Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.mft
File: GQNkfvskNmLlfmHU7EW0olo36sg.mft (raw, json)
Hash identifier: A5CI91KxJj+5AaD4PBTgcFnd3SpTY+NeKthNO+q6IbI=
Subject key identifier: AC:73:77:72:43:7D:86:16:CF:B5:83:E8:5E:9D:9C:D5:6C:63:9C:0E
Authority key identifier: 19:03:64:7E:FB:24:36:62:E5:7E:61:D4:EC:45:B4:A2:5A:37:EA:C8
Certificate issuer: /CN=1903647efb243662e57e61d4ec45b4a25a37eac8
Certificate serial: 019D382E14759541C2080293AEAF7DA39070
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQNkfvskNmLlfmHU7EW0olo36sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 06:00:37 +0000
Manifest this update: Sun 29 Mar 2026 06:00:37 +0000
Manifest next update: Mon 30 Mar 2026 06:00:37 +0000
Files and hashes: 1: GQNkfvskNmLlfmHU7EW0olo36sg.crl (hash: bqaMs3TswoNAScOu6w+aKFO5baAsVIC0u9JAzFo/d44=)
2: J0rH9JX0KbdTKOcoRoiVFom0Vhs.roa (hash: A8dP+OxNgGQqU96bazfRlPshwZe7IJ50JSO2KL6IocU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GQNkfvskNmLlfmHU7EW0olo36sg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:14:75:95:41:c2:08:02:93:ae:af:7d:a3:90:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1903647efb243662e57e61d4ec45b4a25a37eac8
Validity
Not Before: Mar 29 06:00:37 2026 GMT
Not After : Mar 30 06:00:37 2026 GMT
Subject: CN=ac737772437d8616cfb583e85e9d9cd56c639c0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:aa:52:38:4d:f6:76:b2:6e:3c:08:7b:4f:06:
20:1d:51:5c:3a:c2:fa:44:3e:f9:b9:ea:3e:c2:00:
ef:9a:6c:51:af:d3:a9:c0:ee:49:ee:d5:9d:5b:47:
eb:99:56:b3:df:18:c8:4f:b0:3b:33:55:ac:b9:45:
ee:6b:a6:35:cf:ae:f0:bf:1e:54:3e:a2:91:02:ff:
19:73:5e:13:1a:80:db:ae:da:00:c7:c3:38:4e:37:
78:9f:0f:6c:fb:0a:88:5b:b2:a0:3d:13:e9:32:8f:
86:c8:83:81:fc:7b:9c:54:5f:75:70:16:3d:cf:6b:
07:d8:20:2e:eb:2a:81:43:7b:cd:a3:e6:64:27:26:
dc:34:84:a3:84:f1:87:9c:85:e2:58:5b:7f:27:24:
2a:f4:ff:77:16:2b:7c:6f:27:a3:6c:c1:8e:59:d7:
80:c8:b3:1b:23:55:3b:4e:88:d2:52:b5:70:b6:c6:
6d:a8:5c:6e:73:2c:e5:3c:c3:5b:1b:aa:99:82:7f:
0f:b7:4a:7a:6c:c9:83:48:f1:da:d2:6f:3d:66:f0:
6b:1c:a2:cb:1d:59:eb:11:58:6d:dc:65:fd:c4:50:
9f:eb:02:6c:88:74:46:df:0e:ce:9c:cd:7f:a9:12:
e5:fc:b7:a4:fa:47:f2:34:45:af:e9:85:d7:2e:5d:
b1:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:73:77:72:43:7D:86:16:CF:B5:83:E8:5E:9D:9C:D5:6C:63:9C:0E
X509v3 Authority Key Identifier:
keyid:19:03:64:7E:FB:24:36:62:E5:7E:61:D4:EC:45:B4:A2:5A:37:EA:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQNkfvskNmLlfmHU7EW0olo36sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/6eefee-c9de-4728-aca8-a4c3432fb00f/1/GQNkfvskNmLlfmHU7EW0olo36sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:1c:c0:85:24:3f:aa:bd:96:99:4d:10:29:b6:18:94:99:08:
87:7f:dc:83:91:4f:c4:a7:61:ac:d1:c3:c0:3b:30:11:f0:00:
35:ff:7f:ca:ac:30:2c:14:dc:24:da:a1:3f:25:04:54:8f:72:
43:20:a1:f3:43:dc:8b:9e:d4:26:6e:82:70:e6:75:e5:14:87:
e6:f1:31:f9:59:e7:7d:2c:61:b9:07:20:3d:ad:7b:b0:0b:d5:
a8:9e:6f:6b:08:11:a9:c9:11:fd:76:21:a5:aa:c3:94:90:23:
be:e0:81:89:d0:87:2b:71:bb:a8:a9:34:1f:43:ce:7e:b3:b0:
5e:4a:08:f8:2e:28:d2:20:46:f9:f7:b4:55:3a:36:91:d6:22:
f7:fc:48:d4:d3:f7:dc:90:19:f2:81:c2:23:46:c4:cc:39:f2:
8f:41:a7:83:1e:56:88:ae:65:08:26:f5:15:6a:e8:76:17:d8:
69:bd:64:34:b0:d7:06:9f:64:a3:98:12:fa:da:87:d4:d4:2a:
50:85:9d:4a:27:5d:c5:de:d3:10:fa:43:83:12:fa:18:cb:f2:
55:27:43:db:0d:70:15:c0:8c:71:a9:7c:19:89:f5:25:08:61:
7e:b5:44:8c:84:60:9c:c3:c5:35:ac:d3:c4:bd:57:fe:77:a5:
7f:21:81:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:45:43 2026 by rpki-client