Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/dd8268-f29f-43b5-9a5f-dc9c3ae7e30b/1/kqH7oqss0QEUipWef4wI96Qbw8U.mft
File: kqH7oqss0QEUipWef4wI96Qbw8U.mft (raw, json)
Hash identifier: YImlLynppQ77ejHypFQWvgpT1ca6QZ/60j+IXwEXK3s=
Subject key identifier: 49:DF:63:97:FE:B3:00:36:2A:8A:6E:CA:E9:6F:8D:14:CD:C6:AC:C8
Authority key identifier: 92:A1:FB:A2:AB:2C:D1:01:14:8A:95:9E:7F:8C:08:F7:A4:1B:C3:C5
Certificate issuer: /CN=92a1fba2ab2cd101148a959e7f8c08f7a41bc3c5
Certificate serial: 019D28F2CC71658E0253BE816979A518C3A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kqH7oqss0QEUipWef4wI96Qbw8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/dd8268-f29f-43b5-9a5f-dc9c3ae7e30b/1/kqH7oqss0QEUipWef4wI96Qbw8U.mft
Manifest number: 1432
Signing time: Thu 26 Mar 2026 07:01:33 +0000
Manifest this update: Thu 26 Mar 2026 07:01:33 +0000
Manifest next update: Fri 27 Mar 2026 07:01:33 +0000
Files and hashes: 1: kqH7oqss0QEUipWef4wI96Qbw8U.crl (hash: 7QXPWPqn/iy5c5FIrCdKSZ47FYbrSUIbJsumPWwnziQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/dd8268-f29f-43b5-9a5f-dc9c3ae7e30b/1/kqH7oqss0QEUipWef4wI96Qbw8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/dd8268-f29f-43b5-9a5f-dc9c3ae7e30b/1/kqH7oqss0QEUipWef4wI96Qbw8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/kqH7oqss0QEUipWef4wI96Qbw8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:cc:71:65:8e:02:53:be:81:69:79:a5:18:c3:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92a1fba2ab2cd101148a959e7f8c08f7a41bc3c5
Validity
Not Before: Mar 26 07:01:33 2026 GMT
Not After : Mar 27 07:01:33 2026 GMT
Subject: CN=49df6397feb300362a8a6ecae96f8d14cdc6acc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:fa:da:53:79:44:c7:99:d5:69:38:95:b0:22:
ea:22:24:bb:98:b3:2d:01:54:70:af:37:d3:ab:35:
49:f3:19:cf:4e:d7:eb:60:f8:96:9a:e0:0a:6b:03:
cf:aa:eb:b3:e3:90:00:15:97:bf:de:45:fc:b8:8b:
0b:cd:b2:d0:00:97:e2:c7:e1:49:4a:59:5d:66:ff:
15:c1:9e:26:e6:f2:7e:d1:46:08:b0:11:02:40:00:
23:36:ab:0e:da:d9:e4:3c:ef:41:f5:44:48:97:dd:
3a:08:2b:cb:0b:db:89:6f:72:6e:ed:68:bf:73:0b:
50:b4:c8:ad:67:86:10:7e:69:a6:59:12:e5:c0:a0:
2d:d8:6a:77:52:6a:19:0a:07:d4:6d:b7:60:ae:d0:
b5:cf:e6:97:1e:8f:33:71:bc:3a:de:b9:26:07:b1:
b6:c8:28:f1:9e:b8:6c:17:37:ed:46:73:8b:3f:95:
4d:54:35:97:9b:ce:2f:0c:29:09:59:be:7b:fd:5f:
c8:2c:1a:9e:84:9b:7a:da:79:51:61:be:0a:96:04:
35:f3:a1:3b:69:25:bd:0b:7d:d9:f7:ab:9d:ac:25:
96:a9:5f:9c:cc:19:ee:a9:80:44:c2:61:e8:46:aa:
5b:81:e9:7b:b4:b0:ae:47:87:ef:0a:aa:96:92:98:
06:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:DF:63:97:FE:B3:00:36:2A:8A:6E:CA:E9:6F:8D:14:CD:C6:AC:C8
X509v3 Authority Key Identifier:
keyid:92:A1:FB:A2:AB:2C:D1:01:14:8A:95:9E:7F:8C:08:F7:A4:1B:C3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kqH7oqss0QEUipWef4wI96Qbw8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/dd8268-f29f-43b5-9a5f-dc9c3ae7e30b/1/kqH7oqss0QEUipWef4wI96Qbw8U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/dd8268-f29f-43b5-9a5f-dc9c3ae7e30b/1/kqH7oqss0QEUipWef4wI96Qbw8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:12:15:05:1e:92:db:b2:8e:a5:0f:4e:1f:c1:3e:e8:5e:75:
d6:46:23:61:4b:de:2a:bf:1d:92:66:93:dd:8b:47:35:09:8c:
8e:4a:60:eb:0b:43:ea:3c:24:99:cc:18:57:0d:1b:db:96:bd:
18:5f:5e:d0:83:9a:88:07:ae:3d:72:1b:d9:56:ef:4d:73:0f:
f9:32:5d:4e:e9:67:ff:11:50:2f:db:df:f5:c7:92:28:fc:c5:
5d:01:99:0c:8d:02:90:83:dc:ab:bc:0e:7a:d0:52:cd:d5:5b:
c2:9e:c1:61:22:10:62:5d:04:eb:c9:df:5b:a0:39:c0:da:21:
ec:5e:48:1d:00:1c:f8:41:33:20:5c:33:65:21:d9:9e:02:09:
dd:51:73:b2:11:2d:3e:d7:24:f8:8c:22:8e:c9:90:6a:f3:97:
9c:b1:39:be:56:a9:ae:5f:12:86:ca:82:a8:ef:97:2b:58:be:
c2:83:a9:e0:12:86:41:2c:cb:b2:f5:f5:98:6a:c6:75:e7:47:
01:37:4d:a1:be:aa:42:eb:55:65:8c:cd:7b:20:3f:33:f8:b1:
e9:71:84:ee:a1:42:05:d5:17:32:1e:2e:7b:74:c9:7e:e6:94:
a6:66:d3:cb:ce:0e:19:1b:4d:32:35:b0:88:f7:dc:e1:f2:b2:
11:5a:44:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:02:52 2026 by rpki-client