Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/9bce97-eefb-40d4-bb1d-c7b0e0d9fdf2/1/GqsEbQ_SECaEebobnTt7_3E6P_Q.mft
File: GqsEbQ_SECaEebobnTt7_3E6P_Q.mft (raw, json)
Hash identifier: KcViutYluUPqJQx9rCxrRsDsH+5eiTVKE3WEX7QFF0g=
Subject key identifier: C2:13:B6:5A:0C:BF:69:D2:D2:56:16:52:9E:24:C2:44:7E:16:96:FD
Authority key identifier: 1A:AB:04:6D:0F:D2:10:26:84:79:BA:1B:9D:3B:7B:FF:71:3A:3F:F4
Certificate issuer: /CN=1aab046d0fd210268479ba1b9d3b7bff713a3ff4
Certificate serial: 019CF46000FD4638DB461D722249589AAE8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GqsEbQ_SECaEebobnTt7_3E6P_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/9bce97-eefb-40d4-bb1d-c7b0e0d9fdf2/1/GqsEbQ_SECaEebobnTt7_3E6P_Q.mft
Manifest number: 36
Signing time: Mon 16 Mar 2026 02:00:58 +0000
Manifest this update: Mon 16 Mar 2026 02:00:58 +0000
Manifest next update: Tue 17 Mar 2026 02:00:58 +0000
Files and hashes: 1: EaA5h5-haFqykkLxdYNz4NRH894.roa (hash: 35hNbngSLdJ5Vm4Smrugp6blzXRwN2jLQFd01FhQopg=)
2: GqsEbQ_SECaEebobnTt7_3E6P_Q.crl (hash: mB8d4INpUw67p7PClkdEoy+2VF+bnItNnvoCar1DxpI=)
3: L0-VG23-X4StTsgFq-dM2PZQwuw.asa (hash: ewwpS9FIFmcmamiDmtIfsGxv4DqXWOWMSU2Hu4R1Y5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/9bce97-eefb-40d4-bb1d-c7b0e0d9fdf2/1/GqsEbQ_SECaEebobnTt7_3E6P_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/9bce97-eefb-40d4-bb1d-c7b0e0d9fdf2/1/GqsEbQ_SECaEebobnTt7_3E6P_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/GqsEbQ_SECaEebobnTt7_3E6P_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Mar 2026 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f4:60:00:fd:46:38:db:46:1d:72:22:49:58:9a:ae:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aab046d0fd210268479ba1b9d3b7bff713a3ff4
Validity
Not Before: Mar 16 02:00:58 2026 GMT
Not After : Mar 17 02:00:58 2026 GMT
Subject: CN=c213b65a0cbf69d2d25616529e24c2447e1696fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d6:9a:60:3a:c0:5b:60:94:c8:89:b7:59:71:
87:77:2c:07:22:01:61:50:72:d1:b4:b0:4e:2d:b4:
19:92:92:a0:15:18:bb:d8:42:1f:43:3e:dd:2b:b5:
8a:55:fd:e2:9c:fa:f6:b4:a1:c0:39:f0:8b:a4:d3:
c9:1d:76:ec:e4:ff:7d:90:da:7b:9c:c4:e3:a0:a5:
aa:bd:cd:d1:2a:f5:c8:a7:e7:e2:70:23:c3:8d:83:
45:48:74:3f:51:59:26:ed:1c:01:de:ff:46:3d:36:
61:5b:ce:a3:9a:10:97:72:f6:28:43:51:50:3f:2f:
71:5a:f8:2d:05:68:51:34:60:0f:db:d8:f5:6e:c2:
0a:1e:ee:a8:81:1a:1b:88:cf:97:85:95:06:43:28:
29:23:89:e3:09:46:bf:fb:41:63:d8:df:10:0f:22:
1e:85:30:8c:10:7e:04:7d:15:b0:76:3d:ea:a1:33:
ad:6e:b8:83:a1:65:68:41:8c:68:f8:52:60:69:68:
76:8d:77:17:76:6b:a1:60:80:cd:a8:2f:57:7e:da:
03:ce:17:99:af:fb:c7:59:af:95:b3:36:1d:83:ff:
31:b4:2b:f0:e3:09:ca:65:8f:aa:c5:46:62:06:16:
92:3e:f1:0f:88:1f:70:70:8e:b1:81:1a:1f:22:ad:
17:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:13:B6:5A:0C:BF:69:D2:D2:56:16:52:9E:24:C2:44:7E:16:96:FD
X509v3 Authority Key Identifier:
keyid:1A:AB:04:6D:0F:D2:10:26:84:79:BA:1B:9D:3B:7B:FF:71:3A:3F:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GqsEbQ_SECaEebobnTt7_3E6P_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9bce97-eefb-40d4-bb1d-c7b0e0d9fdf2/1/GqsEbQ_SECaEebobnTt7_3E6P_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9bce97-eefb-40d4-bb1d-c7b0e0d9fdf2/1/GqsEbQ_SECaEebobnTt7_3E6P_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:0a:6d:64:e8:7f:2b:f1:82:a7:53:9e:a0:f7:ed:73:82:6e:
0b:9d:d2:67:ad:8a:d9:cf:b0:8a:b6:6f:a2:8d:6d:c0:0a:72:
72:89:04:a4:88:71:9b:13:ec:98:fe:2f:e1:de:08:aa:85:ed:
eb:9c:4a:3e:07:b9:2b:d9:57:d7:94:6a:cb:6c:73:df:96:65:
34:c2:fa:86:c3:ac:f8:4d:c5:14:62:75:08:e1:00:37:ef:ed:
40:85:f3:3e:8f:60:4f:21:a9:88:9c:14:58:8d:d2:5a:01:9f:
31:5e:27:e1:08:98:24:50:da:61:e9:ff:c0:1b:82:60:9f:97:
9a:ad:28:1f:0f:ba:e2:10:77:4d:65:50:60:f5:c8:fb:d4:ee:
8b:b4:f6:97:fa:f6:ac:5b:6e:51:80:a9:b5:ee:a0:fb:e4:2d:
00:60:5a:35:ff:0c:bd:12:2e:2e:9e:65:ba:e0:1e:17:9d:61:
b2:e3:0f:9b:c4:c8:2a:cb:c4:36:e5:81:65:a1:23:0e:6f:50:
a1:c5:4a:bb:ff:b9:e5:41:d1:a4:42:a6:d8:e0:56:30:da:ae:
ef:47:d3:f5:8e:10:e0:2b:6b:03:18:3c:15:c4:bf:2a:9d:1c:
73:23:fb:b6:ea:a9:8a:da:6e:87:78:a8:7a:35:66:da:d1:48:
23:c9:d0:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 08:09:55 2026 by rpki-client