Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/04b23b-9c13-4dd2-bda8-2f22a76996d9/1/GgQ5RItijNC6QjLqXcOalo2paW4.mft
File: GgQ5RItijNC6QjLqXcOalo2paW4.mft (raw, json)
Hash identifier: sjnRMyWZTKhffyn10H1f43d37xYDM6F9Sf+gJ1NbIBU=
Subject key identifier: 8C:0A:23:B6:AE:FA:B4:24:85:B0:95:C5:08:9E:18:4D:0E:00:3A:3E
Authority key identifier: 1A:04:39:44:8B:62:8C:D0:BA:42:32:EA:5D:C3:9A:96:8D:A9:69:6E
Certificate issuer: /CN=1a0439448b628cd0ba4232ea5dc39a968da9696e
Certificate serial: 019CE523CEA13EAD0BDEABBDE01CBE9648C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GgQ5RItijNC6QjLqXcOalo2paW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/04b23b-9c13-4dd2-bda8-2f22a76996d9/1/GgQ5RItijNC6QjLqXcOalo2paW4.mft
Manifest number: 1862
Signing time: Fri 13 Mar 2026 03:00:55 +0000
Manifest this update: Fri 13 Mar 2026 03:00:55 +0000
Manifest next update: Sat 14 Mar 2026 03:00:55 +0000
Files and hashes: 1: GgQ5RItijNC6QjLqXcOalo2paW4.crl (hash: Kes8sWo1GcF4EYUERwBjVOs4ie7DkHvXxOgoX2MgMm4=)
2: TF0dSC0QLLTkTEwt9luFemTVApI.roa (hash: diyfKwUJkYthuVIKND7w8w0AKfmlP8CVwmqLuMhQpO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/04b23b-9c13-4dd2-bda8-2f22a76996d9/1/GgQ5RItijNC6QjLqXcOalo2paW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/04b23b-9c13-4dd2-bda8-2f22a76996d9/1/GgQ5RItijNC6QjLqXcOalo2paW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/GgQ5RItijNC6QjLqXcOalo2paW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 03:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:23:ce:a1:3e:ad:0b:de:ab:bd:e0:1c:be:96:48:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a0439448b628cd0ba4232ea5dc39a968da9696e
Validity
Not Before: Mar 13 03:00:55 2026 GMT
Not After : Mar 14 03:00:55 2026 GMT
Subject: CN=8c0a23b6aefab42485b095c5089e184d0e003a3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9b:eb:0a:e5:f1:da:b2:62:c6:d4:0e:23:ba:
75:78:a2:27:d4:f6:31:fe:90:63:7e:68:27:42:57:
9f:b0:00:f1:9d:a6:8c:e4:a1:6f:41:19:17:9a:1f:
e1:a6:07:5d:93:69:60:67:16:cf:a4:68:eb:4b:6f:
20:98:bf:9b:b9:be:e3:d6:45:06:c9:6f:20:e1:3f:
57:9a:ce:4b:e8:af:b5:90:bb:65:da:2b:c7:9e:68:
ad:f1:c4:6e:c6:93:99:a6:ce:db:4c:6e:fb:f0:43:
c2:c1:95:ae:f1:82:c0:0d:f0:56:c4:7b:b1:85:2d:
ad:6c:11:f6:3f:77:56:da:ce:e6:fd:29:1c:49:7c:
0f:3a:d7:86:f6:5d:3a:7d:bc:50:b8:00:fe:14:9c:
52:05:d5:fa:a9:38:c9:f3:56:ab:83:e2:72:81:a4:
94:56:ac:cc:2f:66:ab:62:28:27:da:66:a7:b8:e9:
6c:61:e6:9f:54:5b:b7:ff:6d:22:af:71:97:82:1a:
0e:8f:86:47:7d:20:ac:a4:b2:08:54:57:fe:e6:cf:
86:a2:03:32:e0:3f:78:c0:a4:71:0f:2d:b5:b6:8d:
80:2e:f0:69:6b:20:9d:68:5e:ba:2b:82:9f:b2:0b:
3f:9c:84:6a:41:b0:83:fa:36:9d:f6:92:10:07:71:
d9:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:0A:23:B6:AE:FA:B4:24:85:B0:95:C5:08:9E:18:4D:0E:00:3A:3E
X509v3 Authority Key Identifier:
keyid:1A:04:39:44:8B:62:8C:D0:BA:42:32:EA:5D:C3:9A:96:8D:A9:69:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GgQ5RItijNC6QjLqXcOalo2paW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/04b23b-9c13-4dd2-bda8-2f22a76996d9/1/GgQ5RItijNC6QjLqXcOalo2paW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/04b23b-9c13-4dd2-bda8-2f22a76996d9/1/GgQ5RItijNC6QjLqXcOalo2paW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:c6:e1:6f:5d:bd:8e:ac:25:06:c4:41:12:16:c1:46:d4:cd:
8e:2b:2b:77:fb:90:79:37:ea:5c:4b:eb:42:bd:5e:03:ee:ac:
b9:81:eb:df:20:e8:af:3b:1e:b2:50:77:eb:b8:de:b3:78:90:
74:5b:79:1f:e1:f7:bd:69:6b:4f:9f:e6:60:69:4e:79:ff:6b:
72:00:37:05:f2:51:95:74:fc:af:35:98:19:e0:3c:33:e9:49:
49:3d:9b:ed:b1:d2:e4:58:bd:eb:aa:28:c2:80:69:51:18:e4:
4f:f0:7d:34:c8:39:96:c2:2d:d2:df:0c:ad:97:93:68:d8:49:
4c:8f:a0:4b:26:4e:b4:15:e5:eb:45:8a:76:fe:e3:95:d9:ce:
fc:22:8b:6e:59:fc:20:5b:b2:61:46:14:15:b2:b0:1c:f9:b4:
b4:da:9d:08:ba:60:ee:55:6d:71:63:3a:3f:f2:8f:35:9b:af:
9f:12:ed:08:1c:e1:5c:fe:81:d4:f0:95:31:2b:85:6e:05:1f:
af:41:62:9d:ed:d0:8b:f2:7e:f5:52:97:2c:43:c0:58:75:ef:
c6:c4:85:bb:c4:bd:c8:52:4b:86:08:e7:7f:5e:77:08:29:c6:
3a:7e:1d:ac:6a:4c:db:2c:ce:20:b0:f8:f3:64:e3:d3:2c:b9:
ad:ff:24:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 13:15:40 2026 by rpki-client