Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.mft
File: KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.mft (raw, json)
Hash identifier: pQ2P3YfYe/xKlMVq/Q+7Cf1zD4BcipzJ7uJnOWVn9DU=
Subject key identifier: E1:0C:DE:EF:93:82:F8:A3:18:F7:B3:A2:56:05:CB:A4:FD:52:0C:15
Authority key identifier: 28:24:34:A9:A0:38:B0:FE:73:CA:F7:76:BC:CD:54:2F:D3:E2:F6:A5
Certificate issuer: /CN=282434a9a038b0fe73caf776bccd542fd3e2f6a5
Certificate serial: 019E1FB5A4689F56A5C90D4F59DB10A63F75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.mft
Manifest number: 1908
Signing time: Wed 13 May 2026 05:00:58 +0000
Manifest this update: Wed 13 May 2026 05:00:58 +0000
Manifest next update: Thu 14 May 2026 05:00:58 +0000
Files and hashes: 1: KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.crl (hash: c9wqQ3X8L6SoZ6uRrb7JkVMNRPUFB6zw3P52G2SrYWY=)
2: mDKfE9L_xC5gURXUxNvBxSesFUw.roa (hash: wMlT9AFioAliO/UwUMrOPGgzXtB6eZatt/SzeGPcD6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b5:a4:68:9f:56:a5:c9:0d:4f:59:db:10:a6:3f:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=282434a9a038b0fe73caf776bccd542fd3e2f6a5
Validity
Not Before: May 13 05:00:58 2026 GMT
Not After : May 14 05:00:58 2026 GMT
Subject: CN=e10cdeef9382f8a318f7b3a25605cba4fd520c15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f5:bd:74:4c:47:f5:71:a6:ab:02:86:d5:dc:
b8:4f:3a:9d:99:11:c1:4c:74:51:0e:16:6b:20:b8:
20:5a:6a:61:16:cd:4a:6b:d9:a9:6c:cb:22:2f:5e:
6f:79:ba:5d:1c:18:e2:59:eb:91:08:70:b0:4b:c2:
bb:d8:ee:63:fb:f9:9b:e5:e8:75:b3:8d:3f:17:87:
e2:93:74:0b:37:3d:a8:b8:48:e2:95:45:fa:ef:b5:
db:cd:32:8b:8f:e5:bb:c7:76:31:41:3c:0c:52:cc:
14:2c:98:50:00:0a:58:9b:92:0f:49:f0:6c:47:55:
b2:f9:11:51:d2:25:af:d9:51:46:bb:b8:fa:16:f5:
5b:74:aa:c5:94:b5:47:95:a1:1e:4d:73:b1:42:83:
e4:1f:06:d9:40:40:bd:0b:3d:97:33:c6:6b:90:94:
94:cc:00:93:a6:1a:ea:b2:33:54:06:d8:b6:e9:9a:
33:2b:32:97:f1:bd:a5:a3:f6:1b:76:70:14:1a:d9:
81:13:15:f7:dc:80:31:3e:c9:7c:81:d5:cc:c5:5a:
5d:0c:4c:9c:46:55:30:17:6f:63:b6:42:4b:86:4c:
a6:b9:5a:92:64:b8:25:fc:79:61:d9:fe:52:90:1b:
c4:08:38:4f:48:40:eb:eb:5f:59:13:32:26:32:e2:
ae:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:0C:DE:EF:93:82:F8:A3:18:F7:B3:A2:56:05:CB:A4:FD:52:0C:15
X509v3 Authority Key Identifier:
keyid:28:24:34:A9:A0:38:B0:FE:73:CA:F7:76:BC:CD:54:2F:D3:E2:F6:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:20:f4:61:f9:19:f5:2b:6b:d1:82:62:b1:bc:34:69:18:45:
52:55:e1:18:b3:24:24:2d:79:73:8f:3a:34:88:3e:7f:3b:65:
c9:f2:69:fa:ec:8c:fe:7c:43:a7:98:86:8f:5b:85:60:7e:3c:
c4:52:d9:fa:3e:9e:bd:20:fb:36:c3:59:c2:ac:4c:50:fc:e2:
76:9e:3a:c3:85:59:f4:05:a2:af:f9:c6:2d:f8:50:b2:96:9d:
de:b8:76:41:05:2d:c9:ca:66:29:db:08:5a:2e:67:23:55:68:
45:9c:65:ad:1c:3c:52:94:d7:20:15:eb:12:dc:5a:ea:19:12:
f9:5d:f9:61:e3:79:0a:63:61:c2:77:60:02:72:0f:63:d0:d5:
1e:72:69:96:48:0e:ef:bb:47:b6:f5:38:ab:0a:38:9d:49:b4:
25:7d:68:be:58:a2:3a:a7:30:43:a1:a5:cf:b2:75:f2:d8:53:
49:27:95:6f:e8:b2:de:32:eb:f4:db:e9:38:65:76:a2:4b:23:
48:6d:2b:f0:b2:18:60:ee:b4:2c:7e:34:00:95:47:dd:22:f6:
d4:8c:de:f2:cd:bd:d3:cc:1e:1d:16:e8:3e:8a:c4:29:ef:c4:
80:09:df:4e:6a:58:ac:46:54:24:9e:60:d5:a1:5e:77:0e:72:
4f:19:67:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:16:55 2026 by rpki-client