Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/Gqq6fafI82yLJ1ynOEkc7cy14xI.mft
File: Gqq6fafI82yLJ1ynOEkc7cy14xI.mft (raw, json)
Hash identifier: 1HeCiIV2vfGr3OjcToZ5pYvWN368pijhPIaKbgYUxeQ=
Subject key identifier: 12:46:9D:A9:20:4B:2C:6C:CD:F1:23:56:9B:63:38:EF:CD:8F:53:FA
Authority key identifier: 1A:AA:BA:7D:A7:C8:F3:6C:8B:27:5C:A7:38:49:1C:ED:CC:B5:E3:12
Certificate issuer: /CN=1aaaba7da7c8f36c8b275ca738491cedccb5e312
Certificate serial: 01A1250C10CE5B63BCD3B365DDA1275B2119
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gqq6fafI82yLJ1ynOEkc7cy14xI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/Gqq6fafI82yLJ1ynOEkc7cy14xI.mft
Manifest number: 0EA6
Signing time: Sat 10 Oct 2026 09:01:49 +0000
Manifest this update: Sat 10 Oct 2026 09:01:49 +0000
Manifest next update: Sun 11 Oct 2026 09:01:49 +0000
Files and hashes: 1: Gqq6fafI82yLJ1ynOEkc7cy14xI.crl (hash: 0csS5FFBVz1tN82t0qJuB3UBEzt2JajP/JeaQoFGYnY=)
2: I5ZIgX6iDK3oX7v-xFIQ7pdLpMo.roa (hash: 6PLpfxFxy8Nk7yedlc7CM9dTIiIgGRRx4WDgW5TY2yA=)
3: bs3te7njxydTnYWSP4ChGEGcJkQ.roa (hash: XPxWLnbyz8Llb8yCU48yi3z2ezc69lq+HL61zB6vbh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/Gqq6fafI82yLJ1ynOEkc7cy14xI.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/Gqq6fafI82yLJ1ynOEkc7cy14xI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gqq6fafI82yLJ1ynOEkc7cy14xI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 09:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:25:0c:10:ce:5b:63:bc:d3:b3:65:dd:a1:27:5b:21:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aaaba7da7c8f36c8b275ca738491cedccb5e312
Validity
Not Before: Oct 10 09:01:49 2026 GMT
Not After : Oct 11 09:01:49 2026 GMT
Subject: CN=12469da9204b2c6ccdf123569b6338efcd8f53fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:de:e7:e8:3c:e8:35:6b:67:12:54:ef:82:37:
4b:24:ca:58:26:1c:f9:85:70:ce:f4:87:85:b3:d9:
bd:71:b1:a5:4b:02:03:78:e2:90:3e:de:96:20:ad:
ae:62:a8:33:65:02:65:63:2e:5a:34:6a:ac:04:09:
55:99:19:02:6b:a0:d1:bd:0b:46:cd:d4:6b:e8:05:
6e:c0:9e:b0:a7:f3:14:f1:a7:26:49:e1:30:82:fd:
52:58:70:2f:19:a0:82:cd:97:ea:54:6a:b9:86:25:
93:8b:52:fa:37:f7:11:09:18:44:5b:78:62:8a:e5:
d0:32:00:b6:34:8a:a6:92:56:05:d8:a5:1a:ec:e6:
2b:3b:6a:cd:02:06:09:f8:3f:1a:ff:30:90:5c:78:
70:c7:a8:1c:00:e3:f5:02:5d:9d:8d:5f:82:7f:ea:
4f:4b:b6:7f:4d:15:41:f4:af:08:00:87:f1:f5:76:
9a:f3:25:d0:f8:22:e5:e9:b6:1c:2a:65:35:7f:25:
3a:8d:a4:56:ea:3d:51:16:b3:47:bf:0b:74:6b:5a:
66:29:d5:e3:83:b1:db:e3:cb:29:af:fb:6e:0f:e2:
9d:52:38:01:7d:40:6e:d1:34:13:db:a4:99:7b:23:
55:6e:9b:21:f3:43:bc:e2:93:01:0b:00:3f:d3:a8:
8c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:46:9D:A9:20:4B:2C:6C:CD:F1:23:56:9B:63:38:EF:CD:8F:53:FA
X509v3 Authority Key Identifier:
keyid:1A:AA:BA:7D:A7:C8:F3:6C:8B:27:5C:A7:38:49:1C:ED:CC:B5:E3:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gqq6fafI82yLJ1ynOEkc7cy14xI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/Gqq6fafI82yLJ1ynOEkc7cy14xI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/Gqq6fafI82yLJ1ynOEkc7cy14xI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:1b:bb:ab:88:23:3e:dd:93:79:6c:63:16:5a:99:18:1d:0b:
9d:01:87:f3:4a:b4:c0:4f:b4:5b:ed:49:e9:7d:01:ee:25:d7:
a0:2a:c9:94:bb:31:34:c5:f2:17:91:d3:08:6e:5b:60:1b:5b:
53:43:7a:54:44:6f:f4:68:44:4a:fb:da:69:6c:d5:39:b8:9a:
7a:eb:df:6b:a9:aa:fd:24:fb:22:de:82:bb:89:b8:79:01:c4:
01:f6:d6:5d:58:b6:6b:95:52:c7:9e:2d:01:93:4f:91:cf:ba:
10:c2:b3:b6:c7:b3:9a:ea:bc:a4:15:df:4d:dd:c8:56:77:b8:
e7:1e:86:c0:91:ff:ce:f1:0a:56:ed:ef:ed:0d:aa:45:c2:c8:
a8:e1:16:f7:4a:b0:e3:d6:e0:8e:bd:a5:26:52:22:9d:4d:63:
0c:f3:1a:47:28:d7:d9:6c:b9:c6:f0:a6:ff:8d:59:7f:ca:90:
c0:63:29:32:fc:e2:79:f4:4e:30:e5:bb:19:e6:4f:4e:b2:e4:
92:05:f2:76:7d:62:63:98:b5:62:b6:24:a8:6b:db:d4:3b:9b:
99:10:30:b4:7d:21:59:9d:cb:aa:4b:0d:5d:4f:1b:64:3a:f7:
0d:d6:0b:9d:cd:58:46:27:20:2d:a1:19:3d:72:03:cb:d4:98:
fe:df:1f:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 17:26:14 2026 by rpki-client