I0NzFkMDZjY2VmZTA1ZDk1OTk3NTk5MTk0NzBhNTkzN2ZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugAK3QQxptY/llKeVqwaKB/Lv6FR
9Nm0LsO2Gpj2+rvxBrIYe7R/wD7fQZGi0UTIsPC6NNso2FkqY0pkPlM6rFx5x+Jt
sy5pyybsnAKRFTy9bbb3neiERXTxej9rpNFpM3i8JR9Zv6Op5m/ldtMXCCasjyqX
DDcxYHXaBZS/OnUDdZpKd5uihdKWLeQT6RvG4F8FKSD0/KkE4aOjJUjge31S7QL3
DDGd8pCbJHoE6iA2QMsLofVYxw7RjL5KVllqSXCEOZ+s95gdx5tgJwlYbPZWDYmj
AexVT0WvRMYeSEaZ1MGdQwwPEIkQA8xcGHjKxxHWLlfFSV4Fl+ntLL7SdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFM9e0cdBszv4F2VmXWZGUcKWTf9MB8GA1UdIwQY
MBaAFJfxkEfz8eBZPRwxeZe+3iiQqg/7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbF9HUVJfUHg0Rms5SERGNWw3N2VLSkNxRF9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8yMGIzZmUtZWViZi00MmZmLWIwMTIt
N2EzZTM5NGMwNDkzLzEvbF9HUVJfUHg0Rms5SERGNWw3N2VLSkNxRF9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8yMGIzZmUtZWViZi00MmZmLWIwMTItN2EzZTM5NGMwNDkz
LzEvbF9HUVJfUHg0Rms5SERGNWw3N2VLSkNxRF9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeSUcmcz0
lvNbdW+ozeTI4vVU7Cr6GqG35DEYEPsMnMyZYxh9MowkiiKrotKyDzxi0U5rvAv5
VF1719EIDihjh7iW8W8G/0V/QjDRi1iktYf7y9gbFNXramRu+yrLKHIZY8Papdlq
iu1+RDmSjofMSji97a4DFYGHA/0hA0/HfzofGh+8YFinIfo65r5G6RiXi6Og8NsP
aAEPDUveNLtY4ZUs/5oUvl2Z5WSC1WifrPBYUZQlMC3BqNStLaTxjT3DXeKGDBRT
ECNtxy20JT52SWSw+hQ4JDi/3Y6IQJS31aLDpu3IKvItwcUPYb3jZeJwbfCdNg9P
trPu9zoaQof4hA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:29:59 2026 by rpki-client