Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.mft
File: KqrPxdXjsmjyxrpDNrzJQfXI168.mft (raw, json)
Hash identifier: XwkdePn4C3z5LF6zTjFzYPnSFgq/g9O97MSgqg0/xUk=
Subject key identifier: D8:B1:BC:60:57:F4:06:B3:23:2A:F1:5F:5A:5C:BD:D1:B9:1E:1D:6D
Authority key identifier: 2A:AA:CF:C5:D5:E3:B2:68:F2:C6:BA:43:36:BC:C9:41:F5:C8:D7:AF
Certificate issuer: /CN=2aaacfc5d5e3b268f2c6ba4336bcc941f5c8d7af
Certificate serial: 019E1FB55BE8408072AC11D303D8C2003CAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqrPxdXjsmjyxrpDNrzJQfXI168.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.mft
Manifest number: 12EF
Signing time: Wed 13 May 2026 05:00:39 +0000
Manifest this update: Wed 13 May 2026 05:00:39 +0000
Manifest next update: Thu 14 May 2026 05:00:39 +0000
Files and hashes: 1: KqrPxdXjsmjyxrpDNrzJQfXI168.crl (hash: B+r9W3jdfO843bledYqEn9LOkJAJQy4cu6NJli6FA4w=)
2: P9Xi_swd13obp_Uu9EpIelH3ibs.asa (hash: ACsc4jn9BWNidz80pgmChNo/puaiemP1X04joTVfolY=)
3: fedcGuaQw6GYN-hZL-uzH54Rc1I.roa (hash: zm3vjAA+Iy34Xe3WYJQQlDDN2K6FJmbhe/vPYFhLHAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqrPxdXjsmjyxrpDNrzJQfXI168.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 05:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b5:5b:e8:40:80:72:ac:11:d3:03:d8:c2:00:3c:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aaacfc5d5e3b268f2c6ba4336bcc941f5c8d7af
Validity
Not Before: May 13 05:00:39 2026 GMT
Not After : May 14 05:00:39 2026 GMT
Subject: CN=d8b1bc6057f406b3232af15f5a5cbdd1b91e1d6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a7:17:8e:42:97:86:16:cf:a8:c6:cb:c5:76:
a5:a4:b5:a5:3c:07:5b:a7:ab:1f:fe:6f:4d:15:2f:
b4:af:e2:ba:09:c9:1e:e2:7c:63:f0:a9:9d:21:80:
88:0d:ec:ad:6a:90:57:2c:98:ff:64:8c:83:94:78:
f4:8d:3b:b2:8d:a2:d4:d9:80:20:eb:17:32:47:59:
8e:2d:4d:56:74:29:49:27:a3:81:fe:09:46:1c:b9:
eb:62:b8:f9:2a:7b:94:fe:a5:22:50:ec:08:d1:f5:
47:63:cf:67:f7:64:65:79:a5:ab:5b:12:21:09:38:
ac:80:2e:4d:d9:67:ba:f7:4a:46:97:03:8f:9c:00:
b0:8b:6e:24:b5:15:9f:61:29:e4:c8:a1:3e:8e:8f:
15:94:20:e6:30:f0:f2:6b:c6:b0:7c:19:57:62:b5:
7f:ff:dd:f4:2f:9a:41:b0:1c:bc:8f:3d:ab:b0:81:
5f:8a:2f:3f:6d:3c:94:a0:ad:20:a2:6c:4d:e0:d5:
88:43:c8:35:4f:ec:d6:ef:8c:ab:d7:7a:0e:2c:1e:
d0:33:d8:9b:69:b7:33:f9:b6:2c:7d:54:39:3a:4a:
45:2c:58:ad:e1:4b:0e:bd:4f:9d:09:93:e5:e9:29:
04:0d:ba:eb:89:f3:78:0f:e1:7c:c6:68:e3:65:de:
a9:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:B1:BC:60:57:F4:06:B3:23:2A:F1:5F:5A:5C:BD:D1:B9:1E:1D:6D
X509v3 Authority Key Identifier:
keyid:2A:AA:CF:C5:D5:E3:B2:68:F2:C6:BA:43:36:BC:C9:41:F5:C8:D7:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqrPxdXjsmjyxrpDNrzJQfXI168.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:a3:75:37:2b:8f:e3:82:eb:1f:d3:c5:dd:be:1a:b3:8a:4b:
a9:1c:e0:ff:25:5a:cd:ca:f5:c6:98:21:1b:51:80:68:7b:d2:
57:36:18:27:a7:84:d8:5e:1e:e0:bf:45:87:b4:80:cc:3a:6f:
ee:b2:2c:44:75:3a:46:ce:a2:91:93:ca:84:17:5e:03:5e:bb:
55:1c:68:a6:6d:62:85:a3:21:28:c0:f6:47:29:c4:d1:51:67:
86:62:9f:2a:6c:09:e0:04:ad:9a:4e:23:f3:98:27:73:ed:d0:
92:7a:cf:ec:1f:6c:b9:a4:f1:cc:91:e0:ff:57:ea:06:e2:86:
09:a4:b1:4a:b5:5f:93:65:c4:fc:86:cc:87:3f:f8:6e:c8:49:
f1:fd:dd:e8:52:1e:60:a6:f9:af:39:f6:e1:b9:8f:68:be:4d:
26:a6:0b:8c:95:47:fe:be:1b:f1:7a:c4:94:d8:f2:09:d9:de:
01:98:48:ec:46:2f:86:fc:b7:fb:4d:13:47:ad:f2:9f:b8:6b:
84:cd:23:ca:9b:f0:48:1a:be:42:9b:aa:fa:d7:2c:0a:43:04:
ae:ae:3e:2e:13:05:a1:1e:2b:3a:ba:e7:20:4c:c8:f2:36:fb:
4e:9d:2a:8e:eb:c6:1e:94:1c:b3:4e:d2:7a:ee:fe:73:91:24:
0b:43:c9:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ftVvoQIByrBHTA9jCADytMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYWFjZmM1ZDVlM2IyNjhmMmM2YmE0MzM2YmNjOTQxZjVj
OGQ3YWYwHhcNMjYwNTEzMDUwMDM5WhcNMjYwNTE0MDUwMDM5WjAzMTEwLwYDVQQD
EyhkOGIxYmM2MDU3ZjQwNmIzMjMyYWYxNWY1YTVjYmRkMWI5MWUxZDZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6cXjkKXhhbPqMbLxXalpLWlPAdb
p6sf/m9NFS+0r+K6Ccke4nxj8KmdIYCIDeytapBXLJj/ZIyDlHj0jTuyjaLU2YAg
6xcyR1mOLU1WdClJJ6OB/glGHLnrYrj5KnuU/qUiUOwI0fVHY89n92RleaWrWxIh
CTisgC5N2We690pGlwOPnACwi24ktRWfYSnkyKE+jo8VlCDmMPDya8awfBlXYrV/
/930L5pBsBy8jz2rsIFfii8/bTyUoK0gomxN4NWIQ8g1T+zW74yr13oOLB7QM9ib
abcz+bYsfVQ5OkpFLFit4UsOvU+dCZPl6SkEDbrrifN4D+F8xmjjZd6p+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNixvGBX9AazIyrxX1pcvdG5Hh1tMB8GA1UdIwQY
MBaAFCqqz8XV47Jo8sa6Qza8yUH1yNevMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3FyUHhkWGpzbWp5eHJwRE5yekpRZlhJMTY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9jNTJkNDQtMWJiNi00ZGMwLTg2YmEt
NDRjYjRlOTUzMDI3LzEvS3FyUHhkWGpzbWp5eHJwRE5yekpRZlhJMTY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni9jNTJkNDQtMWJiNi00ZGMwLTg2YmEtNDRjYjRlOTUzMDI3
LzEvS3FyUHhkWGpzbWp5eHJwRE5yekpRZlhJMTY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfqN1NyuP
44LrH9PF3b4as4pLqRzg/yVazcr1xpghG1GAaHvSVzYYJ6eE2F4e4L9Fh7SAzDpv
7rIsRHU6Rs6ikZPKhBdeA167VRxopm1ihaMhKMD2RynE0VFnhmKfKmwJ4AStmk4j
85gnc+3QknrP7B9suaTxzJHg/1fqBuKGCaSxSrVfk2XE/IbMhz/4bshJ8f3d6FIe
YKb5rzn24bmPaL5NJqYLjJVH/r4b8XrElNjyCdneAZhI7EYvhvy3+00TR63yn7hr
hM0jypvwSBq+Qpuq+tcsCkMErq4+LhMFoR4rOrrnIEzI8jb7Tp0qjuvGHpQcs07S
eu7+c5EkC0PJkQ==
-----END CERTIFICATE-----
Generated at Wed May 13 13:01:41 2026 by rpki-client