Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft
File: GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft (raw, json)
Hash identifier: XsnBQ0zezH6BFuvnY8/chmb3nLpvJKZ+HL+qAtHiw10=
Subject key identifier: 1E:33:B0:85:51:A1:FD:81:77:96:6C:8C:3A:7E:F1:89:CC:6B:05:3D
Authority key identifier: 19:0E:C7:AA:B2:0F:C4:C8:01:C6:79:63:E5:9E:4F:93:60:0E:40:1D
Certificate issuer: /CN=190ec7aab20fc4c801c67963e59e4f93600e401d
Certificate serial: 019E886C830C33006CC070D17400C4AFDC1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft
Manifest number: 1281
Signing time: Tue 02 Jun 2026 13:01:13 +0000
Manifest this update: Tue 02 Jun 2026 13:01:13 +0000
Manifest next update: Wed 03 Jun 2026 13:01:13 +0000
Files and hashes: 1: BFsuju73p_IfTuzKMk-7j2upM6U.roa (hash: NMObEH49eiBEjgkYRi2sMCjgCjz2WvdzgCb1t201l78=)
2: GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.crl (hash: bxhq7hcolcl2zV/y5UgWotShe9mIxtz6j6hjevAiaVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 13:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:88:6c:83:0c:33:00:6c:c0:70:d1:74:00:c4:af:dc:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=190ec7aab20fc4c801c67963e59e4f93600e401d
Validity
Not Before: Jun 2 13:01:13 2026 GMT
Not After : Jun 3 13:01:13 2026 GMT
Subject: CN=1e33b08551a1fd8177966c8c3a7ef189cc6b053d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e2:98:f6:96:59:c9:59:79:a8:1d:5b:e7:83:
7a:11:09:e6:aa:13:40:04:bb:4a:ba:0d:63:8f:b1:
18:7c:1e:11:ed:02:1d:f4:b4:bc:75:e7:f4:c5:58:
3a:71:c2:39:e8:af:8c:4b:2a:37:af:f4:c4:14:e1:
0e:69:a5:19:cf:d8:5c:5f:77:ca:00:85:bd:8c:03:
79:ad:7a:65:a5:e9:85:8a:f1:3d:d5:ba:45:c3:56:
0f:bc:3d:16:43:54:2e:2d:5d:e6:05:8e:c1:a1:20:
5c:38:f5:b7:e2:cb:4d:ff:2f:b5:1a:73:5d:c5:b2:
53:9a:d1:32:5a:04:07:75:36:d1:a0:ce:34:6f:98:
2b:2a:32:8f:aa:35:5e:55:81:94:57:6f:44:21:00:
35:58:a7:29:4c:e9:9a:ae:b8:67:61:92:10:9a:22:
e5:5d:c3:f3:21:15:54:c8:22:43:be:88:91:5f:a7:
46:8d:c1:1b:d7:e6:30:54:bb:7d:13:82:55:99:9b:
55:ae:2d:73:aa:b4:6d:2d:67:ee:29:09:cc:1a:8b:
9b:0e:53:5d:07:b3:6a:57:f2:c9:29:30:ed:91:26:
a4:00:29:3c:da:f3:de:1b:98:c1:f0:a2:e2:01:30:
6b:6b:41:fd:9c:0a:52:ad:98:18:ff:62:aa:15:24:
a1:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:33:B0:85:51:A1:FD:81:77:96:6C:8C:3A:7E:F1:89:CC:6B:05:3D
X509v3 Authority Key Identifier:
keyid:19:0E:C7:AA:B2:0F:C4:C8:01:C6:79:63:E5:9E:4F:93:60:0E:40:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/ba3b69-65e5-498e-ba08-dab9b483c123/1/GQ7HqrIPxMgBxnlj5Z5Pk2AOQB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:2b:bd:16:37:1f:27:61:35:b4:6b:91:0e:96:ad:88:c0:5c:
ef:a4:49:60:c4:13:0d:45:9b:3a:2c:b5:16:88:a5:cc:18:e9:
45:c2:ab:cd:e5:89:9b:8e:1d:8b:f8:29:a7:d8:50:07:62:47:
53:82:c0:50:2f:32:8c:cc:dc:9e:d6:97:ba:b1:8b:4a:aa:d3:
f1:ad:52:0d:85:48:e5:33:b5:28:9b:bf:5e:c6:53:f5:91:10:
83:25:69:b3:23:be:ba:ec:2c:e5:ab:b2:da:bd:52:33:09:16:
94:ca:60:17:63:0c:d2:68:49:91:c8:bf:73:0b:5a:c3:2b:59:
7a:6a:10:cb:f4:27:53:01:6f:7c:8d:77:eb:e0:8a:0b:1f:06:
b9:95:af:6b:db:57:5c:c1:ae:99:19:40:5f:1b:6e:7b:10:ac:
68:cb:63:76:2f:62:ba:59:6d:0d:62:c7:17:27:19:97:ad:03:
df:38:14:40:02:79:5b:ca:71:0a:6e:f0:bb:70:8a:13:33:ac:
60:a5:c1:07:1e:72:14:72:18:3d:e7:91:3f:42:c2:43:38:4a:
b9:55:1b:31:bb:21:d6:58:b5:7a:ec:c1:eb:94:2c:68:9f:7f:
11:26:43:7d:38:ab:16:8f:0e:72:c6:f1:f0:19:7d:1b:78:37:
63:71:3d:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 22:44:31 2026 by rpki-client