Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/20b3fe-eebf-42ff-b012-7a3e394c0493/1/l_GQR_Px4Fk9HDF5l77eKJCqD_s.mft
File: l_GQR_Px4Fk9HDF5l77eKJCqD_s.mft (raw, json)
Hash identifier: /51mds1NXq5/2cGMHgg8IOZpzPJRWhVQNY8ybJckjKk=
Subject key identifier: FB:76:E2:75:6C:EC:4E:88:25:B4:EC:CF:16:D9:B8:E8:19:41:76:1E
Authority key identifier: 97:F1:90:47:F3:F1:E0:59:3D:1C:31:79:97:BE:DE:28:90:AA:0F:FB
Certificate issuer: /CN=97f19047f3f1e0593d1c317997bede2890aa0ffb
Certificate serial: 019E510FEC2F1040E300CE68234A0BC4C817
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l_GQR_Px4Fk9HDF5l77eKJCqD_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/20b3fe-eebf-42ff-b012-7a3e394c0493/1/l_GQR_Px4Fk9HDF5l77eKJCqD_s.mft
Manifest number: 0257
Signing time: Fri 22 May 2026 19:00:58 +0000
Manifest this update: Fri 22 May 2026 19:00:58 +0000
Manifest next update: Sat 23 May 2026 19:00:58 +0000
Files and hashes: 1: l_GQR_Px4Fk9HDF5l77eKJCqD_s.crl (hash: 6G6JJLkwlWNQDOYM2rHD5yEHTp6M4PM1HbJ0DFKu3hs=)
2: vhjXwUxUHjnodkfGPP9oE-wn8JQ.roa (hash: pzt6Tw+aFjj+nqYVhnhtqZPOWZ64o5R/mQIj9SS6SOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/20b3fe-eebf-42ff-b012-7a3e394c0493/1/l_GQR_Px4Fk9HDF5l77eKJCqD_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/20b3fe-eebf-42ff-b012-7a3e394c0493/1/l_GQR_Px4Fk9HDF5l77eKJCqD_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/l_GQR_Px4Fk9HDF5l77eKJCqD_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 May 2026 17:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:51:0f:ec:2f:10:40:e3:00:ce:68:23:4a:0b:c4:c8:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97f19047f3f1e0593d1c317997bede2890aa0ffb
Validity
Not Before: May 22 19:00:58 2026 GMT
Not After : May 23 19:00:58 2026 GMT
Subject: CN=fb76e2756cec4e8825b4eccf16d9b8e81941761e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b4:f4:6d:44:cf:4e:0d:e0:ec:be:db:ad:46:
25:0e:67:e8:25:88:6e:9c:36:4b:17:86:6a:3b:d1:
f7:38:ed:69:b4:d2:5a:59:c0:4a:2c:b3:ee:92:b5:
12:08:a6:b2:94:8d:4e:a9:b3:d4:b7:88:8d:43:51:
ee:b5:40:e5:7d:83:6f:3f:ff:b2:da:61:9c:5c:23:
73:9f:4c:bc:ec:08:93:3c:d7:20:07:02:47:84:52:
77:f2:24:51:9a:ea:1b:02:9a:6f:c5:86:bf:f4:85:
77:b2:6f:a8:d7:1c:d7:aa:af:fc:f8:ca:11:9c:c0:
af:76:f5:f8:73:33:48:f4:6f:ea:56:ee:d3:a5:09:
15:cc:a2:c1:b6:3f:76:d5:d7:bf:e1:ff:ea:69:9f:
f8:91:d1:eb:48:23:3d:d3:39:dc:1b:c1:71:32:0f:
51:49:bf:29:1c:2c:67:b8:0e:92:c3:fa:1f:c0:92:
6e:21:a7:33:e4:dd:6c:84:92:ea:22:54:18:3c:b8:
a4:a5:2b:46:bc:c6:84:66:12:c3:d3:6c:d0:1c:d3:
bd:93:72:32:be:6b:fc:4d:81:9c:ea:65:77:34:e3:
8c:37:c7:8e:27:9e:cf:9f:4c:c9:8e:bb:e7:c9:00:
db:01:fd:c3:f4:e0:40:cd:16:e2:7a:6f:cb:9f:3a:
2d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:76:E2:75:6C:EC:4E:88:25:B4:EC:CF:16:D9:B8:E8:19:41:76:1E
X509v3 Authority Key Identifier:
keyid:97:F1:90:47:F3:F1:E0:59:3D:1C:31:79:97:BE:DE:28:90:AA:0F:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l_GQR_Px4Fk9HDF5l77eKJCqD_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/20b3fe-eebf-42ff-b012-7a3e394c0493/1/l_GQR_Px4Fk9HDF5l77eKJCqD_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/20b3fe-eebf-42ff-b012-7a3e394c0493/1/l_GQR_Px4Fk9HDF5l77eKJCqD_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:58:b4:6a:fc:0b:bb:8f:36:f4:5e:5f:23:ce:d3:0e:99:77:
80:5d:9d:e8:9f:94:57:3e:3b:47:c7:9d:71:d5:b9:76:bf:1b:
b3:34:a7:ed:f2:4b:64:51:e7:a6:a3:cb:e2:b3:fe:ce:7b:f1:
2d:34:67:17:e6:0a:96:f2:f4:77:c2:b9:eb:a3:26:c9:5c:43:
83:35:0d:a0:9a:3f:0c:bf:0a:18:81:2a:0c:28:ae:5f:7d:85:
f2:60:24:f0:98:c8:61:de:9b:c0:c6:8f:27:81:58:19:88:b8:
51:48:d7:4d:c4:5c:4d:45:bd:d0:73:4f:b5:16:81:1d:a4:0e:
3f:95:8d:37:4d:79:4d:c0:5b:d2:1f:41:38:a2:1b:6b:a6:be:
61:e4:80:e3:75:7a:eb:e4:1a:28:8f:25:67:61:48:99:88:2e:
b9:25:52:dd:b5:da:d7:53:31:e2:5b:8c:9e:ab:e8:39:c7:99:
3c:e9:59:d1:8e:4d:5d:37:d4:8b:06:39:cf:74:cf:8c:92:2d:
a8:32:0a:f5:a7:12:e6:99:73:ee:1a:6d:8e:1a:46:79:57:1d:
53:b6:80:69:3b:48:77:aa:c8:9b:01:2d:ed:74:8c:c2:8d:d9:
3f:b5:53:65:54:86:77:cc:6f:2b:a0:12:73:44:53:19:fb:d2:
18:3f:64:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 03:47:05 2026 by rpki-client