Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/9bce97-eefb-40d4-bb1d-c7b0e0d9fdf2/1/GqsEbQ_SECaEebobnTt7_3E6P_Q.mft
File: GqsEbQ_SECaEebobnTt7_3E6P_Q.mft (raw, json)
Hash identifier: mdH1zKWHxjOdP9t/pb6S8YMDct9RW89fW9drNvZSo+o=
Subject key identifier: 90:67:43:3C:2C:9F:5A:D0:FC:19:AC:B0:E4:6F:05:30:3D:6B:3E:60
Authority key identifier: 1A:AB:04:6D:0F:D2:10:26:84:79:BA:1B:9D:3B:7B:FF:71:3A:3F:F4
Certificate issuer: /CN=1aab046d0fd210268479ba1b9d3b7bff713a3ff4
Certificate serial: 019EFBDE3C4F44A21D7EED4EFBC0D448674B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GqsEbQ_SECaEebobnTt7_3E6P_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/9bce97-eefb-40d4-bb1d-c7b0e0d9fdf2/1/GqsEbQ_SECaEebobnTt7_3E6P_Q.mft
Manifest number: 0143
Signing time: Wed 24 Jun 2026 23:01:46 +0000
Manifest this update: Wed 24 Jun 2026 23:01:46 +0000
Manifest next update: Thu 25 Jun 2026 23:01:46 +0000
Files and hashes: 1: EaA5h5-haFqykkLxdYNz4NRH894.roa (hash: 35hNbngSLdJ5Vm4Smrugp6blzXRwN2jLQFd01FhQopg=)
2: GqsEbQ_SECaEebobnTt7_3E6P_Q.crl (hash: lUhPQIHQLrlM0oAKcB+uidf+7SN2V5jcSjZwMsVkfwI=)
3: L0-VG23-X4StTsgFq-dM2PZQwuw.asa (hash: ewwpS9FIFmcmamiDmtIfsGxv4DqXWOWMSU2Hu4R1Y5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/9bce97-eefb-40d4-bb1d-c7b0e0d9fdf2/1/GqsEbQ_SECaEebobnTt7_3E6P_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/9bce97-eefb-40d4-bb1d-c7b0e0d9fdf2/1/GqsEbQ_SECaEebobnTt7_3E6P_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/GqsEbQ_SECaEebobnTt7_3E6P_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fb:de:3c:4f:44:a2:1d:7e:ed:4e:fb:c0:d4:48:67:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aab046d0fd210268479ba1b9d3b7bff713a3ff4
Validity
Not Before: Jun 24 23:01:46 2026 GMT
Not After : Jun 25 23:01:46 2026 GMT
Subject: CN=9067433c2c9f5ad0fc19acb0e46f05303d6b3e60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:fb:2a:d2:2c:00:b5:54:74:69:37:8b:f2:e6:
4d:c1:33:b1:96:a1:c0:39:87:c4:62:56:16:2b:9d:
29:4a:5f:18:03:66:0d:89:84:f0:06:8b:8c:b1:a8:
47:8c:89:95:87:c2:1d:53:7a:68:ed:5d:2a:44:85:
f2:81:1c:6f:52:4b:8f:37:49:eb:92:4f:63:20:4c:
2c:9b:e8:47:32:5e:b3:f1:74:f0:1d:ad:0b:41:e1:
f7:4f:9a:9d:a1:34:fc:63:77:f7:ed:e1:e8:7d:f9:
18:f1:d9:41:e8:f2:96:a5:20:21:3e:eb:46:8d:be:
d9:8f:5e:3d:c5:7e:fc:9a:71:ca:7e:ce:1d:24:70:
db:cd:9a:e4:8d:f4:87:d8:12:22:ee:6f:6d:80:bd:
69:a1:96:c3:7d:51:78:73:82:bc:8a:32:8b:97:4c:
4d:46:a1:da:7f:4c:bb:81:be:26:bb:89:da:bc:26:
46:93:de:e6:ca:81:60:3e:9e:77:9d:b4:7e:f6:70:
96:d9:4c:8d:a6:33:eb:02:c1:86:70:58:dc:db:fe:
1a:1d:04:ca:0d:fc:f6:49:8e:9b:26:ed:e2:22:8f:
18:21:b0:0e:3c:52:2e:ed:5e:68:cc:72:04:c1:55:
c5:5f:9f:0f:63:26:7a:ed:b7:36:c5:9f:46:7a:0d:
c2:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:67:43:3C:2C:9F:5A:D0:FC:19:AC:B0:E4:6F:05:30:3D:6B:3E:60
X509v3 Authority Key Identifier:
keyid:1A:AB:04:6D:0F:D2:10:26:84:79:BA:1B:9D:3B:7B:FF:71:3A:3F:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GqsEbQ_SECaEebobnTt7_3E6P_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9bce97-eefb-40d4-bb1d-c7b0e0d9fdf2/1/GqsEbQ_SECaEebobnTt7_3E6P_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9bce97-eefb-40d4-bb1d-c7b0e0d9fdf2/1/GqsEbQ_SECaEebobnTt7_3E6P_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:bb:1c:6f:eb:61:43:09:7e:2b:63:bc:05:b2:02:8e:d3:e8:
e2:71:4a:b7:28:f5:86:0f:44:d3:9c:67:c1:fb:d9:f9:d2:50:
a8:84:bc:6d:58:86:99:68:5e:08:7c:c9:1f:fd:78:23:d0:5e:
38:68:c8:5d:bf:9d:c5:86:c3:2b:9d:3b:95:d4:3a:8f:f3:47:
ca:7a:a0:04:f4:cf:52:ae:d3:9b:18:32:32:26:a3:27:38:58:
00:e4:7b:27:73:99:33:39:36:15:93:79:c3:3e:a1:8f:06:68:
e3:34:15:22:7b:99:c3:33:7f:d8:df:73:36:9f:f2:c1:12:c7:
cb:b5:87:2a:d7:c0:c9:d1:d2:9e:19:eb:bf:87:89:ec:3d:b2:
47:15:6f:85:94:d4:b9:0e:fc:bb:7a:e6:69:c1:be:18:39:48:
eb:29:3f:85:a8:ec:b0:9c:47:17:52:c2:7f:93:0b:32:1c:7b:
f2:b2:53:01:55:4f:39:b0:9f:be:73:77:54:77:e9:ab:25:78:
6e:28:83:9c:e8:6d:14:13:8d:4f:f8:d8:82:53:14:30:97:77:
d6:0b:2a:5f:c7:f5:4c:da:0e:38:55:c1:a4:a9:f3:5b:ee:6e:
b7:e1:ee:d4:9e:68:de:ca:35:9f:32:3b:e2:e0:54:24:fa:d8:
98:72:12:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 08:27:01 2026 by rpki-client