Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/7021e2-effe-4163-8bb3-58e7db30ea44/1/GQn2DIuF7-02HfW2tRyf7a4cf5Y.mft
File: GQn2DIuF7-02HfW2tRyf7a4cf5Y.mft (raw, json)
Hash identifier: qXfxxx3qFW+QBh7N0HqArIsb3PCKb4WBPZgAzTYJogU=
Subject key identifier: 38:A0:E8:E9:F9:9E:67:69:19:61:82:07:74:F1:25:DB:48:86:51:61
Authority key identifier: 19:09:F6:0C:8B:85:EF:ED:36:1D:F5:B6:B5:1C:9F:ED:AE:1C:7F:96
Certificate issuer: /CN=1909f60c8b85efed361df5b6b51c9fedae1c7f96
Certificate serial: 019EFBA8B12650497252554B3CA3F6681EA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQn2DIuF7-02HfW2tRyf7a4cf5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/7021e2-effe-4163-8bb3-58e7db30ea44/1/GQn2DIuF7-02HfW2tRyf7a4cf5Y.mft
Manifest number: 0BE3
Signing time: Wed 24 Jun 2026 22:03:16 +0000
Manifest this update: Wed 24 Jun 2026 22:03:16 +0000
Manifest next update: Thu 25 Jun 2026 22:03:16 +0000
Files and hashes: 1: GQn2DIuF7-02HfW2tRyf7a4cf5Y.crl (hash: K021athBB6VfuCb/PshgzRRjUUWFQ+oPZCOYeyHuBTM=)
2: GYVpw44ITOKKpdgG8Chd41R_mz0.asa (hash: J5xgubX/Yds4qbv3CrQ+J1gCPs+v23KHp5e5VO0cLRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/7021e2-effe-4163-8bb3-58e7db30ea44/1/GQn2DIuF7-02HfW2tRyf7a4cf5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/7021e2-effe-4163-8bb3-58e7db30ea44/1/GQn2DIuF7-02HfW2tRyf7a4cf5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GQn2DIuF7-02HfW2tRyf7a4cf5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 22:03:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fb:a8:b1:26:50:49:72:52:55:4b:3c:a3:f6:68:1e:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1909f60c8b85efed361df5b6b51c9fedae1c7f96
Validity
Not Before: Jun 24 22:03:16 2026 GMT
Not After : Jun 25 22:03:16 2026 GMT
Subject: CN=38a0e8e9f99e67691961820774f125db48865161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f2:01:af:25:d0:47:ca:6e:7b:0b:92:6c:35:
1d:e5:8d:81:d9:42:9c:74:50:52:7d:ff:d6:c3:74:
44:6c:61:6d:9a:59:98:7c:ec:f9:8d:89:a5:b8:0e:
64:9c:de:ca:54:dc:6b:29:22:84:f9:8d:02:61:b5:
95:0c:b3:c3:07:a8:2b:d2:3e:10:bc:ec:e5:c2:12:
74:4e:24:43:97:b9:21:a2:73:4d:89:87:35:d7:ab:
67:34:37:6b:7a:86:60:cb:f9:f7:6f:e6:51:4a:40:
00:b1:74:1b:7f:c1:df:93:f0:67:15:1e:24:72:ae:
31:41:08:a3:b5:2e:21:01:d2:ef:fd:fd:b1:ee:f2:
42:47:93:9f:0d:c9:ec:96:d1:3a:d0:ef:d1:bc:b6:
3c:b1:be:76:0b:80:43:72:47:10:a8:da:65:79:1e:
64:c3:11:ad:a5:89:c4:69:6b:04:84:89:09:86:09:
7f:6e:14:5d:99:4f:cf:d2:d5:a2:6b:42:29:a4:b7:
3f:27:7f:58:05:68:fc:42:d1:83:85:fd:46:23:a3:
38:8a:6a:af:33:e5:e8:11:b9:32:98:3e:b5:27:24:
d3:c2:b4:8b:c4:4c:c8:5e:a2:93:7c:cc:b7:d7:f9:
38:57:53:f8:d8:bb:c5:24:81:fc:ff:ba:8f:b5:d0:
38:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:A0:E8:E9:F9:9E:67:69:19:61:82:07:74:F1:25:DB:48:86:51:61
X509v3 Authority Key Identifier:
keyid:19:09:F6:0C:8B:85:EF:ED:36:1D:F5:B6:B5:1C:9F:ED:AE:1C:7F:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQn2DIuF7-02HfW2tRyf7a4cf5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/7021e2-effe-4163-8bb3-58e7db30ea44/1/GQn2DIuF7-02HfW2tRyf7a4cf5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/7021e2-effe-4163-8bb3-58e7db30ea44/1/GQn2DIuF7-02HfW2tRyf7a4cf5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:cb:4d:ff:f8:be:1f:a1:9c:53:e7:61:8f:ff:ba:c9:5c:da:
3c:72:80:a2:22:aa:d3:21:0c:e9:43:53:5c:4f:f0:02:cb:e9:
ef:49:64:6a:8d:81:b4:39:08:e9:bb:46:a5:c5:68:f2:cf:e9:
35:b9:5b:3a:da:06:51:b5:b8:10:5b:5a:4f:07:4d:d8:a7:2f:
7f:80:19:79:fd:9d:b0:13:87:1e:2f:49:27:54:05:7b:25:9d:
13:3b:e1:5f:5a:b2:27:55:3e:57:eb:c7:d4:48:d9:f3:38:df:
aa:7b:f4:94:a3:2a:e1:40:23:36:d8:d1:f3:ed:c9:cf:d5:7b:
93:9b:da:8a:a3:37:2f:cc:ed:41:3b:bd:b8:c7:b0:30:73:5d:
ce:5f:0d:df:16:30:73:99:96:6e:f7:b7:34:31:5f:f4:c3:88:
23:41:f5:e2:ec:6f:2c:60:93:17:55:83:24:31:cc:4e:ef:d5:
76:dc:a7:91:96:2a:a5:dd:d5:c0:11:08:58:97:d2:4e:c2:be:
11:cf:c2:11:93:f5:e3:d8:e3:e6:2c:d2:7d:b8:cd:3a:c8:66:
a2:6b:ab:f5:8d:cc:8c:e0:2c:5c:27:c7:02:1a:b9:1f:2d:64:
f0:94:d1:91:d7:b3:f1:62:f9:f7:ca:fb:f3:d5:2f:64:de:f1:
31:df:2a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 08:27:38 2026 by rpki-client