Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/0f3c61-02df-4af7-b93f-07f74c019732/1/GaQ9gWV6PDjBUN5VeX8ce18MLrs.mft
File: GaQ9gWV6PDjBUN5VeX8ce18MLrs.mft (raw, json)
Hash identifier: 355IJlg1MkdNsjKQs/Us4qPZVsQcR5J98bbbtYQkczw=
Subject key identifier: 31:A1:F1:E7:7D:53:16:61:E8:9D:AA:CB:CC:C7:CE:35:C4:9C:D9:72
Authority key identifier: 19:A4:3D:81:65:7A:3C:38:C1:50:DE:55:79:7F:1C:7B:5F:0C:2E:BB
Certificate issuer: /CN=19a43d81657a3c38c150de55797f1c7b5f0c2ebb
Certificate serial: 019D38D38895C8A73C308193AF141C22BA98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GaQ9gWV6PDjBUN5VeX8ce18MLrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/0f3c61-02df-4af7-b93f-07f74c019732/1/GaQ9gWV6PDjBUN5VeX8ce18MLrs.mft
Manifest number: 178D
Signing time: Sun 29 Mar 2026 09:01:19 +0000
Manifest this update: Sun 29 Mar 2026 09:01:19 +0000
Manifest next update: Mon 30 Mar 2026 09:01:19 +0000
Files and hashes: 1: GaQ9gWV6PDjBUN5VeX8ce18MLrs.crl (hash: rOaklIiS7Pq1v1rUdxBY/19y7r6HOoxhNFIF/B+aS7I=)
2: K0GZfO50qL-CkzTgvj6rdikY-es.roa (hash: 4i1E6RRA2bP05oORMGF0rgiNltnM9ErpRc53Lr5MThI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/0f3c61-02df-4af7-b93f-07f74c019732/1/GaQ9gWV6PDjBUN5VeX8ce18MLrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/0f3c61-02df-4af7-b93f-07f74c019732/1/GaQ9gWV6PDjBUN5VeX8ce18MLrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/GaQ9gWV6PDjBUN5VeX8ce18MLrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:88:95:c8:a7:3c:30:81:93:af:14:1c:22:ba:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19a43d81657a3c38c150de55797f1c7b5f0c2ebb
Validity
Not Before: Mar 29 09:01:19 2026 GMT
Not After : Mar 30 09:01:19 2026 GMT
Subject: CN=31a1f1e77d531661e89daacbccc7ce35c49cd972
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ea:21:52:cf:d4:3e:41:62:38:73:3d:0d:dc:
2d:e3:12:e0:a2:7b:18:80:b0:81:91:0a:2e:07:dd:
35:5d:07:b4:0e:d0:4a:2c:7b:df:7e:11:6b:ad:6e:
64:0a:f8:a8:89:77:b0:6e:97:b1:ed:ff:2f:6a:73:
59:9d:e0:22:a7:e9:14:39:1f:d2:b1:23:dc:13:b2:
4a:3a:24:8a:63:80:69:f8:a6:bc:69:c7:d3:61:d4:
bf:72:40:42:c2:41:b4:c9:77:1e:26:7a:83:87:86:
99:dd:f6:94:ee:d3:dd:f7:db:28:51:f4:0c:c7:f5:
70:f1:2b:ac:42:0c:22:c1:aa:c0:31:95:8a:e6:24:
30:93:3b:59:6b:f4:18:92:ce:0c:6d:6d:01:67:cf:
02:c6:17:fc:18:f6:0a:03:76:37:20:2a:8e:c0:4b:
77:a9:fd:c8:74:a6:50:23:1a:36:c4:5a:3c:61:f6:
fb:96:6e:31:13:28:10:82:81:19:e1:ff:7d:19:b4:
8b:cb:21:6a:a4:e0:37:01:1f:1a:11:b6:fb:c6:d6:
17:db:83:35:76:e8:d1:a0:ad:f3:f7:a6:da:e4:97:
b5:4e:d8:12:5f:2d:88:2f:10:72:75:df:14:3d:30:
16:f6:c5:b2:7f:f4:5f:aa:46:56:77:6e:79:4e:90:
9b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:A1:F1:E7:7D:53:16:61:E8:9D:AA:CB:CC:C7:CE:35:C4:9C:D9:72
X509v3 Authority Key Identifier:
keyid:19:A4:3D:81:65:7A:3C:38:C1:50:DE:55:79:7F:1C:7B:5F:0C:2E:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GaQ9gWV6PDjBUN5VeX8ce18MLrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/0f3c61-02df-4af7-b93f-07f74c019732/1/GaQ9gWV6PDjBUN5VeX8ce18MLrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/0f3c61-02df-4af7-b93f-07f74c019732/1/GaQ9gWV6PDjBUN5VeX8ce18MLrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:fa:e0:e6:09:a6:21:a3:23:b2:b7:45:87:be:44:4a:b6:99:
f7:bc:bd:5f:db:4c:ee:2e:4f:1f:f5:70:85:ee:cc:66:17:16:
5a:47:3d:d5:4d:33:b1:c0:27:15:25:07:07:4e:34:78:37:31:
b9:04:af:3a:f0:ec:98:31:bc:1d:9c:99:70:ed:b7:64:3d:9c:
72:79:ef:44:ec:f0:36:6c:bf:a5:76:4a:2c:64:32:68:07:9f:
9b:95:57:00:3c:a5:3e:17:51:69:d7:9f:91:d0:b9:e3:1d:18:
c9:05:6b:e1:ae:83:4a:75:d8:60:a0:6d:e1:6d:1a:0c:93:cf:
ba:dd:6c:55:5b:8b:16:c8:b8:73:e0:2e:bb:ad:51:b8:9c:18:
cd:6c:4a:96:aa:25:f1:ee:31:36:3c:e2:46:01:df:1d:a1:18:
62:44:7f:a4:b5:09:78:37:ff:2e:b2:be:fa:dd:81:12:dd:3a:
e3:2c:5d:32:da:a1:7e:87:37:61:65:58:e8:91:ae:20:50:b4:
1b:f4:46:34:7b:21:ff:bf:1e:d3:0a:e0:8d:21:e0:d9:ec:15:
33:8a:1b:0d:5c:04:4c:c7:5a:19:37:85:7f:a1:91:a1:83:f2:
46:2c:0e:80:8f:76:4b:f2:67:54:b1:97:f5:39:48:27:d1:51:
cc:55:e1:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:27 2026 by rpki-client