Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/6007ff-5f0c-4a73-a3f2-ccc5814094ad/1/GQ1bBUO9hajs-WmruFA8nerQ35g.mft
File: GQ1bBUO9hajs-WmruFA8nerQ35g.mft (raw, json)
Hash identifier: glVEnQc9WoR9Z68Wyi9LTjce8NgVCnIn5O51A0KlEFs=
Subject key identifier: 39:A0:13:8C:41:64:7D:F8:F4:D3:E1:C8:17:65:A3:CE:1D:71:FB:4A
Authority key identifier: 19:0D:5B:05:43:BD:85:A8:EC:F9:69:AB:B8:50:3C:9D:EA:D0:DF:98
Certificate issuer: /CN=190d5b0543bd85a8ecf969abb8503c9dead0df98
Certificate serial: 019D38D3C91252403F0F10322C06AD58D4E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQ1bBUO9hajs-WmruFA8nerQ35g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/6007ff-5f0c-4a73-a3f2-ccc5814094ad/1/GQ1bBUO9hajs-WmruFA8nerQ35g.mft
Manifest number: 0F71
Signing time: Sun 29 Mar 2026 09:01:36 +0000
Manifest this update: Sun 29 Mar 2026 09:01:36 +0000
Manifest next update: Mon 30 Mar 2026 09:01:36 +0000
Files and hashes: 1: GQ1bBUO9hajs-WmruFA8nerQ35g.crl (hash: 0R1coz5ab2O94L4tMnTmqJAvEQiNm3xvC3GV/PQbAwU=)
2: jNFKZnTVsRBfGEaululoyvE8Qj4.roa (hash: cDGBqBzjQl/F2yNxNBLw+PS6D4K8fmbzN48Xq8oZa6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/6007ff-5f0c-4a73-a3f2-ccc5814094ad/1/GQ1bBUO9hajs-WmruFA8nerQ35g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/6007ff-5f0c-4a73-a3f2-ccc5814094ad/1/GQ1bBUO9hajs-WmruFA8nerQ35g.mft
rsync://rpki.ripe.net/repository/DEFAULT/GQ1bBUO9hajs-WmruFA8nerQ35g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:c9:12:52:40:3f:0f:10:32:2c:06:ad:58:d4:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=190d5b0543bd85a8ecf969abb8503c9dead0df98
Validity
Not Before: Mar 29 09:01:36 2026 GMT
Not After : Mar 30 09:01:36 2026 GMT
Subject: CN=39a0138c41647df8f4d3e1c81765a3ce1d71fb4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:91:47:b8:59:76:e3:7d:b2:77:b3:4c:67:a3:
af:96:d5:21:1c:f0:1d:ef:6d:70:e0:27:3d:03:9e:
d3:87:2b:28:46:16:b4:3f:4b:6d:b1:8c:21:88:90:
eb:9c:09:77:d4:12:65:e4:fe:b9:2b:51:06:c2:29:
0c:5f:29:11:c9:c6:d8:84:00:e8:47:d6:a0:5e:e5:
f3:f5:42:f5:24:23:fb:fa:c9:a3:09:b8:9b:49:1a:
38:7b:7f:a9:2c:67:bb:2b:93:2b:58:8f:c5:90:e3:
ee:8d:39:b1:5b:89:8d:8e:d9:f0:1b:e0:80:e1:03:
fe:27:e1:3b:88:68:1f:a1:f3:79:00:b5:2c:68:39:
e7:41:3b:02:00:37:87:95:68:6d:db:0f:de:85:4b:
f0:f3:e3:01:d3:1e:08:a3:89:36:e7:ac:ee:e9:de:
cf:79:f2:cd:b3:21:7d:98:f8:ca:58:0c:20:6b:07:
0d:89:f0:5e:47:9c:a0:af:36:82:af:da:ce:4a:07:
91:77:23:a6:f1:0d:5b:0e:07:cb:c6:a9:77:43:43:
f1:99:c1:d4:86:de:25:35:48:50:bc:15:ef:d5:62:
21:7a:5a:65:07:57:47:69:02:a2:14:52:0e:f5:02:
d2:95:97:70:34:0e:54:9e:93:42:5c:61:b3:99:68:
27:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:A0:13:8C:41:64:7D:F8:F4:D3:E1:C8:17:65:A3:CE:1D:71:FB:4A
X509v3 Authority Key Identifier:
keyid:19:0D:5B:05:43:BD:85:A8:EC:F9:69:AB:B8:50:3C:9D:EA:D0:DF:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQ1bBUO9hajs-WmruFA8nerQ35g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6007ff-5f0c-4a73-a3f2-ccc5814094ad/1/GQ1bBUO9hajs-WmruFA8nerQ35g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6007ff-5f0c-4a73-a3f2-ccc5814094ad/1/GQ1bBUO9hajs-WmruFA8nerQ35g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:11:9e:9d:90:58:b4:b3:f7:1b:d7:85:1e:34:0c:0f:85:9f:
c0:ec:af:5a:ea:e2:3d:6c:9b:66:af:8f:4b:da:62:85:7d:77:
7b:43:a9:5a:0d:98:c1:ba:09:3e:11:7b:2b:7f:85:9a:d5:0a:
a7:22:5e:ee:01:3f:85:24:db:66:2c:f4:4a:a2:0c:3c:23:d5:
b0:5a:12:1b:4d:f5:df:c7:2c:11:48:3f:c1:85:d6:16:39:3f:
14:96:f7:8c:95:34:8a:cb:6b:8b:f4:6c:9d:be:12:5a:35:ba:
dc:52:07:04:df:89:c1:79:f5:eb:aa:89:d2:c3:ad:68:3b:7c:
da:a6:9d:fd:01:d7:13:50:fd:b2:10:56:e5:29:3c:19:2a:af:
bb:a4:4b:9f:4b:63:8d:d4:92:a4:c8:26:80:75:68:d5:2c:06:
15:2f:05:c9:13:4e:67:b2:b7:47:6e:c6:9f:ab:83:ad:83:89:
cb:a7:6a:b1:b3:7f:ea:a2:4d:7d:ae:73:df:fd:ba:1b:b5:d5:
cd:ca:6d:be:80:04:72:05:15:bd:8a:44:62:ef:31:4f:6c:e0:
f5:3b:97:62:12:0a:03:7b:48:7b:9e:e3:2c:87:a1:0a:c2:0c:
fc:00:31:72:50:4c:99:f0:4e:1e:c7:2e:7c:59:9b:ac:c0:4e:
1b:cd:28:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:34 2026 by rpki-client