Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/GqGckulmd_X5b2jxygqtn6MR60U.mft
File: GqGckulmd_X5b2jxygqtn6MR60U.mft (raw, json)
Hash identifier: viIPATaYlgvHrE41JqqUhTn5Muf1Ye9vbhzOuP++LSY=
Subject key identifier: 1D:2D:D4:21:8D:71:EF:78:7F:D6:F8:D8:B2:AD:9D:E2:30:C8:65:46
Authority key identifier: 1A:A1:9C:92:E9:66:77:F5:F9:6F:68:F1:CA:0A:AD:9F:A3:11:EB:45
Certificate issuer: /CN=1aa19c92e96677f5f96f68f1ca0aad9fa311eb45
Certificate serial: 019D37F775F2F3A7C7D0882FBC41BD04EBC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GqGckulmd_X5b2jxygqtn6MR60U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/GqGckulmd_X5b2jxygqtn6MR60U.mft
Manifest number: 164D
Signing time: Sun 29 Mar 2026 05:00:57 +0000
Manifest this update: Sun 29 Mar 2026 05:00:57 +0000
Manifest next update: Mon 30 Mar 2026 05:00:57 +0000
Files and hashes: 1: 1-WPRdVqmtlIyUI0vqU9PWtdt-gM.roa (hash: XWiIX8j8IwmwPP0JVAl2lLSxTvvYR4DX3aF34HbG+KQ=)
2: GqGckulmd_X5b2jxygqtn6MR60U.crl (hash: rgdVB3QWyocIpH5sPsuAiM6ZElHov/UENfHeTJZRC5A=)
3: WpUIGP06eptdw3HvJXEXaq0nbZE.roa (hash: htiyR7KetN+O2yvc71NkM/dclEdrNUy7FljxlennH9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/GqGckulmd_X5b2jxygqtn6MR60U.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/GqGckulmd_X5b2jxygqtn6MR60U.mft
rsync://rpki.ripe.net/repository/DEFAULT/GqGckulmd_X5b2jxygqtn6MR60U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:75:f2:f3:a7:c7:d0:88:2f:bc:41:bd:04:eb:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aa19c92e96677f5f96f68f1ca0aad9fa311eb45
Validity
Not Before: Mar 29 05:00:57 2026 GMT
Not After : Mar 30 05:00:57 2026 GMT
Subject: CN=1d2dd4218d71ef787fd6f8d8b2ad9de230c86546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:0f:f0:f4:88:a4:8c:14:66:48:5f:94:00:a5:
06:b7:c3:56:6e:09:34:f7:5c:bc:04:72:71:09:01:
56:15:b5:c3:51:10:43:6f:42:41:e1:c1:cb:12:94:
b7:eb:46:13:95:4a:cc:00:07:9b:84:07:72:34:d3:
e6:0a:c9:21:7b:8c:eb:e2:f5:7c:3f:8b:03:21:05:
a7:d5:47:09:73:b5:46:3d:4d:bd:e2:79:56:e4:7e:
ca:2a:92:a8:85:38:f0:b4:89:f4:65:cf:8d:cc:21:
8c:9a:79:95:c2:a9:12:73:9f:1f:00:8d:3b:75:42:
ca:b4:90:07:5b:f4:21:5b:5f:87:76:a2:41:a7:81:
a1:41:db:08:5b:80:20:65:99:e7:81:cc:2e:8c:d1:
2f:0d:22:23:81:c0:32:c1:dd:e5:c3:ec:db:4a:4f:
ed:73:fc:d7:80:8c:20:0b:ea:a3:bf:6a:58:6b:f6:
b9:f0:21:3c:5e:c9:93:0d:1f:f2:c4:01:ae:07:39:
af:0d:d4:06:3e:ea:b1:fb:a7:10:ad:cb:9f:e1:ed:
6b:1d:ed:77:ea:b9:0e:2f:1d:21:f3:8c:2e:7a:0a:
18:df:bf:06:8b:b3:e4:8a:7c:9a:5b:84:6b:4a:79:
79:3c:f3:1c:6c:83:bc:b8:4c:24:13:89:91:35:e0:
c9:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:2D:D4:21:8D:71:EF:78:7F:D6:F8:D8:B2:AD:9D:E2:30:C8:65:46
X509v3 Authority Key Identifier:
keyid:1A:A1:9C:92:E9:66:77:F5:F9:6F:68:F1:CA:0A:AD:9F:A3:11:EB:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GqGckulmd_X5b2jxygqtn6MR60U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/GqGckulmd_X5b2jxygqtn6MR60U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/GqGckulmd_X5b2jxygqtn6MR60U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:cc:f2:b3:fc:a6:6a:1a:83:92:46:e8:a3:e0:38:11:6d:f1:
86:46:c2:e7:56:f7:5a:68:98:a9:e0:42:60:0a:7c:d1:e4:48:
5e:d0:d6:15:ad:02:87:db:07:53:21:d3:be:c3:05:bf:53:1d:
0b:7d:aa:05:f5:85:5d:89:fc:4c:9d:8b:d1:a7:8a:4c:e1:ab:
fb:78:43:c0:c6:75:e9:ce:b6:2a:d2:c4:9f:ff:49:3a:f3:96:
54:3d:cb:96:32:cc:9e:e1:aa:d7:4e:84:d4:95:68:e9:c5:61:
4e:fd:06:a7:6c:69:12:11:90:39:ba:d8:cc:ba:1b:4c:f7:c9:
1e:d8:a0:34:fb:d3:cd:c2:0c:94:2a:18:ef:cb:a5:ea:6c:c8:
ba:e5:52:4c:e3:6f:95:c4:b6:78:86:86:f3:6b:62:ef:2f:65:
18:d0:e5:1c:5f:af:e9:18:45:fd:f4:0f:82:d5:2f:9f:9b:14:
ba:a6:bc:3b:0e:28:6d:09:d9:5e:f9:c2:d0:18:c2:71:32:b9:
57:7e:00:32:0a:d8:3e:48:b2:45:02:8e:bc:cc:94:db:96:7c:
eb:7b:2f:8d:41:89:57:cf:f7:6e:2c:42:ca:2a:9f:27:f3:88:
13:3c:74:93:75:6a:f8:87:f9:99:3c:4a:3c:9a:f4:a8:05:c4:
5f:c8:ad:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:12:29 2026 by rpki-client