Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.mft
File: 1-KQVlKkqmuBcZaBPgD1BGk-IQj8.mft (raw, json)
Hash identifier: rqiUW9yYbjRPulo6UnLzK0cl4dgmIWogIXFyDb+zv6k=
Subject key identifier: A2:4D:28:DD:07:2B:50:F3:3F:23:A7:32:3F:BE:0B:DC:94:64:EC:E7
Authority key identifier: F8:A4:15:94:A9:2A:9A:E0:5C:65:A0:4F:80:3D:41:1A:4F:88:42:3F
Certificate issuer: /CN=f8a41594a92a9ae05c65a04f803d411a4f88423f
Certificate serial: 019E1CEC02F5F087F2B8BFD9CE651EC3F66B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.mft
Manifest number: 1510
Signing time: Tue 12 May 2026 16:01:29 +0000
Manifest this update: Tue 12 May 2026 16:01:29 +0000
Manifest next update: Wed 13 May 2026 16:01:29 +0000
Files and hashes: 1: 1-KQVlKkqmuBcZaBPgD1BGk-IQj8.crl (hash: N/Y7t0QLVTgLld6FjfcsDmbFURoaTjHruzpybT18sDE=)
2: 9I37uSLgJ82CVvmcGNoEOygvMrc.roa (hash: GiAAMKbm7ExVR7C4dV6ZH1ILNv0tH+m6b13CkfxQEmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:ec:02:f5:f0:87:f2:b8:bf:d9:ce:65:1e:c3:f6:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a41594a92a9ae05c65a04f803d411a4f88423f
Validity
Not Before: May 12 16:01:29 2026 GMT
Not After : May 13 16:01:29 2026 GMT
Subject: CN=a24d28dd072b50f33f23a7323fbe0bdc9464ece7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c5:46:69:f0:b2:e6:7f:61:90:df:05:90:c9:
05:f4:b7:a3:7f:9b:be:b6:83:51:50:13:d3:f6:fe:
67:6a:a6:da:95:12:d2:47:b3:d1:a7:0f:e1:28:e4:
2e:93:9d:13:5c:74:12:10:4e:35:2e:60:51:3e:4e:
d6:51:9b:06:a4:70:3e:0d:f6:ae:50:94:64:ce:1c:
6f:b6:21:76:ad:ee:d9:fb:68:2b:dd:92:09:e0:12:
f0:a6:c0:8b:3f:d7:5c:31:d6:65:dc:64:07:50:61:
75:e4:45:53:f1:ec:8e:01:3d:4e:ba:f0:09:18:8b:
d0:89:d3:f3:bb:b0:43:ce:98:c1:b7:66:28:83:44:
e7:3d:03:d4:76:f4:b0:1f:b8:91:6d:d8:46:9e:2f:
45:99:35:db:62:11:7d:ac:6c:53:96:16:e6:ae:22:
01:fb:af:54:7e:9a:99:48:9e:93:32:78:a6:ab:b1:
d7:ac:0a:4e:35:09:38:7d:b1:10:17:f1:fc:f4:c9:
25:e8:b1:07:f1:24:2a:23:e9:0c:2a:1d:15:ea:56:
51:96:3f:81:03:35:3b:93:23:eb:33:26:0a:e8:33:
9f:7c:8a:db:c5:c2:1d:49:a9:bf:4d:35:fa:1e:0c:
63:d0:94:d1:2d:0e:b3:bf:06:1b:8e:1f:6a:71:f1:
d1:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:4D:28:DD:07:2B:50:F3:3F:23:A7:32:3F:BE:0B:DC:94:64:EC:E7
X509v3 Authority Key Identifier:
keyid:F8:A4:15:94:A9:2A:9A:E0:5C:65:A0:4F:80:3D:41:1A:4F:88:42:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:f8:76:c9:ef:4c:28:1b:03:3f:27:3a:ba:22:d1:eb:5e:db:
29:8d:7c:cc:4e:4b:62:6f:6d:98:12:d3:d1:e2:1b:6a:f2:cb:
1b:4d:2a:34:d9:f4:42:7b:c2:96:3e:8e:3b:e0:af:c5:24:d5:
87:b3:9a:4b:9b:ae:fa:ef:d2:97:d2:9c:ee:26:d2:8b:6d:37:
fc:53:05:df:45:d0:40:be:01:14:ff:77:51:9d:06:b3:7a:3f:
69:0e:09:97:8d:73:6e:5e:b5:8e:34:e3:cb:03:8a:d9:09:15:
f0:e2:47:a1:37:95:1e:80:f8:df:37:76:9c:16:89:f8:69:01:
02:f0:5a:69:02:2c:5a:b2:c5:e2:54:35:2e:cc:c0:17:8e:35:
80:29:bf:d6:74:bd:9b:11:ac:22:81:f0:29:b0:1d:38:d4:4d:
9a:e9:f9:7e:46:0a:b7:1b:aa:3c:78:33:f2:cc:2a:56:81:22:
8f:19:e8:9f:34:22:cb:59:1c:ed:61:59:61:f0:e0:97:5b:67:
c4:f7:79:f0:ab:bd:cf:09:f3:6b:40:24:48:27:b0:3f:f4:be:
b3:06:55:6b:cd:22:fa:85:3b:bb:0c:83:c9:23:4d:ea:c5:84:
52:52:4d:a4:05:b7:41:de:31:ef:8b:ef:5d:56:7f:aa:1c:e4:
db:84:bf:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:20:43 2026 by rpki-client