Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9e/e7b4ba-5595-496c-9ccb-3b2a420257e2/1/gQCdcz4MWg3Szd7T4ev6ynol1Yw.mft
File: gQCdcz4MWg3Szd7T4ev6ynol1Yw.mft (raw, json)
Hash identifier: Mmqhw9lLa0ltUQngFQkhw1Uuq/UhcqGP2Gg9oM2T9y8=
Subject key identifier: 27:17:40:1F:45:11:72:10:3C:DB:E8:EF:B0:A9:F1:7D:0B:0C:90:DC
Authority key identifier: 81:00:9D:73:3E:0C:5A:0D:D2:CD:DE:D3:E1:EB:FA:CA:7A:25:D5:8C
Certificate issuer: /CN=81009d733e0c5a0dd2cdded3e1ebfaca7a25d58c
Certificate serial: 01A0BEE7494AE38BC3605CC907270B3EF6FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQCdcz4MWg3Szd7T4ev6ynol1Yw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/e7b4ba-5595-496c-9ccb-3b2a420257e2/1/gQCdcz4MWg3Szd7T4ev6ynol1Yw.mft
Manifest number: AD
Signing time: Sun 20 Sep 2026 13:00:23 +0000
Manifest this update: Sun 20 Sep 2026 13:00:23 +0000
Manifest next update: Mon 21 Sep 2026 13:00:23 +0000
Files and hashes: 1: 3c12ieSU9RhqpmzjPf9hRCT_8No.roa (hash: +2cjmK41brny7jHxZs8/WuLLOqfrVztHpp8kEr7qmFw=)
2: gQCdcz4MWg3Szd7T4ev6ynol1Yw.crl (hash: 6Q9fV2ez5bri0/HJeyzDZWN1EOC64gpxkmiGXi2vNy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/e7b4ba-5595-496c-9ccb-3b2a420257e2/1/gQCdcz4MWg3Szd7T4ev6ynol1Yw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/e7b4ba-5595-496c-9ccb-3b2a420257e2/1/gQCdcz4MWg3Szd7T4ev6ynol1Yw.mft
rsync://rpki.ripe.net/repository/DEFAULT/gQCdcz4MWg3Szd7T4ev6ynol1Yw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 13:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:e7:49:4a:e3:8b:c3:60:5c:c9:07:27:0b:3e:f6:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81009d733e0c5a0dd2cdded3e1ebfaca7a25d58c
Validity
Not Before: Sep 20 13:00:23 2026 GMT
Not After : Sep 21 13:00:23 2026 GMT
Subject: CN=2717401f451172103cdbe8efb0a9f17d0b0c90dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e1:7a:cc:fd:1b:87:a1:fb:fe:0a:be:60:a8:
b8:92:99:45:67:23:46:26:94:d1:dd:95:4c:56:1c:
8f:8e:2a:aa:65:66:82:2f:2a:b6:db:af:1b:bd:00:
ad:84:b8:78:27:1a:1a:78:d9:77:f6:51:31:eb:f2:
89:61:c2:48:22:12:4c:71:87:c3:17:36:24:3f:0a:
c5:c3:97:b4:24:f5:24:e9:e0:b9:a3:39:eb:5c:2b:
d8:65:df:b5:89:02:e7:a9:40:1e:9c:da:e9:d6:16:
da:d3:05:62:15:f9:02:a3:e4:78:ce:cf:71:4a:ef:
9b:ae:1b:30:95:a6:a2:b1:a0:0b:ad:5e:17:f0:64:
d6:00:ee:25:fe:b8:df:21:8f:e1:03:7a:4f:99:42:
52:29:25:22:95:04:35:07:86:80:21:90:92:86:b1:
00:1d:11:55:11:89:d3:cb:0c:9f:d9:f1:3b:a6:2f:
db:7f:6f:aa:05:3f:db:fd:58:99:8f:ec:74:9e:4b:
96:54:b3:b4:9d:4f:65:d4:9d:5b:6c:8f:7e:67:fc:
f8:f5:dc:37:34:2f:70:93:6d:0a:0d:68:2d:17:7d:
10:f5:10:93:20:c5:59:d7:14:ae:15:8b:61:fc:6b:
a3:2c:6e:2c:3d:57:79:b6:cc:16:4a:d8:53:64:c2:
1a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:17:40:1F:45:11:72:10:3C:DB:E8:EF:B0:A9:F1:7D:0B:0C:90:DC
X509v3 Authority Key Identifier:
keyid:81:00:9D:73:3E:0C:5A:0D:D2:CD:DE:D3:E1:EB:FA:CA:7A:25:D5:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQCdcz4MWg3Szd7T4ev6ynol1Yw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e7b4ba-5595-496c-9ccb-3b2a420257e2/1/gQCdcz4MWg3Szd7T4ev6ynol1Yw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e7b4ba-5595-496c-9ccb-3b2a420257e2/1/gQCdcz4MWg3Szd7T4ev6ynol1Yw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:cd:38:b4:c7:80:11:6a:ed:18:3f:10:ec:d2:c9:9d:46:2a:
62:7e:ae:cf:24:83:58:4d:b6:34:cf:86:cd:03:f7:da:18:fe:
65:e9:d9:11:2a:6f:8c:64:bb:ce:0b:03:46:90:4a:40:0f:4a:
e1:64:41:ea:a1:bf:db:87:c6:21:6d:8b:75:3e:99:c3:1a:0d:
df:51:cb:33:50:cb:5d:09:2f:d0:b4:d7:99:8c:6d:0c:54:f2:
43:5f:f1:de:29:bc:ae:a4:b5:ed:97:3d:3c:a5:d7:ad:dd:59:
59:f6:ea:5b:77:95:ff:b9:f1:fc:91:dc:8c:90:97:f9:3d:ff:
12:d4:84:b7:f0:52:74:82:d3:05:3b:5d:98:78:77:e0:aa:44:
db:7f:d3:20:35:8f:be:f1:e6:ce:63:6a:64:67:61:7a:2b:02:
87:7d:4e:fb:f7:cf:fe:64:eb:50:63:85:55:7f:4b:0f:b2:53:
5a:79:a1:7a:b9:0b:1e:07:6f:7f:2b:d2:75:7f:33:d4:9e:c2:
99:ca:d5:cd:4e:2b:00:28:e7:4a:80:7a:76:ca:4b:f8:47:8a:
2e:3d:ed:18:dc:aa:9c:73:11:65:1e:32:5e:8f:6f:74:d3:05:
19:07:a4:1b:0c:d2:46:80:91:ab:61:37:aa:d1:8c:12:40:cf:
45:59:36:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC+50lK44vDYFzJBycLPvb+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxMDA5ZDczM2UwYzVhMGRkMmNkZGVkM2UxZWJmYWNhN2Ey
NWQ1OGMwHhcNMjYwOTIwMTMwMDIzWhcNMjYwOTIxMTMwMDIzWjAzMTEwLwYDVQQD
EygyNzE3NDAxZjQ1MTE3MjEwM2NkYmU4ZWZiMGE5ZjE3ZDBiMGM5MGRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOF6zP0bh6H7/gq+YKi4kplFZyNG
JpTR3ZVMVhyPjiqqZWaCLyq2268bvQCthLh4JxoaeNl39lEx6/KJYcJIIhJMcYfD
FzYkPwrFw5e0JPUk6eC5oznrXCvYZd+1iQLnqUAenNrp1hba0wViFfkCo+R4zs9x
Su+brhswlaaisaALrV4X8GTWAO4l/rjfIY/hA3pPmUJSKSUilQQ1B4aAIZCShrEA
HRFVEYnTywyf2fE7pi/bf2+qBT/b/ViZj+x0nkuWVLO0nU9l1J1bbI9+Z/z49dw3
NC9wk20KDWgtF30Q9RCTIMVZ1xSuFYth/GujLG4sPVd5tswWSthTZMIaNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCcXQB9FEXIQPNvo77Cp8X0LDJDcMB8GA1UdIwQY
MBaAFIEAnXM+DFoN0s3e0+Hr+sp6JdWMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1FDZGN6NE1XZzNTemQ3VDRldjZ5bm9sMVl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9lN2I0YmEtNTU5NS00OTZjLTljY2It
M2IyYTQyMDI1N2UyLzEvZ1FDZGN6NE1XZzNTemQ3VDRldjZ5bm9sMVl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS9lN2I0YmEtNTU5NS00OTZjLTljY2ItM2IyYTQyMDI1N2Uy
LzEvZ1FDZGN6NE1XZzNTemQ3VDRldjZ5bm9sMVl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzM04tMeA
EWrtGD8Q7NLJnUYqYn6uzySDWE22NM+GzQP32hj+ZenZESpvjGS7zgsDRpBKQA9K
4WRB6qG/24fGIW2LdT6ZwxoN31HLM1DLXQkv0LTXmYxtDFTyQ1/x3im8rqS17Zc9
PKXXrd1ZWfbqW3eV/7nx/JHcjJCX+T3/EtSEt/BSdILTBTtdmHh34KpE23/TIDWP
vvHmzmNqZGdheisCh31O+/fP/mTrUGOFVX9LD7JTWnmherkLHgdvfyvSdX8z1J7C
mcrVzU4rACjnSoB6dspL+EeKLj3tGNyqnHMRZR4yXo9vdNMFGQekGwzSRoCRq2E3
qtGMEkDPRVk2xg==
-----END CERTIFICATE-----
Generated at Sun Sep 20 21:11:30 2026 by rpki-client