Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/rqN-KBjEt6Ahp3POZ9yuHSgg3u0.mft
File: rqN-KBjEt6Ahp3POZ9yuHSgg3u0.mft (raw, json)
Hash identifier: BeVDX28c+PyOebJCgqA1pyllVqsmVdMV8HWM7DTYUS0=
Subject key identifier: CE:F3:9E:39:0C:B0:2C:92:C6:23:36:29:F9:50:0E:56:41:2E:99:DB
Authority key identifier: AE:A3:7E:28:18:C4:B7:A0:21:A7:73:CE:67:DC:AE:1D:28:20:DE:ED
Certificate issuer: /CN=aea37e2818c4b7a021a773ce67dcae1d2820deed
Certificate serial: 01A0D3EF6E932106F1BAAF0B473C109B79E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rqN-KBjEt6Ahp3POZ9yuHSgg3u0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/rqN-KBjEt6Ahp3POZ9yuHSgg3u0.mft
Manifest number: E7
Signing time: Thu 24 Sep 2026 15:01:18 +0000
Manifest this update: Thu 24 Sep 2026 15:01:18 +0000
Manifest next update: Fri 25 Sep 2026 15:01:18 +0000
Files and hashes: 1: 5SWtCRFt6WsOjb-tdJ3j5NUNj0s.roa (hash: 8jRo/6ysSzkjLks/pza54/NHIMmLzqF2Z1dcDNEC0e4=)
2: rqN-KBjEt6Ahp3POZ9yuHSgg3u0.crl (hash: 2vyKcG97IPYJoTDrJHoZIarcp4ozeqKVtvwFEfFmgus=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/rqN-KBjEt6Ahp3POZ9yuHSgg3u0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/rqN-KBjEt6Ahp3POZ9yuHSgg3u0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rqN-KBjEt6Ahp3POZ9yuHSgg3u0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:ef:6e:93:21:06:f1:ba:af:0b:47:3c:10:9b:79:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aea37e2818c4b7a021a773ce67dcae1d2820deed
Validity
Not Before: Sep 24 15:01:18 2026 GMT
Not After : Sep 25 15:01:18 2026 GMT
Subject: CN=cef39e390cb02c92c6233629f9500e56412e99db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c1:a8:71:ee:0f:84:ec:78:e5:6a:7b:97:82:
14:2b:98:01:5e:d7:da:26:7f:e9:53:b7:85:ef:71:
90:77:d5:bc:ec:4b:56:8a:d5:ee:89:03:82:f7:c1:
39:f7:33:c4:68:61:d8:49:1d:94:de:3e:72:01:2a:
1c:7e:33:bd:b8:ca:0b:79:8f:87:41:b3:ed:1d:25:
70:30:14:b6:9e:d2:3f:f5:54:49:7f:7d:a2:b4:05:
4c:4d:fb:e6:b4:2c:d6:b4:1d:05:ba:40:d4:a1:3f:
3e:16:47:04:99:22:5c:06:1a:3c:1c:4e:84:5b:77:
5e:7f:d3:df:2e:97:4c:e5:98:5b:cd:01:27:5c:65:
4c:81:7c:e3:4c:36:d7:d2:ab:c1:c6:57:1c:3c:8b:
d5:87:63:13:58:70:3a:9b:5d:7f:77:46:56:56:01:
e6:f6:87:e6:42:67:9a:e6:4c:b0:4b:56:15:ce:36:
8c:d2:67:8f:be:bd:a6:ba:a8:3f:40:b4:a1:84:3d:
00:3e:8f:0c:66:aa:f4:72:83:21:cb:2f:58:04:51:
99:57:b5:11:1c:f1:54:7b:72:19:3f:58:e9:a3:31:
55:cd:39:46:eb:d3:18:ed:9a:28:6e:b3:6c:f4:4c:
1e:cd:89:6d:bc:8c:a1:03:7d:d6:67:a4:1e:53:1c:
ab:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:F3:9E:39:0C:B0:2C:92:C6:23:36:29:F9:50:0E:56:41:2E:99:DB
X509v3 Authority Key Identifier:
keyid:AE:A3:7E:28:18:C4:B7:A0:21:A7:73:CE:67:DC:AE:1D:28:20:DE:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rqN-KBjEt6Ahp3POZ9yuHSgg3u0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/rqN-KBjEt6Ahp3POZ9yuHSgg3u0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/a23348-62cf-4afa-94fc-9dd8561caede/1/rqN-KBjEt6Ahp3POZ9yuHSgg3u0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:68:94:16:66:a6:9e:2f:39:e6:43:e1:a0:2f:fa:02:48:1e:
d8:9a:29:3d:e5:06:e7:68:b5:26:eb:11:40:e1:05:0c:b9:6f:
cf:37:05:d7:2b:0c:4c:38:b7:4a:c2:bf:08:51:77:3d:0c:6b:
72:0f:49:cc:db:e2:d9:3c:49:98:bf:7f:64:88:9f:a5:00:2c:
1d:4d:47:6f:13:b6:7e:b0:eb:b2:38:76:b2:f6:60:c6:40:f6:
b2:b9:6e:68:79:61:a5:31:52:63:a7:20:84:e8:3f:23:6e:79:
16:e3:c6:fc:c9:90:22:b5:c9:be:7f:00:21:3e:62:e8:5c:1b:
b2:6c:8c:38:9a:f2:81:58:8b:8f:81:0d:a8:4b:80:b9:60:df:
b5:37:3a:f7:8d:00:f5:3e:a9:24:36:eb:30:2f:96:87:5f:bb:
6b:b7:65:ad:bb:fe:f5:f1:3b:7e:03:cd:ed:f9:48:1a:49:3f:
ef:08:2b:8a:04:dd:65:16:4d:ff:17:10:93:cd:ff:0f:b7:47:
85:27:12:fb:87:b6:01:2b:c3:b6:30:af:9f:a5:28:f4:0c:3b:
89:ca:f1:c3:c3:3f:5b:18:03:b2:da:9f:2a:fe:8c:98:70:5b:
a8:b4:73:05:1c:3f:36:28:0c:4e:40:d7:50:93:df:14:4a:7a:
fe:f3:ff:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:15:48 2026 by rpki-client