Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/56d490-0196-45ac-83eb-c3297129e4d3/1/KQhfxTTBPgiC4mColfPPDFVD7wg.mft
File: KQhfxTTBPgiC4mColfPPDFVD7wg.mft (raw, json)
Hash identifier: rcnmjPTS2m4E9wKQVfCsXCcAXFk7SoWByNv7ngzIHCo=
Subject key identifier: 78:BC:0B:C0:D9:A5:CF:61:12:6A:D2:E1:2F:8D:8B:86:CB:BE:64:6C
Authority key identifier: 29:08:5F:C5:34:C1:3E:08:82:E2:60:A8:95:F3:CF:0C:55:43:EF:08
Certificate issuer: /CN=29085fc534c13e0882e260a895f3cf0c5543ef08
Certificate serial: 019F9324648059549CBF5A29FD038ECB55B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQhfxTTBPgiC4mColfPPDFVD7wg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/56d490-0196-45ac-83eb-c3297129e4d3/1/KQhfxTTBPgiC4mColfPPDFVD7wg.mft
Manifest number: 093D
Signing time: Fri 24 Jul 2026 08:01:03 +0000
Manifest this update: Fri 24 Jul 2026 08:01:03 +0000
Manifest next update: Sat 25 Jul 2026 08:01:03 +0000
Files and hashes: 1: KQhfxTTBPgiC4mColfPPDFVD7wg.crl (hash: hit8TX5ZxQHgdwLTPYClPYLVuPc7A2Z11sbCrBamKVM=)
2: Xz9ZzxndKI0PcrapUKoUCMQ3X_Y.roa (hash: iobEnFpnj2gMfTgfXBWjm230a5l/fYY/rsdkSlzHTBY=)
3: fLAF4G67hv9tPfc_3UKCBvCfSlg.roa (hash: 3BmIz1KJKD3N0MlZqF9hPkHknhq/hRGM3d77oRfIrWk=)
4: zkEDbiGN36tLEUPTADK7tT6KZy4.roa (hash: heFMDQ/ngRlQqjUHbU5e/JEcSh3lbS47ak2zBoYzTAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/56d490-0196-45ac-83eb-c3297129e4d3/1/KQhfxTTBPgiC4mColfPPDFVD7wg.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/56d490-0196-45ac-83eb-c3297129e4d3/1/KQhfxTTBPgiC4mColfPPDFVD7wg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQhfxTTBPgiC4mColfPPDFVD7wg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:24:64:80:59:54:9c:bf:5a:29:fd:03:8e:cb:55:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29085fc534c13e0882e260a895f3cf0c5543ef08
Validity
Not Before: Jul 24 08:01:03 2026 GMT
Not After : Jul 25 08:01:03 2026 GMT
Subject: CN=78bc0bc0d9a5cf61126ad2e12f8d8b86cbbe646c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:16:2e:db:9c:10:98:e3:93:a8:b7:ff:94:38:
6f:82:31:57:c6:ee:42:e1:bb:47:53:96:78:fd:c7:
1c:56:ba:0f:f3:df:43:70:3e:6d:15:78:e2:2b:c8:
96:6a:e5:9f:99:f1:22:a8:27:c8:ac:cc:7f:2d:d3:
61:e0:15:20:85:6d:bc:10:90:8e:bb:27:20:de:13:
36:c1:23:7b:9b:51:48:7a:4c:71:e5:53:74:21:0e:
a9:14:aa:80:f8:4e:b7:c5:42:aa:9e:71:d9:01:b6:
70:3c:08:3e:87:b4:3e:06:47:36:c4:88:a8:a7:b0:
8c:91:99:36:79:a6:e1:0a:32:94:1c:fd:24:12:c9:
1d:28:9e:69:f4:68:25:46:59:b6:fa:c3:d2:48:e8:
c1:cd:ee:3b:ea:02:cf:26:08:d1:b4:bf:d4:f9:3e:
86:3a:41:91:54:8b:ea:c3:00:05:96:8c:a2:32:9b:
16:18:fc:78:65:ab:06:9d:f3:88:62:96:cc:7d:41:
67:d0:10:0b:ec:16:ee:bd:1d:c1:f4:9e:80:9f:5b:
dc:34:fc:e0:de:8c:e2:95:ab:fa:bd:f9:7b:aa:a8:
a1:35:2b:ff:7f:ae:b5:c1:ce:1c:eb:5e:9b:e0:8f:
a4:92:a4:b2:a0:34:0b:9c:cf:35:c9:fb:f3:ca:80:
87:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:BC:0B:C0:D9:A5:CF:61:12:6A:D2:E1:2F:8D:8B:86:CB:BE:64:6C
X509v3 Authority Key Identifier:
keyid:29:08:5F:C5:34:C1:3E:08:82:E2:60:A8:95:F3:CF:0C:55:43:EF:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQhfxTTBPgiC4mColfPPDFVD7wg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/56d490-0196-45ac-83eb-c3297129e4d3/1/KQhfxTTBPgiC4mColfPPDFVD7wg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/56d490-0196-45ac-83eb-c3297129e4d3/1/KQhfxTTBPgiC4mColfPPDFVD7wg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:9b:c3:23:05:a3:73:32:65:62:35:1e:ba:99:d1:c9:3e:24:
31:4c:55:e7:15:1d:2e:ab:3d:a2:93:0a:7f:bb:30:84:32:71:
af:df:1b:e9:62:8c:f3:ca:f0:38:0f:49:f1:07:82:82:3a:12:
31:80:b6:d5:90:86:cb:07:82:fa:79:f0:78:3b:fc:a8:e7:68:
e6:9e:ad:17:ed:3f:87:92:38:41:a7:db:a3:50:eb:1e:db:f8:
da:ab:23:43:df:3f:a6:b9:46:2a:e8:dd:be:08:e4:d4:62:cd:
cb:6c:5f:0e:fa:d0:17:39:8d:c0:d6:fb:e1:56:ce:f5:97:6e:
3f:36:ed:ca:ac:02:70:b9:82:7d:08:bf:81:08:60:a8:a2:b3:
a6:d6:9c:a3:26:70:42:1e:26:15:83:34:fd:5d:18:58:e1:94:
c4:69:be:3b:e2:07:c4:54:a1:93:c5:98:f5:f1:04:31:27:b5:
0c:b2:43:1d:59:70:96:f7:01:51:cc:d6:a9:a2:3b:cf:fe:05:
09:56:f7:03:94:52:d0:0e:56:43:23:11:14:24:d6:ea:81:5e:
36:64:42:e2:d5:d4:c4:99:30:c0:d5:75:76:be:ce:1a:6a:a4:
a4:ef:7b:36:09:7d:36:dd:0d:fb:b0:fd:69:5c:57:21:e8:ac:
89:f1:97:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:47:30 2026 by rpki-client