Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.mft
File: KqrPxdXjsmjyxrpDNrzJQfXI168.mft (raw, json)
Hash identifier: 1kCEgRpd1sZrsxnI1qJDQT2/SGDposV3qu5fwTfMVlg=
Subject key identifier: 1C:67:1C:1A:8B:D5:4C:74:85:24:D1:72:E0:17:06:07:22:EF:DB:39
Authority key identifier: 2A:AA:CF:C5:D5:E3:B2:68:F2:C6:BA:43:36:BC:C9:41:F5:C8:D7:AF
Certificate issuer: /CN=2aaacfc5d5e3b268f2c6ba4336bcc941f5c8d7af
Certificate serial: 019F909150E7167B4733E7D64A3401175D4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqrPxdXjsmjyxrpDNrzJQfXI168.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.mft
Manifest number: 13AE
Signing time: Thu 23 Jul 2026 20:01:10 +0000
Manifest this update: Thu 23 Jul 2026 20:01:10 +0000
Manifest next update: Fri 24 Jul 2026 20:01:10 +0000
Files and hashes: 1: KqrPxdXjsmjyxrpDNrzJQfXI168.crl (hash: GRcs2TbNXrHPLbU48hBolklxhnLBxEC/vby19SzBQGU=)
2: P9Xi_swd13obp_Uu9EpIelH3ibs.asa (hash: ACsc4jn9BWNidz80pgmChNo/puaiemP1X04joTVfolY=)
3: fedcGuaQw6GYN-hZL-uzH54Rc1I.roa (hash: zm3vjAA+Iy34Xe3WYJQQlDDN2K6FJmbhe/vPYFhLHAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqrPxdXjsmjyxrpDNrzJQfXI168.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:91:50:e7:16:7b:47:33:e7:d6:4a:34:01:17:5d:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aaacfc5d5e3b268f2c6ba4336bcc941f5c8d7af
Validity
Not Before: Jul 23 20:01:10 2026 GMT
Not After : Jul 24 20:01:10 2026 GMT
Subject: CN=1c671c1a8bd54c748524d172e017060722efdb39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:f9:41:d2:58:9d:59:e5:48:75:a4:96:73:0f:
35:ff:dc:5b:41:1e:15:b9:74:35:99:30:3c:18:4b:
4e:4d:1a:63:30:7e:be:1c:30:c8:ea:41:30:2f:a4:
2f:ae:dd:c3:83:81:a0:bf:58:62:1b:66:21:fa:e1:
81:95:4d:a2:ef:a0:c7:9e:b5:01:b4:ab:2a:bb:ae:
02:95:e0:21:4a:da:7c:55:ae:3f:71:f0:56:fa:55:
b3:f7:b8:58:d2:80:e2:6f:30:cf:ca:04:d5:b7:32:
27:59:ce:ba:85:82:03:43:0e:1d:a1:56:95:51:f8:
0a:66:de:29:68:b5:d4:f4:ee:5c:d4:d6:16:28:fd:
55:63:d4:df:98:2c:07:e1:67:cf:91:a7:32:bd:06:
f3:6e:6d:12:61:28:92:a1:53:63:17:b7:2c:82:5f:
32:88:f3:60:65:47:4a:6c:04:90:9e:58:9a:6a:f0:
69:bc:dd:8e:2d:d8:ce:25:10:d1:5f:24:20:d7:fc:
92:0f:a7:db:ab:aa:bf:e6:e6:98:37:a3:73:31:ed:
00:9a:8a:5c:3d:14:c6:e2:a3:d4:10:4d:09:5c:ba:
62:29:85:cd:30:6f:9e:a4:95:48:c6:06:9c:b8:3a:
cc:82:b5:49:5a:79:3e:39:a6:c6:1e:02:c9:22:ce:
75:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:67:1C:1A:8B:D5:4C:74:85:24:D1:72:E0:17:06:07:22:EF:DB:39
X509v3 Authority Key Identifier:
keyid:2A:AA:CF:C5:D5:E3:B2:68:F2:C6:BA:43:36:BC:C9:41:F5:C8:D7:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqrPxdXjsmjyxrpDNrzJQfXI168.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:53:9f:94:2c:12:bc:9e:1a:48:29:4b:f6:3b:8c:29:69:fc:
65:97:a6:2a:00:0b:b3:c3:60:2b:3b:6c:d2:de:24:3c:83:49:
4b:9d:0b:cd:4d:88:a2:0f:98:62:92:4f:87:01:87:0c:e9:85:
ad:36:be:e2:94:6f:a3:e1:d1:b3:8a:14:55:b0:ab:29:38:7a:
bd:92:9e:13:1e:4f:6f:b5:c1:a8:ed:80:a5:2a:67:ba:85:5a:
31:eb:27:53:28:b7:e1:78:7e:8f:77:b7:e5:54:74:71:f4:f0:
6c:51:11:69:fb:94:7b:af:30:ce:db:25:f9:9b:a3:22:32:7d:
1e:d6:68:09:de:7b:23:7d:f8:d2:88:ea:f2:67:00:82:e4:19:
58:42:a1:65:64:c7:08:bb:21:87:fb:28:76:3d:2a:7c:6c:06:
2c:6f:57:a8:5d:f9:4d:fe:73:b3:4c:26:58:5f:60:f3:fc:fd:
d5:5e:b7:43:bb:28:1d:13:8e:f5:73:c5:c9:b8:0b:40:60:b3:
9c:09:29:ac:2f:b8:66:f7:05:e8:9b:99:ae:9b:11:c5:c9:7b:
7c:ae:74:cc:f7:b5:5f:01:82:55:6c:56:09:60:38:13:8f:21:
83:5f:9e:1b:5f:57:84:77:47:16:9d:6b:00:76:a8:1f:66:b7:
37:62:84:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:57:31 2026 by rpki-client