Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/qGkessPt7yduULEKxGcF_z0G8s4.mft
File: qGkessPt7yduULEKxGcF_z0G8s4.mft (raw, json)
Hash identifier: 6qYpRMSrTfgBrk17JBFE9K5cXQQMqltYmtbDsRXo2uA=
Subject key identifier: 81:72:46:52:CE:54:39:F4:00:2B:AE:4B:41:5F:E0:92:74:C2:4D:67
Authority key identifier: A8:69:1E:B2:C3:ED:EF:27:6E:50:B1:0A:C4:67:05:FF:3D:06:F2:CE
Certificate issuer: /CN=a8691eb2c3edef276e50b10ac46705ff3d06f2ce
Certificate serial: 01A187892D6D0366E05ED148EDDDDE4F459F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qGkessPt7yduULEKxGcF_z0G8s4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/qGkessPt7yduULEKxGcF_z0G8s4.mft
Manifest number: 0144
Signing time: Thu 29 Oct 2026 12:01:16 +0000
Manifest this update: Thu 29 Oct 2026 12:01:16 +0000
Manifest next update: Fri 30 Oct 2026 12:01:16 +0000
Files and hashes: 1: cGtwdpfhHL2EdldtoWcE3kBi6Uc.roa (hash: FuV6xrO/bK9VTcoP0tR4LEc8Me8SXVxqt9OJJrzA7XA=)
2: qGkessPt7yduULEKxGcF_z0G8s4.crl (hash: +N9PM7Th2WQXdHGHs/GIXtJhzOukiktfbkRdQxj1e4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/qGkessPt7yduULEKxGcF_z0G8s4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/qGkessPt7yduULEKxGcF_z0G8s4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qGkessPt7yduULEKxGcF_z0G8s4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:87:89:2d:6d:03:66:e0:5e:d1:48:ed:dd:de:4f:45:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8691eb2c3edef276e50b10ac46705ff3d06f2ce
Validity
Not Before: Oct 29 12:01:16 2026 GMT
Not After : Oct 30 12:01:16 2026 GMT
Subject: CN=81724652ce5439f4002bae4b415fe09274c24d67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:df:71:d5:13:23:af:e0:1e:17:20:65:c7:07:
47:46:62:30:c1:e5:b6:a8:12:8c:01:5f:bd:92:78:
ef:1b:e0:de:8f:ce:16:43:cc:8c:3c:5d:9a:56:a1:
4a:e4:b1:86:98:f3:8c:00:57:7a:07:0b:e7:fd:1e:
03:22:56:b1:7a:4c:9c:3a:a2:85:96:b9:e3:9f:ba:
0e:a0:d3:b2:4e:c4:f3:29:27:c9:00:aa:a1:01:39:
21:b2:cc:60:55:5f:e2:2c:43:b5:3f:5b:61:6d:3e:
59:f4:f0:06:36:d7:1c:3a:e8:8b:cd:88:6f:d4:b0:
a9:21:82:2a:ee:c3:36:ea:0e:0b:89:dd:b9:fd:25:
42:ea:5d:a4:33:75:d0:37:61:21:b3:fe:a3:02:9a:
f1:4b:01:06:71:38:d0:4e:90:49:11:03:b5:7e:d7:
e4:49:a5:b7:fd:ae:e2:c5:ba:92:4a:7b:1d:8f:ff:
11:9e:79:9a:68:c0:a3:fb:68:12:d4:4c:8f:e3:52:
e2:ee:f4:12:ee:3d:f4:bc:ff:a5:2d:8d:b5:4c:df:
e8:4d:96:8a:0e:c4:62:3f:ea:86:71:28:e9:32:a4:
cf:a7:2e:ad:57:e9:35:6f:5b:15:8a:9b:d5:c5:15:
94:7f:25:1c:0d:18:2b:ba:e6:c6:b3:dc:be:32:6d:
a5:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:72:46:52:CE:54:39:F4:00:2B:AE:4B:41:5F:E0:92:74:C2:4D:67
X509v3 Authority Key Identifier:
keyid:A8:69:1E:B2:C3:ED:EF:27:6E:50:B1:0A:C4:67:05:FF:3D:06:F2:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGkessPt7yduULEKxGcF_z0G8s4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/qGkessPt7yduULEKxGcF_z0G8s4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/qGkessPt7yduULEKxGcF_z0G8s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:3e:32:3e:69:9f:ff:5d:c1:ac:79:a0:6f:8e:92:f8:d8:b8:
0a:84:20:de:b4:e3:60:67:d9:4a:a3:72:66:6f:29:d0:13:22:
0c:e1:64:d0:05:03:8a:fa:82:e5:3b:05:c5:c1:1b:1d:b6:07:
37:aa:df:83:18:6c:7b:7d:f3:0a:bf:00:0d:92:e3:d0:47:3b:
47:20:e0:c7:3a:6c:18:fb:b6:c1:5b:62:a3:55:29:18:35:f5:
f5:59:eb:84:8f:50:e5:90:7e:85:f1:8e:3b:8e:1c:fc:f4:f5:
fa:46:df:23:92:69:55:ea:4b:03:ae:07:32:a6:ab:88:b3:ca:
fc:f8:4d:75:6f:0f:15:b0:77:d8:ef:a6:b1:30:b3:01:cf:2e:
ff:95:cd:0f:56:74:d4:72:ed:36:ec:89:4b:92:c8:df:3d:1e:
79:e2:19:86:e7:0a:b9:c4:0d:a5:9c:86:82:88:7a:0f:28:90:
c3:98:fd:a1:25:7f:90:e1:d8:11:27:de:6c:ee:e0:39:c4:ff:
cb:ca:78:70:77:9e:eb:16:d9:b9:3b:cd:e0:71:bd:48:f2:13:
46:c6:c5:9d:f7:78:17:a1:43:62:c6:7b:84:05:93:61:0b:56:
7e:ad:11:0d:00:eb:b0:cd:66:33:c6:00:48:47:65:f5:a5:62:
5e:22:eb:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 15:59:03 2026 by rpki-client