Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/05c3a1-c8fe-40ff-9c52-3e6f0324410a/1/KQHXZDHG6HPTxEcwVx4eUNYCBXw.mft
File: KQHXZDHG6HPTxEcwVx4eUNYCBXw.mft (raw, json)
Hash identifier: jYIz03bW7QhgmFkAK6evHCwcIyi6XahL6exv2dyO8s0=
Subject key identifier: 52:58:6F:B4:27:93:7E:A8:C2:59:C2:E9:CC:2B:83:10:5D:A8:8D:21
Authority key identifier: 29:01:D7:64:31:C6:E8:73:D3:C4:47:30:57:1E:1E:50:D6:02:05:7C
Certificate issuer: /CN=2901d76431c6e873d3c44730571e1e50d602057c
Certificate serial: 01A0D07FA12C1E4A8813D8F43008EB247AFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQHXZDHG6HPTxEcwVx4eUNYCBXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/05c3a1-c8fe-40ff-9c52-3e6f0324410a/1/KQHXZDHG6HPTxEcwVx4eUNYCBXw.mft
Manifest number: 167C
Signing time: Wed 23 Sep 2026 23:00:20 +0000
Manifest this update: Wed 23 Sep 2026 23:00:20 +0000
Manifest next update: Thu 24 Sep 2026 23:00:20 +0000
Files and hashes: 1: KQHXZDHG6HPTxEcwVx4eUNYCBXw.crl (hash: e77NzmfOceZmlYIC0oxj4uPVeKoLV77kUnlplLR84UU=)
2: TOF3ZgA2E3UTCvybT5QOxSPJdVo.roa (hash: iSQvu/X4RZ2TX/v9Xw2MSqYTLV+RJbk0Qnv9Fb30Cgo=)
3: qR34p5ccxusFmYGiqxqs-x0VLfo.asa (hash: qsNT5FbF31r9LydstqWQ8uToHpVi2El6JTZvM1F/ZNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/05c3a1-c8fe-40ff-9c52-3e6f0324410a/1/KQHXZDHG6HPTxEcwVx4eUNYCBXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/05c3a1-c8fe-40ff-9c52-3e6f0324410a/1/KQHXZDHG6HPTxEcwVx4eUNYCBXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQHXZDHG6HPTxEcwVx4eUNYCBXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:7f:a1:2c:1e:4a:88:13:d8:f4:30:08:eb:24:7a:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2901d76431c6e873d3c44730571e1e50d602057c
Validity
Not Before: Sep 23 23:00:20 2026 GMT
Not After : Sep 24 23:00:20 2026 GMT
Subject: CN=52586fb427937ea8c259c2e9cc2b83105da88d21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:18:92:44:c7:5c:52:5f:b5:33:92:44:38:ec:
ab:77:dc:9c:68:d4:7a:b1:74:eb:b1:77:bd:fc:d5:
b2:fc:97:0a:d2:6d:3c:3f:9e:b0:55:af:83:36:50:
d6:19:95:80:0d:21:71:b6:a4:57:66:f7:2f:b2:c5:
23:55:c8:14:56:6f:89:bc:1c:28:6e:2e:ef:2e:22:
af:f9:09:80:30:95:9c:90:c5:06:53:0e:82:5f:3a:
3a:b4:6f:ad:b1:d7:22:62:9c:a1:8b:99:d5:5f:5e:
e4:b4:49:c1:70:7a:fe:e6:98:88:f6:c7:16:bd:56:
2e:c3:c8:dd:ba:8d:cc:30:3a:33:67:2b:32:8d:a0:
39:69:a4:e1:14:47:9e:8c:d6:d7:00:bb:99:d7:6d:
cf:86:72:28:0e:92:ec:df:90:7f:2f:60:cf:eb:00:
ec:62:d9:59:9e:8c:1d:e3:96:ce:de:d9:76:6c:5b:
70:34:27:36:bb:b8:e8:91:b5:bf:d0:e8:63:1e:1e:
cb:a5:e5:08:b7:b3:49:1f:ca:63:76:d5:aa:4e:b8:
de:5f:87:3b:a6:bb:0c:cb:9c:f4:df:04:ea:84:c7:
72:4d:84:29:11:87:f6:b5:7a:63:83:70:af:c5:9c:
44:b2:9e:b7:2e:4a:67:b3:28:93:03:c0:ea:7d:73:
d3:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:58:6F:B4:27:93:7E:A8:C2:59:C2:E9:CC:2B:83:10:5D:A8:8D:21
X509v3 Authority Key Identifier:
keyid:29:01:D7:64:31:C6:E8:73:D3:C4:47:30:57:1E:1E:50:D6:02:05:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQHXZDHG6HPTxEcwVx4eUNYCBXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/05c3a1-c8fe-40ff-9c52-3e6f0324410a/1/KQHXZDHG6HPTxEcwVx4eUNYCBXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/05c3a1-c8fe-40ff-9c52-3e6f0324410a/1/KQHXZDHG6HPTxEcwVx4eUNYCBXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:59:dd:68:b9:9f:9c:e2:c8:73:35:73:88:d9:ab:73:8a:b4:
ec:76:3a:ff:53:72:70:64:d8:83:04:1a:5c:f4:82:98:b0:34:
96:54:8b:94:1b:10:38:42:40:a5:a0:b3:09:61:d5:a4:6d:a6:
43:79:de:ff:e4:70:36:f5:51:d9:c6:5b:8e:de:1b:33:78:3b:
c7:5d:da:8d:3e:81:40:41:d3:01:23:56:56:bb:f3:da:fa:c4:
6b:3e:51:f0:cf:1e:a6:9e:af:40:af:f0:82:c7:37:e1:b6:64:
a5:7d:3e:24:a1:07:0d:1d:52:e5:7d:9a:ef:fb:4d:e3:05:f6:
0b:d7:55:22:4d:59:9b:55:ff:27:94:cb:bd:3d:bc:a9:b4:c6:
5a:cc:59:8f:e4:0c:08:38:ef:a4:9e:81:5c:cb:b6:b5:19:b3:
f9:cc:ff:28:09:0f:78:ef:25:79:d6:72:cc:0f:0c:05:60:6d:
3b:40:12:18:61:fb:16:48:36:a4:63:69:8c:53:55:e1:d7:07:
6f:84:ac:85:c0:64:a7:cb:38:27:07:77:ac:c8:6b:4e:46:8c:
49:7c:58:c5:2c:dc:0c:59:03:2e:66:59:03:2b:e4:96:fb:fe:
31:90:ef:f2:92:be:4f:f5:aa:2d:82:fc:42:a1:9d:46:ad:60:
2c:84:08:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:28:38 2026 by rpki-client