Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.mft
File: GqCjKMb-DxvKXmWZBC3_WeUTsl0.mft (raw, json)
Hash identifier: iqVqIxaQbcEzc6QKvrueS9OFQA2PU8hc5VrxI5nhHZk=
Subject key identifier: A1:59:E2:85:99:3F:92:6E:FB:59:6C:B2:67:24:0E:BB:FA:BB:B3:B3
Authority key identifier: 1A:A0:A3:28:C6:FE:0F:1B:CA:5E:65:99:04:2D:FF:59:E5:13:B2:5D
Certificate issuer: /CN=1aa0a328c6fe0f1bca5e6599042dff59e513b25d
Certificate serial: 019CE47F5208F48B743B8AB3CF262829E4F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GqCjKMb-DxvKXmWZBC3_WeUTsl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.mft
Manifest number: 101B
Signing time: Fri 13 Mar 2026 00:01:15 +0000
Manifest this update: Fri 13 Mar 2026 00:01:15 +0000
Manifest next update: Sat 14 Mar 2026 00:01:15 +0000
Files and hashes: 1: 1-w__FgVbYGEvZzX5G7Wv6WpQMFc.roa (hash: YyyT93IM4vslKyEiZRnugviu0gDWs5kVRFPzXEYy/e4=)
2: GqCjKMb-DxvKXmWZBC3_WeUTsl0.crl (hash: hsx4l2uM7b6ftXH1/HQ3IALo33GzfHAj54sCuaHkLeM=)
3: Sy_QSnV4oKxcnxQ4UaY7HAFaAQY.roa (hash: mPfUVg1yW0xKUezEUlUR8Yt63tdbh4K/MBcEri0pjgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GqCjKMb-DxvKXmWZBC3_WeUTsl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:7f:52:08:f4:8b:74:3b:8a:b3:cf:26:28:29:e4:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aa0a328c6fe0f1bca5e6599042dff59e513b25d
Validity
Not Before: Mar 13 00:01:15 2026 GMT
Not After : Mar 14 00:01:15 2026 GMT
Subject: CN=a159e285993f926efb596cb267240ebbfabbb3b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c3:db:e0:48:c7:5c:53:91:e5:21:71:de:7d:
8a:37:73:0b:77:37:6d:25:b6:46:83:17:4c:15:13:
04:88:34:ab:90:7a:5f:d2:f4:d2:8f:5a:8f:ee:61:
79:79:99:62:7c:5c:ec:7a:a8:5f:48:20:b7:08:f4:
26:ed:dc:a1:32:5e:37:02:c5:72:ec:38:d3:e4:40:
ef:34:4c:df:35:5e:48:31:d8:6a:bf:2e:6a:e7:69:
a1:d4:0b:fa:d3:a6:6c:d3:b4:e5:f0:94:07:bd:de:
66:8a:89:56:d4:25:8c:82:74:67:31:2d:e6:6d:ca:
0e:23:78:05:a4:67:56:d8:58:76:5f:0d:6e:bb:91:
4c:f7:4b:97:3f:ba:cf:48:28:cf:64:95:76:ad:57:
55:c0:93:c1:5c:43:2a:4e:31:6d:fb:e3:da:65:91:
6e:70:f2:60:27:c5:b2:93:4a:8f:5c:46:60:73:7b:
d3:23:d5:62:98:b5:96:63:24:2f:f0:7d:11:6d:29:
a4:b0:15:2d:1e:61:c7:f2:cc:56:6a:09:9c:71:c2:
3a:f3:11:56:55:e8:57:bc:3b:f1:be:50:4f:f6:55:
a5:a1:a0:2b:c2:35:84:56:f6:f3:7a:95:de:77:e1:
e3:1a:ac:8c:98:bb:40:f6:3b:be:51:5f:42:e7:98:
00:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:59:E2:85:99:3F:92:6E:FB:59:6C:B2:67:24:0E:BB:FA:BB:B3:B3
X509v3 Authority Key Identifier:
keyid:1A:A0:A3:28:C6:FE:0F:1B:CA:5E:65:99:04:2D:FF:59:E5:13:B2:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GqCjKMb-DxvKXmWZBC3_WeUTsl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:6e:75:4b:66:16:8f:06:0b:2b:3a:26:7c:9d:5e:62:5d:37:
e6:1b:c1:9c:dc:24:5b:b2:d8:44:0c:c9:4b:65:4f:bc:46:68:
0d:c7:bf:dd:72:23:88:ec:f7:a4:ef:b4:93:d5:0b:7c:2b:ab:
b7:d5:d2:96:6d:bd:db:31:bb:e4:3a:3f:fd:c2:ea:40:f3:11:
b1:35:7c:52:5e:d5:47:82:4b:b3:6a:bb:00:04:33:fe:e6:db:
de:da:c5:c9:8c:4a:54:07:df:a6:ce:7b:2d:0d:13:da:b8:9d:
b4:e7:6d:75:d0:f0:e2:21:71:05:0e:8f:b3:13:ea:e0:3b:fc:
96:bb:1b:2d:7a:a6:ab:e6:c2:c3:12:ff:73:18:f7:67:ed:df:
d1:28:ab:7e:26:e2:e3:9b:9c:b3:34:41:3a:f8:2c:06:39:81:
0d:18:18:75:70:b1:db:20:48:a2:82:40:a4:0a:60:14:93:ee:
c7:ed:49:26:80:50:5d:3c:8d:14:2e:68:b5:94:91:ce:af:5a:
08:ff:5f:8e:37:f6:6f:66:e4:0d:b3:0f:f7:b2:91:ac:b6:66:
b1:39:0d:9d:51:13:87:5e:34:c4:aa:4e:0c:b7:a9:f2:f5:f1:
91:e5:de:c5:80:24:d9:f0:f5:44:3f:ba:4a:99:30:73:3f:51:
c1:3d:a9:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 09:26:49 2026 by rpki-client