Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/880df4-e334-4a77-8f4a-7dfde8b12e2c/1/gQ5Q-L4h5lVqKjteYOHedlrgLU4.mft
File: gQ5Q-L4h5lVqKjteYOHedlrgLU4.mft (raw, json)
Hash identifier: 6CdhRbuWyQkKx9UtwmXbQezzjGm+yoSRgMCAVE+Vk5M=
Subject key identifier: 16:B2:7A:41:3B:C3:DF:72:08:4A:79:85:19:43:E8:99:C8:0E:99:A6
Authority key identifier: 81:0E:50:F8:BE:21:E6:55:6A:2A:3B:5E:60:E1:DE:76:5A:E0:2D:4E
Certificate issuer: /CN=810e50f8be21e6556a2a3b5e60e1de765ae02d4e
Certificate serial: 019CB95E3225BD374FF543A5DF1B52402AD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQ5Q-L4h5lVqKjteYOHedlrgLU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/880df4-e334-4a77-8f4a-7dfde8b12e2c/1/gQ5Q-L4h5lVqKjteYOHedlrgLU4.mft
Manifest number: 026C
Signing time: Wed 04 Mar 2026 15:01:24 +0000
Manifest this update: Wed 04 Mar 2026 15:01:24 +0000
Manifest next update: Thu 05 Mar 2026 15:01:24 +0000
Files and hashes: 1: G2YFM4i4daVeiu-YZOfdZi2K_5s.roa (hash: fZ6PKIPyu2LKbUXBpMg9IVsm03a/5oYSb04pbpjHKZ8=)
2: gQ5Q-L4h5lVqKjteYOHedlrgLU4.crl (hash: 7/jWiCA2WISac2SoQuuQkLuB2l8odGf3C4qdt4ajZ+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/880df4-e334-4a77-8f4a-7dfde8b12e2c/1/gQ5Q-L4h5lVqKjteYOHedlrgLU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/880df4-e334-4a77-8f4a-7dfde8b12e2c/1/gQ5Q-L4h5lVqKjteYOHedlrgLU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/gQ5Q-L4h5lVqKjteYOHedlrgLU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 14:20:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b9:5e:32:25:bd:37:4f:f5:43:a5:df:1b:52:40:2a:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=810e50f8be21e6556a2a3b5e60e1de765ae02d4e
Validity
Not Before: Mar 4 15:01:24 2026 GMT
Not After : Mar 5 15:01:24 2026 GMT
Subject: CN=16b27a413bc3df72084a79851943e899c80e99a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4a:8d:5c:49:90:67:80:99:f2:29:71:75:5c:
aa:81:a5:2a:68:fd:d1:52:ba:2a:02:1d:f8:3b:75:
6a:8f:6b:1b:91:cd:11:32:1e:61:f7:3e:7e:82:e3:
65:97:c1:6e:8c:f5:f7:43:d6:24:86:88:47:a7:70:
b4:a2:91:c9:82:7b:1a:7a:f5:c6:ef:74:49:9a:63:
56:12:25:bb:83:60:67:48:9f:bf:7d:2b:07:8a:80:
36:34:2c:20:b6:b9:59:62:31:20:bc:78:e1:51:c2:
f8:a0:fd:77:54:34:e7:74:a1:03:7e:9a:17:ec:fc:
64:88:03:9e:a6:d7:91:35:c0:08:75:54:b6:c2:13:
b4:2c:28:52:82:35:2f:f2:e6:13:b6:12:11:33:98:
73:8d:31:70:bc:29:d8:45:cd:07:3f:74:05:28:16:
4b:3a:a0:23:96:df:8d:ac:0c:c4:35:b6:ec:c6:76:
e7:92:35:d5:9e:e2:18:3b:f2:f2:f7:15:2f:02:d8:
70:53:34:cd:84:cc:7f:23:24:4b:0d:1f:a4:d9:b9:
f6:2c:18:23:6d:e3:7e:ce:54:6b:51:a6:9b:0b:a4:
44:b5:ea:dc:df:a6:40:74:76:ce:76:de:7a:db:8d:
36:18:cd:22:c1:2e:80:50:ed:12:f6:41:85:12:e2:
73:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:B2:7A:41:3B:C3:DF:72:08:4A:79:85:19:43:E8:99:C8:0E:99:A6
X509v3 Authority Key Identifier:
keyid:81:0E:50:F8:BE:21:E6:55:6A:2A:3B:5E:60:E1:DE:76:5A:E0:2D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQ5Q-L4h5lVqKjteYOHedlrgLU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/880df4-e334-4a77-8f4a-7dfde8b12e2c/1/gQ5Q-L4h5lVqKjteYOHedlrgLU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/880df4-e334-4a77-8f4a-7dfde8b12e2c/1/gQ5Q-L4h5lVqKjteYOHedlrgLU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:a8:2d:e6:10:e2:9e:bf:5a:c8:92:4b:2f:7c:9f:0e:74:ea:
69:2b:fd:6d:34:1e:55:61:48:0e:f6:5e:12:26:8f:1a:91:2d:
0a:53:7a:7c:a6:c7:51:2f:a2:07:92:c3:22:88:67:aa:99:14:
9c:bd:57:c8:c9:87:d8:2c:ff:b3:92:4b:66:6d:c3:c5:5b:78:
7b:01:95:f2:15:d8:9d:6f:e6:9e:9d:fd:fe:35:5f:2e:c7:2f:
4a:77:f9:8f:af:f2:c5:33:d2:18:9d:27:31:de:14:c9:d5:a8:
5a:b9:f4:9d:9f:ef:52:0c:7e:12:1c:26:5e:e5:32:c7:1a:f0:
8b:c3:67:69:14:25:89:5b:0c:c6:be:f9:39:e6:87:0f:7f:d4:
6c:de:0d:ed:d6:34:a4:ec:7a:07:e5:01:25:c5:28:1e:f5:c9:
7e:4d:92:55:15:a9:94:ef:7d:09:98:33:8a:eb:e6:42:58:ce:
66:5b:57:92:8f:da:d0:7b:95:43:bb:09:c0:5e:13:7d:8a:fa:
b9:00:91:1f:16:0e:88:d1:03:78:f0:77:76:8a:3a:d9:65:9e:
b4:d7:0c:25:d3:fa:c1:59:5e:a1:81:59:84:4e:d3:ea:b2:7e:
a1:18:79:21:fa:8b:e3:45:f2:12:f4:53:50:ba:d2:25:1e:24:
6a:3e:81:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 20:42:04 2026 by rpki-client