Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/Gqq6fafI82yLJ1ynOEkc7cy14xI.mft
File: Gqq6fafI82yLJ1ynOEkc7cy14xI.mft (raw, json)
Hash identifier: aqMIqjA6M9FMLuhchl/K0WRd9h27l08BdPXcWAeKyXA=
Subject key identifier: 98:99:A8:06:DE:D5:EA:C5:C1:F1:FC:1D:74:FE:CF:FA:0C:0B:C9:11
Authority key identifier: 1A:AA:BA:7D:A7:C8:F3:6C:8B:27:5C:A7:38:49:1C:ED:CC:B5:E3:12
Certificate issuer: /CN=1aaaba7da7c8f36c8b275ca738491cedccb5e312
Certificate serial: 019D0A79EC98FE55E14D98BF2E0107B75F8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gqq6fafI82yLJ1ynOEkc7cy14xI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/Gqq6fafI82yLJ1ynOEkc7cy14xI.mft
Manifest number: 0C86
Signing time: Fri 20 Mar 2026 09:00:55 +0000
Manifest this update: Fri 20 Mar 2026 09:00:55 +0000
Manifest next update: Sat 21 Mar 2026 09:00:55 +0000
Files and hashes: 1: Gqq6fafI82yLJ1ynOEkc7cy14xI.crl (hash: aRZwlIWWa96R5rUiYDOUKWS3Cf3FEnxFRM3IOk8Ce/Y=)
2: I5ZIgX6iDK3oX7v-xFIQ7pdLpMo.roa (hash: 6PLpfxFxy8Nk7yedlc7CM9dTIiIgGRRx4WDgW5TY2yA=)
3: bs3te7njxydTnYWSP4ChGEGcJkQ.roa (hash: XPxWLnbyz8Llb8yCU48yi3z2ezc69lq+HL61zB6vbh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/Gqq6fafI82yLJ1ynOEkc7cy14xI.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/Gqq6fafI82yLJ1ynOEkc7cy14xI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gqq6fafI82yLJ1ynOEkc7cy14xI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Mar 2026 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0a:79:ec:98:fe:55:e1:4d:98:bf:2e:01:07:b7:5f:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aaaba7da7c8f36c8b275ca738491cedccb5e312
Validity
Not Before: Mar 20 09:00:55 2026 GMT
Not After : Mar 21 09:00:55 2026 GMT
Subject: CN=9899a806ded5eac5c1f1fc1d74fecffa0c0bc911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:be:04:aa:83:9f:ef:e4:1f:46:41:f0:48:14:
28:71:1c:6b:63:e1:20:50:ee:dc:19:01:44:e1:9a:
a7:9d:01:42:3e:e6:cf:65:9b:27:97:3e:2f:d2:7e:
c1:53:a8:cb:d3:27:2b:22:78:2e:8f:65:fe:02:d4:
e9:9a:99:12:0e:b5:97:99:bf:48:22:8e:df:dc:40:
73:cb:a4:eb:ab:7b:98:5d:be:ae:69:98:44:a8:bc:
45:4a:2b:ac:cd:18:d5:23:45:5c:12:5d:0e:53:22:
be:0e:da:61:8b:00:16:53:98:e1:30:a1:82:cd:27:
8a:95:05:25:3a:1c:f5:21:82:22:bb:47:b1:3b:77:
f3:9f:9c:37:2d:a8:b0:67:77:31:87:6b:5c:4a:ec:
33:63:d2:9d:44:77:f9:ee:68:81:00:24:71:45:a1:
cf:84:25:79:d9:e5:28:01:18:cb:b9:04:1f:f7:9c:
0c:b6:53:90:73:e9:39:ef:25:2a:e0:cc:13:bf:13:
b3:47:37:78:de:c0:88:89:3e:8f:c7:f9:25:a5:f6:
5d:5b:ce:56:23:16:52:7a:84:07:95:d3:11:d0:4a:
2a:7b:b2:9e:90:63:2c:92:a1:0c:8f:79:39:cb:16:
6e:39:3d:e5:64:a1:46:79:b0:5e:b3:de:6b:34:0f:
c0:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:99:A8:06:DE:D5:EA:C5:C1:F1:FC:1D:74:FE:CF:FA:0C:0B:C9:11
X509v3 Authority Key Identifier:
keyid:1A:AA:BA:7D:A7:C8:F3:6C:8B:27:5C:A7:38:49:1C:ED:CC:B5:E3:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gqq6fafI82yLJ1ynOEkc7cy14xI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/Gqq6fafI82yLJ1ynOEkc7cy14xI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a73f09-1b9d-4c26-b01d-0e8a9485a9a2/1/Gqq6fafI82yLJ1ynOEkc7cy14xI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:3d:58:d0:74:b0:1d:0a:0a:e3:b4:48:bd:72:be:e8:c0:18:
e2:92:cd:9c:85:55:86:8a:37:08:c5:9f:8f:2f:2d:6e:ef:b3:
4e:5f:86:63:f1:63:6b:16:e7:cb:32:a7:77:1b:00:a9:48:59:
4e:00:4d:93:59:38:4e:fb:7f:97:b8:eb:3a:b0:7a:1e:41:15:
7e:e9:d4:ad:88:d8:90:2d:cb:0c:2f:ca:93:d2:9e:1b:24:ce:
fa:a8:bd:13:34:f0:71:ce:fa:d5:b5:7e:4f:ea:a2:8f:98:4f:
1f:8a:6a:83:84:c2:b2:f9:46:d2:a7:a9:10:5f:11:20:dd:fd:
e8:35:dd:15:fa:22:5e:12:a1:1e:e1:6c:54:87:3c:46:bd:72:
94:95:5f:5d:79:66:e1:b1:50:0d:b1:b2:ae:0b:e7:32:1c:05:
34:ec:5e:94:5c:d0:19:06:e8:d5:3b:58:b8:1d:e3:9a:28:de:
d7:aa:ab:12:f7:17:3d:2e:a0:a4:6c:f0:91:62:65:c5:07:ee:
10:58:a0:da:c4:84:07:7f:df:56:32:47:c3:00:45:63:c5:18:
50:6f:a0:46:d9:51:a9:14:ae:fd:d9:f2:ca:a2:f2:a2:27:f0:
f3:08:9d:c6:c7:2d:b8:01:25:98:63:42:fc:0e:76:46:8a:3b:
16:fe:f9:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 12:28:13 2026 by rpki-client