Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/7021e2-effe-4163-8bb3-58e7db30ea44/1/GQn2DIuF7-02HfW2tRyf7a4cf5Y.mft
File: GQn2DIuF7-02HfW2tRyf7a4cf5Y.mft (raw, json)
Hash identifier: wo3vR9Pm6yw+gM9lWwGb9+uxpGZUCToJVFLS8a8DgPU=
Subject key identifier: 5A:A5:63:EC:A4:C7:6A:C2:24:60:B1:98:83:3B:A0:D3:D3:1F:FE:46
Authority key identifier: 19:09:F6:0C:8B:85:EF:ED:36:1D:F5:B6:B5:1C:9F:ED:AE:1C:7F:96
Certificate issuer: /CN=1909f60c8b85efed361df5b6b51c9fedae1c7f96
Certificate serial: 019D37524AF78026EA063B31EBB017AE9552
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQn2DIuF7-02HfW2tRyf7a4cf5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/7021e2-effe-4163-8bb3-58e7db30ea44/1/GQn2DIuF7-02HfW2tRyf7a4cf5Y.mft
Manifest number: 0AF8
Signing time: Sun 29 Mar 2026 02:00:33 +0000
Manifest this update: Sun 29 Mar 2026 02:00:33 +0000
Manifest next update: Mon 30 Mar 2026 02:00:33 +0000
Files and hashes: 1: GQn2DIuF7-02HfW2tRyf7a4cf5Y.crl (hash: Uf4jpqYzoEYjddeae4tKv+3rPw5H4iXopjglLKvGfxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/7021e2-effe-4163-8bb3-58e7db30ea44/1/GQn2DIuF7-02HfW2tRyf7a4cf5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/7021e2-effe-4163-8bb3-58e7db30ea44/1/GQn2DIuF7-02HfW2tRyf7a4cf5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GQn2DIuF7-02HfW2tRyf7a4cf5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:4a:f7:80:26:ea:06:3b:31:eb:b0:17:ae:95:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1909f60c8b85efed361df5b6b51c9fedae1c7f96
Validity
Not Before: Mar 29 02:00:33 2026 GMT
Not After : Mar 30 02:00:33 2026 GMT
Subject: CN=5aa563eca4c76ac22460b198833ba0d3d31ffe46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0a:99:1f:dd:10:cd:e3:3b:6d:14:7d:f3:4d:
bd:fa:cc:e2:90:b0:8a:04:f2:3c:35:54:33:bc:1d:
a8:be:5f:a9:ee:ab:b0:95:3d:6a:f4:c7:0a:38:d8:
fc:24:54:6e:57:bb:b8:c0:32:0a:5e:88:5b:7c:05:
5d:86:97:b6:a3:dd:10:e3:67:1f:cb:7e:10:a6:e0:
22:14:5d:2e:f1:0b:ce:a3:0b:03:4e:ea:86:f7:d1:
9f:65:50:03:f9:fa:df:b3:bf:ba:46:e2:74:99:e0:
5b:45:66:75:4d:ce:a8:0b:30:b1:d9:46:06:1f:1b:
ed:a6:5b:7d:5a:a7:ae:b8:82:3c:6b:6c:b0:c3:cb:
3f:16:bf:e4:05:4c:91:8c:c5:42:02:aa:d1:c7:51:
5e:bf:af:a5:8a:63:91:70:9f:32:66:2c:11:62:e2:
71:51:25:82:84:92:a9:4b:41:ce:24:e8:3b:0e:fa:
62:02:bd:c2:c9:06:e1:e9:dd:09:89:5e:9b:33:dc:
08:c0:79:7d:93:a5:0a:55:79:71:ea:02:b3:e3:48:
8e:ff:59:0f:1b:cd:b0:85:ed:4e:6f:cb:d0:99:c1:
f6:54:12:ec:20:20:96:da:37:f4:49:36:be:c1:15:
07:1c:71:e2:dd:86:ef:7d:a2:b8:7e:0b:fb:28:a7:
35:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:A5:63:EC:A4:C7:6A:C2:24:60:B1:98:83:3B:A0:D3:D3:1F:FE:46
X509v3 Authority Key Identifier:
keyid:19:09:F6:0C:8B:85:EF:ED:36:1D:F5:B6:B5:1C:9F:ED:AE:1C:7F:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQn2DIuF7-02HfW2tRyf7a4cf5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/7021e2-effe-4163-8bb3-58e7db30ea44/1/GQn2DIuF7-02HfW2tRyf7a4cf5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/7021e2-effe-4163-8bb3-58e7db30ea44/1/GQn2DIuF7-02HfW2tRyf7a4cf5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:a3:3b:04:d2:2a:f1:c7:0d:bf:61:98:3c:ff:c0:03:69:78:
3e:17:05:a1:1c:3f:95:ad:c8:38:e5:e3:c1:5d:2c:e3:a4:02:
79:93:8d:65:b5:c0:65:74:5a:86:72:cd:47:e6:6c:97:ce:ac:
de:ff:0c:a3:a5:da:20:6e:93:41:c5:f7:4d:c8:be:e3:94:c2:
b3:6d:3e:9c:65:57:7a:ed:63:85:ae:fe:85:9d:19:6f:25:ca:
e3:35:74:46:b3:4e:9b:32:22:1b:73:04:2e:f9:0c:14:27:f1:
ed:67:f1:33:8f:07:02:80:51:2c:17:df:51:d1:1f:3d:8d:76:
e8:81:d4:b3:bf:7b:44:70:05:25:33:ae:d5:83:c6:47:59:d5:
0f:c8:7b:82:af:14:4e:62:c1:92:1d:f0:28:ca:9a:f2:74:80:
9d:41:da:ea:25:be:d9:6d:ea:d8:7a:8b:dc:a3:d6:6d:ea:05:
a6:30:7a:bd:6a:7a:bb:49:39:3d:ae:d8:3a:5c:fa:29:78:2c:
d1:46:9e:38:8c:2b:bc:f0:ea:e9:08:00:19:e3:18:77:9b:40:
8a:9d:6e:29:fc:e9:0b:88:bf:57:77:0f:f0:f8:51:a5:c2:12:
22:18:b3:a1:77:6e:2e:c6:1a:3e:1d:be:a3:62:5c:6a:91:23:
ab:0e:af:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:15 2026 by rpki-client