Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.mft
File: KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.mft (raw, json)
Hash identifier: wgd3BXQm6oY268HY3PnCbIL0gsbqi6af5nCy0DRZTB8=
Subject key identifier: 21:6A:8F:67:61:60:28:62:C7:F2:59:97:7C:FE:7C:8F:4A:EE:1B:10
Authority key identifier: 28:24:34:A9:A0:38:B0:FE:73:CA:F7:76:BC:CD:54:2F:D3:E2:F6:A5
Certificate issuer: /CN=282434a9a038b0fe73caf776bccd542fd3e2f6a5
Certificate serial: 019D341AC50A563CCC26AADFBDE1CCFA73A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.mft
Manifest number: 188E
Signing time: Sat 28 Mar 2026 11:01:02 +0000
Manifest this update: Sat 28 Mar 2026 11:01:02 +0000
Manifest next update: Sun 29 Mar 2026 11:01:02 +0000
Files and hashes: 1: KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.crl (hash: TPT4gsyxxne1EnO+4EFERzPh2jS64gPOVe4796Kt1Vo=)
2: mDKfE9L_xC5gURXUxNvBxSesFUw.roa (hash: wMlT9AFioAliO/UwUMrOPGgzXtB6eZatt/SzeGPcD6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:34:1a:c5:0a:56:3c:cc:26:aa:df:bd:e1:cc:fa:73:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=282434a9a038b0fe73caf776bccd542fd3e2f6a5
Validity
Not Before: Mar 28 11:01:02 2026 GMT
Not After : Mar 29 11:01:02 2026 GMT
Subject: CN=216a8f6761602862c7f259977cfe7c8f4aee1b10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6a:fa:3c:65:be:8e:94:2b:32:25:b5:99:59:
7d:89:bb:1f:0b:7b:38:4a:0f:45:24:33:10:2d:8c:
20:11:e4:30:f0:a6:22:49:45:cd:f6:92:3c:92:07:
d5:37:af:2e:ec:f9:74:92:65:77:df:e0:7a:49:23:
c9:40:f9:89:a0:c4:78:c6:1f:56:3e:ff:0f:14:7d:
bf:90:0f:88:08:21:5b:cb:7f:cc:18:fa:16:18:ba:
75:06:1e:21:f7:6e:1e:34:bd:c8:2f:e5:c8:32:8d:
49:8d:a1:a1:34:af:8f:2b:12:2e:ff:eb:a8:49:97:
09:f8:29:13:0b:86:f9:76:47:cc:e1:9f:b2:28:6c:
70:a4:d8:d7:4b:c3:47:8d:88:3d:5e:73:6a:20:6d:
fc:79:6f:cd:e0:99:7b:37:e5:4e:b5:20:5f:56:a5:
aa:42:ab:54:e3:18:08:ea:b9:20:4b:73:49:08:08:
70:6b:20:ec:a9:69:73:a5:6d:ee:0f:40:12:61:22:
93:5c:c2:88:ac:59:36:d3:6a:fd:70:c6:91:ca:ca:
d7:2c:86:49:a4:85:a5:4a:57:38:3e:23:f3:fe:e7:
2c:fe:88:c8:69:bf:da:b7:68:db:9f:ac:2f:94:97:
ea:4b:59:a8:b2:97:b7:30:c6:77:98:43:b0:86:a6:
ce:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:6A:8F:67:61:60:28:62:C7:F2:59:97:7C:FE:7C:8F:4A:EE:1B:10
X509v3 Authority Key Identifier:
keyid:28:24:34:A9:A0:38:B0:FE:73:CA:F7:76:BC:CD:54:2F:D3:E2:F6:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:64:26:c9:93:8d:f2:f7:e4:4b:1a:d3:dc:0c:e6:87:1c:da:
0e:47:8c:d1:3b:58:a5:8e:23:01:03:2e:a1:1a:fe:79:68:26:
c8:e1:bf:c6:7e:d9:b8:bc:be:0b:4d:69:dc:9f:4f:66:81:9c:
40:62:4e:46:5a:ee:62:5c:fa:77:24:73:09:41:1c:93:f6:20:
1f:7d:7b:9b:64:67:8d:0b:13:7a:95:54:c5:56:8e:dc:96:b7:
48:6c:16:a7:1a:e4:c8:0f:ed:62:3d:9c:2e:28:d9:cd:f5:34:
58:b5:ee:46:16:67:22:a5:0f:b2:6c:9a:9c:90:14:e4:75:fe:
4a:6e:f0:61:65:e9:25:57:38:b8:29:5b:93:c9:bb:87:17:86:
5f:85:a5:f8:af:89:7b:55:0c:37:5e:1e:7d:d1:96:20:a3:a5:
64:27:7d:d1:72:90:d0:ae:56:53:5c:9b:6e:d6:fc:44:d1:9a:
0f:4b:e0:45:2d:20:03:1a:31:cf:92:f9:8f:60:6a:65:eb:f0:
01:37:66:fb:93:bc:d4:15:8e:9e:62:0f:6e:c5:1f:4b:2c:d9:
3a:1c:e5:cb:16:f2:ee:d4:74:06:aa:61:0f:3f:4b:33:d2:d6:
66:4f:49:b2:c8:c3:b8:8f:f5:eb:18:7b:2d:ab:b7:2a:79:9f:
f5:22:e9:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 16:15:11 2026 by rpki-client