Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.mft
File: KQbwJrH-Y2yaXaAR3H_WnFgdArg.mft (raw, json)
Hash identifier: GwlLNMKx8n00f0xo/9TXwKyxbj18ZhQh5Z7efwQORik=
Subject key identifier: 4A:13:60:62:A9:B1:D5:94:D3:95:4D:71:8B:A1:69:E8:F6:64:45:44
Authority key identifier: 29:06:F0:26:B1:FE:63:6C:9A:5D:A0:11:DC:7F:D6:9C:58:1D:02:B8
Certificate issuer: /CN=2906f026b1fe636c9a5da011dc7fd69c581d02b8
Certificate serial: 01A0CF6CFAFD17DC98688AA9D15E7080E406
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQbwJrH-Y2yaXaAR3H_WnFgdArg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.mft
Manifest number: 1A70
Signing time: Wed 23 Sep 2026 18:00:20 +0000
Manifest this update: Wed 23 Sep 2026 18:00:20 +0000
Manifest next update: Thu 24 Sep 2026 18:00:20 +0000
Files and hashes: 1: KQbwJrH-Y2yaXaAR3H_WnFgdArg.crl (hash: VF2v2uMSjnyyU+rm2xsMFtjKEY68eT98jYeJprnsN14=)
2: Q2sWoej5DPGl5wIw-CeODcRVXlM.roa (hash: wQMcbtBLdOGU6mgU9d/xsDpXItDoVCXCwiC3i9zeKw8=)
3: m25_c1bwCRR27TwA0PikcbJqUsY.roa (hash: lmfRRJbGEXu9SMbs8RoEu8bImS24RY0gDFc2/wiVBQo=)
4: ojqh31F-z_PVmb3H-ysSta1HlSw.roa (hash: pXqwdQA/pZAOmvAosw/Ac3zfBMN1XJgVHOWfLUuvoMs=)
5: wsQWFnZ9QvU6rL4ZStrqghoI4IU.roa (hash: aqTWkdbUh2lUmpGqUaJazitQHO++p5bcYZRKvviqQCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQbwJrH-Y2yaXaAR3H_WnFgdArg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:6c:fa:fd:17:dc:98:68:8a:a9:d1:5e:70:80:e4:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2906f026b1fe636c9a5da011dc7fd69c581d02b8
Validity
Not Before: Sep 23 18:00:20 2026 GMT
Not After : Sep 24 18:00:20 2026 GMT
Subject: CN=4a136062a9b1d594d3954d718ba169e8f6644544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:07:1b:62:53:2d:e8:46:50:8f:df:8e:33:68:
2d:45:5f:2c:15:ca:64:3e:37:e3:f4:2b:b9:ee:f5:
49:df:d2:08:7f:9d:99:de:46:98:df:3b:50:58:88:
12:5d:d0:62:54:9e:f1:a2:ae:1b:ef:5c:b0:51:81:
00:5b:05:da:8d:af:6e:b6:f8:12:e7:ba:62:8e:1e:
a4:9a:eb:70:72:5c:8b:3e:5b:c6:20:0c:d6:de:7f:
7e:e9:5c:b0:a0:17:2f:be:0c:c4:3c:20:ef:62:67:
88:fd:91:a0:37:41:82:aa:3c:3e:47:11:6c:39:31:
01:43:23:35:b9:7f:f8:bb:93:5c:6d:18:d5:64:80:
fe:c7:d1:77:9b:02:a5:6c:f7:a1:6d:3c:0a:86:5e:
30:73:f0:3c:79:e5:4b:64:f1:01:9d:7c:2f:d3:51:
c7:8e:ff:41:b5:62:de:a8:ea:52:83:40:8d:30:7f:
f8:11:1d:8c:05:2b:4a:4c:b2:55:0d:39:ac:aa:6f:
87:4a:ac:26:dd:65:af:44:28:4f:77:64:28:41:ae:
63:72:44:07:b5:cf:19:5c:04:e7:bf:5d:00:24:45:
fb:35:d7:2b:11:9a:64:bf:2f:6c:0d:a2:28:d2:84:
cd:3c:af:ac:b7:7b:68:0e:46:0e:8c:2b:f9:82:f3:
07:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:13:60:62:A9:B1:D5:94:D3:95:4D:71:8B:A1:69:E8:F6:64:45:44
X509v3 Authority Key Identifier:
keyid:29:06:F0:26:B1:FE:63:6C:9A:5D:A0:11:DC:7F:D6:9C:58:1D:02:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQbwJrH-Y2yaXaAR3H_WnFgdArg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:fb:2d:98:2a:5b:eb:d2:b9:4e:4a:b6:0f:35:bd:a9:52:f6:
21:81:a5:23:a4:1e:4f:8e:5c:31:24:74:12:57:26:25:d3:58:
66:68:cb:4e:3f:2c:af:e6:39:12:23:34:ec:1b:cf:76:eb:51:
5c:41:7d:42:7b:b4:75:7b:60:4a:80:90:4f:ce:64:2b:00:3d:
01:c3:82:33:18:a6:4c:04:46:9d:d7:23:dc:4d:37:34:ba:30:
66:85:fe:d1:be:02:7d:d8:b4:45:90:24:5c:e8:76:21:a6:52:
62:37:33:ee:69:df:d2:02:42:b5:73:3b:a4:8d:1a:84:60:15:
45:30:fd:43:73:26:0a:03:98:70:9a:35:ee:93:eb:af:e4:bb:
ee:58:8c:84:cd:cc:dc:e1:e6:f5:b7:ae:20:ae:29:85:cd:2e:
b7:d5:77:2c:57:3f:84:40:93:52:c6:a5:ef:43:88:1e:47:76:
cd:d6:7f:5a:80:0d:46:c3:c0:86:3d:fb:9d:a3:bc:91:6b:93:
fe:9f:2f:97:ec:3e:a6:ac:05:5a:0a:e3:8c:37:23:c3:f0:81:
86:e7:3b:72:fc:a2:fc:61:39:a7:78:c5:7d:cc:e0:8a:ab:f3:
2c:df:47:72:4f:ca:7e:f6:ae:4f:da:18:ca:4c:08:ee:cd:63:
00:85:08:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:51:45 2026 by rpki-client