Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.mft
File: 1-KQVlKkqmuBcZaBPgD1BGk-IQj8.mft (raw, json)
Hash identifier: 9gAIMjRH2fs7TUAkx2zcFSL++oggY6QkNolJFkrb3N8=
Subject key identifier: C0:66:B7:09:E1:B7:A7:7D:77:B0:0A:8A:FC:6D:29:0F:BE:2C:2E:EE
Authority key identifier: F8:A4:15:94:A9:2A:9A:E0:5C:65:A0:4F:80:3D:41:1A:4F:88:42:3F
Certificate issuer: /CN=f8a41594a92a9ae05c65a04f803d411a4f88423f
Certificate serial: 01A136A3CECCA4AF41637BB528B8444F5698
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.mft
Manifest number: 16AB
Signing time: Tue 13 Oct 2026 19:01:07 +0000
Manifest this update: Tue 13 Oct 2026 19:01:07 +0000
Manifest next update: Wed 14 Oct 2026 19:01:07 +0000
Files and hashes: 1: 1-KQVlKkqmuBcZaBPgD1BGk-IQj8.crl (hash: HfflZSO7UUtgqIeQsaR6lHJokKPmjMaEcfUMfF3+IFE=)
2: 9I37uSLgJ82CVvmcGNoEOygvMrc.roa (hash: GiAAMKbm7ExVR7C4dV6ZH1ILNv0tH+m6b13CkfxQEmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 14:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:36:a3:ce:cc:a4:af:41:63:7b:b5:28:b8:44:4f:56:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a41594a92a9ae05c65a04f803d411a4f88423f
Validity
Not Before: Oct 13 19:01:07 2026 GMT
Not After : Oct 14 19:01:07 2026 GMT
Subject: CN=c066b709e1b7a77d77b00a8afc6d290fbe2c2eee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:da:5b:6d:7a:85:74:22:da:84:4d:07:16:dd:
42:20:69:a6:18:b1:55:51:94:ae:9b:97:64:9f:77:
23:80:30:a8:e1:b8:8e:03:99:b8:f2:e7:ac:4b:38:
2e:6a:ab:bf:24:2e:92:77:fd:98:ef:19:44:6d:72:
79:94:9c:e0:fd:91:db:51:b0:b7:5a:78:b2:12:25:
47:a6:8b:96:c3:16:9e:e0:a3:8d:d0:db:b9:97:28:
d7:1d:56:21:90:6d:ff:82:d1:ae:c5:31:ec:17:3e:
80:b1:e7:f6:6c:84:9d:4e:e6:aa:39:ab:97:2c:2f:
86:28:cf:41:ae:34:89:99:01:e3:90:75:31:57:91:
d4:ac:47:3b:4c:c0:de:8e:3a:88:6c:12:4f:48:c6:
2b:79:09:55:79:73:07:07:cc:a2:f7:9f:47:ca:60:
4e:73:74:51:0c:18:e6:95:20:3b:93:cb:dc:af:dd:
55:45:1a:fc:1d:90:42:6f:e2:40:79:86:10:7f:d0:
38:eb:51:13:1f:07:b3:d2:63:64:1b:db:d7:e4:19:
89:44:e4:cb:7e:b1:2b:c8:72:a9:d7:af:54:be:c3:
29:8a:2b:c0:b7:01:05:7b:cc:bc:51:ee:47:7e:8e:
fe:2d:dc:76:4e:01:53:46:45:29:e0:90:d8:75:f3:
bd:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:66:B7:09:E1:B7:A7:7D:77:B0:0A:8A:FC:6D:29:0F:BE:2C:2E:EE
X509v3 Authority Key Identifier:
keyid:F8:A4:15:94:A9:2A:9A:E0:5C:65:A0:4F:80:3D:41:1A:4F:88:42:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:53:5f:f4:b3:ff:6a:68:ae:d3:90:d8:c4:6d:b7:55:3f:be:
1a:4a:2d:81:cf:08:5b:41:fb:75:50:ff:78:d3:44:56:d0:b6:
2f:62:fe:87:a8:1f:9f:d4:eb:b6:8d:55:fc:0d:50:68:bd:38:
94:ba:d9:64:ef:1c:d0:db:87:c8:2d:06:9e:ce:98:b9:0a:a4:
24:ee:63:df:62:70:79:74:16:05:f9:f9:5d:3a:56:c4:88:de:
2a:d0:0d:21:d1:d6:40:52:d3:bf:de:20:e3:20:fb:b1:1c:b9:
85:e6:8b:b6:b4:1d:37:16:2a:f5:e6:58:50:c3:17:d0:9e:da:
c5:3b:f4:ca:2a:86:f7:32:89:3d:b3:42:9a:5e:ac:3d:7e:0c:
47:00:83:88:50:a9:f8:74:1b:04:44:8e:27:dd:f9:41:cc:66:
97:a8:a0:f5:95:4e:26:0d:2c:a8:71:d8:fe:1b:77:d2:5e:92:
11:65:00:1b:d5:d8:e7:e8:89:f2:73:94:ae:7a:e5:a2:a4:46:
1d:40:4f:47:65:1d:9d:16:e3:0f:37:0e:ba:ec:85:70:e1:da:
36:30:60:88:c7:84:ff:58:8a:63:14:ca:1e:b6:ca:dc:6c:b9:
fc:1b:54:f2:cd:5b:bf:a4:2b:5e:e1:f7:22:11:47:e9:b5:2c:
20:0c:7d:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 23:37:10 2026 by rpki-client