Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/KbQgo4_encPUwgIf0JU9nr27kLw.mft
File: KbQgo4_encPUwgIf0JU9nr27kLw.mft (raw, json)
Hash identifier: e/MN7prP9xr4PmZy32R4zGKHPRRJfUfsBNlcc/v2i9Y=
Subject key identifier: F9:F7:24:81:F0:CB:1F:B0:B1:28:BB:1F:B3:6F:39:00:24:E4:F8:6C
Authority key identifier: 29:B4:20:A3:8F:DE:9D:C3:D4:C2:02:1F:D0:95:3D:9E:BD:BB:90:BC
Certificate issuer: /CN=29b420a38fde9dc3d4c2021fd0953d9ebdbb90bc
Certificate serial: 01A0DD9741C92949A0B9FD4E248D0CD90AF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KbQgo4_encPUwgIf0JU9nr27kLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/KbQgo4_encPUwgIf0JU9nr27kLw.mft
Manifest number: EC
Signing time: Sat 26 Sep 2026 12:01:12 +0000
Manifest this update: Sat 26 Sep 2026 12:01:12 +0000
Manifest next update: Sun 27 Sep 2026 12:01:12 +0000
Files and hashes: 1: KbQgo4_encPUwgIf0JU9nr27kLw.crl (hash: 5ypZHm7eqrCvtG8Q1dsRQI4xyvsxHaqt4tg69mIuqcM=)
2: omwuLvZPG_OI5FuAKOGoVvhHAhY.roa (hash: j9iA9TG/Xu3J+sOmuPiV21st08l1RRGEXzENpjL0/AE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/KbQgo4_encPUwgIf0JU9nr27kLw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/KbQgo4_encPUwgIf0JU9nr27kLw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KbQgo4_encPUwgIf0JU9nr27kLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:97:41:c9:29:49:a0:b9:fd:4e:24:8d:0c:d9:0a:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29b420a38fde9dc3d4c2021fd0953d9ebdbb90bc
Validity
Not Before: Sep 26 12:01:12 2026 GMT
Not After : Sep 27 12:01:12 2026 GMT
Subject: CN=f9f72481f0cb1fb0b128bb1fb36f390024e4f86c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1a:5c:12:f8:29:c9:c1:e7:b2:c7:7d:a9:af:
a0:b5:c0:c6:eb:b2:61:d2:b4:62:f5:50:a3:fc:c7:
77:89:5e:91:ef:c0:78:4b:b3:c6:7c:db:db:f4:bb:
67:18:93:78:a5:2a:c7:12:2c:77:be:a7:72:29:7e:
3b:28:a3:b2:7f:69:96:0c:2d:6a:16:46:1a:33:5f:
44:4b:a3:88:78:fa:07:ae:09:8d:b5:f4:1c:a7:13:
ef:6d:b8:b9:d3:ee:09:b5:4f:e1:df:36:39:a6:c3:
17:72:d7:27:1e:e3:d3:26:84:52:83:37:d1:ae:7c:
5c:d4:e5:24:ed:35:07:f5:b6:cc:86:e8:5d:56:56:
c3:0f:57:70:2f:8b:ef:f2:80:3f:84:95:2e:3b:39:
39:7d:ca:a1:c5:0b:c5:20:0c:3f:9c:ad:71:bd:f7:
eb:0a:03:7a:a4:db:ba:a3:5f:06:59:0b:6b:e1:ca:
a5:a4:08:97:d6:da:8a:56:6e:9e:62:53:14:8f:bc:
25:9e:e9:91:38:7e:ca:e7:cb:0a:b3:00:83:e0:d6:
b3:a1:55:61:4d:92:8d:18:af:d7:29:aa:c7:ec:1e:
46:4c:47:88:ea:2c:8d:e6:3f:dc:5d:85:55:a1:af:
c1:07:99:af:b7:4d:b1:54:7f:05:98:81:d3:2b:95:
b4:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:F7:24:81:F0:CB:1F:B0:B1:28:BB:1F:B3:6F:39:00:24:E4:F8:6C
X509v3 Authority Key Identifier:
keyid:29:B4:20:A3:8F:DE:9D:C3:D4:C2:02:1F:D0:95:3D:9E:BD:BB:90:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KbQgo4_encPUwgIf0JU9nr27kLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/KbQgo4_encPUwgIf0JU9nr27kLw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/KbQgo4_encPUwgIf0JU9nr27kLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:13:e2:79:09:0a:be:2c:9f:fe:d3:f7:b2:0c:e5:c8:9c:25:
94:85:d2:b8:fa:09:de:57:a7:ae:dc:ed:41:36:54:d9:da:c5:
b6:64:fb:c0:d6:f9:b4:a4:3b:43:cc:16:e4:4f:aa:de:89:ce:
4d:2f:62:67:02:8e:c4:74:34:42:19:fb:48:bf:55:c9:10:82:
0d:80:e5:e9:e3:bf:5a:6c:9a:8d:eb:0b:7a:e2:40:80:ad:8f:
f5:fd:d1:42:4e:f9:aa:7f:db:f8:8e:c0:2b:66:c2:e5:37:96:
6d:25:f9:b6:19:5b:60:53:40:a8:5b:f6:74:11:94:a3:72:9c:
17:e6:89:6e:08:40:4b:e3:e6:d3:db:ae:6c:7c:82:db:5c:2b:
c9:55:27:7a:2c:f1:3e:e9:67:92:f3:f3:fd:77:75:f0:22:1e:
70:55:7c:b9:12:0d:54:21:a9:59:77:24:f1:af:e3:09:bf:6e:
bc:3a:b7:a1:c3:16:1f:4e:c7:2a:a6:4c:fa:c9:60:f7:1a:fe:
9f:dc:5e:c3:7d:ec:14:9c:0e:e2:cb:30:38:8e:ac:d6:36:18:
40:8b:a5:1b:d6:3a:2d:e4:43:ae:c3:b7:f7:02:80:6c:6b:24:
44:23:31:d7:f6:5b:17:a0:25:35:99:89:a8:1d:b0:6a:65:20:
81:b7:b7:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:40:53 2026 by rpki-client