Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/10346e-1504-43dd-ab28-66858bc8eb77/1/KqJOWBL8wxBrnrCusA5ie6I10FY.mft
File: KqJOWBL8wxBrnrCusA5ie6I10FY.mft (raw, json)
Hash identifier: O0Ef8qARTKp7Y0vxIxxBAOaP5lXVqiYRJasWThKEjJ8=
Subject key identifier: 34:A2:A8:2B:FF:36:79:2D:68:6B:CC:2A:A0:72:6D:E5:09:C7:B4:7C
Authority key identifier: 2A:A2:4E:58:12:FC:C3:10:6B:9E:B0:AE:B0:0E:62:7B:A2:35:D0:56
Certificate issuer: /CN=2aa24e5812fcc3106b9eb0aeb00e627ba235d056
Certificate serial: 019F946E03750634E1CEA97A9D91F8595C89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqJOWBL8wxBrnrCusA5ie6I10FY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/10346e-1504-43dd-ab28-66858bc8eb77/1/KqJOWBL8wxBrnrCusA5ie6I10FY.mft
Manifest number: 0C5C
Signing time: Fri 24 Jul 2026 14:01:05 +0000
Manifest this update: Fri 24 Jul 2026 14:01:05 +0000
Manifest next update: Sat 25 Jul 2026 14:01:05 +0000
Files and hashes: 1: KqJOWBL8wxBrnrCusA5ie6I10FY.crl (hash: MbLRTgSkFHoJ+KXCLMIQMRnLnvJmwmVegcJmCdKGxTU=)
2: yXEtTJb7Q9QNq9QwBOpKF1Og1mg.roa (hash: DbsY9yqJmKOSdLO9tL/m8Sp1oKJbQqdJXvqChVz5qJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/10346e-1504-43dd-ab28-66858bc8eb77/1/KqJOWBL8wxBrnrCusA5ie6I10FY.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/10346e-1504-43dd-ab28-66858bc8eb77/1/KqJOWBL8wxBrnrCusA5ie6I10FY.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqJOWBL8wxBrnrCusA5ie6I10FY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 14:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:6e:03:75:06:34:e1:ce:a9:7a:9d:91:f8:59:5c:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa24e5812fcc3106b9eb0aeb00e627ba235d056
Validity
Not Before: Jul 24 14:01:05 2026 GMT
Not After : Jul 25 14:01:05 2026 GMT
Subject: CN=34a2a82bff36792d686bcc2aa0726de509c7b47c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3f:c4:60:2f:98:11:1d:86:35:d0:39:6a:13:
63:88:78:2d:4c:5e:d2:43:5e:f3:8a:e8:fe:11:22:
11:c5:ec:32:97:cf:99:f1:33:e4:47:93:39:f1:e3:
26:54:5d:5c:a7:df:83:1b:93:c4:4c:a1:ee:7b:1a:
9a:49:a2:e4:09:fd:9e:c5:f8:a0:66:fa:38:df:16:
b9:af:10:01:5e:d8:12:19:2b:4f:e6:15:00:9c:3e:
cc:b3:83:44:2b:80:ba:da:41:1c:23:d6:a6:cd:49:
5d:a2:6a:e1:cd:1a:86:40:58:da:d9:2a:19:4a:91:
e4:a9:7b:00:3c:cb:80:56:48:e7:2a:18:12:a1:87:
18:b2:09:c5:ec:9c:9a:16:97:6d:ae:2e:c3:51:0d:
62:22:45:bc:29:c0:99:af:67:89:2f:01:5d:4e:e2:
10:b2:a6:69:b6:e0:fa:57:a0:59:b3:6f:16:f6:92:
86:b9:9a:ef:78:f5:ba:41:d2:b9:da:4d:19:18:23:
41:2e:a8:57:01:a1:58:c3:0e:71:c0:e7:96:8a:74:
7b:ba:1c:62:34:ed:49:a0:f1:a3:9c:8b:61:da:63:
08:30:60:33:7b:4c:37:74:8a:26:87:34:4a:9e:92:
54:35:cf:27:48:64:c4:4f:c7:34:ff:24:c7:5a:76:
8a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:A2:A8:2B:FF:36:79:2D:68:6B:CC:2A:A0:72:6D:E5:09:C7:B4:7C
X509v3 Authority Key Identifier:
keyid:2A:A2:4E:58:12:FC:C3:10:6B:9E:B0:AE:B0:0E:62:7B:A2:35:D0:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqJOWBL8wxBrnrCusA5ie6I10FY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/10346e-1504-43dd-ab28-66858bc8eb77/1/KqJOWBL8wxBrnrCusA5ie6I10FY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/10346e-1504-43dd-ab28-66858bc8eb77/1/KqJOWBL8wxBrnrCusA5ie6I10FY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:2b:5a:2c:a6:45:98:5f:e1:45:36:28:5c:73:67:f0:e7:06:
d3:ac:b7:d9:c3:4c:4f:75:25:86:1b:18:2f:00:86:53:fa:d1:
0d:9f:8f:47:a9:06:0f:f2:5c:88:0b:05:88:c6:5c:7a:6c:e5:
35:7c:b4:04:6d:5a:6e:6b:e4:ee:0e:b7:a5:1a:07:18:1c:43:
06:48:7d:14:3a:3f:ab:ce:2b:9d:19:e2:24:b6:b6:6f:d5:e5:
cc:55:bb:d1:5a:2f:d0:bc:6a:be:17:9b:f1:e2:47:b4:6d:19:
f6:55:a3:cf:0b:8d:35:9f:7d:90:08:1c:6d:cf:00:f0:0c:24:
49:12:1a:57:24:20:16:90:e4:37:87:e3:3a:5e:f8:18:41:16:
7f:47:77:3d:7a:2a:99:7a:dc:5a:97:c9:92:08:79:15:e5:10:
b5:10:28:6a:5a:63:c0:eb:4b:6a:ce:a7:ee:15:ce:38:17:cd:
51:40:26:dd:c5:ac:62:e0:db:2c:ea:36:1a:b6:3d:82:bb:27:
f3:d2:b9:d2:0f:92:43:7d:1a:ab:30:1c:26:ab:30:61:3e:bc:
bb:14:36:7b:35:d0:c8:7f:9a:cd:4e:ca:86:1e:b0:b6:20:cf:
0b:92:16:9f:7d:ca:39:92:12:ae:54:19:41:d8:55:52:1c:7b:
5d:06:0d:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:01:11 2026 by rpki-client