Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/qGkessPt7yduULEKxGcF_z0G8s4.mft
File: qGkessPt7yduULEKxGcF_z0G8s4.mft (raw, json)
Hash identifier: A051eqjWmETH134RzHHFhnS0CLowqd2STqQrDXxr+LI=
Subject key identifier: 7D:32:EE:20:DA:50:7A:D3:63:89:9B:41:CD:F7:95:4B:65:B8:87:25
Authority key identifier: A8:69:1E:B2:C3:ED:EF:27:6E:50:B1:0A:C4:67:05:FF:3D:06:F2:CE
Certificate issuer: /CN=a8691eb2c3edef276e50b10ac46705ff3d06f2ce
Certificate serial: 019F95492A855C7A118263F37C6B3C0C9CCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qGkessPt7yduULEKxGcF_z0G8s4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/qGkessPt7yduULEKxGcF_z0G8s4.mft
Manifest number: 42
Signing time: Fri 24 Jul 2026 18:00:27 +0000
Manifest this update: Fri 24 Jul 2026 18:00:27 +0000
Manifest next update: Sat 25 Jul 2026 18:00:27 +0000
Files and hashes: 1: cGtwdpfhHL2EdldtoWcE3kBi6Uc.roa (hash: FuV6xrO/bK9VTcoP0tR4LEc8Me8SXVxqt9OJJrzA7XA=)
2: qGkessPt7yduULEKxGcF_z0G8s4.crl (hash: GPsalOJpEUB+rRdXD3D4rL3e9FSVD/Ou9ds1dTmnkCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/qGkessPt7yduULEKxGcF_z0G8s4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/qGkessPt7yduULEKxGcF_z0G8s4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qGkessPt7yduULEKxGcF_z0G8s4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:49:2a:85:5c:7a:11:82:63:f3:7c:6b:3c:0c:9c:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8691eb2c3edef276e50b10ac46705ff3d06f2ce
Validity
Not Before: Jul 24 18:00:27 2026 GMT
Not After : Jul 25 18:00:27 2026 GMT
Subject: CN=7d32ee20da507ad363899b41cdf7954b65b88725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:80:6f:70:27:04:df:d6:c6:3c:ef:22:5a:28:
90:e6:6e:5e:77:d9:61:1c:73:04:1d:30:76:2f:c0:
b2:39:84:c4:01:63:04:36:c2:32:35:69:30:f4:0d:
21:6a:69:0c:f0:f3:64:c5:89:04:c0:a7:de:8f:7d:
f4:ae:d4:aa:8a:e7:56:36:1a:05:af:20:5b:34:c2:
87:a0:d6:82:23:1a:5e:c9:ea:6b:16:b7:e3:1e:ca:
f7:72:14:cc:d9:03:c2:50:55:be:c6:a2:49:f4:34:
a1:12:69:cf:62:63:de:27:88:68:1a:e9:0d:8f:7e:
4e:74:e1:03:a4:c2:67:ec:b2:69:18:2e:8e:bb:33:
86:a2:15:01:43:8b:5a:28:9e:27:54:ed:4b:cf:53:
96:ed:ef:33:7d:54:82:6b:ec:65:24:11:68:8f:fa:
60:9b:90:00:ae:cc:bf:61:2c:33:2f:9c:f2:88:46:
04:38:99:26:98:79:b0:d7:21:2f:af:02:26:ad:f9:
71:45:3c:07:e3:58:0d:5a:b8:7c:92:7f:ce:93:ca:
be:37:1a:14:54:9e:cc:46:1b:d7:da:7b:76:70:eb:
ea:ad:50:d9:1c:62:89:9c:97:ec:72:2c:d3:39:d3:
8a:02:c8:11:5b:a0:12:7e:db:79:51:3c:20:c7:74:
1b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:32:EE:20:DA:50:7A:D3:63:89:9B:41:CD:F7:95:4B:65:B8:87:25
X509v3 Authority Key Identifier:
keyid:A8:69:1E:B2:C3:ED:EF:27:6E:50:B1:0A:C4:67:05:FF:3D:06:F2:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGkessPt7yduULEKxGcF_z0G8s4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/qGkessPt7yduULEKxGcF_z0G8s4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7e1989-4b1e-4f33-bd32-ac881497e0a2/1/qGkessPt7yduULEKxGcF_z0G8s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:c8:96:67:66:eb:92:f6:5a:bc:7b:c1:00:8a:c7:7b:c3:9a:
03:8a:45:84:5e:6b:2b:d3:e7:86:62:0b:d6:41:11:43:1d:a3:
fd:a0:68:16:f4:37:8f:cc:28:7b:7a:05:62:c4:6a:8f:16:57:
25:17:90:8e:88:2e:b1:53:b5:bf:3c:34:21:d4:42:8c:66:f9:
b1:b0:27:04:aa:6c:9f:79:9d:d4:61:37:86:ae:d0:d5:db:5f:
5a:98:2f:63:59:02:8a:6c:7a:d2:8d:79:ac:e9:f8:a8:4b:de:
ac:67:3a:33:81:1c:77:a4:0c:db:e4:88:04:57:8c:19:a0:f3:
0e:ef:0c:f5:29:71:12:a7:a2:20:be:c4:ee:13:e6:c2:00:a1:
97:df:b9:2d:3c:82:ef:8f:4b:69:fc:01:a8:35:54:7f:c1:d1:
3c:20:81:ea:95:3c:cc:fe:9e:8d:9d:58:b3:64:18:0c:05:c6:
ba:2a:e3:47:3c:14:13:5a:8f:36:03:0c:3c:f9:91:a7:9d:d1:
cc:8c:c3:00:22:d5:87:e3:0c:b4:5f:7a:5d:82:5e:52:1e:3e:
93:3b:5e:59:36:ac:3c:a3:70:43:04:02:aa:c0:96:8c:3b:50:
08:66:9a:56:ba:f3:c9:0c:5f:12:56:79:f3:25:fa:25:63:80:
1a:d6:1f:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:23:57 2026 by rpki-client