Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.mft
File: KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.mft (raw, json)
Hash identifier: XkVTDCHzMKSowrZEkwYSSgkuHUa9df6NJhqkb2MR19Q=
Subject key identifier: C8:6F:21:AC:0D:BA:72:1F:90:65:BE:71:8C:65:5D:EA:E0:2C:78:82
Authority key identifier: 28:24:34:A9:A0:38:B0:FE:73:CA:F7:76:BC:CD:54:2F:D3:E2:F6:A5
Certificate issuer: /CN=282434a9a038b0fe73caf776bccd542fd3e2f6a5
Certificate serial: 019F927FA747D4EA9E05643B0A9459A87EB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 05:01:07 +0000
Manifest this update: Fri 24 Jul 2026 05:01:07 +0000
Manifest next update: Sat 25 Jul 2026 05:01:07 +0000
Files and hashes: 1: KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.crl (hash: S0Zn7nBNyo1tzGpZu7coD+5OFr7JpRrFFapFkvovvfs=)
2: mDKfE9L_xC5gURXUxNvBxSesFUw.roa (hash: wMlT9AFioAliO/UwUMrOPGgzXtB6eZatt/SzeGPcD6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:a7:47:d4:ea:9e:05:64:3b:0a:94:59:a8:7e:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=282434a9a038b0fe73caf776bccd542fd3e2f6a5
Validity
Not Before: Jul 24 05:01:07 2026 GMT
Not After : Jul 25 05:01:07 2026 GMT
Subject: CN=c86f21ac0dba721f9065be718c655deae02c7882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:44:bb:f6:dc:1f:74:0a:3a:01:88:6e:ff:fb:
4a:74:e3:ee:9b:80:f6:2b:86:fd:bd:a0:d9:d0:18:
f9:32:4d:31:81:3d:8f:2a:ef:27:7f:da:60:90:3d:
41:33:4b:9b:35:d8:b3:9b:f7:ae:0b:c3:10:e2:23:
3d:29:0a:ed:dd:98:e1:fc:a2:e8:6e:a3:2d:4c:d9:
04:60:30:27:41:41:6e:cc:28:f9:f9:46:79:b6:0f:
da:9b:7b:76:03:cd:ff:be:d9:ec:54:e0:3d:98:89:
e8:b3:e2:ad:dd:bf:da:07:82:64:1d:a4:27:c6:57:
67:09:ca:52:50:c1:ff:08:e3:3d:1d:99:71:34:3f:
67:7d:4f:5c:a6:7a:43:ba:04:06:15:c6:23:27:08:
60:58:3c:6a:f6:53:46:25:75:84:73:52:f0:e5:03:
3a:14:c8:6c:73:a9:28:13:92:03:59:5b:c0:11:ac:
e4:85:b9:8e:7b:90:43:15:8a:98:df:15:c4:12:24:
b1:08:d4:91:a0:0e:57:95:c8:f9:25:4a:52:78:9e:
d7:11:9d:aa:f1:ae:47:b6:82:2f:c1:c3:83:05:6c:
61:59:c4:13:7f:b5:d7:0f:cd:57:d9:fd:78:f9:ee:
56:c4:af:bc:e8:4e:97:a9:b8:32:6d:c0:ff:7a:5f:
8d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:6F:21:AC:0D:BA:72:1F:90:65:BE:71:8C:65:5D:EA:E0:2C:78:82
X509v3 Authority Key Identifier:
keyid:28:24:34:A9:A0:38:B0:FE:73:CA:F7:76:BC:CD:54:2F:D3:E2:F6:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:7e:71:68:37:3b:15:50:11:5f:ab:29:69:b2:2b:7b:c7:6a:
cf:ca:b4:e2:0d:69:31:38:79:b4:36:40:3c:4c:2e:6f:e5:17:
96:00:b5:7e:40:98:a7:9a:7d:23:32:93:ed:f4:b1:26:4f:78:
97:73:a3:99:c0:e8:e9:ed:f1:f0:57:e8:6b:a2:fd:83:a4:d0:
32:42:3f:3e:65:31:aa:e0:f2:5f:82:b8:9a:55:25:3f:4e:eb:
f6:ac:d8:77:13:4a:ad:42:a7:ea:3b:96:ca:72:f4:49:dc:a7:
2c:27:4a:67:4d:eb:f2:b9:7f:e6:8d:e4:27:0a:02:70:36:9a:
58:7a:3d:3a:66:83:24:a2:3e:32:e5:6c:3e:c6:99:a2:b1:a8:
d8:0d:1f:22:bb:80:25:d8:24:83:38:04:43:17:d7:af:28:34:
45:16:e4:63:65:70:43:b8:a8:6b:28:ed:6c:e1:30:fa:82:cf:
5c:b2:1e:dd:07:da:ea:8d:28:6d:e2:72:c1:bf:17:05:20:9f:
53:1c:50:22:30:58:c7:f1:23:a4:5a:c3:ef:ce:4c:52:b4:a2:
47:07:f9:92:2e:d1:fd:ae:90:4f:76:d2:76:ec:57:52:1b:28:
4e:00:eb:ff:c9:a2:98:ef:3c:9c:d2:61:a3:2b:25:71:66:b5:
dd:b5:8f:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:45:14 2026 by rpki-client