Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/20b3fe-eebf-42ff-b012-7a3e394c0493/1/l_GQR_Px4Fk9HDF5l77eKJCqD_s.mft
File: l_GQR_Px4Fk9HDF5l77eKJCqD_s.mft (raw, json)
Hash identifier: CPNj2GmNhblrj2bSj+8Wp172mhbOpzDuHwXpPj5mjPk=
Subject key identifier: FE:44:FA:B6:FD:9D:33:5A:A0:6B:53:8A:5C:AB:04:16:70:73:8E:91
Authority key identifier: 97:F1:90:47:F3:F1:E0:59:3D:1C:31:79:97:BE:DE:28:90:AA:0F:FB
Certificate issuer: /CN=97f19047f3f1e0593d1c317997bede2890aa0ffb
Certificate serial: 019D371B7CFBCD8F7B538B118B1905A69F71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l_GQR_Px4Fk9HDF5l77eKJCqD_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/20b3fe-eebf-42ff-b012-7a3e394c0493/1/l_GQR_Px4Fk9HDF5l77eKJCqD_s.mft
Manifest number: 01C5
Signing time: Sun 29 Mar 2026 01:00:41 +0000
Manifest this update: Sun 29 Mar 2026 01:00:41 +0000
Manifest next update: Mon 30 Mar 2026 01:00:41 +0000
Files and hashes: 1: l_GQR_Px4Fk9HDF5l77eKJCqD_s.crl (hash: ocob35IG4ISgFGzYr/A6oa/L54cGjCzL39DAC6774AU=)
2: vhjXwUxUHjnodkfGPP9oE-wn8JQ.roa (hash: pzt6Tw+aFjj+nqYVhnhtqZPOWZ64o5R/mQIj9SS6SOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/20b3fe-eebf-42ff-b012-7a3e394c0493/1/l_GQR_Px4Fk9HDF5l77eKJCqD_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/20b3fe-eebf-42ff-b012-7a3e394c0493/1/l_GQR_Px4Fk9HDF5l77eKJCqD_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/l_GQR_Px4Fk9HDF5l77eKJCqD_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:7c:fb:cd:8f:7b:53:8b:11:8b:19:05:a6:9f:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97f19047f3f1e0593d1c317997bede2890aa0ffb
Validity
Not Before: Mar 29 01:00:41 2026 GMT
Not After : Mar 30 01:00:41 2026 GMT
Subject: CN=fe44fab6fd9d335aa06b538a5cab041670738e91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:09:8d:55:e5:5f:b1:78:53:f0:0b:21:18:8e:
1b:b0:39:df:5b:9b:9f:b6:14:40:a4:d3:ce:19:ff:
bf:9d:f2:c0:21:62:72:78:f3:49:db:7a:2c:57:95:
5c:bb:5a:68:cd:4e:7d:23:d3:5c:d9:1e:df:7c:d9:
7b:b3:97:a8:08:a5:cd:0d:cb:41:3a:ad:49:a7:9d:
4b:20:0d:a6:71:6f:50:84:8d:13:b4:ca:3f:b3:35:
e8:98:35:82:9c:ed:79:83:b2:c3:64:8a:b7:00:b2:
08:bb:36:1c:68:9c:85:0b:ff:9a:99:4d:b4:56:57:
04:1c:45:af:c0:d2:8d:b1:c3:a2:df:d6:89:a4:3a:
97:1f:ae:aa:ce:ca:45:38:9d:0f:56:95:03:5f:b6:
c0:45:fd:0d:3f:40:76:e6:f2:a3:ae:cc:8d:c8:c5:
3c:34:66:79:41:17:3a:78:47:99:72:2d:91:93:92:
0f:b2:cc:8a:47:49:dd:ad:87:35:78:3f:23:0b:c7:
3d:72:82:47:4a:2f:93:3d:87:9b:62:ae:b1:d1:7a:
37:55:58:8c:d0:ca:42:65:bb:06:5d:06:9b:1a:90:
13:a3:6b:90:54:0b:88:d7:37:1d:ad:0f:1d:7a:92:
97:73:b7:93:40:15:e6:20:30:73:e5:76:4b:ab:db:
f2:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:44:FA:B6:FD:9D:33:5A:A0:6B:53:8A:5C:AB:04:16:70:73:8E:91
X509v3 Authority Key Identifier:
keyid:97:F1:90:47:F3:F1:E0:59:3D:1C:31:79:97:BE:DE:28:90:AA:0F:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l_GQR_Px4Fk9HDF5l77eKJCqD_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/20b3fe-eebf-42ff-b012-7a3e394c0493/1/l_GQR_Px4Fk9HDF5l77eKJCqD_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/20b3fe-eebf-42ff-b012-7a3e394c0493/1/l_GQR_Px4Fk9HDF5l77eKJCqD_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:86:0a:7a:e3:1d:92:67:89:01:5f:04:2e:d1:50:9d:59:b4:
25:3c:08:3f:db:c9:df:85:bb:38:5b:bb:e7:aa:08:70:ed:9c:
91:c9:27:95:b6:ed:e1:f1:e1:f7:31:8c:55:78:a0:50:5d:28:
17:15:85:20:28:8b:26:23:32:99:86:ee:a7:b7:ce:90:a0:3a:
1b:b6:9e:80:a9:cd:52:d7:f8:01:fc:1c:dc:fd:ba:cd:ce:da:
b9:70:66:7e:da:42:df:dd:3e:d7:53:5a:2d:8b:c6:1e:a2:8a:
7e:8d:6d:ba:f6:29:ca:89:84:c5:79:ff:52:2b:aa:0a:91:d3:
5c:4f:03:44:08:6c:87:c1:20:7f:36:13:b1:b6:c4:56:ce:cc:
72:b3:9c:fb:51:7a:cb:a8:40:75:b9:23:47:2c:88:28:61:b8:
7f:2f:96:d1:74:e9:d3:cf:47:cd:b7:08:98:c4:fb:1f:8f:e1:
37:86:53:a1:8c:81:67:37:7a:c8:87:f5:26:fd:60:d4:8b:29:
14:e6:b1:65:5e:bd:c2:c1:03:89:b4:81:55:55:32:24:53:98:
2d:47:51:4f:d3:3a:c0:24:a1:51:c5:85:f6:12:e4:39:70:82:
b6:6c:7a:87:c6:b9:41:73:1e:65:f8:6d:c9:27:79:fb:72:d7:
98:3c:b9:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:04 2026 by rpki-client