Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/56d490-0196-45ac-83eb-c3297129e4d3/1/KQhfxTTBPgiC4mColfPPDFVD7wg.mft
File: KQhfxTTBPgiC4mColfPPDFVD7wg.mft (raw, json)
Hash identifier: iZDJa5Egramq0vIvMv/oCf1yup01GGeA45kFF7LXoIk=
Subject key identifier: A0:18:70:6D:34:C2:78:8E:58:AD:F0:4B:40:11:ED:D8:41:4E:39:30
Authority key identifier: 29:08:5F:C5:34:C1:3E:08:82:E2:60:A8:95:F3:CF:0C:55:43:EF:08
Certificate issuer: /CN=29085fc534c13e0882e260a895f3cf0c5543ef08
Certificate serial: 01A0CDEC8972D6D9C9BE7CA5318D7275172F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQhfxTTBPgiC4mColfPPDFVD7wg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/56d490-0196-45ac-83eb-c3297129e4d3/1/KQhfxTTBPgiC4mColfPPDFVD7wg.mft
Manifest number: 09E0
Signing time: Wed 23 Sep 2026 11:00:25 +0000
Manifest this update: Wed 23 Sep 2026 11:00:25 +0000
Manifest next update: Thu 24 Sep 2026 11:00:25 +0000
Files and hashes: 1: KQhfxTTBPgiC4mColfPPDFVD7wg.crl (hash: Q91MDfopMf61FAqd70geDva6/GRXJ+z0yg2EeyjjDVA=)
2: Xz9ZzxndKI0PcrapUKoUCMQ3X_Y.roa (hash: iobEnFpnj2gMfTgfXBWjm230a5l/fYY/rsdkSlzHTBY=)
3: fLAF4G67hv9tPfc_3UKCBvCfSlg.roa (hash: 3BmIz1KJKD3N0MlZqF9hPkHknhq/hRGM3d77oRfIrWk=)
4: zkEDbiGN36tLEUPTADK7tT6KZy4.roa (hash: heFMDQ/ngRlQqjUHbU5e/JEcSh3lbS47ak2zBoYzTAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/56d490-0196-45ac-83eb-c3297129e4d3/1/KQhfxTTBPgiC4mColfPPDFVD7wg.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/56d490-0196-45ac-83eb-c3297129e4d3/1/KQhfxTTBPgiC4mColfPPDFVD7wg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQhfxTTBPgiC4mColfPPDFVD7wg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 11:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:ec:89:72:d6:d9:c9:be:7c:a5:31:8d:72:75:17:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29085fc534c13e0882e260a895f3cf0c5543ef08
Validity
Not Before: Sep 23 11:00:25 2026 GMT
Not After : Sep 24 11:00:25 2026 GMT
Subject: CN=a018706d34c2788e58adf04b4011edd8414e3930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:56:05:c5:c7:04:71:64:9b:8c:2e:25:64:5f:
96:b9:a5:67:cf:00:5e:02:33:85:34:08:79:c4:44:
39:47:4b:c6:4d:18:d4:da:f7:22:16:a0:43:a3:aa:
eb:c6:5b:6d:6e:ef:39:23:37:e7:c6:f0:c9:2a:1a:
cc:84:b1:a1:65:cc:02:36:22:c6:47:c8:10:c5:b8:
e2:38:01:66:e3:10:d1:2a:ed:d0:2b:5d:8f:8c:cc:
61:9f:b8:7e:c8:d8:b1:0a:61:b2:45:7d:a6:d1:b3:
d9:72:29:48:c6:e3:6e:0b:9a:5a:10:ff:6b:43:86:
f0:5f:c1:ca:3a:53:5e:d7:0c:fe:ef:c5:c6:55:f2:
7c:fa:d0:88:b8:c3:36:21:43:ae:a4:08:41:77:66:
a3:9b:a0:81:ec:8d:69:51:4f:2d:a2:db:c5:ac:27:
e2:16:87:6f:95:d7:8e:8c:b7:19:dd:da:6e:2b:bb:
5f:27:79:3e:67:22:d1:ff:db:ba:f1:d5:21:12:c0:
0c:03:77:26:96:ad:e2:5b:eb:fa:25:31:ca:c4:59:
2e:e6:35:6d:3f:69:4c:c3:5a:3a:33:ba:4e:83:19:
ed:62:e2:51:f4:b7:9e:46:3c:43:90:b3:7d:92:41:
14:08:64:3a:87:82:43:34:71:da:c6:a2:e4:9d:6d:
49:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:18:70:6D:34:C2:78:8E:58:AD:F0:4B:40:11:ED:D8:41:4E:39:30
X509v3 Authority Key Identifier:
keyid:29:08:5F:C5:34:C1:3E:08:82:E2:60:A8:95:F3:CF:0C:55:43:EF:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQhfxTTBPgiC4mColfPPDFVD7wg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/56d490-0196-45ac-83eb-c3297129e4d3/1/KQhfxTTBPgiC4mColfPPDFVD7wg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/56d490-0196-45ac-83eb-c3297129e4d3/1/KQhfxTTBPgiC4mColfPPDFVD7wg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:42:34:61:4e:af:7e:1b:3a:94:f0:4b:c9:36:d1:7a:6a:fd:
0c:5a:20:e0:8e:6b:5e:f7:a4:49:4c:fc:b5:e8:82:64:1c:b6:
b5:66:9c:99:4b:0c:84:15:ab:31:17:d8:04:95:ae:1f:7c:65:
06:10:de:eb:5b:eb:24:0f:88:7b:45:c4:f5:9d:1b:c2:33:85:
ba:60:06:02:dd:b4:9b:e9:1e:7e:6f:04:05:ee:a3:8a:c7:8d:
72:62:02:d7:73:cc:63:46:90:8c:b1:50:3c:e9:0c:ff:bb:16:
a6:c1:98:1e:d5:8c:ae:91:89:4f:e8:2a:dd:e2:0b:04:89:3c:
8d:f8:d4:5f:f9:34:b4:e5:0e:9c:0a:d7:23:f6:56:0e:3a:75:
df:3a:27:bb:00:73:c1:c7:9d:d9:6b:9d:69:35:70:5a:be:f8:
73:da:52:78:78:09:a3:4c:8f:2b:15:23:9b:02:b1:ea:98:d2:
0e:f6:f4:cd:4e:76:a0:b4:f2:7e:19:a0:4a:00:46:fc:e0:48:
58:06:25:6a:ce:63:dc:11:85:e3:c4:10:ea:33:a2:e5:b2:78:
7d:06:43:18:c5:08:75:59:9f:db:27:8d:40:42:0f:7c:79:3f:
2f:00:4a:8f:a3:58:cf:87:01:c5:eb:e4:5c:16:f7:3b:2e:f9:
1b:54:a6:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:44:48 2026 by rpki-client