Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/b19811-fa23-47b0-b577-17698f88c3bd/1/KqFL_4NIDRDND767gLLLUJH8-C8.mft
File: KqFL_4NIDRDND767gLLLUJH8-C8.mft (raw, json)
Hash identifier: avJqkaQV1hwDLLaFtvEIXCuWn8jXV+6XwE9qO3gf85Y=
Subject key identifier: B4:68:82:CD:62:34:6A:C4:54:6F:DA:8C:8A:26:47:56:B2:58:49:2F
Authority key identifier: 2A:A1:4B:FF:83:48:0D:10:CD:0F:BE:BB:80:B2:CB:50:91:FC:F8:2F
Certificate issuer: /CN=2aa14bff83480d10cd0fbebb80b2cb5091fcf82f
Certificate serial: 019D28846CAFE40C49F728CD2A995045606B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqFL_4NIDRDND767gLLLUJH8-C8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/b19811-fa23-47b0-b577-17698f88c3bd/1/KqFL_4NIDRDND767gLLLUJH8-C8.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 05:01:00 +0000
Manifest this update: Thu 26 Mar 2026 05:01:00 +0000
Manifest next update: Fri 27 Mar 2026 05:01:00 +0000
Files and hashes: 1: H4vZZgy8L-83loBlfJ2Z1eRuVjI.roa (hash: n3TtZKW8jTF8quOeFDtPkhw+ZhgsE56xwHQyTvZ/ifg=)
2: KqFL_4NIDRDND767gLLLUJH8-C8.crl (hash: IDwZS1EtDrguBD4ryeaiLRBET0bJXDHEqwgm4vFJBYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/b19811-fa23-47b0-b577-17698f88c3bd/1/KqFL_4NIDRDND767gLLLUJH8-C8.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/b19811-fa23-47b0-b577-17698f88c3bd/1/KqFL_4NIDRDND767gLLLUJH8-C8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqFL_4NIDRDND767gLLLUJH8-C8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:6c:af:e4:0c:49:f7:28:cd:2a:99:50:45:60:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa14bff83480d10cd0fbebb80b2cb5091fcf82f
Validity
Not Before: Mar 26 05:01:00 2026 GMT
Not After : Mar 27 05:01:00 2026 GMT
Subject: CN=b46882cd62346ac4546fda8c8a264756b258492f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:74:90:79:cf:0b:07:64:fd:90:d0:ad:a3:a7:
be:e5:70:cd:e1:13:09:ef:d7:58:ea:d4:1b:4d:67:
c0:59:a0:70:27:79:a5:8f:69:a2:a6:e5:29:bf:9d:
28:28:03:6b:a7:7a:a8:07:6b:ed:f4:97:ca:16:16:
12:aa:cd:27:62:34:3b:73:a6:8c:be:a1:8e:51:fc:
58:50:f3:89:a6:25:32:8f:bf:27:ec:6c:e7:68:87:
63:3d:ef:25:be:83:69:f5:36:bf:f8:df:2a:7c:73:
e4:88:c8:8c:1e:82:94:76:4d:be:a7:84:b6:e4:15:
75:32:6a:52:a6:ce:85:10:7a:73:fd:b3:8f:d6:8e:
23:6c:75:a8:46:7e:be:89:1e:10:f9:94:8a:ca:fb:
bf:45:03:90:11:0c:35:30:85:79:55:2c:ce:6a:74:
44:ad:bf:8a:60:83:6b:e0:5e:5b:91:88:8e:47:2c:
7f:2e:f2:46:fb:22:21:ed:e2:4f:bb:df:20:43:5a:
82:bd:30:7c:22:b5:df:f2:a0:1d:86:a9:91:9e:23:
99:4c:e2:7a:3d:95:5d:62:6f:54:ff:95:82:55:4c:
75:64:b0:49:6a:61:57:27:ae:e7:16:00:65:15:75:
66:f6:d1:1d:38:c4:50:50:6c:d3:a6:33:f5:d4:d2:
23:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:68:82:CD:62:34:6A:C4:54:6F:DA:8C:8A:26:47:56:B2:58:49:2F
X509v3 Authority Key Identifier:
keyid:2A:A1:4B:FF:83:48:0D:10:CD:0F:BE:BB:80:B2:CB:50:91:FC:F8:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqFL_4NIDRDND767gLLLUJH8-C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b19811-fa23-47b0-b577-17698f88c3bd/1/KqFL_4NIDRDND767gLLLUJH8-C8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b19811-fa23-47b0-b577-17698f88c3bd/1/KqFL_4NIDRDND767gLLLUJH8-C8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:ad:29:64:2e:20:27:66:0f:b0:c7:7d:c4:d6:2f:dd:a4:5e:
11:a9:fc:ef:04:a2:9c:56:cf:32:6e:bc:43:63:a5:e0:ca:0a:
e4:13:59:50:7f:23:72:f4:00:53:fe:85:65:4c:44:29:fa:19:
d6:bd:23:e3:0c:95:9a:da:35:39:09:96:e0:2f:63:ff:d5:06:
88:d8:9b:9a:d0:64:51:6c:fe:3c:ff:af:ff:98:79:08:4b:ee:
6b:30:2f:08:e5:82:7d:0a:a0:cc:90:0f:85:9a:f6:34:b7:1e:
a2:5f:db:42:58:97:65:b1:93:5d:6c:ed:6a:6a:03:20:b9:37:
0d:c3:a0:96:e9:63:45:a6:d8:93:1d:58:17:d1:ac:62:a6:f1:
eb:ef:c0:c6:1f:d9:55:39:a8:85:98:66:35:f3:90:77:d8:96:
1e:76:ab:06:33:b1:0e:68:0c:0f:5a:f3:61:d7:50:f9:13:e4:
b1:6b:76:a9:00:7a:b5:68:fb:9b:d5:52:27:f8:14:f3:0b:b5:
74:e5:31:73:75:bc:ac:55:48:89:b9:e2:2a:f9:10:4f:22:a7:
80:67:a4:20:b6:72:23:76:ae:3c:22:f7:f3:be:db:5e:11:ed:
1f:23:12:e4:59:06:bf:4b:90:e2:aa:40:b5:23:85:84:e6:8e:
63:b0:86:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:37:23 2026 by rpki-client