Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.mft
File: 1-KQVlKkqmuBcZaBPgD1BGk-IQj8.mft (raw, json)
Hash identifier: PjUim6Y2gW7ZgIQY5mqlxe+7Oy9s1uGpT7UthCaOcTc=
Subject key identifier: 14:66:A4:74:67:58:70:72:30:E5:B8:21:22:0A:25:07:82:24:87:DE
Authority key identifier: F8:A4:15:94:A9:2A:9A:E0:5C:65:A0:4F:80:3D:41:1A:4F:88:42:3F
Certificate issuer: /CN=f8a41594a92a9ae05c65a04f803d411a4f88423f
Certificate serial: 019D2B856EF766E2C243D9317E1758BBB0D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.mft
Manifest number: 1493
Signing time: Thu 26 Mar 2026 19:00:58 +0000
Manifest this update: Thu 26 Mar 2026 19:00:58 +0000
Manifest next update: Fri 27 Mar 2026 19:00:58 +0000
Files and hashes: 1: 1-KQVlKkqmuBcZaBPgD1BGk-IQj8.crl (hash: CA6Z7Y/MmsEnETKWw1dGCHM7z360Gms5WegstTG8uKk=)
2: 9I37uSLgJ82CVvmcGNoEOygvMrc.roa (hash: GiAAMKbm7ExVR7C4dV6ZH1ILNv0tH+m6b13CkfxQEmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:85:6e:f7:66:e2:c2:43:d9:31:7e:17:58:bb:b0:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a41594a92a9ae05c65a04f803d411a4f88423f
Validity
Not Before: Mar 26 19:00:58 2026 GMT
Not After : Mar 27 19:00:58 2026 GMT
Subject: CN=1466a4746758707230e5b821220a2507822487de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:54:e1:bc:54:12:1e:2b:6d:cd:a7:33:d6:c4:
4c:36:80:32:96:2b:f6:30:3a:1f:e4:d3:b1:11:14:
d4:5c:fc:12:42:8e:ef:44:80:42:29:7d:63:c0:47:
90:dc:93:14:32:50:4f:a5:29:a3:eb:7c:48:66:fc:
d6:dd:90:64:ec:42:43:05:5a:5e:0a:8f:96:d8:5c:
be:97:78:43:b9:50:fd:a2:0f:95:71:c2:47:9c:37:
d1:c0:8f:38:15:73:dd:61:bf:8a:49:9a:74:f3:1b:
29:05:7b:88:5a:9b:e7:a1:73:11:45:52:47:9a:b0:
01:37:c9:3e:1b:0b:a1:fb:ad:69:f3:62:44:0f:56:
59:98:e8:9f:bc:ba:11:b2:8a:6e:02:7d:d8:0e:3b:
e7:5a:e5:14:24:1b:16:1e:4d:49:ee:7e:ae:08:98:
4e:2f:29:95:52:12:ed:c9:7e:2a:61:4a:1f:73:33:
3d:ea:c7:4b:41:c3:db:69:19:bc:b0:fe:73:4e:c8:
86:1e:45:2c:e1:a1:dc:34:a4:c0:b4:f5:f8:d6:84:
60:06:e6:76:58:2e:d2:e9:00:35:9f:98:c0:e7:fb:
5c:a3:9c:44:20:cb:2c:86:68:ae:42:2c:e2:c7:43:
f2:c1:9e:f3:00:b1:50:99:5f:78:42:94:84:0e:e9:
52:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:66:A4:74:67:58:70:72:30:E5:B8:21:22:0A:25:07:82:24:87:DE
X509v3 Authority Key Identifier:
keyid:F8:A4:15:94:A9:2A:9A:E0:5C:65:A0:4F:80:3D:41:1A:4F:88:42:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:60:90:fe:f9:b8:ab:f2:b0:27:9e:5b:4a:0d:3f:f3:d0:8c:
2c:c9:4b:98:17:57:cf:4f:d3:93:e8:ce:44:d1:63:b6:79:89:
27:c3:3b:11:7d:80:0d:8b:e5:35:1d:0f:7e:f5:9e:88:57:5f:
3e:0f:4a:b3:82:a7:3c:ec:ac:23:08:f4:2e:39:91:87:34:8d:
9e:2b:47:2b:d2:82:73:0e:bd:cf:64:a4:5a:74:b6:79:f3:0c:
82:b6:e9:ec:e1:67:f4:65:1f:4d:08:12:65:43:86:59:02:3e:
08:a4:56:b5:f6:0d:59:97:a4:98:94:bd:9e:f3:8b:66:ce:04:
b1:1c:a5:b1:4a:41:a7:d6:b6:eb:9b:98:62:48:c6:6e:cb:3b:
3d:77:34:8e:5b:33:52:f3:db:e7:74:cf:9b:42:19:96:1f:65:
0e:d0:f8:11:0a:41:19:7a:07:8f:f3:00:11:49:bc:ea:e0:da:
0e:50:3e:0f:f7:fd:b9:63:c0:ee:9c:86:8c:ac:f3:6b:5a:3b:
6d:c3:5d:7d:1e:b2:47:56:c5:03:5d:05:65:8f:bb:70:5f:2d:
4f:71:ee:1b:77:e3:5b:26:eb:c3:30:7b:9d:3e:6d:1d:f3:d7:
d1:a0:02:f1:c9:74:86:34:45:9c:63:89:0b:57:36:90:30:ca:
f9:9c:45:86
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ0rhW73ZuLCQ9kxfhdYu7DUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4YTQxNTk0YTkyYTlhZTA1YzY1YTA0ZjgwM2Q0MTFhNGY4
ODQyM2YwHhcNMjYwMzI2MTkwMDU4WhcNMjYwMzI3MTkwMDU4WjAzMTEwLwYDVQQD
EygxNDY2YTQ3NDY3NTg3MDcyMzBlNWI4MjEyMjBhMjUwNzgyMjQ4N2RlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFThvFQSHittzacz1sRMNoAyliv2
MDof5NOxERTUXPwSQo7vRIBCKX1jwEeQ3JMUMlBPpSmj63xIZvzW3ZBk7EJDBVpe
Co+W2Fy+l3hDuVD9og+VccJHnDfRwI84FXPdYb+KSZp08xspBXuIWpvnoXMRRVJH
mrABN8k+Gwuh+61p82JED1ZZmOifvLoRsopuAn3YDjvnWuUUJBsWHk1J7n6uCJhO
LymVUhLtyX4qYUofczM96sdLQcPbaRm8sP5zTsiGHkUs4aHcNKTAtPX41oRgBuZ2
WC7S6QA1n5jA5/tco5xEIMsshmiuQizix0PywZ7zALFQmV94QpSEDulS3wIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFBRmpHRnWHByMOW4ISIKJQeCJIfeMB8GA1UdIwQY
MBaAFPikFZSpKprgXGWgT4A9QRpPiEI/MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1LUVZsS2txbXVCY1phQlBnRDFCR2stSVFqOC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGEvNjMwMzYyLTI5MGYtNDZiYy04NDQ2
LTZhN2MzYmEzMTQxMC8xLzEtS1FWbEtrcW11QmNaYUJQZ0QxQkdrLUlRajgubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzBhLzYzMDM2Mi0yOTBmLTQ2YmMtODQ0Ni02YTdjM2JhMzE0
MTAvMS8xLUtRVmxLa3FtdUJjWmFCUGdEMUJHay1JUWo4LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPGCQ
/vm4q/KwJ55bSg0/89CMLMlLmBdXz0/Tk+jORNFjtnmJJ8M7EX2ADYvlNR0PfvWe
iFdfPg9Ks4KnPOysIwj0LjmRhzSNnitHK9KCcw69z2SkWnS2efMMgrbp7OFn9GUf
TQgSZUOGWQI+CKRWtfYNWZekmJS9nvOLZs4EsRylsUpBp9a265uYYkjGbss7PXc0
jlszUvPb53TPm0IZlh9lDtD4EQpBGXoHj/MAEUm86uDaDlA+D/f9uWPA7pyGjKzz
a1o7bcNdfR6yR1bFA10FZY+7cF8tT3HuG3fjWybrwzB7nT5tHfPX0aAC8cl0hjRF
nGOJC1c2kDDK+ZxFhg==
-----END CERTIFICATE-----
Generated at Fri Mar 27 01:17:44 2026 by rpki-client