Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/f2c803-43c8-44bb-9dd0-651229830170/1/KqOA4jDLM0NhtIYeL2lBJDh_hSk.mft
File: KqOA4jDLM0NhtIYeL2lBJDh_hSk.mft (raw, json)
Hash identifier: D9HG93sVD0aJKku9ToGL0IPVObIlbRjKaAOaIz0r5XM=
Subject key identifier: F7:1C:CA:B9:3C:35:B2:01:5D:3F:26:C4:74:86:CC:6A:38:45:6C:B5
Authority key identifier: 2A:A3:80:E2:30:CB:33:43:61:B4:86:1E:2F:69:41:24:38:7F:85:29
Certificate issuer: /CN=2aa380e230cb334361b4861e2f694124387f8529
Certificate serial: 019D277220391BF318DC51EB20D254F302F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqOA4jDLM0NhtIYeL2lBJDh_hSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/f2c803-43c8-44bb-9dd0-651229830170/1/KqOA4jDLM0NhtIYeL2lBJDh_hSk.mft
Manifest number: 1884
Signing time: Thu 26 Mar 2026 00:01:23 +0000
Manifest this update: Thu 26 Mar 2026 00:01:23 +0000
Manifest next update: Fri 27 Mar 2026 00:01:23 +0000
Files and hashes: 1: Be1pwyGp5FXy6-3Vf2cbj3OaaLE.roa (hash: 720qMBSCWVcC0hnisEl9DaePON43Av8/XJC6cladPqM=)
2: KqOA4jDLM0NhtIYeL2lBJDh_hSk.crl (hash: /QqAKB5sDGHCsDFFbTK0gFJHfCvgx1P4zMeJYlEy2q4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/f2c803-43c8-44bb-9dd0-651229830170/1/KqOA4jDLM0NhtIYeL2lBJDh_hSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/f2c803-43c8-44bb-9dd0-651229830170/1/KqOA4jDLM0NhtIYeL2lBJDh_hSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqOA4jDLM0NhtIYeL2lBJDh_hSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:20:39:1b:f3:18:dc:51:eb:20:d2:54:f3:02:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa380e230cb334361b4861e2f694124387f8529
Validity
Not Before: Mar 26 00:01:23 2026 GMT
Not After : Mar 27 00:01:23 2026 GMT
Subject: CN=f71ccab93c35b2015d3f26c47486cc6a38456cb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:9b:3d:d0:e0:75:39:9e:62:25:21:92:f9:f7:
d0:0a:23:a7:f2:fc:bc:d7:e6:59:bf:f0:98:93:5a:
f9:b6:37:df:e1:06:dc:23:6d:10:8d:3f:4e:19:7d:
7d:bd:46:cc:6e:57:f7:2f:07:08:99:91:e0:99:cf:
79:c3:d2:d5:94:66:77:a4:03:2a:92:48:d6:70:ba:
58:e3:45:de:35:84:a9:08:93:3d:34:2f:36:0c:35:
24:4e:09:b2:86:92:4e:e3:a6:46:e9:b6:a5:12:01:
f4:50:d4:d2:64:ae:58:af:11:39:53:21:31:a3:52:
54:a6:9e:2d:51:69:ef:57:2d:7c:68:5e:01:d1:4c:
11:10:0c:ca:95:8a:90:b9:9a:cd:ac:f4:8f:ec:3c:
60:19:2b:5b:a1:03:90:0c:8d:e8:a2:63:c5:ff:91:
f7:96:6c:56:4e:a6:b8:0a:ef:0c:4d:5b:25:96:da:
4c:d6:b2:1a:45:92:72:79:2a:1a:f5:5a:31:a7:26:
33:28:ca:53:e8:a7:d3:37:d3:c8:77:52:55:c0:f4:
31:3a:dd:3c:39:23:a2:ce:38:63:62:29:80:d9:ae:
24:13:57:e9:d5:3a:9e:9c:37:0e:70:56:08:33:51:
cc:a6:df:ea:53:1e:29:78:d6:82:db:3a:95:ed:d9:
36:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:1C:CA:B9:3C:35:B2:01:5D:3F:26:C4:74:86:CC:6A:38:45:6C:B5
X509v3 Authority Key Identifier:
keyid:2A:A3:80:E2:30:CB:33:43:61:B4:86:1E:2F:69:41:24:38:7F:85:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqOA4jDLM0NhtIYeL2lBJDh_hSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/f2c803-43c8-44bb-9dd0-651229830170/1/KqOA4jDLM0NhtIYeL2lBJDh_hSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/f2c803-43c8-44bb-9dd0-651229830170/1/KqOA4jDLM0NhtIYeL2lBJDh_hSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:97:51:7c:91:89:55:d3:84:c1:86:ac:31:6e:d2:f0:ba:93:
f8:a3:30:29:e4:64:64:7e:92:77:cf:9d:68:74:e1:55:25:1c:
31:01:f8:0f:97:4a:d6:ac:ce:a4:0d:31:6c:53:3e:92:c5:58:
9b:4d:71:13:a2:40:e7:7a:0b:a2:b1:b5:c8:71:d0:e5:b5:cc:
51:77:e0:23:ed:6c:de:7c:b1:a8:7a:3e:9c:ca:01:5a:56:da:
2c:d1:9b:c9:9b:c5:d3:a3:4e:56:6f:7c:a6:e9:1c:e5:cc:77:
c2:3d:5f:84:8b:5b:1f:d8:0e:2d:7b:eb:da:60:89:7a:35:b1:
3a:04:27:a8:34:67:a1:29:07:c1:47:49:09:d3:03:8b:07:3c:
25:a2:51:e1:5e:10:19:5a:bb:ac:e6:5a:44:cc:d5:7c:60:02:
a7:5d:b4:2d:b3:7b:bc:ac:68:62:14:6f:a9:9c:7f:ec:17:95:
73:ca:95:e2:aa:a1:59:01:b4:54:9d:c1:cf:33:61:76:2c:67:
9b:d4:51:e5:f8:85:39:8a:63:14:07:81:1c:80:6b:df:5f:d7:
52:b7:c4:3c:42:b7:f8:0f:65:06:b2:dd:4d:cf:e9:1f:50:63:
54:ee:11:3f:96:b4:04:15:28:4e:1d:5c:04:45:d4:5c:f0:15:
28:51:f6:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:05:41 2026 by rpki-client