Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/qGkessPt7yduULEKxGcF_z0G8s4.mft
File: qGkessPt7yduULEKxGcF_z0G8s4.mft (raw, json)
Hash identifier: CnfSQZPFJ3N1G4YewAinoxa+7KiVKGJtYbk/h1LJJUM=
Subject key identifier: 97:CA:C0:45:E0:49:3E:EB:80:A0:7C:83:F3:E2:DA:77:79:0F:C5:E0
Authority key identifier: A8:69:1E:B2:C3:ED:EF:27:6E:50:B1:0A:C4:67:05:FF:3D:06:F2:CE
Certificate issuer: /CN=a8691eb2c3edef276e50b10ac46705ff3d06f2ce
Certificate serial: 01A0905756FAA055355EE41B26491D97518B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qGkessPt7yduULEKxGcF_z0G8s4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/qGkessPt7yduULEKxGcF_z0G8s4.mft
Manifest number: C4
Signing time: Fri 11 Sep 2026 12:00:37 +0000
Manifest this update: Fri 11 Sep 2026 12:00:37 +0000
Manifest next update: Sat 12 Sep 2026 12:00:37 +0000
Files and hashes: 1: cGtwdpfhHL2EdldtoWcE3kBi6Uc.roa (hash: FuV6xrO/bK9VTcoP0tR4LEc8Me8SXVxqt9OJJrzA7XA=)
2: qGkessPt7yduULEKxGcF_z0G8s4.crl (hash: VDTQFO3FGwsCy9aLKBv4/Obvfum+N8WXRWdQ9ziE8Sw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/qGkessPt7yduULEKxGcF_z0G8s4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/qGkessPt7yduULEKxGcF_z0G8s4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qGkessPt7yduULEKxGcF_z0G8s4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:90:57:56:fa:a0:55:35:5e:e4:1b:26:49:1d:97:51:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8691eb2c3edef276e50b10ac46705ff3d06f2ce
Validity
Not Before: Sep 11 12:00:37 2026 GMT
Not After : Sep 12 12:00:37 2026 GMT
Subject: CN=97cac045e0493eeb80a07c83f3e2da77790fc5e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7d:c3:e8:63:22:7b:e6:2c:33:67:4a:e1:0e:
9c:c8:35:be:bf:1c:8a:67:9b:22:8e:fe:d3:f1:f9:
87:f8:df:15:16:9c:fa:2d:1b:89:e5:6a:d9:b6:8e:
26:2a:f0:be:36:2a:20:68:08:5e:8a:f0:5f:61:c2:
0a:44:09:35:46:37:78:01:40:8a:c1:c9:d2:42:ae:
61:76:db:31:19:8e:85:a1:de:ae:df:07:94:f6:95:
de:92:8d:72:74:bc:7d:8a:87:7f:97:67:c6:85:b4:
3e:7b:d3:c0:27:ed:17:ac:1e:02:6e:62:62:0f:9a:
58:88:f2:66:7a:0c:1b:08:fa:43:92:08:03:39:cd:
80:ce:fd:32:0e:94:06:eb:c7:3e:d3:7b:61:85:d4:
9e:8d:37:22:bd:e9:ba:52:20:66:21:f7:33:5e:8e:
27:ac:01:dd:91:7a:8c:34:dd:ee:57:0a:48:c4:a8:
78:03:2f:61:79:24:66:3f:0f:e2:11:2c:64:8d:44:
13:e1:a3:1a:3a:1a:a3:c9:09:a4:c2:45:8a:11:a5:
97:f0:35:d8:e7:74:3a:1e:37:cb:ba:d4:6c:20:85:
21:38:06:b9:25:53:31:16:4f:1b:48:10:2b:6f:96:
2d:13:a3:13:15:e1:ed:80:8c:f5:66:e4:9a:08:52:
1c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:CA:C0:45:E0:49:3E:EB:80:A0:7C:83:F3:E2:DA:77:79:0F:C5:E0
X509v3 Authority Key Identifier:
keyid:A8:69:1E:B2:C3:ED:EF:27:6E:50:B1:0A:C4:67:05:FF:3D:06:F2:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGkessPt7yduULEKxGcF_z0G8s4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/qGkessPt7yduULEKxGcF_z0G8s4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/qGkessPt7yduULEKxGcF_z0G8s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:3e:d4:b0:8a:90:74:89:44:2f:81:4a:59:9d:70:c0:5f:95:
80:87:a6:b4:65:1f:3b:41:67:ff:8d:13:bd:da:c5:02:20:20:
d1:b1:e0:2d:56:e4:bc:d1:62:b5:7a:70:a3:f1:9a:e4:70:fe:
22:cf:22:f3:b7:81:08:d0:52:80:3f:6f:e4:43:67:d9:0f:01:
2a:c5:1e:55:1e:8b:7d:e3:76:02:5d:10:83:b2:06:3d:49:8c:
9b:6c:33:7a:92:96:b8:71:54:0d:7e:df:9f:14:b9:dc:f7:dd:
07:7e:14:39:ba:8c:ce:39:d6:d2:f6:14:41:6f:d7:71:1e:15:
82:06:c0:0d:0c:d2:b8:69:76:b7:68:64:bc:a2:04:eb:4e:a5:
00:56:bf:7a:12:32:24:f1:46:97:c8:89:26:57:cb:7e:ee:6b:
e5:49:98:96:4b:46:82:06:4f:aa:c3:05:39:11:f7:05:81:2b:
02:81:2a:4b:8b:95:39:0c:f8:21:58:e9:35:5f:3a:aa:0c:b5:
0a:17:6c:d4:02:5c:94:fd:42:67:9c:a1:02:e8:70:1c:23:fc:
39:06:d8:63:f1:54:15:0a:64:21:2d:70:af:67:d3:b2:98:a4:
02:14:38:8b:5f:3b:cb:66:38:f2:2e:31:f4:c4:34:48:43:cc:
43:08:90:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCQV1b6oFU1XuQbJkkdl1GLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4NjkxZWIyYzNlZGVmMjc2ZTUwYjEwYWM0NjcwNWZmM2Qw
NmYyY2UwHhcNMjYwOTExMTIwMDM3WhcNMjYwOTEyMTIwMDM3WjAzMTEwLwYDVQQD
Eyg5N2NhYzA0NWUwNDkzZWViODBhMDdjODNmM2UyZGE3Nzc5MGZjNWUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtX3D6GMie+YsM2dK4Q6cyDW+vxyK
Z5sijv7T8fmH+N8VFpz6LRuJ5WrZto4mKvC+NiogaAheivBfYcIKRAk1Rjd4AUCK
wcnSQq5hdtsxGY6Fod6u3weU9pXeko1ydLx9iod/l2fGhbQ+e9PAJ+0XrB4CbmJi
D5pYiPJmegwbCPpDkggDOc2Azv0yDpQG68c+03thhdSejTcivem6UiBmIfczXo4n
rAHdkXqMNN3uVwpIxKh4Ay9heSRmPw/iESxkjUQT4aMaOhqjyQmkwkWKEaWX8DXY
53Q6HjfLutRsIIUhOAa5JVMxFk8bSBArb5YtE6MTFeHtgIz1ZuSaCFIcmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJfKwEXgST7rgKB8g/Pi2nd5D8XgMB8GA1UdIwQY
MBaAFKhpHrLD7e8nblCxCsRnBf89BvLOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUdrZXNzUHQ3eWR1VUxFS3hHY0ZfejBHOHM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC83ZTE5ODktNGIxZS00ZjMzLWJkMzIt
YWM4ODE0OTdlMGEyLzEvcUdrZXNzUHQ3eWR1VUxFS3hHY0ZfejBHOHM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC83ZTE5ODktNGIxZS00ZjMzLWJkMzItYWM4ODE0OTdlMGEy
LzEvcUdrZXNzUHQ3eWR1VUxFS3hHY0ZfejBHOHM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHD7UsIqQ
dIlEL4FKWZ1wwF+VgIemtGUfO0Fn/40TvdrFAiAg0bHgLVbkvNFitXpwo/Ga5HD+
Is8i87eBCNBSgD9v5ENn2Q8BKsUeVR6LfeN2Al0Qg7IGPUmMm2wzepKWuHFUDX7f
nxS53PfdB34UObqMzjnW0vYUQW/XcR4VggbADQzSuGl2t2hkvKIE606lAFa/ehIy
JPFGl8iJJlfLfu5r5UmYlktGggZPqsMFORH3BYErAoEqS4uVOQz4IVjpNV86qgy1
Chds1AJclP1CZ5yhAuhwHCP8OQbYY/FUFQpkIS1wr2fTspikAhQ4i187y2Y48i4x
9MQ0SEPMQwiQ0w==
-----END CERTIFICATE-----
Generated at Fri Sep 11 18:36:15 2026 by rpki-client