Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/10346e-1504-43dd-ab28-66858bc8eb77/1/KqJOWBL8wxBrnrCusA5ie6I10FY.mft
File: KqJOWBL8wxBrnrCusA5ie6I10FY.mft (raw, json)
Hash identifier: JKn7k9JkZpupHRFUF55zJDHSaUj5ZYdDMDSMx6qcuiE=
Subject key identifier: 7C:06:F1:C9:C9:CB:C2:BB:2B:38:2A:F2:EC:75:B2:56:E4:86:DF:BD
Authority key identifier: 2A:A2:4E:58:12:FC:C3:10:6B:9E:B0:AE:B0:0E:62:7B:A2:35:D0:56
Certificate issuer: /CN=2aa24e5812fcc3106b9eb0aeb00e627ba235d056
Certificate serial: 01A13590B9A00DD986808946E60BD19B4667
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqJOWBL8wxBrnrCusA5ie6I10FY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/10346e-1504-43dd-ab28-66858bc8eb77/1/KqJOWBL8wxBrnrCusA5ie6I10FY.mft
Manifest number: 0D34
Signing time: Tue 13 Oct 2026 14:00:39 +0000
Manifest this update: Tue 13 Oct 2026 14:00:39 +0000
Manifest next update: Wed 14 Oct 2026 14:00:39 +0000
Files and hashes: 1: KqJOWBL8wxBrnrCusA5ie6I10FY.crl (hash: ZDI1FmIiIPJO4HjN4F17J4h2cCeiuB+7bIGVvu3T7M0=)
2: yXEtTJb7Q9QNq9QwBOpKF1Og1mg.roa (hash: DbsY9yqJmKOSdLO9tL/m8Sp1oKJbQqdJXvqChVz5qJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/10346e-1504-43dd-ab28-66858bc8eb77/1/KqJOWBL8wxBrnrCusA5ie6I10FY.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/10346e-1504-43dd-ab28-66858bc8eb77/1/KqJOWBL8wxBrnrCusA5ie6I10FY.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqJOWBL8wxBrnrCusA5ie6I10FY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 14:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:35:90:b9:a0:0d:d9:86:80:89:46:e6:0b:d1:9b:46:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa24e5812fcc3106b9eb0aeb00e627ba235d056
Validity
Not Before: Oct 13 14:00:39 2026 GMT
Not After : Oct 14 14:00:39 2026 GMT
Subject: CN=7c06f1c9c9cbc2bb2b382af2ec75b256e486dfbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7d:50:fc:aa:18:fb:91:07:e5:e9:47:88:1d:
36:4e:5e:a1:b3:87:eb:d0:6b:b2:bc:16:68:67:94:
56:5a:5d:b7:8b:c8:e6:bd:c5:ea:26:c2:43:8f:f1:
b1:c2:27:70:53:6e:36:bc:fc:84:d6:98:76:ef:21:
7d:35:2f:bb:21:48:48:33:e2:79:6a:df:26:f2:d0:
4b:d7:80:3f:1f:93:d2:ce:4c:e3:ec:3b:d6:2b:0c:
c5:14:17:1f:29:39:74:b0:8c:58:79:31:7e:9a:da:
6e:d2:1e:18:2a:12:dc:26:cc:34:f0:bb:ca:f1:8e:
9f:3c:48:23:6c:bd:c5:bc:de:d5:f2:ac:82:b3:c2:
89:9b:2a:d3:42:1f:32:04:92:15:ca:8a:7a:8e:97:
8d:c0:24:32:ed:ae:ea:e6:68:d2:43:29:99:89:7b:
ec:c0:64:5b:22:32:b4:78:15:be:7f:8c:a1:4b:39:
c5:c4:90:52:bf:d2:67:12:b7:71:fd:65:54:a2:d8:
fe:1e:be:77:8d:9e:ca:30:5f:93:70:c9:8e:71:67:
09:93:9c:ef:19:f5:18:f3:1c:0d:08:4c:a3:73:43:
92:c0:10:3a:6e:ae:4b:bc:8a:7e:bb:af:4d:f3:35:
d6:43:7c:37:2a:58:d9:ea:ba:98:33:db:e1:57:53:
96:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:06:F1:C9:C9:CB:C2:BB:2B:38:2A:F2:EC:75:B2:56:E4:86:DF:BD
X509v3 Authority Key Identifier:
keyid:2A:A2:4E:58:12:FC:C3:10:6B:9E:B0:AE:B0:0E:62:7B:A2:35:D0:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqJOWBL8wxBrnrCusA5ie6I10FY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/10346e-1504-43dd-ab28-66858bc8eb77/1/KqJOWBL8wxBrnrCusA5ie6I10FY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/10346e-1504-43dd-ab28-66858bc8eb77/1/KqJOWBL8wxBrnrCusA5ie6I10FY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:6c:94:70:3d:b1:d5:16:c3:e4:95:71:dc:10:3b:6a:4c:0e:
20:51:76:fb:5d:a0:35:63:eb:ac:a6:71:6b:0c:0e:69:34:a3:
c4:08:95:5a:98:68:49:5e:ee:f2:4c:ca:70:78:05:09:f0:15:
56:aa:c8:22:e3:2b:50:09:81:28:23:ed:f9:7c:72:e5:0b:19:
cd:0a:84:9b:d5:4c:80:5b:4b:04:d3:53:c0:cd:d4:71:f7:5d:
94:db:a0:63:8d:5d:d7:b7:9e:29:55:e5:a6:b5:c5:0a:b3:2e:
61:90:6c:7e:f9:28:98:d1:d4:d9:1b:02:e9:52:6f:94:8b:36:
0d:f8:12:ad:7f:07:3e:2a:10:73:2c:e7:27:ea:ef:9c:0a:b3:
cd:8a:e3:43:b4:9d:40:ef:e7:ff:6b:1d:64:ec:bb:b9:43:4f:
8f:8e:14:0a:9d:f3:d3:e0:1e:78:f7:9c:d9:25:70:eb:8d:b4:
42:22:e1:76:09:6f:90:c6:d3:e7:d7:33:2b:56:0b:65:67:cb:
86:e0:5b:4c:99:9d:8f:35:fb:d1:02:31:9b:29:97:55:93:6f:
10:f3:23:6c:e7:24:f9:f4:cd:06:a1:91:1a:4d:5f:da:6a:dc:
9a:f0:97:47:16:b1:82:56:76:05:d6:44:de:c3:c0:0d:c3:ee:
58:49:34:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 18:54:15 2026 by rpki-client