Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/20b3fe-eebf-42ff-b012-7a3e394c0493/1/l_GQR_Px4Fk9HDF5l77eKJCqD_s.mft
File: l_GQR_Px4Fk9HDF5l77eKJCqD_s.mft (raw, json)
Hash identifier: 8epcgTv6E5o/P/PV1ClES5Khct+f9okekiMGCPFj+p8=
Subject key identifier: 1C:87:5A:C9:B7:69:E0:F6:7A:51:4F:EF:C5:7E:EA:B2:70:64:14:4F
Authority key identifier: 97:F1:90:47:F3:F1:E0:59:3D:1C:31:79:97:BE:DE:28:90:AA:0F:FB
Certificate issuer: /CN=97f19047f3f1e0593d1c317997bede2890aa0ffb
Certificate serial: 01A0E3995B3DC145AFCD8072CD51A88BF49A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l_GQR_Px4Fk9HDF5l77eKJCqD_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/20b3fe-eebf-42ff-b012-7a3e394c0493/1/l_GQR_Px4Fk9HDF5l77eKJCqD_s.mft
Manifest number: 03AC
Signing time: Sun 27 Sep 2026 16:01:13 +0000
Manifest this update: Sun 27 Sep 2026 16:01:13 +0000
Manifest next update: Mon 28 Sep 2026 16:01:13 +0000
Files and hashes: 1: l_GQR_Px4Fk9HDF5l77eKJCqD_s.crl (hash: Iovb9lzTvVkyS8rf7+DgrBwrw8Q7JjiUC+Bz7Vxg6Nc=)
2: vhjXwUxUHjnodkfGPP9oE-wn8JQ.roa (hash: pzt6Tw+aFjj+nqYVhnhtqZPOWZ64o5R/mQIj9SS6SOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/20b3fe-eebf-42ff-b012-7a3e394c0493/1/l_GQR_Px4Fk9HDF5l77eKJCqD_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/20b3fe-eebf-42ff-b012-7a3e394c0493/1/l_GQR_Px4Fk9HDF5l77eKJCqD_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/l_GQR_Px4Fk9HDF5l77eKJCqD_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:99:5b:3d:c1:45:af:cd:80:72:cd:51:a8:8b:f4:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97f19047f3f1e0593d1c317997bede2890aa0ffb
Validity
Not Before: Sep 27 16:01:13 2026 GMT
Not After : Sep 28 16:01:13 2026 GMT
Subject: CN=1c875ac9b769e0f67a514fefc57eeab27064144f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:98:5a:2d:20:d5:93:a8:3e:3b:5a:c0:d7:da:
5c:dd:2b:03:7f:03:1b:be:db:fb:5f:22:7a:81:7b:
fb:84:86:cb:22:20:b5:95:53:4b:72:ad:e0:3b:02:
70:79:e6:39:ee:43:13:a9:82:51:53:d5:6c:a3:9d:
79:04:29:ff:f1:98:a0:e3:b7:8a:95:9a:e2:31:16:
0e:9c:ed:45:e8:6d:d2:86:7b:47:7f:1f:b0:28:46:
b2:3f:61:9a:38:f7:98:f0:bc:22:d8:68:62:fe:01:
39:50:83:59:a1:41:fc:d6:87:f9:16:47:56:e6:b3:
82:86:7d:4e:f3:31:fc:36:92:f7:34:8d:bf:0c:ba:
d1:3e:af:4b:dd:9b:7f:b7:0b:41:b5:66:e2:2c:65:
39:87:3d:2e:82:34:7b:44:03:eb:81:30:ba:ce:4d:
8c:b8:b8:64:8c:0f:78:bf:c4:a5:4d:69:e8:88:de:
8a:6a:07:cb:53:9d:5e:70:18:bf:b0:dc:5d:8a:a1:
4d:8c:1f:42:09:71:ea:5e:2b:00:a2:6d:cf:16:42:
c6:51:c8:07:18:7b:8b:63:0e:b5:fc:8f:72:84:19:
0f:0a:aa:11:98:87:00:7f:cc:c1:4f:51:d0:1d:33:
25:a0:f7:da:f7:cc:ab:25:ff:57:d8:48:de:fe:61:
8f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:87:5A:C9:B7:69:E0:F6:7A:51:4F:EF:C5:7E:EA:B2:70:64:14:4F
X509v3 Authority Key Identifier:
keyid:97:F1:90:47:F3:F1:E0:59:3D:1C:31:79:97:BE:DE:28:90:AA:0F:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l_GQR_Px4Fk9HDF5l77eKJCqD_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/20b3fe-eebf-42ff-b012-7a3e394c0493/1/l_GQR_Px4Fk9HDF5l77eKJCqD_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/20b3fe-eebf-42ff-b012-7a3e394c0493/1/l_GQR_Px4Fk9HDF5l77eKJCqD_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:a9:d5:75:e8:d1:aa:de:59:3a:be:7f:93:0b:67:5c:e9:3d:
62:a1:c9:b0:a8:63:50:b0:8e:fd:b1:f2:c3:4b:23:ab:c3:12:
ab:18:f1:ac:51:d1:7e:b6:61:9d:d0:04:c3:c2:9d:a3:ad:7a:
96:2d:fa:c1:91:d5:9a:8b:de:2a:4c:d5:03:7e:e8:b9:e1:0f:
08:16:f1:1b:e1:80:dd:86:0b:02:17:70:6d:ce:64:5b:2d:d6:
34:71:79:b8:d7:f8:db:30:80:bf:7c:65:65:bf:4e:4b:32:e7:
46:e5:33:28:d1:4e:bd:8f:8d:a7:94:3b:4f:a5:65:f5:fe:e0:
68:48:f2:8a:64:04:39:de:38:fc:f5:54:a5:9f:06:e1:e3:9c:
5f:6e:32:07:d1:30:2f:eb:e9:6b:c5:d1:af:a4:0c:10:e4:d5:
0d:66:f1:1e:25:d3:83:ab:06:f2:7d:6a:f4:38:ec:4e:3b:8a:
3b:f0:b2:e4:48:f2:17:d7:25:1a:a0:e6:78:87:48:d0:b2:ee:
2e:8c:65:22:a7:fa:7a:ef:1d:45:90:6c:fa:7d:d3:6a:0d:b1:
88:69:80:7f:1e:b6:3b:57:51:45:85:c9:fa:4c:53:a8:25:fc:
ce:f5:b5:4b:0a:c5:5b:00:32:7a:ef:98:a8:76:74:67:a1:31:
e2:36:1c:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 21:35:40 2026 by rpki-client