Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/10346e-1504-43dd-ab28-66858bc8eb77/1/KqJOWBL8wxBrnrCusA5ie6I10FY.mft
File: KqJOWBL8wxBrnrCusA5ie6I10FY.mft (raw, json)
Hash identifier: E1abz9PSf2UkdY95bc5oDI44SZqTuJ5n5szwkgKxofQ=
Subject key identifier: 57:02:30:AB:37:FD:31:65:9A:10:C3:0F:D7:30:BD:54:91:1B:F2:B5
Authority key identifier: 2A:A2:4E:58:12:FC:C3:10:6B:9E:B0:AE:B0:0E:62:7B:A2:35:D0:56
Certificate issuer: /CN=2aa24e5812fcc3106b9eb0aeb00e627ba235d056
Certificate serial: 01A133A28C3F11123157FCB5ED43457662E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqJOWBL8wxBrnrCusA5ie6I10FY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/10346e-1504-43dd-ab28-66858bc8eb77/1/KqJOWBL8wxBrnrCusA5ie6I10FY.mft
Manifest number: 0D33
Signing time: Tue 13 Oct 2026 05:00:52 +0000
Manifest this update: Tue 13 Oct 2026 05:00:52 +0000
Manifest next update: Wed 14 Oct 2026 05:00:52 +0000
Files and hashes: 1: KqJOWBL8wxBrnrCusA5ie6I10FY.crl (hash: 7esmDL2dUptCITczKsr66odmknVO49Xg2sQIINDTMX0=)
2: yXEtTJb7Q9QNq9QwBOpKF1Og1mg.roa (hash: DbsY9yqJmKOSdLO9tL/m8Sp1oKJbQqdJXvqChVz5qJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/10346e-1504-43dd-ab28-66858bc8eb77/1/KqJOWBL8wxBrnrCusA5ie6I10FY.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/10346e-1504-43dd-ab28-66858bc8eb77/1/KqJOWBL8wxBrnrCusA5ie6I10FY.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqJOWBL8wxBrnrCusA5ie6I10FY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 05:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:33:a2:8c:3f:11:12:31:57:fc:b5:ed:43:45:76:62:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa24e5812fcc3106b9eb0aeb00e627ba235d056
Validity
Not Before: Oct 13 05:00:52 2026 GMT
Not After : Oct 14 05:00:52 2026 GMT
Subject: CN=570230ab37fd31659a10c30fd730bd54911bf2b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7a:d3:70:4b:38:10:b6:1a:dd:fd:b3:27:17:
e5:b7:19:c7:cd:e2:03:a9:b4:f9:5a:ef:2a:52:27:
0f:e0:a0:c9:2c:f1:84:6f:cc:3d:73:69:47:86:e9:
dd:d4:d4:c5:70:ea:97:2c:b6:7e:7c:3c:6b:ae:51:
26:c4:62:1f:ed:83:e9:3c:14:89:34:aa:e3:ff:f0:
52:56:53:af:73:07:06:70:cc:aa:29:c1:38:0f:8e:
fe:bf:bf:4d:74:9d:de:b8:a8:8e:03:5e:df:3d:52:
ca:92:f6:39:61:21:13:63:79:09:c0:bf:3c:42:1f:
7e:de:27:41:d0:46:35:f4:6a:ba:39:82:cb:88:cb:
60:9c:68:6e:9f:99:6d:b5:23:51:b5:cc:f9:2f:0b:
91:63:6b:08:9d:7d:0c:92:9e:ef:67:60:33:b0:99:
39:8f:f8:e5:5a:0d:06:eb:ba:75:15:70:29:99:72:
6e:32:87:4e:2f:ab:3c:18:33:26:c0:65:d5:e2:8a:
f5:98:bb:8b:9a:7d:64:f8:c6:71:39:26:4f:9f:be:
ac:7e:09:91:b5:87:52:af:ba:e3:02:70:ec:03:15:
c4:6f:94:3f:fa:30:5f:4e:77:06:ba:74:cf:08:be:
a6:82:61:be:3c:6f:34:f8:58:8c:ae:0f:00:7f:43:
0a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:02:30:AB:37:FD:31:65:9A:10:C3:0F:D7:30:BD:54:91:1B:F2:B5
X509v3 Authority Key Identifier:
keyid:2A:A2:4E:58:12:FC:C3:10:6B:9E:B0:AE:B0:0E:62:7B:A2:35:D0:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqJOWBL8wxBrnrCusA5ie6I10FY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/10346e-1504-43dd-ab28-66858bc8eb77/1/KqJOWBL8wxBrnrCusA5ie6I10FY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/10346e-1504-43dd-ab28-66858bc8eb77/1/KqJOWBL8wxBrnrCusA5ie6I10FY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:c7:cc:cc:c3:78:ad:9b:fb:91:07:69:fc:5e:4c:2a:5e:3e:
c6:6e:7b:ef:17:9b:f9:09:b1:22:13:ac:2c:b9:38:26:ee:b9:
ca:6a:09:11:5f:05:b1:44:30:61:f4:11:0b:4b:cd:2e:63:04:
d1:d1:24:47:14:7e:38:2e:34:50:19:8c:c7:de:72:d8:b1:b0:
53:91:1c:97:28:37:21:ad:e3:61:9f:de:a0:f2:62:0d:9f:3b:
b9:79:d1:6a:8e:f9:97:7a:1c:1a:47:61:47:cf:c1:13:bf:05:
fe:12:0f:34:8c:dc:47:c4:d5:da:5b:08:2a:f3:db:79:e6:0d:
f6:a6:62:f2:94:90:2d:ef:ab:05:7d:de:70:5f:66:af:9f:fa:
dd:04:69:59:f2:eb:5b:35:b8:24:28:b3:49:37:43:92:1c:fb:
cc:e5:89:e2:c7:51:f0:33:fe:b4:d1:83:85:90:44:aa:0b:8f:
fd:e7:e3:0d:a9:d7:8f:5c:8f:51:2f:d9:15:d4:63:2e:d0:93:
0f:e9:8a:dd:81:27:69:20:26:19:d9:12:10:c8:e6:30:98:77:
64:19:fa:81:d5:9f:8a:a7:db:34:ec:72:87:70:93:23:b8:15:
56:6b:9a:e9:11:ea:1d:3a:e7:e7:d0:20:a6:35:bc:a7:d5:ce:
92:9a:65:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 13:31:07 2026 by rpki-client