Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/a9ff1a-d580-4b42-bd87-5597260f65ee/1/GQI5F5kzdgEzH1oSrxHp9PZCEVk.mft
File: GQI5F5kzdgEzH1oSrxHp9PZCEVk.mft (raw, json)
Hash identifier: hw6fLTPnxfoa8KkXbfC1O8cqK8DudGo+MOLM94Tamqo=
Subject key identifier: 23:83:15:B0:D9:6D:5C:10:46:99:D6:7E:C9:8A:75:25:56:B7:EA:72
Authority key identifier: 19:02:39:17:99:33:76:01:33:1F:5A:12:AF:11:E9:F4:F6:42:11:59
Certificate issuer: /CN=1902391799337601331f5a12af11e9f4f6421159
Certificate serial: 019D26CCCA6E8E2F00449B31B6395140D145
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQI5F5kzdgEzH1oSrxHp9PZCEVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/a9ff1a-d580-4b42-bd87-5597260f65ee/1/GQI5F5kzdgEzH1oSrxHp9PZCEVk.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 21:00:48 +0000
Manifest this update: Wed 25 Mar 2026 21:00:48 +0000
Manifest next update: Thu 26 Mar 2026 21:00:48 +0000
Files and hashes: 1: GQI5F5kzdgEzH1oSrxHp9PZCEVk.crl (hash: M34ydZGXkogUezBi9tkT33ThHH5krstjUfJq9OW/t6k=)
2: _OEYR_NlTtbmQ4jWp8KafD4MvOk.roa (hash: 4XDRL8Ii1WLuqDpCaTnrPdX+U3rQ6Em8H+bJRAAY9Nk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/a9ff1a-d580-4b42-bd87-5597260f65ee/1/GQI5F5kzdgEzH1oSrxHp9PZCEVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/a9ff1a-d580-4b42-bd87-5597260f65ee/1/GQI5F5kzdgEzH1oSrxHp9PZCEVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GQI5F5kzdgEzH1oSrxHp9PZCEVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:ca:6e:8e:2f:00:44:9b:31:b6:39:51:40:d1:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1902391799337601331f5a12af11e9f4f6421159
Validity
Not Before: Mar 25 21:00:48 2026 GMT
Not After : Mar 26 21:00:48 2026 GMT
Subject: CN=238315b0d96d5c104699d67ec98a752556b7ea72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:44:14:fc:f3:5c:d5:ce:21:c5:0c:22:a5:b5:
ff:30:95:9a:e0:18:28:3f:d2:e5:f4:c5:5a:39:dc:
18:09:88:05:95:59:a1:37:4d:82:a3:75:5c:d0:c4:
57:b9:4a:82:5a:15:74:31:03:37:ff:06:72:9f:2c:
c3:6b:4d:fe:6c:70:03:47:87:61:34:3d:be:20:6e:
bc:14:86:db:0b:20:6a:9d:32:c5:32:17:df:57:20:
7f:43:9a:f1:f6:13:8e:ba:9b:71:a4:de:ce:10:21:
89:04:f3:3c:6a:65:d5:6b:fc:55:46:60:da:b1:a8:
bd:de:e1:7b:29:64:f8:45:69:73:5d:61:1b:82:f6:
fd:3e:e9:f1:73:78:0a:74:fc:84:df:cc:15:d1:e7:
9b:9e:ea:65:a6:60:cb:ef:5d:57:32:e2:dc:1f:bc:
b8:ca:7e:fa:b9:b8:3f:66:8a:3c:76:77:bf:95:6c:
64:a7:82:32:97:59:cd:00:2a:5e:2a:b9:53:1e:e3:
bf:40:e1:24:0c:bf:ad:b9:23:a3:00:cf:fe:5b:c1:
0e:a0:17:d4:12:6f:a9:60:98:75:54:fe:99:83:55:
6f:27:e4:20:5f:75:c7:8e:e7:da:e2:48:fd:7d:09:
41:ac:10:0c:6b:af:ab:cd:e7:cd:34:a3:12:9d:37:
2c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:83:15:B0:D9:6D:5C:10:46:99:D6:7E:C9:8A:75:25:56:B7:EA:72
X509v3 Authority Key Identifier:
keyid:19:02:39:17:99:33:76:01:33:1F:5A:12:AF:11:E9:F4:F6:42:11:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQI5F5kzdgEzH1oSrxHp9PZCEVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a9ff1a-d580-4b42-bd87-5597260f65ee/1/GQI5F5kzdgEzH1oSrxHp9PZCEVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a9ff1a-d580-4b42-bd87-5597260f65ee/1/GQI5F5kzdgEzH1oSrxHp9PZCEVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:0e:f0:9f:77:a1:1b:4c:9e:22:ef:40:c8:8f:0e:b2:22:a4:
6e:ed:96:85:b3:27:a3:27:93:40:bc:da:c3:de:0f:26:5d:be:
1d:92:c9:e4:ad:f3:19:7f:f0:d7:99:1e:49:d6:4f:f2:d0:3d:
ef:3f:6a:6e:21:10:cc:aa:76:90:c6:d1:8e:ed:04:af:63:3b:
dc:7d:0f:63:a5:1e:04:bf:e4:72:07:b9:ee:e3:df:80:e4:66:
35:ba:d2:35:bb:1b:c4:f0:01:55:93:79:8d:07:17:ad:77:8c:
1f:45:4d:5a:c5:43:43:9d:49:93:24:05:75:c5:6e:f5:2b:13:
7d:10:5c:0c:2d:40:57:6d:56:9f:41:82:8c:37:bf:1f:d9:7c:
15:39:9b:cc:dc:32:0c:1c:18:b9:1c:f2:b0:4e:e8:28:85:b1:
e1:1e:d4:b0:9e:88:0e:a6:91:87:09:fe:35:c8:2a:1f:5a:eb:
61:1f:40:73:ea:34:12:41:59:a2:73:2f:f0:b0:22:8c:a4:c7:
af:4d:67:e8:a5:46:c3:18:7d:b4:77:14:d1:08:08:c5:2f:f3:
d9:00:9f:6d:e3:f0:a9:f5:0f:0a:8e:99:e6:5d:b4:ee:08:e2:
c5:15:15:1d:da:68:b3:cd:34:3e:21:64:33:35:b0:52:9d:b1:
12:2b:11:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:13:49 2026 by rpki-client