Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/05c3a1-c8fe-40ff-9c52-3e6f0324410a/1/KQHXZDHG6HPTxEcwVx4eUNYCBXw.mft
File: KQHXZDHG6HPTxEcwVx4eUNYCBXw.mft (raw, json)
Hash identifier: LQhc9+Y/CJe7iP1NMfYJRI2lsT8TgJtC5ltUqu5WH9w=
Subject key identifier: A8:8A:D2:E2:57:EE:3E:A9:C8:99:0F:3E:2E:A2:6C:A2:2C:05:CB:AF
Authority key identifier: 29:01:D7:64:31:C6:E8:73:D3:C4:47:30:57:1E:1E:50:D6:02:05:7C
Certificate issuer: /CN=2901d76431c6e873d3c44730571e1e50d602057c
Certificate serial: 019D27DF8D546373184108B2D1F26E17A025
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQHXZDHG6HPTxEcwVx4eUNYCBXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/05c3a1-c8fe-40ff-9c52-3e6f0324410a/1/KQHXZDHG6HPTxEcwVx4eUNYCBXw.mft
Manifest number: 1496
Signing time: Thu 26 Mar 2026 02:00:55 +0000
Manifest this update: Thu 26 Mar 2026 02:00:55 +0000
Manifest next update: Fri 27 Mar 2026 02:00:55 +0000
Files and hashes: 1: KQHXZDHG6HPTxEcwVx4eUNYCBXw.crl (hash: yyY4NFeqjsrIekJTVJHuYfYL82FMdygjXdFSV3tv9zQ=)
2: TOF3ZgA2E3UTCvybT5QOxSPJdVo.roa (hash: iSQvu/X4RZ2TX/v9Xw2MSqYTLV+RJbk0Qnv9Fb30Cgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/05c3a1-c8fe-40ff-9c52-3e6f0324410a/1/KQHXZDHG6HPTxEcwVx4eUNYCBXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/05c3a1-c8fe-40ff-9c52-3e6f0324410a/1/KQHXZDHG6HPTxEcwVx4eUNYCBXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQHXZDHG6HPTxEcwVx4eUNYCBXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:8d:54:63:73:18:41:08:b2:d1:f2:6e:17:a0:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2901d76431c6e873d3c44730571e1e50d602057c
Validity
Not Before: Mar 26 02:00:55 2026 GMT
Not After : Mar 27 02:00:55 2026 GMT
Subject: CN=a88ad2e257ee3ea9c8990f3e2ea26ca22c05cbaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f2:06:29:38:8f:ca:4d:7d:04:ea:4f:83:c0:
64:4b:32:ec:d5:6c:e4:7a:30:8d:45:bd:e0:ad:16:
e8:03:c6:16:e3:de:66:09:67:ae:0d:4d:b3:ac:0a:
13:e9:b8:8b:95:86:45:a6:81:57:7b:09:f0:92:86:
e6:78:b2:07:15:13:80:55:94:47:e5:d2:d2:91:2f:
de:de:52:c0:2c:2c:1f:4d:aa:7c:d4:3d:5a:3e:46:
d9:90:20:b5:4a:47:ca:e7:71:72:59:8f:bf:e6:db:
41:d9:75:8a:c5:b4:49:28:e3:83:db:1a:d0:08:09:
d0:6d:4e:89:c7:84:49:8a:34:77:0f:e8:26:d9:4e:
f3:4b:7b:47:09:ad:1a:aa:30:1d:14:53:d8:40:01:
c5:eb:f6:1c:44:57:c2:60:ad:ef:d1:d3:7d:84:c8:
ba:f9:21:a7:d0:0b:86:57:af:30:19:e6:78:c2:4e:
eb:dd:be:84:cc:a7:5f:08:14:7f:c6:29:15:09:69:
91:73:d0:c6:2c:b2:ee:2d:78:99:fe:75:62:ac:83:
92:12:9e:80:0f:6f:30:94:0f:fc:ec:68:c5:8a:9d:
d7:b5:81:75:36:fa:3b:58:70:eb:60:8b:f7:e2:5c:
65:14:92:e1:e0:26:5e:5d:aa:f9:2a:3f:2f:aa:be:
d1:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:8A:D2:E2:57:EE:3E:A9:C8:99:0F:3E:2E:A2:6C:A2:2C:05:CB:AF
X509v3 Authority Key Identifier:
keyid:29:01:D7:64:31:C6:E8:73:D3:C4:47:30:57:1E:1E:50:D6:02:05:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQHXZDHG6HPTxEcwVx4eUNYCBXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/05c3a1-c8fe-40ff-9c52-3e6f0324410a/1/KQHXZDHG6HPTxEcwVx4eUNYCBXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/05c3a1-c8fe-40ff-9c52-3e6f0324410a/1/KQHXZDHG6HPTxEcwVx4eUNYCBXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:24:1f:83:6d:56:c9:6f:72:9d:f1:72:c4:39:0b:74:10:8b:
22:c5:6e:59:01:4b:0f:dd:c3:ae:cd:c1:51:14:be:84:b7:a3:
10:6a:f0:46:0e:48:78:4a:55:30:36:ba:c6:85:f2:a6:aa:0c:
54:12:2d:ce:53:df:e4:03:b0:b6:bb:95:a3:dd:06:d4:a0:a9:
bd:f3:e0:14:48:27:72:e5:95:b9:30:37:23:1a:8d:ee:1b:86:
51:58:cf:41:50:6f:63:b5:98:6b:e5:be:7f:c5:21:0d:56:6d:
2f:4b:b3:e6:17:40:c8:55:e4:c5:c6:55:22:be:11:51:fb:a1:
09:dc:f8:49:f4:19:c0:12:8b:b8:79:09:26:1a:a0:4f:88:45:
7c:51:ac:53:ab:6b:ec:74:43:13:06:23:6d:ec:f7:ad:6b:7c:
cc:9a:0c:d1:2d:0c:5c:b2:4c:dc:54:34:ef:35:a9:d9:71:02:
e0:f7:50:a7:85:c5:f5:33:b4:1d:25:f4:fa:b9:80:4a:1e:b4:
62:da:12:58:ad:8a:5d:d2:3a:8d:d9:8b:03:78:75:8d:d0:2c:
2c:00:d0:bc:b5:5c:dc:0f:20:bf:ad:22:df:e6:0f:30:3e:d1:
0d:ba:74:de:48:ee:c2:49:cf:e5:12:ac:3d:cb:e6:ba:76:ad:
4c:10:a3:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:57:30 2026 by rpki-client