Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/qGkessPt7yduULEKxGcF_z0G8s4.mft
File: qGkessPt7yduULEKxGcF_z0G8s4.mft (raw, json)
Hash identifier: 7Qna+ZAnZz8py3Xt04/eXjzW7lrcV+bArMeLTvs7K5I=
Subject key identifier: 57:A7:77:29:12:5E:9C:0A:47:18:8F:A4:87:71:15:4A:72:A1:02:82
Authority key identifier: A8:69:1E:B2:C3:ED:EF:27:6E:50:B1:0A:C4:67:05:FF:3D:06:F2:CE
Certificate issuer: /CN=a8691eb2c3edef276e50b10ac46705ff3d06f2ce
Certificate serial: 019FA6AB1638315006C401778CF2DF729082
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qGkessPt7yduULEKxGcF_z0G8s4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/qGkessPt7yduULEKxGcF_z0G8s4.mft
Manifest number: 4B
Signing time: Tue 28 Jul 2026 03:00:57 +0000
Manifest this update: Tue 28 Jul 2026 03:00:57 +0000
Manifest next update: Wed 29 Jul 2026 03:00:57 +0000
Files and hashes: 1: cGtwdpfhHL2EdldtoWcE3kBi6Uc.roa (hash: FuV6xrO/bK9VTcoP0tR4LEc8Me8SXVxqt9OJJrzA7XA=)
2: qGkessPt7yduULEKxGcF_z0G8s4.crl (hash: iSs0QPLff18dkPpiTpPQP0ZP0T8THFeLJwLyFRcLr40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/qGkessPt7yduULEKxGcF_z0G8s4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/qGkessPt7yduULEKxGcF_z0G8s4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qGkessPt7yduULEKxGcF_z0G8s4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 03:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a6:ab:16:38:31:50:06:c4:01:77:8c:f2:df:72:90:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8691eb2c3edef276e50b10ac46705ff3d06f2ce
Validity
Not Before: Jul 28 03:00:57 2026 GMT
Not After : Jul 29 03:00:57 2026 GMT
Subject: CN=57a77729125e9c0a47188fa48771154a72a10282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4a:48:67:cf:04:85:1d:a1:6e:c7:39:9a:30:
81:2d:c3:e4:28:bc:dd:07:8e:8b:31:82:15:02:28:
06:94:99:73:b5:75:33:ee:0f:c9:99:f8:59:c2:90:
b4:67:34:d4:d4:7d:86:fa:88:77:57:5e:f7:30:e0:
eb:32:56:08:d4:60:27:ea:27:46:5a:cb:ad:ab:8e:
24:5b:3a:2e:e7:25:04:89:ff:bd:1e:5f:ba:05:02:
c8:7f:f3:13:75:bc:9c:37:d8:fb:06:bc:03:8f:c6:
ec:0b:95:69:97:f1:69:2c:ac:9e:a5:25:86:62:15:
9b:19:1f:f4:e7:69:08:99:c5:6d:83:b1:55:39:82:
50:8e:ab:e0:a0:59:ed:47:a2:bb:57:76:65:87:4d:
bd:4e:92:f7:ec:eb:e5:84:f2:10:3a:e5:cb:43:60:
31:dd:c6:7b:44:d7:7e:1e:3a:48:c2:c9:71:7b:0d:
5d:f4:fb:cc:60:7e:c8:ed:ce:90:97:8d:37:1b:e2:
50:99:1a:f5:af:16:e2:c6:b6:a3:68:b1:9a:27:93:
dd:12:2b:62:3d:02:63:d4:f8:83:0b:0e:af:d3:67:
8c:7b:53:78:a4:79:c5:68:0e:d9:d0:1a:5e:5d:58:
6c:5b:8b:7b:16:00:e5:fa:7f:a5:22:f8:64:5b:6c:
82:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:A7:77:29:12:5E:9C:0A:47:18:8F:A4:87:71:15:4A:72:A1:02:82
X509v3 Authority Key Identifier:
keyid:A8:69:1E:B2:C3:ED:EF:27:6E:50:B1:0A:C4:67:05:FF:3D:06:F2:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGkessPt7yduULEKxGcF_z0G8s4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/qGkessPt7yduULEKxGcF_z0G8s4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/qGkessPt7yduULEKxGcF_z0G8s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:46:cb:bf:0b:3d:e0:b4:8e:ea:99:bf:14:94:b0:c2:e2:a8:
af:4a:66:81:86:85:f8:0a:26:6c:88:6c:22:e7:ca:47:13:03:
85:3c:a0:b6:14:2a:c8:ac:21:30:43:a3:9f:1a:20:40:89:79:
9e:f4:59:5d:d3:a9:6a:07:f0:9e:ec:6c:07:d6:6b:c2:1d:b9:
85:7f:d5:3b:6c:03:5d:13:ac:90:f3:6f:93:a6:7a:49:92:57:
1c:0b:e9:b6:17:96:71:a6:f2:bc:ef:46:99:6b:3f:02:dd:ba:
91:a5:0c:2c:d0:56:38:c1:67:2a:8b:5f:3d:4d:53:01:5d:fe:
1c:f3:e8:b4:de:01:08:23:ce:dd:02:1b:4f:01:fe:40:bc:74:
65:d1:c3:ad:db:23:c3:64:47:22:ea:a6:fc:53:4f:3b:b8:2c:
8c:33:22:3c:5a:21:b8:51:06:cf:08:ef:35:84:5f:cf:17:46:
d1:f9:8b:98:70:cc:1b:03:6d:f5:ea:4e:4f:1f:70:eb:8c:59:
8a:f0:73:b1:92:03:fe:f7:5a:79:cf:75:e5:c0:80:76:f0:73:
56:70:f9:b2:93:08:d8:96:db:3c:d0:86:cc:ef:9a:e6:90:65:
13:b8:2c:01:60:7f:88:a1:6a:4e:6e:43:47:9c:d4:35:4b:43:
60:71:60:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 08:28:47 2026 by rpki-client