Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/a9ff1a-d580-4b42-bd87-5597260f65ee/1/GQI5F5kzdgEzH1oSrxHp9PZCEVk.mft
File: GQI5F5kzdgEzH1oSrxHp9PZCEVk.mft (raw, json)
Hash identifier: mpVbImzyknRTyzRAlrYtOJLvZpaY+JfBYZ9tW2uoNZk=
Subject key identifier: 0F:71:1E:89:E9:6C:F2:B9:89:A0:BB:AB:01:CB:64:CC:64:0D:ED:C3
Authority key identifier: 19:02:39:17:99:33:76:01:33:1F:5A:12:AF:11:E9:F4:F6:42:11:59
Certificate issuer: /CN=1902391799337601331f5a12af11e9f4f6421159
Certificate serial: 019D3A1CEDA5D017300931078DD96E981BC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQI5F5kzdgEzH1oSrxHp9PZCEVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/a9ff1a-d580-4b42-bd87-5597260f65ee/1/GQI5F5kzdgEzH1oSrxHp9PZCEVk.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 15:01:07 +0000
Manifest this update: Sun 29 Mar 2026 15:01:07 +0000
Manifest next update: Mon 30 Mar 2026 15:01:07 +0000
Files and hashes: 1: GQI5F5kzdgEzH1oSrxHp9PZCEVk.crl (hash: QboGSo9UVY3fdBD9rZHEezMD8jwTAxXNR0lOy6d1rSI=)
2: _OEYR_NlTtbmQ4jWp8KafD4MvOk.roa (hash: 4XDRL8Ii1WLuqDpCaTnrPdX+U3rQ6Em8H+bJRAAY9Nk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/a9ff1a-d580-4b42-bd87-5597260f65ee/1/GQI5F5kzdgEzH1oSrxHp9PZCEVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/a9ff1a-d580-4b42-bd87-5597260f65ee/1/GQI5F5kzdgEzH1oSrxHp9PZCEVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GQI5F5kzdgEzH1oSrxHp9PZCEVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:ed:a5:d0:17:30:09:31:07:8d:d9:6e:98:1b:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1902391799337601331f5a12af11e9f4f6421159
Validity
Not Before: Mar 29 15:01:07 2026 GMT
Not After : Mar 30 15:01:07 2026 GMT
Subject: CN=0f711e89e96cf2b989a0bbab01cb64cc640dedc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fe:c8:a8:b9:4d:e5:f7:4f:b0:0d:41:26:f1:
7c:19:e5:3b:32:de:14:e5:8d:4d:5c:83:4d:fe:11:
59:3f:3d:8e:c8:93:02:56:a1:c4:36:c1:74:71:06:
f1:58:ab:8d:54:a1:47:9a:28:be:7f:41:d0:bc:a3:
02:74:16:b8:40:68:1b:1d:56:1d:db:58:52:a6:3a:
7e:52:da:e6:c2:57:5d:4e:e6:6c:c4:32:86:b4:60:
6b:ea:8d:62:09:a6:a1:a2:02:33:19:be:bd:71:09:
5f:5b:3f:25:cc:2b:1c:3d:e9:99:cc:bb:59:3c:63:
f1:82:b9:5c:ab:9f:2f:ae:cd:b4:e8:23:0c:2c:d6:
bb:05:e1:df:f5:31:35:19:c2:5d:94:da:44:0b:a8:
85:25:81:33:fe:fd:08:fe:b5:91:55:c3:ad:e3:ac:
d2:9a:cc:3f:ac:26:93:77:12:54:72:06:2b:f5:ad:
57:2c:63:98:ed:83:7d:2e:87:62:d3:ff:af:db:5f:
af:79:68:2f:37:29:61:04:08:17:39:61:ef:ad:77:
ea:e8:b8:77:04:2f:81:90:76:e4:a8:c0:43:09:ca:
02:40:4f:a9:36:f1:c8:b7:5d:c2:b2:3d:bf:cb:c6:
d7:ef:36:fb:cc:64:89:f2:36:10:ae:7b:6b:e2:dc:
91:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:71:1E:89:E9:6C:F2:B9:89:A0:BB:AB:01:CB:64:CC:64:0D:ED:C3
X509v3 Authority Key Identifier:
keyid:19:02:39:17:99:33:76:01:33:1F:5A:12:AF:11:E9:F4:F6:42:11:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQI5F5kzdgEzH1oSrxHp9PZCEVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a9ff1a-d580-4b42-bd87-5597260f65ee/1/GQI5F5kzdgEzH1oSrxHp9PZCEVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a9ff1a-d580-4b42-bd87-5597260f65ee/1/GQI5F5kzdgEzH1oSrxHp9PZCEVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:ab:b2:0e:57:a9:9f:6a:4f:9e:66:24:1b:82:42:53:65:f9:
7c:79:2a:2e:32:2c:60:7f:36:59:97:ff:07:13:ba:5e:97:a3:
83:d2:9f:70:44:5d:0f:18:ed:65:97:56:41:25:65:ce:c7:00:
55:a5:25:c2:32:97:f0:20:6f:c1:08:b1:7c:9f:fb:02:fe:18:
03:7b:79:68:d9:90:2d:08:1f:57:0e:cd:8b:83:e9:32:df:5f:
44:1e:81:86:c4:c9:05:23:c5:32:4f:0c:13:0a:64:94:8a:de:
97:5f:29:5d:15:4e:19:4a:7c:c2:fb:bd:af:ac:a7:c2:1e:4d:
09:58:7a:d4:c4:a6:9e:71:1f:b0:1d:7c:77:02:a2:e7:bb:6f:
de:63:34:0a:b7:60:57:7b:91:31:a2:30:c6:bd:7b:65:3e:d2:
93:82:69:e5:d2:46:67:37:1f:26:93:f4:f1:6f:e6:47:a9:ca:
6f:3c:fb:14:6b:22:30:e3:91:df:fb:73:74:cd:7e:bf:8d:29:
1d:a0:1a:88:51:37:98:d8:8f:ca:76:94:e2:82:50:ba:9e:34:
22:f2:60:67:5e:02:92:95:07:58:1b:f4:f0:74:c6:b4:cf:72:
76:62:d7:98:88:e2:b3:c5:e6:e7:07:25:4f:03:85:a4:e0:57:
ee:8e:70:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:39:11 2026 by rpki-client