Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.mft
File: KqF-1AdDLEGLHJ6vYf0cocv_anQ.mft (raw, json)
Hash identifier: v0TFx+lg7DEeI3/hefgt6CKb2bTTawiUoyrn8noi+rc=
Subject key identifier: C6:7B:3A:B2:71:A5:7C:A0:7B:94:59:79:9E:D7:2A:B3:A9:4A:9B:F4
Authority key identifier: 2A:A1:7E:D4:07:43:2C:41:8B:1C:9E:AF:61:FD:1C:A1:CB:FF:6A:74
Certificate issuer: /CN=2aa17ed407432c418b1c9eaf61fd1ca1cbff6a74
Certificate serial: 019E1D9043C168E53B7A84E75C9038DAEB28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqF-1AdDLEGLHJ6vYf0cocv_anQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.mft
Manifest number: 0CF0
Signing time: Tue 12 May 2026 19:00:54 +0000
Manifest this update: Tue 12 May 2026 19:00:54 +0000
Manifest next update: Wed 13 May 2026 19:00:54 +0000
Files and hashes: 1: KqF-1AdDLEGLHJ6vYf0cocv_anQ.crl (hash: 07rGhCtPW2kKnXTXeK2AaKXH0OOIlSTZgqJFdjNDvbA=)
2: SaYypv9VAJ84xKAeNkRLodoblMc.roa (hash: GtKZWyv3+glT6p+I3huIJVfHLB6xoMQ/NbzSHVIURY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqF-1AdDLEGLHJ6vYf0cocv_anQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:43:c1:68:e5:3b:7a:84:e7:5c:90:38:da:eb:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa17ed407432c418b1c9eaf61fd1ca1cbff6a74
Validity
Not Before: May 12 19:00:54 2026 GMT
Not After : May 13 19:00:54 2026 GMT
Subject: CN=c67b3ab271a57ca07b9459799ed72ab3a94a9bf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:42:2f:db:e4:5f:28:a4:59:8a:e3:54:97:70:
dc:44:c2:cf:87:fb:58:71:18:29:09:f7:1f:79:14:
d5:d2:50:8d:86:ac:3f:bb:c1:1b:53:fc:03:fd:74:
a3:38:8b:58:7b:21:83:75:07:48:14:ca:83:ee:74:
c0:a1:ac:9c:d9:81:39:ea:2a:3e:a3:ee:09:df:e5:
10:8b:28:72:a1:9d:c2:65:a1:33:3b:6a:81:fa:e7:
30:04:63:3e:1b:2a:8c:96:bf:4d:6e:b9:37:67:31:
1b:30:2f:86:fc:dd:f0:bd:2d:20:ed:ea:e3:62:9e:
d7:f0:30:33:5a:e0:2b:62:ca:6d:ab:47:ef:11:2c:
00:6a:51:d1:1e:bc:8b:bf:76:ec:2b:8e:e6:24:7c:
c1:e7:8d:7c:bd:ef:6b:54:50:80:57:3e:1f:9e:6f:
71:80:41:40:ce:3e:9a:58:75:8d:c2:69:86:44:46:
1c:4e:fe:c6:a9:d0:81:89:bf:6c:4a:4b:ad:04:17:
09:ee:43:3d:6e:e3:d4:ae:ef:da:f5:dd:b4:71:07:
32:03:ce:29:9a:aa:69:c1:72:90:39:7e:62:f3:3d:
dd:77:f5:80:30:c3:36:eb:a7:88:ab:53:c3:98:57:
e7:4a:66:8b:b9:7d:25:98:88:a7:9e:ce:b9:92:d9:
71:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:7B:3A:B2:71:A5:7C:A0:7B:94:59:79:9E:D7:2A:B3:A9:4A:9B:F4
X509v3 Authority Key Identifier:
keyid:2A:A1:7E:D4:07:43:2C:41:8B:1C:9E:AF:61:FD:1C:A1:CB:FF:6A:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqF-1AdDLEGLHJ6vYf0cocv_anQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:94:63:7d:f1:d3:e6:83:36:35:1f:70:73:23:53:5b:44:6c:
72:07:45:7b:77:35:1d:9b:1c:17:6f:61:84:e3:5e:9d:a1:6a:
38:de:48:b1:2c:9c:6d:a1:b9:f5:94:95:16:2a:09:60:af:b4:
f4:00:16:62:57:d6:f0:ed:e9:08:62:b1:a9:97:87:8c:da:ad:
bc:eb:f9:f5:59:32:1d:89:84:2b:8a:05:b4:24:45:fe:94:2b:
6a:bc:30:32:61:09:c4:a5:40:aa:f5:aa:b1:23:6a:62:d6:20:
28:d7:ba:df:9d:f8:9f:ef:dd:9f:e1:f6:33:fd:2a:7b:ef:a0:
64:db:8c:09:2b:72:cb:68:7a:29:03:83:54:80:fb:da:44:f1:
cd:1b:1d:8a:d5:fe:94:09:b9:13:68:12:71:c6:10:19:64:de:
0a:c2:65:d9:03:25:99:e2:67:9a:fd:12:8d:4d:37:1b:1e:d8:
11:6a:3c:f7:cd:28:bd:a7:b8:10:02:11:8e:59:6b:fc:36:04:
28:37:f0:eb:3c:cf:bc:9f:42:d7:d0:3b:08:a8:e8:dc:f0:db:
10:f1:90:2a:ee:a9:80:ed:57:20:82:ac:6a:6c:cb:16:81:c7:
42:a3:43:4d:f2:77:d3:99:c3:39:a4:17:d8:43:ae:6c:82:cc:
a0:2b:10:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:09:51 2026 by rpki-client