Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft
File: GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft (raw, json)
Hash identifier: qwWh6G2emSImZHy2yEDMnDa9HlYD3iedL3kR5hgCHHc=
Subject key identifier: B7:8B:92:BE:51:02:A1:6C:35:1B:E1:EC:55:DD:9C:D8:63:5F:75:8E
Authority key identifier: 19:0E:C7:AA:B2:0F:C4:C8:01:C6:79:63:E5:9E:4F:93:60:0E:40:1D
Certificate issuer: /CN=190ec7aab20fc4c801c67963e59e4f93600e401d
Certificate serial: 019D38660D15C939355624AA293D5B9D84D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft
Manifest number: 11D3
Signing time: Sun 29 Mar 2026 07:01:45 +0000
Manifest this update: Sun 29 Mar 2026 07:01:45 +0000
Manifest next update: Mon 30 Mar 2026 07:01:45 +0000
Files and hashes: 1: BFsuju73p_IfTuzKMk-7j2upM6U.roa (hash: NMObEH49eiBEjgkYRi2sMCjgCjz2WvdzgCb1t201l78=)
2: GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.crl (hash: 6VPrECXvIQ02QGgJT6QEV6MtMiHNd6YZMFX1X0yySuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:0d:15:c9:39:35:56:24:aa:29:3d:5b:9d:84:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=190ec7aab20fc4c801c67963e59e4f93600e401d
Validity
Not Before: Mar 29 07:01:45 2026 GMT
Not After : Mar 30 07:01:45 2026 GMT
Subject: CN=b78b92be5102a16c351be1ec55dd9cd8635f758e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:03:45:1f:a0:cc:b5:ff:cd:3d:b4:e2:99:63:
c5:5c:da:21:70:e5:f4:d8:18:10:5b:a9:8e:ee:35:
c8:d0:cb:34:84:1a:4c:a8:f9:8d:73:2a:bd:67:4c:
6f:80:94:a5:0e:06:81:66:f0:f8:42:14:fc:9c:08:
01:35:8c:f7:3a:37:5a:f5:0b:d8:cd:be:55:86:ab:
6c:4b:28:10:45:09:8f:d5:e8:d6:93:be:ad:4a:d3:
bb:56:c6:f6:38:1e:e1:9b:94:4a:1e:cd:df:d4:50:
0f:eb:79:9c:34:f4:3c:5a:35:11:90:2c:3a:34:ac:
c4:73:ab:7b:2e:e2:fc:19:85:ce:7c:a0:d1:1b:fb:
87:11:bc:8d:75:ac:e2:c5:46:af:3d:e7:29:53:a7:
78:83:5c:12:18:c7:03:56:10:9f:09:02:28:85:08:
77:8c:bd:d0:5f:7c:ab:eb:7b:27:5c:e0:5c:22:4f:
98:4e:df:01:82:cc:ab:22:fa:61:04:5f:6e:5e:2a:
a8:cf:c2:a4:00:dc:00:a4:4f:e1:ce:b7:c9:d2:fc:
2d:0b:30:02:83:87:e1:29:c6:16:5f:f7:e4:d5:c6:
86:61:ab:9e:ce:34:58:84:6e:34:3f:6a:9a:b2:e2:
b8:71:be:cf:16:dd:6d:01:9d:75:26:7d:0e:ed:27:
1e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:8B:92:BE:51:02:A1:6C:35:1B:E1:EC:55:DD:9C:D8:63:5F:75:8E
X509v3 Authority Key Identifier:
keyid:19:0E:C7:AA:B2:0F:C4:C8:01:C6:79:63:E5:9E:4F:93:60:0E:40:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:94:6d:0d:b1:ae:63:cd:e4:c3:4b:53:68:80:c3:87:d2:c8:
64:a6:1c:bc:62:e0:2a:8b:99:35:05:77:12:42:7a:a1:40:db:
43:9c:a9:1c:fe:e7:b6:1a:ad:81:22:76:90:72:fc:bb:6f:e8:
e7:6e:45:37:2a:72:d7:f8:b9:03:b6:48:6f:be:c7:68:1e:85:
6e:16:71:bb:6a:96:42:2a:87:71:b6:6d:d5:82:da:d4:0c:f5:
fc:00:53:e1:61:ab:70:67:f4:11:8a:bd:27:5a:af:cb:8e:bf:
d4:41:4a:cf:bd:37:19:c1:91:6b:51:7e:38:bb:80:8a:85:d9:
dc:59:55:39:d1:c9:a3:7f:90:e4:17:8f:cd:43:30:02:d9:ce:
9a:e3:aa:89:30:0a:6a:ae:5f:b7:fe:e3:49:9f:9f:51:9a:20:
61:48:31:1a:eb:af:e1:8c:f2:c3:39:48:9e:ab:21:f2:f7:62:
54:03:b7:c9:53:5c:c7:62:0f:4c:f0:f3:bb:58:ea:98:b0:de:
12:99:89:0b:d8:ad:62:74:ca:e9:24:f8:f5:cb:bf:d7:03:a8:
1b:55:5f:ec:e6:57:84:d0:f1:76:0f:02:53:bf:67:81:30:c5:
a3:5e:0a:83:93:3b:34:3c:d0:7b:e8:1a:87:b6:0f:d3:66:50:
1c:54:12:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:32 2026 by rpki-client