Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/974ea2-40af-4ef6-b6c7-fdcd9fd9bb03/1/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.mft
File: GQ0wDmrNH5iV_OO1q-OKXwBYTVU.mft (raw, json)
Hash identifier: YT6txEYL0OpLK4DxmiqAHwxQBFk3IrVriqMVAyACMiA=
Subject key identifier: D0:6E:1D:27:8A:DA:59:B1:EA:17:2B:35:63:4A:E3:B9:36:27:A0:A0
Authority key identifier: 19:0D:30:0E:6A:CD:1F:98:95:FC:E3:B5:AB:E3:8A:5F:00:58:4D:55
Certificate issuer: /CN=190d300e6acd1f9895fce3b5abe38a5f00584d55
Certificate serial: 019D3A54921B0F60C06735B1DF27EE3D2C75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/974ea2-40af-4ef6-b6c7-fdcd9fd9bb03/1/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 16:01:54 +0000
Manifest this update: Sun 29 Mar 2026 16:01:54 +0000
Manifest next update: Mon 30 Mar 2026 16:01:54 +0000
Files and hashes: 1: GQ0wDmrNH5iV_OO1q-OKXwBYTVU.crl (hash: vjxL4wRzjFYo5ovteJrD4fK2ZNhel8z8vhlW6e96yl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/974ea2-40af-4ef6-b6c7-fdcd9fd9bb03/1/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/974ea2-40af-4ef6-b6c7-fdcd9fd9bb03/1/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:54:92:1b:0f:60:c0:67:35:b1:df:27:ee:3d:2c:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=190d300e6acd1f9895fce3b5abe38a5f00584d55
Validity
Not Before: Mar 29 16:01:54 2026 GMT
Not After : Mar 30 16:01:54 2026 GMT
Subject: CN=d06e1d278ada59b1ea172b35634ae3b93627a0a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a3:e6:92:3d:98:95:80:3d:c2:b9:a8:6e:b2:
13:58:b1:cb:de:43:a1:b8:49:a7:90:82:8b:76:18:
6a:4d:59:a2:ad:04:76:2b:5c:a6:64:60:c5:60:12:
4f:9b:ce:f7:30:17:90:e8:e0:c1:72:05:70:8c:34:
40:a2:72:54:83:19:77:9a:92:dd:f5:00:8f:26:6c:
18:c8:77:25:d5:14:fb:da:26:4f:2e:8e:99:44:bd:
64:6c:77:03:da:b8:17:e0:26:dc:f1:c0:52:a4:d4:
13:6e:df:ee:04:44:e1:bd:a9:c3:fe:00:e4:df:6b:
47:5d:2f:32:47:0c:d7:21:60:5b:1c:39:ef:15:33:
fe:32:ca:14:8c:1b:85:31:fc:02:06:35:12:e6:1f:
2d:0c:87:25:34:1f:02:c7:34:9b:a8:37:90:f4:c9:
da:5e:08:be:09:a3:81:bf:7d:95:e0:43:37:06:f2:
08:61:e9:81:4b:3b:79:49:82:ec:31:02:b8:53:9b:
e4:74:a1:3d:3b:3d:88:f8:46:10:c0:3c:21:96:ee:
65:c3:29:4a:8e:0f:32:51:a6:2c:cc:91:64:5b:f7:
55:61:b2:4d:5d:5e:30:9a:95:f1:35:c6:f2:03:ee:
70:5a:1e:11:2e:0a:a8:17:32:81:b1:48:a8:ac:7d:
33:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:6E:1D:27:8A:DA:59:B1:EA:17:2B:35:63:4A:E3:B9:36:27:A0:A0
X509v3 Authority Key Identifier:
keyid:19:0D:30:0E:6A:CD:1F:98:95:FC:E3:B5:AB:E3:8A:5F:00:58:4D:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/974ea2-40af-4ef6-b6c7-fdcd9fd9bb03/1/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/974ea2-40af-4ef6-b6c7-fdcd9fd9bb03/1/GQ0wDmrNH5iV_OO1q-OKXwBYTVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:41:16:04:0a:a2:21:55:a5:92:71:19:c1:dc:f9:15:8c:1e:
f8:19:59:e4:02:a1:08:77:61:ef:ba:5d:4f:9b:c0:c6:b1:88:
97:bc:3f:bb:3d:78:b7:8c:ab:2f:8c:66:ec:cb:61:d5:2c:f5:
b6:45:e1:d9:93:a3:bb:63:19:27:55:a3:6d:a8:6e:59:84:c7:
ed:48:b2:53:0c:d3:aa:5f:7f:4f:71:23:0a:5a:13:56:33:fa:
c4:06:42:91:0e:4f:cc:09:e0:00:d2:31:11:1b:4e:e1:b8:b4:
73:73:50:58:33:6b:33:1d:ec:25:87:52:6e:ae:bb:50:4e:c7:
a4:d4:8b:0f:35:56:65:d9:f9:34:6f:39:30:f1:37:41:24:0e:
88:82:a6:26:c6:4a:ac:b5:07:d1:5a:ab:43:dc:8a:05:e2:0f:
d1:0d:75:5d:db:bd:4b:fd:02:01:bc:a1:4a:04:a3:5f:46:b0:
f6:9d:a0:15:e7:51:f5:f4:15:da:ef:72:b0:54:30:e0:57:8a:
a6:4f:14:c4:6c:06:a4:2c:c7:e5:16:9c:f2:4e:06:e6:db:b6:
bf:b1:93:e9:c4:74:c4:5b:b6:50:77:62:68:4c:e6:4d:33:71:
5e:27:c4:29:34:c1:3b:2f:42:e0:4c:f5:2a:e9:30:1e:0f:b2:
70:0c:2b:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:38:50 2026 by rpki-client