Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/20b3fe-eebf-42ff-b012-7a3e394c0493/1/l_GQR_Px4Fk9HDF5l77eKJCqD_s.mft
File: l_GQR_Px4Fk9HDF5l77eKJCqD_s.mft (raw, json)
Hash identifier: jzNpsi0+4VTFldKx+gmMqTGLzhTUOB8vEc81Otvbves=
Subject key identifier: 09:D0:C5:CB:18:2B:12:79:06:63:19:A0:F0:AE:92:79:D7:47:D3:7E
Authority key identifier: 97:F1:90:47:F3:F1:E0:59:3D:1C:31:79:97:BE:DE:28:90:AA:0F:FB
Certificate issuer: /CN=97f19047f3f1e0593d1c317997bede2890aa0ffb
Certificate serial: 019F3ABC9F196260DA6C7622CBEE0CBE6CCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l_GQR_Px4Fk9HDF5l77eKJCqD_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/20b3fe-eebf-42ff-b012-7a3e394c0493/1/l_GQR_Px4Fk9HDF5l77eKJCqD_s.mft
Manifest number: 02D0
Signing time: Tue 07 Jul 2026 04:01:07 +0000
Manifest this update: Tue 07 Jul 2026 04:01:07 +0000
Manifest next update: Wed 08 Jul 2026 04:01:07 +0000
Files and hashes: 1: l_GQR_Px4Fk9HDF5l77eKJCqD_s.crl (hash: M6I8xy+PIFnGDgnCY5LooJ0OHnZFbpWFPPI9h1IUTHE=)
2: vhjXwUxUHjnodkfGPP9oE-wn8JQ.roa (hash: pzt6Tw+aFjj+nqYVhnhtqZPOWZ64o5R/mQIj9SS6SOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/20b3fe-eebf-42ff-b012-7a3e394c0493/1/l_GQR_Px4Fk9HDF5l77eKJCqD_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/20b3fe-eebf-42ff-b012-7a3e394c0493/1/l_GQR_Px4Fk9HDF5l77eKJCqD_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/l_GQR_Px4Fk9HDF5l77eKJCqD_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 04:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3a:bc:9f:19:62:60:da:6c:76:22:cb:ee:0c:be:6c:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97f19047f3f1e0593d1c317997bede2890aa0ffb
Validity
Not Before: Jul 7 04:01:07 2026 GMT
Not After : Jul 8 04:01:07 2026 GMT
Subject: CN=09d0c5cb182b1279066319a0f0ae9279d747d37e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:09:01:1f:cb:57:45:8d:8d:f9:97:85:88:04:
d0:cf:b6:53:82:bc:4a:64:bf:12:4c:a7:21:7d:bb:
1c:94:ba:8b:27:34:0d:c1:b3:ff:6c:6b:71:88:28:
a4:8b:b8:67:7b:93:53:48:45:07:8f:b4:b9:3e:77:
42:2e:4b:d8:0e:6d:e7:a2:cb:66:df:7a:13:34:c7:
d1:c8:18:8b:d8:8b:72:5a:77:73:f6:45:93:fa:66:
67:b7:e6:7c:ec:68:3d:90:a8:c3:d3:0b:f0:6d:6b:
71:d9:13:c8:a8:a6:6d:cd:e4:82:35:db:b1:9b:7b:
51:e0:3d:54:8f:f7:61:b4:3c:47:de:9e:08:83:e1:
2c:7f:65:ca:aa:88:2e:c0:d3:2b:93:b8:42:c1:ef:
af:44:51:84:73:8b:51:d8:07:b4:3d:d5:a7:19:5e:
68:d4:0c:13:d9:a2:93:28:cb:67:8f:3a:db:7a:72:
cb:23:49:6a:a8:7f:f2:62:ed:f1:fa:0e:62:9f:07:
21:64:76:37:11:91:5c:32:bf:54:5e:13:6b:66:38:
af:1f:59:a9:1d:17:71:59:15:fe:3f:ae:f4:98:4b:
90:74:7b:c6:32:67:77:4e:7a:8e:d6:e1:6a:1c:0a:
1d:c8:58:17:6c:d3:9b:bf:f4:33:91:e2:92:c9:fc:
5e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:D0:C5:CB:18:2B:12:79:06:63:19:A0:F0:AE:92:79:D7:47:D3:7E
X509v3 Authority Key Identifier:
keyid:97:F1:90:47:F3:F1:E0:59:3D:1C:31:79:97:BE:DE:28:90:AA:0F:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l_GQR_Px4Fk9HDF5l77eKJCqD_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/20b3fe-eebf-42ff-b012-7a3e394c0493/1/l_GQR_Px4Fk9HDF5l77eKJCqD_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/20b3fe-eebf-42ff-b012-7a3e394c0493/1/l_GQR_Px4Fk9HDF5l77eKJCqD_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:dc:a4:f8:1e:5e:3e:fd:dd:04:8e:f7:e8:80:6d:2d:46:7a:
d8:bc:cf:14:11:14:16:d1:5a:33:73:51:b7:36:79:04:4f:34:
e2:15:aa:6f:f7:27:2a:95:b2:53:a8:e2:7d:eb:8b:03:c5:24:
8f:71:72:be:d3:4d:bb:8d:ab:b5:f5:79:4a:2b:65:76:6a:c3:
c9:b7:ba:1b:59:06:e4:8c:cc:98:a8:04:31:94:73:50:cb:c8:
45:90:f9:b5:a4:5c:c6:e5:8b:94:3e:26:a5:ef:fb:43:e3:0b:
21:c5:0b:37:b1:50:3a:25:13:fc:8d:c8:a4:0e:bd:af:eb:64:
4d:b3:be:a4:aa:e3:9e:9b:e1:6b:31:ee:e6:a2:19:d2:63:09:
62:06:96:b2:8c:37:9f:1a:86:4f:b7:50:c1:22:e5:3e:05:d5:
8c:10:ed:b9:eb:4a:67:34:82:d5:b2:aa:74:98:b7:ef:e6:2b:
57:28:10:76:94:64:2e:8d:6f:63:51:c4:25:7d:ae:a7:1d:28:
74:24:6b:75:52:52:02:b3:30:06:60:7d:c4:34:57:7f:aa:17:
65:8f:ef:01:04:9b:1f:7e:8c:68:e9:51:ce:d9:e7:b5:49:8b:
0e:a8:17:16:18:fb:a9:88:8a:fc:84:c6:e8:7a:4c:fe:e1:a0:
f9:ea:04:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ86vJ8ZYmDabHYiy+4MvmzOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3ZjE5MDQ3ZjNmMWUwNTkzZDFjMzE3OTk3YmVkZTI4OTBh
YTBmZmIwHhcNMjYwNzA3MDQwMTA3WhcNMjYwNzA4MDQwMTA3WjAzMTEwLwYDVQQD
EygwOWQwYzVjYjE4MmIxMjc5MDY2MzE5YTBmMGFlOTI3OWQ3NDdkMzdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9AkBH8tXRY2N+ZeFiATQz7ZTgrxK
ZL8STKchfbsclLqLJzQNwbP/bGtxiCiki7hne5NTSEUHj7S5PndCLkvYDm3nostm
33oTNMfRyBiL2ItyWndz9kWT+mZnt+Z87Gg9kKjD0wvwbWtx2RPIqKZtzeSCNdux
m3tR4D1Uj/dhtDxH3p4Ig+Esf2XKqoguwNMrk7hCwe+vRFGEc4tR2Ae0PdWnGV5o
1AwT2aKTKMtnjzrbenLLI0lqqH/yYu3x+g5inwchZHY3EZFcMr9UXhNrZjivH1mp
HRdxWRX+P670mEuQdHvGMmd3TnqO1uFqHAodyFgXbNObv/QzkeKSyfxeUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAnQxcsYKxJ5BmMZoPCuknnXR9N+MB8GA1UdIwQY
MBaAFJfxkEfz8eBZPRwxeZe+3iiQqg/7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbF9HUVJfUHg0Rms5SERGNWw3N2VLSkNxRF9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8yMGIzZmUtZWViZi00MmZmLWIwMTIt
N2EzZTM5NGMwNDkzLzEvbF9HUVJfUHg0Rms5SERGNWw3N2VLSkNxRF9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8yMGIzZmUtZWViZi00MmZmLWIwMTItN2EzZTM5NGMwNDkz
LzEvbF9HUVJfUHg0Rms5SERGNWw3N2VLSkNxRF9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAedyk+B5e
Pv3dBI736IBtLUZ62LzPFBEUFtFaM3NRtzZ5BE804hWqb/cnKpWyU6jifeuLA8Uk
j3FyvtNNu42rtfV5SitldmrDybe6G1kG5IzMmKgEMZRzUMvIRZD5taRcxuWLlD4m
pe/7Q+MLIcULN7FQOiUT/I3IpA69r+tkTbO+pKrjnpvhazHu5qIZ0mMJYgaWsow3
nxqGT7dQwSLlPgXVjBDtuetKZzSC1bKqdJi37+YrVygQdpRkLo1vY1HEJX2upx0o
dCRrdVJSArMwBmB9xDRXf6oXZY/vAQSbH36MaOlRztnntUmLDqgXFhj7qYiK/ITG
6HpM/uGg+eoE7Q==
-----END CERTIFICATE-----
Generated at Tue Jul 7 10:43:27 2026 by rpki-client