Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/9bce97-eefb-40d4-bb1d-c7b0e0d9fdf2/1/GqsEbQ_SECaEebobnTt7_3E6P_Q.mft
File: GqsEbQ_SECaEebobnTt7_3E6P_Q.mft (raw, json)
Hash identifier: AVi7cWLPE+onW7Z1SptZOvdVqvY3VnQx3hkfOeaQ6Jg=
Subject key identifier: 1E:73:EC:6C:A8:2B:7F:97:F0:C7:56:AD:9A:BD:C1:95:35:F2:47:DE
Authority key identifier: 1A:AB:04:6D:0F:D2:10:26:84:79:BA:1B:9D:3B:7B:FF:71:3A:3F:F4
Certificate issuer: /CN=1aab046d0fd210268479ba1b9d3b7bff713a3ff4
Certificate serial: 01A0CD48046FBAEB97C6503DB67C2132A03C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GqsEbQ_SECaEebobnTt7_3E6P_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/9bce97-eefb-40d4-bb1d-c7b0e0d9fdf2/1/GqsEbQ_SECaEebobnTt7_3E6P_Q.mft
Manifest number: 0234
Signing time: Wed 23 Sep 2026 08:00:43 +0000
Manifest this update: Wed 23 Sep 2026 08:00:43 +0000
Manifest next update: Thu 24 Sep 2026 08:00:43 +0000
Files and hashes: 1: EaA5h5-haFqykkLxdYNz4NRH894.roa (hash: 35hNbngSLdJ5Vm4Smrugp6blzXRwN2jLQFd01FhQopg=)
2: GqsEbQ_SECaEebobnTt7_3E6P_Q.crl (hash: KwlHmsKWG40UQreF11DL5t37Sd6+t5DPWkii7VUrOlQ=)
3: L0-VG23-X4StTsgFq-dM2PZQwuw.asa (hash: ewwpS9FIFmcmamiDmtIfsGxv4DqXWOWMSU2Hu4R1Y5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/9bce97-eefb-40d4-bb1d-c7b0e0d9fdf2/1/GqsEbQ_SECaEebobnTt7_3E6P_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/9bce97-eefb-40d4-bb1d-c7b0e0d9fdf2/1/GqsEbQ_SECaEebobnTt7_3E6P_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/GqsEbQ_SECaEebobnTt7_3E6P_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:48:04:6f:ba:eb:97:c6:50:3d:b6:7c:21:32:a0:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aab046d0fd210268479ba1b9d3b7bff713a3ff4
Validity
Not Before: Sep 23 08:00:43 2026 GMT
Not After : Sep 24 08:00:43 2026 GMT
Subject: CN=1e73ec6ca82b7f97f0c756ad9abdc19535f247de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:93:56:7a:43:34:67:d3:eb:cf:b5:21:f7:f4:
c1:d0:fb:ca:2e:b0:ce:fe:1d:e6:18:63:b6:e5:75:
ce:d4:86:3f:fc:6c:c4:f2:27:29:54:81:30:9e:bd:
d8:29:b0:95:19:87:64:98:f4:6f:86:c9:83:a4:dc:
56:15:49:bd:f4:36:37:4d:2e:57:8a:50:d3:b7:e5:
d8:ee:00:d5:73:a4:d7:d4:43:cb:b7:a8:53:49:1b:
21:c8:ab:66:85:32:d5:fc:6d:17:5e:52:ba:00:e9:
e5:2c:16:70:34:3e:f5:f1:da:5d:77:3c:1d:ea:20:
5f:93:2d:0c:3d:e0:22:99:88:6a:74:de:38:30:83:
37:49:f4:f3:ed:6b:2f:14:f7:c5:8f:c2:7b:03:9d:
ac:ab:d3:fa:a1:e7:a1:c8:3a:fb:f2:16:6e:a1:ac:
9e:0f:30:dd:ce:b0:dc:5f:cd:52:45:b6:af:e4:b6:
13:ff:9a:cd:b5:10:17:42:ce:b5:7b:03:45:97:55:
52:0c:31:0d:34:7e:7b:07:09:b8:cd:97:1f:86:b1:
12:c5:84:7e:43:84:f5:f0:86:da:1b:4e:31:a0:c9:
55:97:06:0b:a9:d0:94:9c:d7:78:03:77:88:b1:f5:
46:45:00:8d:a2:a3:24:85:dd:8e:bf:a9:24:fa:fd:
d4:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:73:EC:6C:A8:2B:7F:97:F0:C7:56:AD:9A:BD:C1:95:35:F2:47:DE
X509v3 Authority Key Identifier:
keyid:1A:AB:04:6D:0F:D2:10:26:84:79:BA:1B:9D:3B:7B:FF:71:3A:3F:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GqsEbQ_SECaEebobnTt7_3E6P_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9bce97-eefb-40d4-bb1d-c7b0e0d9fdf2/1/GqsEbQ_SECaEebobnTt7_3E6P_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9bce97-eefb-40d4-bb1d-c7b0e0d9fdf2/1/GqsEbQ_SECaEebobnTt7_3E6P_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:0f:f1:4c:99:8b:85:74:59:a5:97:8d:56:d6:a4:fa:b3:80:
9f:47:16:95:db:30:b8:2f:5d:9d:0c:ef:f0:0a:a4:7b:6b:2a:
74:af:93:51:90:41:04:7f:10:7a:c2:ac:36:43:69:0b:6c:16:
d9:51:c8:59:c3:1f:65:c8:06:24:05:0b:99:0f:00:57:f9:3b:
73:7c:dd:25:7b:12:f6:0b:7b:9b:61:ec:9a:37:f6:82:d9:65:
90:50:9a:5f:97:21:e3:e4:63:a9:78:f9:fe:ca:09:ce:91:b6:
5f:51:76:33:54:96:e2:11:8a:60:0e:be:c8:18:26:f6:7c:33:
a7:af:5b:c0:d3:f9:65:87:ce:36:b8:57:67:38:1c:2b:86:c3:
9d:cc:7d:27:ca:f9:8a:15:f8:9c:32:fd:68:f3:c5:ba:b3:b8:
4b:4e:d1:16:af:fb:9b:bc:ed:57:21:19:c2:64:44:b6:e1:3b:
ca:4c:3c:17:db:f1:f4:4d:1d:3f:32:c6:7e:32:a1:06:85:49:
00:c2:f0:14:75:ed:f2:be:54:88:da:ab:1a:81:1f:d3:de:07:
22:9d:09:d9:1d:32:05:2f:68:3e:c0:82:47:1b:ef:0b:df:a5:
ad:e5:56:6e:17:ec:02:ff:25:5f:7f:8e:00:4a:34:9b:ec:dc:
18:7a:80:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDNSARvuuuXxlA9tnwhMqA8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhYWIwNDZkMGZkMjEwMjY4NDc5YmExYjlkM2I3YmZmNzEz
YTNmZjQwHhcNMjYwOTIzMDgwMDQzWhcNMjYwOTI0MDgwMDQzWjAzMTEwLwYDVQQD
EygxZTczZWM2Y2E4MmI3Zjk3ZjBjNzU2YWQ5YWJkYzE5NTM1ZjI0N2RlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJNWekM0Z9Prz7Uh9/TB0PvKLrDO
/h3mGGO25XXO1IY//GzE8icpVIEwnr3YKbCVGYdkmPRvhsmDpNxWFUm99DY3TS5X
ilDTt+XY7gDVc6TX1EPLt6hTSRshyKtmhTLV/G0XXlK6AOnlLBZwND718dpddzwd
6iBfky0MPeAimYhqdN44MIM3SfTz7WsvFPfFj8J7A52sq9P6oeehyDr78hZuoaye
DzDdzrDcX81SRbav5LYT/5rNtRAXQs61ewNFl1VSDDENNH57Bwm4zZcfhrESxYR+
Q4T18IbaG04xoMlVlwYLqdCUnNd4A3eIsfVGRQCNoqMkhd2Ov6kk+v3U6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB5z7GyoK3+X8MdWrZq9wZU18kfeMB8GA1UdIwQY
MBaAFBqrBG0P0hAmhHm6G507e/9xOj/0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3FzRWJRX1NFQ2FFZWJvYm5UdDdfM0U2UF9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC85YmNlOTctZWVmYi00MGQ0LWJiMWQt
YzdiMGUwZDlmZGYyLzEvR3FzRWJRX1NFQ2FFZWJvYm5UdDdfM0U2UF9RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC85YmNlOTctZWVmYi00MGQ0LWJiMWQtYzdiMGUwZDlmZGYy
LzEvR3FzRWJRX1NFQ2FFZWJvYm5UdDdfM0U2UF9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhQ/xTJmL
hXRZpZeNVtak+rOAn0cWldswuC9dnQzv8Aqke2sqdK+TUZBBBH8QesKsNkNpC2wW
2VHIWcMfZcgGJAULmQ8AV/k7c3zdJXsS9gt7m2Hsmjf2gtllkFCaX5ch4+RjqXj5
/soJzpG2X1F2M1SW4hGKYA6+yBgm9nwzp69bwNP5ZYfONrhXZzgcK4bDncx9J8r5
ihX4nDL9aPPFurO4S07RFq/7m7ztVyEZwmREtuE7ykw8F9vx9E0dPzLGfjKhBoVJ
AMLwFHXt8r5UiNqrGoEf094HIp0J2R0yBS9oPsCCRxvvC9+lreVWbhfsAv8lX3+O
AEo0m+zcGHqAWw==
-----END CERTIFICATE-----
Generated at Wed Sep 23 13:13:19 2026 by rpki-client