Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/9bce97-eefb-40d4-bb1d-c7b0e0d9fdf2/1/GqsEbQ_SECaEebobnTt7_3E6P_Q.mft
File: GqsEbQ_SECaEebobnTt7_3E6P_Q.mft (raw, json)
Hash identifier: ES9D5DMY87OvcamDAwjvL6ejubuSBZTKHj2D+Kb9guQ=
Subject key identifier: FE:13:13:79:A0:EC:35:36:D6:73:1C:3C:AE:9D:09:0B:D1:0E:1F:CC
Authority key identifier: 1A:AB:04:6D:0F:D2:10:26:84:79:BA:1B:9D:3B:7B:FF:71:3A:3F:F4
Certificate issuer: /CN=1aab046d0fd210268479ba1b9d3b7bff713a3ff4
Certificate serial: 019DDE0CEE6CC61E1D1E3CA3AFC3BCDBF11A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GqsEbQ_SECaEebobnTt7_3E6P_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/9bce97-eefb-40d4-bb1d-c7b0e0d9fdf2/1/GqsEbQ_SECaEebobnTt7_3E6P_Q.mft
Manifest number: AF
Signing time: Thu 30 Apr 2026 11:01:22 +0000
Manifest this update: Thu 30 Apr 2026 11:01:22 +0000
Manifest next update: Fri 01 May 2026 11:01:22 +0000
Files and hashes: 1: EaA5h5-haFqykkLxdYNz4NRH894.roa (hash: 35hNbngSLdJ5Vm4Smrugp6blzXRwN2jLQFd01FhQopg=)
2: GqsEbQ_SECaEebobnTt7_3E6P_Q.crl (hash: cX/MDuAOiyVBNpWKiQMgx3nm/iluLOeJGIzYQoPBwWs=)
3: L0-VG23-X4StTsgFq-dM2PZQwuw.asa (hash: ewwpS9FIFmcmamiDmtIfsGxv4DqXWOWMSU2Hu4R1Y5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/9bce97-eefb-40d4-bb1d-c7b0e0d9fdf2/1/GqsEbQ_SECaEebobnTt7_3E6P_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/9bce97-eefb-40d4-bb1d-c7b0e0d9fdf2/1/GqsEbQ_SECaEebobnTt7_3E6P_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/GqsEbQ_SECaEebobnTt7_3E6P_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:de:0c:ee:6c:c6:1e:1d:1e:3c:a3:af:c3:bc:db:f1:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aab046d0fd210268479ba1b9d3b7bff713a3ff4
Validity
Not Before: Apr 30 11:01:22 2026 GMT
Not After : May 1 11:01:22 2026 GMT
Subject: CN=fe131379a0ec3536d6731c3cae9d090bd10e1fcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a6:3a:c2:4b:6a:d1:e2:36:39:0b:ea:af:01:
d8:9a:a2:c9:00:bf:1a:b5:9f:9e:c4:6d:4d:5c:db:
89:da:08:53:84:fe:1d:cc:71:ed:a5:e6:89:46:e0:
67:3e:5e:41:d3:27:af:9b:af:f0:db:8b:81:d4:7a:
38:0e:d6:e0:bc:1a:e9:fa:fc:4f:aa:27:17:71:43:
3e:32:b3:18:8f:5d:cd:75:3e:37:40:70:75:ff:bc:
89:88:61:c7:8e:95:6a:74:77:36:73:e0:c4:b3:8e:
8a:97:27:89:74:e8:ad:b4:4f:73:41:2a:9a:ec:31:
f0:ed:15:23:3d:94:d2:40:e8:7e:9e:27:c8:a1:86:
15:d6:6e:27:24:e5:47:e1:c4:50:0f:88:17:ff:98:
dc:3b:01:23:86:09:1c:d7:5c:30:9d:51:b6:51:c7:
ff:5a:17:08:83:da:7f:c2:af:e1:a7:c8:f1:05:95:
7f:f4:eb:d3:e8:7c:25:c6:85:5b:40:f9:55:73:1c:
9c:85:87:70:df:97:6a:10:16:1b:3d:3f:92:f5:58:
de:7f:92:5a:2d:fb:4f:e1:6e:7e:57:8d:69:51:6c:
5e:89:53:ea:e7:89:91:51:88:f7:7c:d8:52:f6:7e:
86:21:77:45:31:f8:4f:57:8a:e9:77:d4:dd:35:ce:
61:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:13:13:79:A0:EC:35:36:D6:73:1C:3C:AE:9D:09:0B:D1:0E:1F:CC
X509v3 Authority Key Identifier:
keyid:1A:AB:04:6D:0F:D2:10:26:84:79:BA:1B:9D:3B:7B:FF:71:3A:3F:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GqsEbQ_SECaEebobnTt7_3E6P_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9bce97-eefb-40d4-bb1d-c7b0e0d9fdf2/1/GqsEbQ_SECaEebobnTt7_3E6P_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9bce97-eefb-40d4-bb1d-c7b0e0d9fdf2/1/GqsEbQ_SECaEebobnTt7_3E6P_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:bc:a1:31:1b:fe:f5:cf:21:d0:db:1d:c5:5e:9d:5e:58:e7:
be:16:5c:5a:96:5d:7f:da:4f:c5:3c:d4:63:a5:f4:e3:6c:ac:
c0:7e:e9:f5:39:f2:3a:4f:4e:5c:01:28:ac:60:e8:a6:d9:d5:
9a:b6:28:29:c5:b2:29:10:27:88:f9:d4:5b:d3:c9:4c:ff:80:
7d:8c:36:96:b4:ea:13:05:c6:de:2c:76:0a:ed:3b:32:41:d9:
06:1b:31:e3:e1:6e:f8:41:d5:ee:a0:77:f7:0c:dd:14:d4:d5:
1d:74:1e:a4:8b:09:13:bb:43:27:d5:6d:5b:b9:d6:94:3c:3d:
d3:90:1c:02:b0:3f:17:25:d3:bf:1f:37:2d:ec:9a:6d:72:f5:
c2:b4:cc:15:aa:dc:02:6a:62:94:bb:a0:fe:d1:4c:43:b6:ff:
7b:29:21:09:25:12:b9:56:96:a4:9d:b4:4f:5c:1e:21:70:d0:
e7:e6:6a:1d:ee:a9:e0:26:f9:d6:44:f7:52:07:da:5c:de:29:
73:8b:1c:d1:01:b5:29:21:02:32:36:27:8d:d0:bd:b1:40:5f:
9c:db:6b:26:e0:cd:96:0b:a6:2d:2d:f6:32:52:d5:d8:88:3f:
9d:4b:0a:d9:97:d0:b2:09:a3:4e:7a:70:07:93:89:62:f0:5d:
5d:ba:c4:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 12:48:15 2026 by rpki-client