Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.mft
File: KqrPxdXjsmjyxrpDNrzJQfXI168.mft (raw, json)
Hash identifier: GwkYNIUzm1WXBwNeTKdKQyLS05H2eFdfNtDUOeAfGvg=
Subject key identifier: 16:96:D9:07:2E:70:41:AE:F7:20:B2:10:0B:52:C0:8A:42:9F:4E:D7
Authority key identifier: 2A:AA:CF:C5:D5:E3:B2:68:F2:C6:BA:43:36:BC:C9:41:F5:C8:D7:AF
Certificate issuer: /CN=2aaacfc5d5e3b268f2c6ba4336bcc941f5c8d7af
Certificate serial: 01A11C7571D5DDB7A01A4935B4E951318F67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqrPxdXjsmjyxrpDNrzJQfXI168.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.mft
Manifest number: 147B
Signing time: Thu 08 Oct 2026 17:00:21 +0000
Manifest this update: Thu 08 Oct 2026 17:00:21 +0000
Manifest next update: Fri 09 Oct 2026 17:00:21 +0000
Files and hashes: 1: KqrPxdXjsmjyxrpDNrzJQfXI168.crl (hash: IstZBi13lF5OUx41bMjtM6Rm9fspLO7SiDVFrC6OUPU=)
2: P9Xi_swd13obp_Uu9EpIelH3ibs.asa (hash: ACsc4jn9BWNidz80pgmChNo/puaiemP1X04joTVfolY=)
3: fedcGuaQw6GYN-hZL-uzH54Rc1I.roa (hash: zm3vjAA+Iy34Xe3WYJQQlDDN2K6FJmbhe/vPYFhLHAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqrPxdXjsmjyxrpDNrzJQfXI168.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 14:16:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1c:75:71:d5:dd:b7:a0:1a:49:35:b4:e9:51:31:8f:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aaacfc5d5e3b268f2c6ba4336bcc941f5c8d7af
Validity
Not Before: Oct 8 17:00:21 2026 GMT
Not After : Oct 9 17:00:21 2026 GMT
Subject: CN=1696d9072e7041aef720b2100b52c08a429f4ed7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:13:eb:b7:6e:ca:ac:df:ed:c5:bf:f0:6d:fb:
97:69:38:d0:42:7f:29:9e:d7:b4:74:d3:a3:7a:b3:
75:10:31:db:70:50:f7:5c:69:6c:90:1a:42:14:6b:
04:e1:f7:53:79:db:b8:42:2f:1a:fa:ec:d6:09:08:
79:a3:4a:59:1f:51:f0:79:5a:eb:9a:08:85:68:83:
7b:d1:0a:20:21:72:2c:dd:30:d5:ff:89:ba:67:27:
1d:9f:1c:0c:59:1d:5f:86:fb:b2:b9:f3:7f:e1:0a:
e3:66:b0:ec:26:dd:37:34:a8:24:81:59:91:9d:4e:
6e:20:42:fe:46:aa:d2:a3:c1:61:02:0d:94:ca:7b:
e7:cf:4e:e8:d4:4d:2d:53:94:ae:fb:78:c7:82:1f:
2b:b2:41:86:d7:da:26:ac:26:9c:10:3a:59:1f:e5:
9e:bb:53:12:86:4d:36:de:bc:ae:bc:03:49:2a:85:
a8:2d:3d:62:c7:c4:0d:bd:c9:6f:f4:63:62:e4:9c:
55:e4:10:21:56:e6:37:56:71:ac:cc:b0:99:d1:75:
35:f5:cd:54:34:cf:96:cf:bd:04:16:6d:7f:bd:66:
b8:79:64:09:e4:c9:90:61:da:ae:9e:ad:e1:1d:86:
60:7e:a4:d1:c0:7c:4d:ec:9f:4b:c1:69:4c:9d:d7:
92:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:96:D9:07:2E:70:41:AE:F7:20:B2:10:0B:52:C0:8A:42:9F:4E:D7
X509v3 Authority Key Identifier:
keyid:2A:AA:CF:C5:D5:E3:B2:68:F2:C6:BA:43:36:BC:C9:41:F5:C8:D7:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqrPxdXjsmjyxrpDNrzJQfXI168.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:37:9a:0d:3b:7c:ea:91:02:ed:f1:2f:d1:63:a9:7e:c9:2d:
2b:7f:83:58:df:3d:d7:a8:ee:0e:79:ed:a6:39:1d:0f:5d:de:
12:e3:d4:f3:98:cc:72:d6:68:54:ef:da:03:82:31:6f:63:e4:
c8:90:fc:04:14:97:04:86:6b:66:83:b6:72:f5:25:f0:92:d8:
c8:af:8a:41:b0:76:c8:05:de:6a:bf:49:9d:17:16:5a:06:7d:
7c:2b:d9:8f:8b:c4:12:fb:35:4b:fa:e9:2c:65:f0:de:e4:ff:
59:af:b4:77:1c:59:c0:ee:c1:69:5a:f3:e9:23:c2:a7:57:ed:
2f:53:9a:0e:28:fd:87:3b:f4:6f:96:12:a2:f8:bc:c8:f2:68:
97:38:fe:d7:2e:d3:ff:b6:e1:19:b4:16:7f:09:8c:7f:2e:6f:
be:70:77:5d:5d:35:87:2b:0b:0c:1a:93:b6:0f:d4:15:a9:88:
fe:b7:39:a3:2b:22:88:a4:9c:0e:4f:64:25:43:8b:c2:81:29:
18:43:c8:5e:27:af:cc:7e:b6:35:19:7a:05:9a:51:c2:bf:75:
86:b9:80:3b:a4:0c:45:01:87:83:ca:c4:a4:24:1a:78:99:b3:
95:b6:5d:46:b3:5a:3f:f5:23:66:54:1e:4b:79:1e:55:5a:e9:
e2:23:00:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 19:26:09 2026 by rpki-client