Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9e/e7b4ba-5595-496c-9ccb-3b2a420257e2/1/gQCdcz4MWg3Szd7T4ev6ynol1Yw.mft
File: gQCdcz4MWg3Szd7T4ev6ynol1Yw.mft (raw, json)
Hash identifier: rBELVBE10aceXRTqMMMVBX5ZqtQ0VpvUQV49AplLkAY=
Subject key identifier: 8E:AA:16:8A:A0:96:DE:F2:73:57:F4:92:1C:E5:6F:30:74:41:43:08
Authority key identifier: 81:00:9D:73:3E:0C:5A:0D:D2:CD:DE:D3:E1:EB:FA:CA:7A:25:D5:8C
Certificate issuer: /CN=81009d733e0c5a0dd2cdded3e1ebfaca7a25d58c
Certificate serial: 01A0D4268F5ACAF53F7610463C2762C5A75D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQCdcz4MWg3Szd7T4ev6ynol1Yw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/e7b4ba-5595-496c-9ccb-3b2a420257e2/1/gQCdcz4MWg3Szd7T4ev6ynol1Yw.mft
Manifest number: B8
Signing time: Thu 24 Sep 2026 16:01:31 +0000
Manifest this update: Thu 24 Sep 2026 16:01:31 +0000
Manifest next update: Fri 25 Sep 2026 16:01:31 +0000
Files and hashes: 1: 3c12ieSU9RhqpmzjPf9hRCT_8No.roa (hash: +2cjmK41brny7jHxZs8/WuLLOqfrVztHpp8kEr7qmFw=)
2: gQCdcz4MWg3Szd7T4ev6ynol1Yw.crl (hash: R9sCJQmZPRYsyuoyASG5Jyipp+cywynsRo7KBIlepio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/e7b4ba-5595-496c-9ccb-3b2a420257e2/1/gQCdcz4MWg3Szd7T4ev6ynol1Yw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/e7b4ba-5595-496c-9ccb-3b2a420257e2/1/gQCdcz4MWg3Szd7T4ev6ynol1Yw.mft
rsync://rpki.ripe.net/repository/DEFAULT/gQCdcz4MWg3Szd7T4ev6ynol1Yw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:26:8f:5a:ca:f5:3f:76:10:46:3c:27:62:c5:a7:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81009d733e0c5a0dd2cdded3e1ebfaca7a25d58c
Validity
Not Before: Sep 24 16:01:31 2026 GMT
Not After : Sep 25 16:01:31 2026 GMT
Subject: CN=8eaa168aa096def27357f4921ce56f3074414308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b4:70:1f:90:48:59:f5:cc:e2:84:66:d3:ee:
2a:2c:0c:a1:12:f8:a9:7a:c6:a0:f4:af:46:e9:ad:
1f:70:c9:0d:1d:97:bc:3c:09:5a:4d:59:6d:ae:cb:
f1:a6:7e:b2:73:56:78:3f:74:b7:c2:0f:09:67:6d:
71:4e:32:c0:01:cc:9b:c4:c0:17:b6:a4:a7:b9:1e:
ea:dc:d6:e0:d5:2d:dc:2b:f1:96:02:78:0c:6d:7a:
2b:d3:55:51:2c:42:ca:fa:c0:08:d3:1d:75:f5:4c:
31:33:fe:1c:7c:fd:27:de:4c:cd:4a:47:76:34:57:
93:a3:58:d0:6f:fc:41:4c:91:34:a2:85:bf:e7:91:
93:5a:20:a7:b2:b1:a8:e1:3c:58:44:f9:71:15:d1:
87:98:22:30:80:c0:6f:17:29:09:3c:6d:d6:06:a5:
0a:25:52:19:a2:27:f1:f4:98:4c:13:5d:39:97:33:
8e:0a:e4:75:e6:94:7a:0a:3e:ed:77:73:94:d9:c0:
fb:f4:07:8d:20:60:56:61:74:7f:cb:fc:d7:5f:33:
4b:b5:5d:ed:01:6d:18:21:12:17:10:5f:c0:0f:bb:
ee:32:a8:89:2d:36:12:0e:da:bd:8c:cf:85:67:52:
04:f6:f6:d6:dd:13:a3:cb:fc:2d:ee:1d:83:6b:93:
99:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:AA:16:8A:A0:96:DE:F2:73:57:F4:92:1C:E5:6F:30:74:41:43:08
X509v3 Authority Key Identifier:
keyid:81:00:9D:73:3E:0C:5A:0D:D2:CD:DE:D3:E1:EB:FA:CA:7A:25:D5:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQCdcz4MWg3Szd7T4ev6ynol1Yw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e7b4ba-5595-496c-9ccb-3b2a420257e2/1/gQCdcz4MWg3Szd7T4ev6ynol1Yw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e7b4ba-5595-496c-9ccb-3b2a420257e2/1/gQCdcz4MWg3Szd7T4ev6ynol1Yw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:4d:37:2c:d2:6c:e4:84:ed:7c:08:dd:45:73:26:9a:57:e0:
26:c3:1b:aa:60:b6:3b:6b:5c:fd:92:06:fe:cc:d2:c0:c9:f9:
d9:75:8d:48:33:0e:a5:8a:f4:5d:90:c5:5f:3f:f6:4c:c8:8e:
5f:a7:62:86:72:fe:9a:e0:27:b1:11:1d:d5:c6:5c:e7:27:01:
65:c4:8b:20:05:fb:c5:9e:a3:32:05:fa:b9:20:2c:01:02:2f:
d7:7d:5a:73:c8:5f:10:4a:a8:bb:e7:5b:84:33:de:04:e5:eb:
8c:ef:91:68:e4:70:cf:88:9f:5a:35:dc:1a:ae:85:54:5d:6c:
b9:9d:9a:4c:ce:63:fe:31:a1:4e:87:be:3f:45:77:91:1a:55:
e8:62:ec:1b:e1:e9:9a:79:df:ac:51:dc:a6:29:b1:34:ac:73:
8e:90:8a:d7:8d:1f:ee:4e:ae:78:e7:c6:db:49:b2:ff:ef:92:
9d:f3:ff:d6:6f:f4:ba:cd:4c:e1:a3:9f:2e:14:97:78:07:12:
bd:ee:f4:66:b5:60:eb:5b:71:13:77:71:3f:e6:29:28:58:d8:
54:21:11:45:5d:49:0d:5a:64:e7:97:0d:c1:a6:ca:95:8b:05:
c8:9a:0c:a5:02:ec:59:06:fc:f8:66:c3:e8:fb:3c:3e:a0:c7:
b3:6c:f4:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:32:30 2026 by rpki-client