Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/GSQAhBXKGFuO3e3C3N2NCUQad5Q.mft
File: GSQAhBXKGFuO3e3C3N2NCUQad5Q.mft (raw, json)
Hash identifier: a00bgCKPTNTdNUY/T1NnEAsYOzt7V5W/nxM/3f6zfsg=
Subject key identifier: 85:EA:48:43:CA:E9:71:65:3D:57:97:C6:C4:D3:4D:CC:B1:54:79:38
Authority key identifier: 19:24:00:84:15:CA:18:5B:8E:DD:ED:C2:DC:DD:8D:09:44:1A:77:94
Certificate issuer: /CN=1924008415ca185b8eddedc2dcdd8d09441a7794
Certificate serial: 019FA2293A11EAA17A368B28DF2CFB1A733B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GSQAhBXKGFuO3e3C3N2NCUQad5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/GSQAhBXKGFuO3e3C3N2NCUQad5Q.mft
Manifest number: 17EE
Signing time: Mon 27 Jul 2026 06:00:38 +0000
Manifest this update: Mon 27 Jul 2026 06:00:38 +0000
Manifest next update: Tue 28 Jul 2026 06:00:38 +0000
Files and hashes: 1: C_loy0B7_p9VbknMqKT5_-soGMw.roa (hash: lXBtx5TCEhT3yUAY172G+wMVb0Mu6qGMrAg/+UmSriM=)
2: GSQAhBXKGFuO3e3C3N2NCUQad5Q.crl (hash: 7Ln2wYrNLKshrb5jmSOL7M3yZ1hPOLxclFkf316Tfn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/GSQAhBXKGFuO3e3C3N2NCUQad5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/GSQAhBXKGFuO3e3C3N2NCUQad5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/GSQAhBXKGFuO3e3C3N2NCUQad5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 06:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:29:3a:11:ea:a1:7a:36:8b:28:df:2c:fb:1a:73:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1924008415ca185b8eddedc2dcdd8d09441a7794
Validity
Not Before: Jul 27 06:00:38 2026 GMT
Not After : Jul 28 06:00:38 2026 GMT
Subject: CN=85ea4843cae971653d5797c6c4d34dccb1547938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8f:2c:1e:75:45:c0:b6:68:99:71:0c:40:fe:
0a:8c:b5:57:6a:62:ed:56:1e:b6:e8:18:5a:5d:f6:
be:e7:fb:7c:49:30:eb:3d:21:3e:32:cb:4b:a8:4e:
ce:b6:93:ae:f7:63:4c:b5:44:96:1b:d3:33:f6:f9:
32:6a:00:c2:f6:b1:d5:0f:01:57:76:6a:8f:41:e4:
5b:03:71:9c:f3:cb:20:cf:13:53:b8:a8:36:b6:79:
89:51:0c:f9:fa:14:d5:c8:63:54:09:67:00:91:95:
8a:8e:42:4b:d0:bb:40:d1:65:95:5b:09:16:53:28:
cc:d5:f0:48:56:f0:d6:a7:fe:d6:c1:b5:ce:19:af:
42:d7:f6:f4:8b:8d:ff:12:f9:4f:e4:62:2b:60:28:
d3:32:ae:34:d4:d8:07:e3:f4:02:a5:f9:ec:bf:81:
d0:bc:67:d0:ea:e9:4f:11:ad:80:a4:aa:5a:57:55:
a4:c9:df:08:36:6e:87:11:2c:99:41:44:1f:57:cb:
64:2a:a0:23:9d:07:bd:4b:72:30:ac:a5:fe:b3:a2:
08:de:3e:ee:cc:df:21:86:67:9f:80:f6:9b:01:7e:
37:a2:2b:17:55:31:36:e0:1e:96:71:15:77:0a:ae:
3a:58:37:17:aa:de:7a:68:bb:7d:62:20:f8:98:73:
ce:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:EA:48:43:CA:E9:71:65:3D:57:97:C6:C4:D3:4D:CC:B1:54:79:38
X509v3 Authority Key Identifier:
keyid:19:24:00:84:15:CA:18:5B:8E:DD:ED:C2:DC:DD:8D:09:44:1A:77:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GSQAhBXKGFuO3e3C3N2NCUQad5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/GSQAhBXKGFuO3e3C3N2NCUQad5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/9bd098-3820-47ce-8674-7a80ed621781/1/GSQAhBXKGFuO3e3C3N2NCUQad5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:c5:42:70:20:a6:d4:21:82:69:4e:d4:d2:35:26:cd:6b:48:
5f:e5:31:c3:50:35:12:fd:86:83:ae:f4:8d:83:a6:b3:0b:82:
88:8a:06:c1:bd:46:9c:fd:bd:2f:f3:1f:53:1c:65:67:f8:8e:
f3:0a:37:44:c0:6f:e4:33:72:3e:9c:3f:4d:09:76:de:51:82:
cc:1b:24:96:c9:a0:97:05:d4:be:15:8a:60:47:bc:17:f4:6a:
4b:0e:f3:85:5e:a9:31:41:2b:37:31:94:ec:e0:98:68:65:19:
1b:2e:45:4e:12:23:ea:85:4e:22:fe:44:27:eb:1c:43:35:df:
e8:54:2f:b3:8b:66:3d:29:76:cb:1d:a5:b4:d7:70:ed:91:38:
26:3b:e6:49:08:25:ab:31:0e:19:ae:de:89:e4:44:cf:b3:00:
76:bb:46:ef:c1:6b:eb:68:68:3b:61:56:bc:32:27:60:87:e1:
bb:ea:51:b8:19:22:fa:47:a8:3b:8c:ad:10:be:f2:05:21:c3:
23:a4:41:54:eb:ee:e8:63:25:e0:e9:0b:3f:77:5c:b3:4c:50:
26:de:7f:d5:b5:fe:22:5c:48:9c:37:9c:70:a7:8b:76:98:e8:
3a:fc:fe:5e:0b:0b:21:9a:80:75:99:8e:9d:c4:4c:d1:ad:66:
a1:45:04:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 09:18:29 2026 by rpki-client