Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.mft
File: 1-KQVlKkqmuBcZaBPgD1BGk-IQj8.mft (raw, json)
Hash identifier: cmG2lYrkyGwyOg6pk+lB8rr7ktPgllO80ucvmEMIuks=
Subject key identifier: 23:6A:FB:9B:FE:FB:45:3E:8D:AB:0D:D1:61:BA:03:35:A8:AF:1E:A0
Authority key identifier: F8:A4:15:94:A9:2A:9A:E0:5C:65:A0:4F:80:3D:41:1A:4F:88:42:3F
Certificate issuer: /CN=f8a41594a92a9ae05c65a04f803d411a4f88423f
Certificate serial: 019F9392589CA482C3DE53AC2BE4510DCDB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.mft
Manifest number: 15D2
Signing time: Fri 24 Jul 2026 10:01:09 +0000
Manifest this update: Fri 24 Jul 2026 10:01:09 +0000
Manifest next update: Sat 25 Jul 2026 10:01:09 +0000
Files and hashes: 1: 1-KQVlKkqmuBcZaBPgD1BGk-IQj8.crl (hash: cn+fcaa0QMd+TTeL0Q525vJBTM4ZyUm7Q4LGBY+SJjM=)
2: 9I37uSLgJ82CVvmcGNoEOygvMrc.roa (hash: GiAAMKbm7ExVR7C4dV6ZH1ILNv0tH+m6b13CkfxQEmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:92:58:9c:a4:82:c3:de:53:ac:2b:e4:51:0d:cd:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a41594a92a9ae05c65a04f803d411a4f88423f
Validity
Not Before: Jul 24 10:01:09 2026 GMT
Not After : Jul 25 10:01:09 2026 GMT
Subject: CN=236afb9bfefb453e8dab0dd161ba0335a8af1ea0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:01:47:62:23:22:0a:3a:1c:76:05:6e:39:27:
5c:3e:3f:88:1b:9a:22:93:dd:7c:50:f9:6e:20:cb:
f8:2a:3a:15:8e:6a:71:4e:5b:03:8d:63:3b:1d:ea:
da:75:33:af:e1:ef:e1:b8:d5:21:cf:d8:63:03:bd:
f8:dd:b4:c0:fb:7b:7f:6f:3e:b5:b5:56:0a:fb:bb:
a3:b9:49:7a:58:2e:f5:a8:ac:02:08:7f:db:68:d0:
f1:30:13:8c:3c:c6:30:30:f1:4d:de:c8:db:b9:1b:
ac:b6:56:c4:ac:2e:a0:4f:0b:cd:ca:13:73:b9:c7:
56:58:66:a5:bd:b6:86:b0:f8:96:0d:01:0b:d0:a6:
9c:90:05:2d:4f:20:5e:e3:dd:25:30:c8:6b:c9:5b:
b1:de:04:81:8e:fc:3a:ff:c0:b4:bc:99:c4:09:e1:
2d:0e:e4:18:bb:9d:a6:a8:a7:47:94:10:9a:d1:19:
03:fb:a1:62:0a:d1:6b:f3:69:bc:90:d8:7c:2f:b1:
15:8b:08:04:3a:20:39:e8:fc:77:d2:fe:92:59:0d:
2c:fc:01:bd:6d:7f:c6:df:02:cc:87:89:4b:42:f2:
74:6b:c6:95:d4:db:df:d4:34:bf:a7:07:c5:cb:e2:
07:4a:b0:00:3f:5c:4e:74:32:a6:a8:cf:2c:3a:ec:
53:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:6A:FB:9B:FE:FB:45:3E:8D:AB:0D:D1:61:BA:03:35:A8:AF:1E:A0
X509v3 Authority Key Identifier:
keyid:F8:A4:15:94:A9:2A:9A:E0:5C:65:A0:4F:80:3D:41:1A:4F:88:42:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:31:fb:84:b8:22:9a:bd:de:33:3a:b4:4e:95:33:49:50:33:
c3:dc:14:ab:5c:a9:81:dc:46:ce:e2:86:56:62:c5:19:06:7c:
c1:be:3b:ef:fe:f1:a6:82:47:66:a1:d2:78:3a:f0:7e:99:79:
b7:35:50:4e:8c:01:72:2e:25:db:bd:00:32:ae:66:ee:91:09:
2c:3e:60:a1:12:a1:30:0a:3e:8f:9d:1a:01:3f:0b:bc:e9:15:
b3:50:d7:f4:85:2f:41:81:7a:26:83:61:44:65:f4:7f:30:d7:
cd:98:3a:15:8e:87:17:73:00:c5:87:e6:1a:6c:0f:07:75:56:
ed:08:92:2a:a4:db:16:53:b7:09:0a:28:98:e8:3d:d5:a7:47:
2c:79:0c:7d:44:aa:48:ee:68:1a:22:37:b3:a9:aa:47:86:51:
c3:d1:94:68:a6:ca:52:b7:5f:48:61:f6:41:74:f4:ab:a0:b7:
00:fd:a8:a5:69:87:cf:58:ad:17:04:09:24:7c:9d:ac:66:27:
8a:48:0e:9e:f8:b8:07:81:24:f4:cc:9e:27:93:83:c3:9d:7d:
ba:1c:2a:22:09:64:c5:af:ab:51:d0:3b:d3:a1:fd:4d:16:59:
dc:94:86:11:20:9c:b1:5b:bc:22:4b:95:9f:cc:1d:09:17:0f:
6e:44:35:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:17:47 2026 by rpki-client