Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/qGkessPt7yduULEKxGcF_z0G8s4.mft
File: qGkessPt7yduULEKxGcF_z0G8s4.mft (raw, json)
Hash identifier: REUrY4UOCqS+4BAZRaz3+WeB6QbECPKXuPW23jt8EfQ=
Subject key identifier: 53:F7:0D:BE:4A:4D:88:96:A3:7B:95:E0:A5:9A:31:EE:AB:67:E6:57
Authority key identifier: A8:69:1E:B2:C3:ED:EF:27:6E:50:B1:0A:C4:67:05:FF:3D:06:F2:CE
Certificate issuer: /CN=a8691eb2c3edef276e50b10ac46705ff3d06f2ce
Certificate serial: 01A0D3F09F00E1B6E5EBA5DCC5FE26EAC181
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qGkessPt7yduULEKxGcF_z0G8s4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/qGkessPt7yduULEKxGcF_z0G8s4.mft
Manifest number: E7
Signing time: Thu 24 Sep 2026 15:02:36 +0000
Manifest this update: Thu 24 Sep 2026 15:02:36 +0000
Manifest next update: Fri 25 Sep 2026 15:02:36 +0000
Files and hashes: 1: cGtwdpfhHL2EdldtoWcE3kBi6Uc.roa (hash: FuV6xrO/bK9VTcoP0tR4LEc8Me8SXVxqt9OJJrzA7XA=)
2: qGkessPt7yduULEKxGcF_z0G8s4.crl (hash: fuZ5aByExCgrykWgy3Kdk5S3rVU2+vK7bgYH6dqNQyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/qGkessPt7yduULEKxGcF_z0G8s4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/qGkessPt7yduULEKxGcF_z0G8s4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qGkessPt7yduULEKxGcF_z0G8s4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:f0:9f:00:e1:b6:e5:eb:a5:dc:c5:fe:26:ea:c1:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8691eb2c3edef276e50b10ac46705ff3d06f2ce
Validity
Not Before: Sep 24 15:02:36 2026 GMT
Not After : Sep 25 15:02:36 2026 GMT
Subject: CN=53f70dbe4a4d8896a37b95e0a59a31eeab67e657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a0:14:d8:a3:d2:ba:e6:1f:c9:86:ad:44:66:
2b:7e:b3:2e:e7:d9:81:e0:47:e0:e5:fc:eb:2f:b6:
62:dd:20:53:59:27:72:29:61:44:14:07:2c:ee:09:
fe:70:a8:ce:a0:e5:53:79:f9:fb:7c:6b:a0:4d:53:
d8:a1:2d:bd:7d:df:12:e2:3c:cf:1d:09:ad:19:a7:
d9:46:29:56:36:c6:54:33:2a:99:21:59:1b:d6:8b:
93:38:6a:80:2b:1e:78:fe:4a:97:b1:c7:4f:fd:7f:
21:3e:a4:86:00:10:d3:6d:a3:ce:b8:fd:0d:bb:ce:
c4:aa:ae:65:76:dc:52:24:15:d0:4b:41:af:dd:2c:
e9:53:a2:c5:93:ec:b1:d5:2b:6b:ea:74:b1:66:89:
7b:f9:66:c4:97:e4:b7:fc:83:b9:bf:ef:d4:82:db:
6b:f8:e5:97:75:b6:09:45:12:4a:b8:b5:aa:2f:c9:
a3:ac:c7:94:4c:ef:5b:cf:f8:4e:17:36:c6:40:d1:
83:34:2f:c0:4d:7c:df:e7:24:c9:6c:6b:cd:2b:e5:
5c:46:6b:4c:12:78:a0:11:2a:78:a9:12:6e:91:22:
71:1e:16:c6:ba:a6:35:31:ac:02:6c:af:51:5c:45:
03:cc:3a:5e:08:52:95:0a:21:a9:c1:b8:30:83:b5:
09:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:F7:0D:BE:4A:4D:88:96:A3:7B:95:E0:A5:9A:31:EE:AB:67:E6:57
X509v3 Authority Key Identifier:
keyid:A8:69:1E:B2:C3:ED:EF:27:6E:50:B1:0A:C4:67:05:FF:3D:06:F2:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGkessPt7yduULEKxGcF_z0G8s4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/qGkessPt7yduULEKxGcF_z0G8s4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/qGkessPt7yduULEKxGcF_z0G8s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:58:ba:c8:fa:d0:e9:a7:71:50:1f:40:c3:dc:70:eb:0d:23:
9a:04:4c:3b:33:9f:5f:45:b3:46:8d:f0:4c:d8:aa:fa:6c:b0:
8f:0d:ee:40:78:40:38:21:be:20:9c:dd:d6:17:d7:ee:d0:1e:
41:df:2d:6c:b4:e9:ef:0f:72:f2:e9:84:c5:75:21:b9:58:d2:
ea:2e:4e:78:59:30:fc:aa:c3:e7:64:39:9b:64:a6:5b:ca:f8:
41:a7:a1:a7:26:3a:16:2a:63:40:9b:0c:9d:d5:2a:a9:ad:d3:
5e:6e:d6:a4:51:6a:27:de:54:e6:7b:6a:96:ea:76:38:67:ed:
dd:0f:d9:85:69:9d:e6:da:c4:9d:23:d5:c3:f6:aa:8c:b1:bf:
08:43:9a:8b:85:a6:98:e8:0a:65:01:91:d8:72:48:a9:37:0f:
2e:f9:50:9f:eb:43:5a:aa:26:05:55:86:20:b2:4e:e3:33:ab:
08:5c:4f:66:df:c2:af:c7:78:d6:2d:58:51:70:47:15:0a:b3:
f6:30:29:04:30:a5:97:6c:8f:3f:9e:3f:e5:3e:d5:26:e6:e4:
29:73:5c:7d:d3:65:c0:37:76:82:8d:24:86:8f:3a:ab:e1:1a:
53:7c:4e:0d:09:bc:73:aa:1c:a7:2a:18:89:ad:8e:80:d6:7d:
6c:37:d4:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:58:47 2026 by rpki-client