Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/eaf107-6723-4d46-9e0c-c0bd02014971/1/gqSUodrlSHPfot61bQMTNAdqyVs.mft
File: gqSUodrlSHPfot61bQMTNAdqyVs.mft (raw, json)
Hash identifier: mtdGdk8yUWr70uzq98NN12VpcPZn/4814h+8U/LlqB8=
Subject key identifier: A2:4C:56:39:12:61:85:19:77:31:93:B8:EA:04:15:F2:E2:4A:0B:39
Authority key identifier: 82:A4:94:A1:DA:E5:48:73:DF:A2:DE:B5:6D:03:13:34:07:6A:C9:5B
Certificate issuer: /CN=82a494a1dae54873dfa2deb56d031334076ac95b
Certificate serial: 019D25BA6A18765A8005BAA4E01089650E59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gqSUodrlSHPfot61bQMTNAdqyVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/eaf107-6723-4d46-9e0c-c0bd02014971/1/gqSUodrlSHPfot61bQMTNAdqyVs.mft
Manifest number: 0A30
Signing time: Wed 25 Mar 2026 16:01:06 +0000
Manifest this update: Wed 25 Mar 2026 16:01:06 +0000
Manifest next update: Thu 26 Mar 2026 16:01:06 +0000
Files and hashes: 1: gqSUodrlSHPfot61bQMTNAdqyVs.crl (hash: NopLS8WvC99nCPM409Xqbgh+M9z0cfJmGSCSTgpdz2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/eaf107-6723-4d46-9e0c-c0bd02014971/1/gqSUodrlSHPfot61bQMTNAdqyVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/eaf107-6723-4d46-9e0c-c0bd02014971/1/gqSUodrlSHPfot61bQMTNAdqyVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/gqSUodrlSHPfot61bQMTNAdqyVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:6a:18:76:5a:80:05:ba:a4:e0:10:89:65:0e:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82a494a1dae54873dfa2deb56d031334076ac95b
Validity
Not Before: Mar 25 16:01:06 2026 GMT
Not After : Mar 26 16:01:06 2026 GMT
Subject: CN=a24c563912618519773193b8ea0415f2e24a0b39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:04:76:07:55:a4:b7:be:b5:83:06:65:68:39:
97:24:4e:e1:a4:1e:f4:77:40:8d:0a:4a:a1:d3:64:
47:45:d7:d7:5d:b2:05:d5:b4:fc:3f:0e:ef:47:34:
22:59:42:1b:d9:7a:10:51:48:22:91:ba:fc:7e:ad:
19:71:7e:6a:2e:b5:e0:ea:0f:44:e8:8a:af:10:b5:
f0:58:af:fe:2b:69:be:83:3b:3f:a4:12:2e:5c:2b:
79:25:a9:a0:0a:d0:4e:88:64:83:c1:67:e0:44:6d:
51:c1:53:8c:bd:bf:20:b4:0b:96:63:76:7a:7f:46:
6b:de:bb:8d:e0:21:57:85:9f:aa:d5:60:3f:76:27:
9d:03:b2:7d:37:10:6e:fd:f8:22:d7:db:5b:f3:62:
d8:91:3d:2b:2c:1b:54:c3:8e:30:0d:8a:7a:5d:55:
d5:de:6a:55:c3:5e:af:40:9e:f9:4f:e2:cc:85:f7:
be:b0:2c:6a:0f:ae:aa:7a:90:a4:07:61:76:1b:00:
4b:fc:a5:2e:82:31:63:42:e5:75:14:81:8b:96:a1:
fc:1e:f0:a5:94:d7:c3:f7:f2:dd:da:c9:cc:a4:3c:
7d:c2:31:8e:c7:37:bf:6a:a9:20:20:83:0c:5c:0a:
9f:d0:dd:d8:a5:86:cb:a1:cc:c8:66:93:5e:3d:9b:
ec:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:4C:56:39:12:61:85:19:77:31:93:B8:EA:04:15:F2:E2:4A:0B:39
X509v3 Authority Key Identifier:
keyid:82:A4:94:A1:DA:E5:48:73:DF:A2:DE:B5:6D:03:13:34:07:6A:C9:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gqSUodrlSHPfot61bQMTNAdqyVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/eaf107-6723-4d46-9e0c-c0bd02014971/1/gqSUodrlSHPfot61bQMTNAdqyVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/eaf107-6723-4d46-9e0c-c0bd02014971/1/gqSUodrlSHPfot61bQMTNAdqyVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:6d:48:cb:82:bc:1a:a0:5c:99:e7:1e:88:e0:5c:8d:9e:f3:
f2:83:03:e8:be:e2:2e:00:b0:7d:c2:24:4e:d7:2b:50:13:04:
40:28:64:ad:03:87:98:cb:68:7a:5e:f2:d5:8c:89:1f:76:b3:
2b:a3:4c:85:c9:6a:9f:82:fa:d2:22:ba:8b:8f:1c:84:57:55:
00:1f:8d:28:4d:cb:1f:c0:4c:b6:cd:58:f2:4c:6a:25:3a:3b:
2f:3d:ed:20:13:64:e3:13:ea:54:e9:c9:bc:29:81:19:22:a8:
3c:5b:f6:2d:75:d3:ba:76:9d:9a:19:dc:b6:cb:6a:eb:f1:d8:
48:59:dc:c1:37:9c:4d:e3:4f:81:b9:88:d9:87:06:ee:28:5d:
8e:99:07:d9:d8:07:60:da:65:e2:d1:8d:88:09:09:0f:f8:10:
a0:75:23:f3:6c:a5:9a:8e:db:ba:88:e8:9f:ae:91:8c:92:95:
fb:a6:03:ce:98:26:93:b7:9a:e4:19:39:83:40:0e:30:55:97:
92:41:93:16:f5:fd:0c:3e:5b:e5:25:d7:3c:1e:38:a0:94:53:
85:43:a3:78:08:9d:23:3e:d3:e5:ca:24:01:0a:32:87:26:02:
1b:36:ac:fe:21:5a:11:4c:27:0e:d2:fc:2e:f0:bc:e7:17:ce:
52:04:b3:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:16:48 2026 by rpki-client