Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/b1c7f9-ad9c-4bb7-ac47-927dd459ac5c/1/gqo-xYuoRtJ6eXERxVhRUwANug4.mft
File: gqo-xYuoRtJ6eXERxVhRUwANug4.mft (raw, json)
Hash identifier: 4lAaou5uCGu/k8gPRD5vJzx43QR7L93TdOs2aI/ji+A=
Subject key identifier: 60:8E:75:F0:ED:53:85:C1:E6:67:B7:23:48:65:CA:5E:EB:85:FC:06
Authority key identifier: 82:AA:3E:C5:8B:A8:46:D2:7A:79:71:11:C5:58:51:53:00:0D:BA:0E
Certificate issuer: /CN=82aa3ec58ba846d27a797111c5585153000dba0e
Certificate serial: 019D390A3A3F8EF45EF8C61160F9304B30A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gqo-xYuoRtJ6eXERxVhRUwANug4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/b1c7f9-ad9c-4bb7-ac47-927dd459ac5c/1/gqo-xYuoRtJ6eXERxVhRUwANug4.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 10:01:04 +0000
Manifest this update: Sun 29 Mar 2026 10:01:04 +0000
Manifest next update: Mon 30 Mar 2026 10:01:04 +0000
Files and hashes: 1: Ue5qGAdMUuZjIAkWiew3rNK7iec.roa (hash: 0R2GCImaNBlpU0Y1AJHIDWb7A+a1HMHsb4hUInCPqe8=)
2: gqo-xYuoRtJ6eXERxVhRUwANug4.crl (hash: PJSgLWAI7CMYBPqm0I6YXHC95+/4YrMuqvn1E+ZhOKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/b1c7f9-ad9c-4bb7-ac47-927dd459ac5c/1/gqo-xYuoRtJ6eXERxVhRUwANug4.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/b1c7f9-ad9c-4bb7-ac47-927dd459ac5c/1/gqo-xYuoRtJ6eXERxVhRUwANug4.mft
rsync://rpki.ripe.net/repository/DEFAULT/gqo-xYuoRtJ6eXERxVhRUwANug4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:3a:3f:8e:f4:5e:f8:c6:11:60:f9:30:4b:30:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82aa3ec58ba846d27a797111c5585153000dba0e
Validity
Not Before: Mar 29 10:01:04 2026 GMT
Not After : Mar 30 10:01:04 2026 GMT
Subject: CN=608e75f0ed5385c1e667b7234865ca5eeb85fc06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a3:5c:38:2a:1a:46:37:69:2e:86:62:9a:9d:
0a:55:cb:f2:96:c1:bd:b9:8d:35:9d:6e:b5:31:ad:
e3:db:a6:a8:d4:64:92:ab:55:eb:d2:2c:f8:db:ea:
61:b6:df:61:62:30:da:6e:ad:78:f1:69:64:af:1b:
2c:83:3a:46:45:62:90:fb:3a:9e:ff:f8:e8:ca:e8:
9b:07:70:96:72:6a:3a:78:0e:32:3e:1f:99:54:5e:
cf:d2:fd:23:c6:21:75:7d:1b:6b:56:d9:33:d4:a0:
dd:d3:d3:68:ba:d5:95:82:90:7d:07:18:ff:f4:f4:
4f:44:b8:4a:60:59:22:79:6b:42:6e:43:ce:65:ce:
cf:c9:60:d0:ed:c9:12:42:a2:f2:ae:b2:8e:53:42:
37:82:ec:65:8e:3e:09:09:3b:d5:da:75:43:f0:a2:
39:c4:2b:01:72:e2:3b:25:81:f8:5c:48:f5:28:a0:
d9:72:93:8b:cf:eb:c1:60:97:fd:48:d7:8e:d4:3a:
f7:06:40:ed:43:e4:82:d7:9d:f5:49:85:4f:a6:66:
b0:22:5e:00:b8:c4:bf:57:a2:37:51:92:9e:10:33:
37:50:0f:ca:2e:9e:90:8c:2c:a9:35:69:ca:3a:4a:
21:d5:0c:ae:f6:88:6d:1d:3a:d7:35:a4:15:42:74:
4f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:8E:75:F0:ED:53:85:C1:E6:67:B7:23:48:65:CA:5E:EB:85:FC:06
X509v3 Authority Key Identifier:
keyid:82:AA:3E:C5:8B:A8:46:D2:7A:79:71:11:C5:58:51:53:00:0D:BA:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gqo-xYuoRtJ6eXERxVhRUwANug4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b1c7f9-ad9c-4bb7-ac47-927dd459ac5c/1/gqo-xYuoRtJ6eXERxVhRUwANug4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b1c7f9-ad9c-4bb7-ac47-927dd459ac5c/1/gqo-xYuoRtJ6eXERxVhRUwANug4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:53:e7:01:4c:e7:8f:a5:32:3d:bc:e1:a4:37:7c:1e:aa:fc:
50:6a:4c:3b:b6:41:e7:78:f2:d4:62:1e:69:f6:7a:32:79:73:
7d:c6:ef:00:d3:3d:f5:f3:b5:74:ce:6c:e9:c6:c5:55:18:bc:
de:00:ab:98:58:8d:f6:5b:bb:91:62:8c:7a:85:84:0f:5c:f7:
59:d4:97:04:3b:ea:f8:3a:16:e6:dd:5f:31:0d:56:92:e5:02:
69:6a:bf:97:4c:74:40:89:86:af:af:81:52:fd:fb:a5:b5:32:
4d:eb:db:69:0b:93:49:97:67:ba:2f:a7:9d:68:48:a4:11:f0:
c8:5e:6b:27:04:0e:02:7c:7d:3e:63:b1:02:7c:03:e0:e6:7d:
52:a2:5d:85:21:66:1f:c2:77:09:cf:7c:c3:31:5c:ce:f5:52:
c8:c1:6a:45:e0:38:96:31:b2:58:a5:dd:b2:e4:32:c8:ca:07:
03:d4:d2:50:30:d9:8a:f9:bb:21:8a:ea:6e:4d:00:98:95:66:
2c:67:f2:bf:95:8a:e5:37:77:89:56:c5:5f:bd:3d:fb:0e:7b:
17:32:64:18:b3:a0:7a:ea:d6:d0:4d:6d:e1:77:f5:b7:e2:e1:
53:5b:5a:e6:4d:96:38:a3:23:21:1c:58:10:a6:36:25:76:5f:
04:bc:41:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:55:26 2026 by rpki-client