Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.mft
File: KqrPxdXjsmjyxrpDNrzJQfXI168.mft (raw, json)
Hash identifier: dyQ4VKr3Etx7c+iGkvasNzmunNqFxbMm0F/a//dQoRo=
Subject key identifier: 70:08:F5:94:DA:8E:58:03:72:A6:8A:5A:6C:43:2C:33:33:AC:80:9E
Authority key identifier: 2A:AA:CF:C5:D5:E3:B2:68:F2:C6:BA:43:36:BC:C9:41:F5:C8:D7:AF
Certificate issuer: /CN=2aaacfc5d5e3b268f2c6ba4336bcc941f5c8d7af
Certificate serial: 019F8EA2A62499CFF8BCDF25FCF230153C86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqrPxdXjsmjyxrpDNrzJQfXI168.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.mft
Manifest number: 13AD
Signing time: Thu 23 Jul 2026 11:00:51 +0000
Manifest this update: Thu 23 Jul 2026 11:00:51 +0000
Manifest next update: Fri 24 Jul 2026 11:00:51 +0000
Files and hashes: 1: KqrPxdXjsmjyxrpDNrzJQfXI168.crl (hash: me6wXmhQbvTmEG/cMA685lOELl2OVwfkDVOkozu7lBg=)
2: P9Xi_swd13obp_Uu9EpIelH3ibs.asa (hash: ACsc4jn9BWNidz80pgmChNo/puaiemP1X04joTVfolY=)
3: fedcGuaQw6GYN-hZL-uzH54Rc1I.roa (hash: zm3vjAA+Iy34Xe3WYJQQlDDN2K6FJmbhe/vPYFhLHAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqrPxdXjsmjyxrpDNrzJQfXI168.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:a6:24:99:cf:f8:bc:df:25:fc:f2:30:15:3c:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aaacfc5d5e3b268f2c6ba4336bcc941f5c8d7af
Validity
Not Before: Jul 23 11:00:51 2026 GMT
Not After : Jul 24 11:00:51 2026 GMT
Subject: CN=7008f594da8e580372a68a5a6c432c3333ac809e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a3:3a:05:a0:e6:85:b9:e1:20:3b:f5:31:03:
a3:a3:7a:a0:02:66:5e:e9:f1:1c:36:27:56:93:c3:
c9:60:aa:10:97:93:c4:d7:0e:6c:c0:89:19:a4:6f:
61:a5:42:1f:c3:36:35:d8:40:24:0a:3c:da:1a:38:
ee:64:6b:01:e2:ee:69:df:e6:e7:14:0f:dd:75:96:
31:b6:15:6b:94:b7:bf:f1:7c:89:af:6e:b5:23:d3:
75:0d:93:4f:81:53:2c:a7:21:2c:9d:f6:93:1e:d2:
03:cf:d5:59:0b:0e:c4:c0:a8:5a:14:f9:84:af:c9:
7c:86:84:77:b1:44:24:3d:a8:79:e4:2e:15:1c:25:
3b:84:fc:be:71:ae:77:dc:b3:75:6e:8c:0f:9c:f5:
cd:b4:26:f8:e9:2b:d1:59:2e:0f:b4:26:5b:96:ac:
5c:76:af:e2:89:a9:ed:5c:85:fd:bf:c1:c7:4b:b7:
9c:4e:f2:c5:c6:59:f8:67:32:95:58:a5:e2:fc:c2:
2e:a9:e7:22:30:85:ac:36:42:d0:15:9e:9a:99:2d:
1e:16:af:ac:15:22:a9:27:8a:f0:ad:0d:f3:5e:35:
2f:59:83:62:52:53:76:33:85:54:1f:be:ae:e9:c9:
fd:22:ad:7c:69:93:b5:d7:0f:23:b7:d8:d1:28:ca:
46:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:08:F5:94:DA:8E:58:03:72:A6:8A:5A:6C:43:2C:33:33:AC:80:9E
X509v3 Authority Key Identifier:
keyid:2A:AA:CF:C5:D5:E3:B2:68:F2:C6:BA:43:36:BC:C9:41:F5:C8:D7:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqrPxdXjsmjyxrpDNrzJQfXI168.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:c7:37:e6:c4:1f:9f:c7:0a:39:63:74:04:12:92:05:00:8e:
89:68:92:e2:be:80:12:23:0b:5e:eb:53:e2:7a:f3:87:c2:0d:
8f:86:35:75:16:e7:7a:21:5d:1e:45:9e:49:e2:22:0a:b2:01:
d5:6f:e8:ce:1e:fb:e4:24:f6:e0:45:4a:27:1f:d1:2e:eb:4a:
88:e4:2a:e6:bd:12:81:48:4c:e0:1f:d1:f7:09:03:19:12:77:
9a:8f:40:c2:62:ba:13:aa:c0:08:4a:64:e2:4b:a2:9f:ec:ec:
d3:89:59:38:c7:d2:0e:e4:c5:31:99:70:e6:fd:45:fa:63:06:
8f:7d:eb:f3:7f:ac:4e:85:70:e9:bc:75:df:75:e0:03:76:df:
64:85:ca:26:a6:3d:4a:a5:4e:fe:11:b3:3f:78:31:96:1a:05:
a0:d8:16:02:10:07:6e:bc:b4:0e:16:53:0f:f9:86:ca:8c:a6:
b6:d0:32:68:68:51:43:1b:b7:88:7a:fc:a8:40:27:d5:b0:87:
e9:76:ed:b2:ed:cf:45:ce:10:c2:82:7d:31:72:0d:21:98:a5:
01:e5:3c:f1:6a:0e:a9:0d:d5:5c:ba:7b:7e:22:f6:38:90:01:
b3:7b:a1:f6:c2:7d:fd:6c:d1:9e:78:95:10:7e:09:ea:5a:80:
72:1f:4f:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+OoqYkmc/4vN8l/PIwFTyGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYWFjZmM1ZDVlM2IyNjhmMmM2YmE0MzM2YmNjOTQxZjVj
OGQ3YWYwHhcNMjYwNzIzMTEwMDUxWhcNMjYwNzI0MTEwMDUxWjAzMTEwLwYDVQQD
Eyg3MDA4ZjU5NGRhOGU1ODAzNzJhNjhhNWE2YzQzMmMzMzMzYWM4MDllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qM6BaDmhbnhIDv1MQOjo3qgAmZe
6fEcNidWk8PJYKoQl5PE1w5swIkZpG9hpUIfwzY12EAkCjzaGjjuZGsB4u5p3+bn
FA/ddZYxthVrlLe/8XyJr261I9N1DZNPgVMspyEsnfaTHtIDz9VZCw7EwKhaFPmE
r8l8hoR3sUQkPah55C4VHCU7hPy+ca533LN1bowPnPXNtCb46SvRWS4PtCZblqxc
dq/iiantXIX9v8HHS7ecTvLFxln4ZzKVWKXi/MIuqeciMIWsNkLQFZ6amS0eFq+s
FSKpJ4rwrQ3zXjUvWYNiUlN2M4VUH76u6cn9Iq18aZO11w8jt9jRKMpGEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHAI9ZTajlgDcqaKWmxDLDMzrICeMB8GA1UdIwQY
MBaAFCqqz8XV47Jo8sa6Qza8yUH1yNevMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3FyUHhkWGpzbWp5eHJwRE5yekpRZlhJMTY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9jNTJkNDQtMWJiNi00ZGMwLTg2YmEt
NDRjYjRlOTUzMDI3LzEvS3FyUHhkWGpzbWp5eHJwRE5yekpRZlhJMTY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni9jNTJkNDQtMWJiNi00ZGMwLTg2YmEtNDRjYjRlOTUzMDI3
LzEvS3FyUHhkWGpzbWp5eHJwRE5yekpRZlhJMTY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArMc35sQf
n8cKOWN0BBKSBQCOiWiS4r6AEiMLXutT4nrzh8INj4Y1dRbneiFdHkWeSeIiCrIB
1W/ozh775CT24EVKJx/RLutKiOQq5r0SgUhM4B/R9wkDGRJ3mo9AwmK6E6rACEpk
4kuin+zs04lZOMfSDuTFMZlw5v1F+mMGj33r83+sToVw6bx133XgA3bfZIXKJqY9
SqVO/hGzP3gxlhoFoNgWAhAHbry0DhZTD/mGyoymttAyaGhRQxu3iHr8qEAn1bCH
6Xbtsu3PRc4QwoJ9MXINIZilAeU88WoOqQ3VXLp7fiL2OJABs3uh9sJ9/WzRnniV
EH4J6lqAch9PSg==
-----END CERTIFICATE-----
Generated at Thu Jul 23 20:25:54 2026 by rpki-client