
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.mft
File: gQbZlKEhklejzsntkc0Ym8PZOws.mft (raw, json)
Hash identifier: w1113kllUGeTAIUjEA8e312AHms61vL0rFyO24BzkRY=
Subject key identifier: AC:B1:04:67:76:9B:85:F5:CB:57:D9:6E:F9:EC:10:E2:A9:68:68:9E
Authority key identifier: 81:06:D9:94:A1:21:92:57:A3:CE:C9:ED:91:CD:18:9B:C3:D9:3B:0B
Certificate issuer: /CN=8106d994a1219257a3cec9ed91cd189bc3d93b0b
Certificate serial: 019D0966F7787580A887C2743DC427093885
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQbZlKEhklejzsntkc0Ym8PZOws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.mft
Manifest number: 187B
Signing time: Fri 20 Mar 2026 04:00:35 +0000
Manifest this update: Fri 20 Mar 2026 04:00:35 +0000
Manifest next update: Sat 21 Mar 2026 04:00:35 +0000
Files and hashes: 1: F2IHJrnPyRwbzKo1HP_xqBvLdvQ.roa (hash: FgszxDdrz1FfhJ+T4y5DQNjiDZnx4cEgXP5k1Bjw7eg=)
2: gQbZlKEhklejzsntkc0Ym8PZOws.crl (hash: SN/QfYtocAhVOyOoa4NxTXv0n4MSxz+mMHO99RJW6KE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.mft
rsync://rpki.ripe.net/repository/DEFAULT/gQbZlKEhklejzsntkc0Ym8PZOws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Mar 2026 04:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:09:66:f7:78:75:80:a8:87:c2:74:3d:c4:27:09:38:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8106d994a1219257a3cec9ed91cd189bc3d93b0b
Validity
Not Before: Mar 20 04:00:35 2026 GMT
Not After : Mar 21 04:00:35 2026 GMT
Subject: CN=acb10467769b85f5cb57d96ef9ec10e2a968689e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:29:d9:88:a4:3c:71:65:da:70:69:33:79:2a:
37:4c:13:0e:30:74:71:33:24:76:5d:60:59:53:a9:
ca:87:e7:2c:59:20:52:91:cc:10:e1:57:6f:8e:f7:
7f:ed:45:50:c1:43:56:85:48:6a:ac:9f:a2:ef:fe:
ae:80:39:8d:1b:de:b6:33:4b:42:ba:11:96:7e:7c:
34:d9:44:09:56:7e:96:82:5e:de:ee:0e:4e:ce:21:
d2:ba:26:c5:c1:14:9a:f2:69:5c:c8:fa:9d:41:f1:
18:c8:95:e6:73:cd:10:20:ec:e3:d2:66:54:ec:80:
98:ae:c7:d2:d6:74:fc:ed:2f:e6:2a:c9:66:ec:5d:
79:3b:23:ff:b1:6e:32:f9:9a:23:b8:11:30:34:4f:
f2:f8:0b:05:8a:e3:f8:97:4e:9b:35:20:b5:33:9a:
32:f9:cf:35:69:bc:63:0c:36:10:2d:c4:26:92:84:
45:f7:27:b0:92:c6:dd:92:7c:94:84:cb:dc:a8:bc:
75:0d:27:98:17:22:42:96:5d:fd:03:f2:85:ba:23:
69:2e:7f:58:9a:7e:d7:42:be:5b:67:e4:48:05:c9:
51:fe:bd:70:f4:c2:c0:1e:15:94:2a:49:80:0b:40:
fc:2c:ff:82:ee:1e:ab:97:b8:f6:65:63:3b:be:d1:
77:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:B1:04:67:76:9B:85:F5:CB:57:D9:6E:F9:EC:10:E2:A9:68:68:9E
X509v3 Authority Key Identifier:
keyid:81:06:D9:94:A1:21:92:57:A3:CE:C9:ED:91:CD:18:9B:C3:D9:3B:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQbZlKEhklejzsntkc0Ym8PZOws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/69dc6a-e91e-4b3a-934a-b354b78cc969/1/gQbZlKEhklejzsntkc0Ym8PZOws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:cb:dc:b3:9a:5f:f6:57:bb:05:8c:57:a3:91:31:82:5d:5b:
dd:95:3a:11:51:25:e5:6d:07:ff:42:d8:70:27:9f:91:0f:69:
62:83:49:0e:16:dc:5f:8f:80:31:46:7f:d2:14:a2:88:2c:2d:
93:4c:21:5d:e9:38:b4:c7:95:75:1e:60:de:14:58:aa:8f:19:
b8:c6:07:df:3a:ba:a6:4c:33:52:f8:6f:9f:fe:4b:3d:f5:38:
db:3f:8e:af:8d:c0:9f:00:b0:e9:5d:e8:10:96:23:88:51:ee:
9b:83:43:59:ff:44:fc:84:9b:d9:f3:05:09:ea:a0:6e:72:68:
b7:27:41:f1:b0:7f:4c:5b:18:d8:59:3a:62:49:75:5a:af:9f:
8b:06:f4:c2:6b:e1:bc:1d:95:6e:f8:66:22:88:27:8c:6b:c8:
ff:eb:14:eb:ef:f8:9a:9d:ae:71:b6:66:82:c7:8f:94:5d:da:
3e:c1:d8:b8:f1:98:a1:0f:b3:79:d5:9c:e3:52:4d:b5:62:f6:
3c:8e:6a:3e:b3:f3:39:6c:fe:75:61:56:65:da:28:25:95:06:
43:ab:65:22:18:d6:69:7d:fc:5b:68:b4:81:c9:4d:fe:69:63:
55:8a:09:78:22:1b:99:c0:99:02:82:ee:1d:3c:0d:fd:40:b2:
df:11:d9:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 14:33:53 2026 by rpki-client