Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.mft
File: KqF-1AdDLEGLHJ6vYf0cocv_anQ.mft (raw, json)
Hash identifier: 217kBRISRZk9q53/mGR1esLEd18+DIfGIup70BFc7Tg=
Subject key identifier: B7:06:45:1F:15:9E:A9:7F:C7:F2:15:B2:48:0B:8C:C7:54:94:FF:BE
Authority key identifier: 2A:A1:7E:D4:07:43:2C:41:8B:1C:9E:AF:61:FD:1C:A1:CB:FF:6A:74
Certificate issuer: /CN=2aa17ed407432c418b1c9eaf61fd1ca1cbff6a74
Certificate serial: 01A0D8A8D6238D8D1C579BC5AAA62D5C4E98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqF-1AdDLEGLHJ6vYf0cocv_anQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.mft
Manifest number: 0E5A
Signing time: Fri 25 Sep 2026 13:02:18 +0000
Manifest this update: Fri 25 Sep 2026 13:02:18 +0000
Manifest next update: Sat 26 Sep 2026 13:02:18 +0000
Files and hashes: 1: KqF-1AdDLEGLHJ6vYf0cocv_anQ.crl (hash: 3u9Gtu62DTedDGbULDpeHgMtCHTh+oHG6se9P8xDa9s=)
2: SaYypv9VAJ84xKAeNkRLodoblMc.roa (hash: GtKZWyv3+glT6p+I3huIJVfHLB6xoMQ/NbzSHVIURY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqF-1AdDLEGLHJ6vYf0cocv_anQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 13:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:a8:d6:23:8d:8d:1c:57:9b:c5:aa:a6:2d:5c:4e:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa17ed407432c418b1c9eaf61fd1ca1cbff6a74
Validity
Not Before: Sep 25 13:02:18 2026 GMT
Not After : Sep 26 13:02:18 2026 GMT
Subject: CN=b706451f159ea97fc7f215b2480b8cc75494ffbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:fc:14:01:56:75:04:17:e0:f8:9f:2f:38:df:
11:96:49:9c:7c:62:37:eb:0b:da:8d:45:1d:5a:cd:
6b:ab:ab:92:aa:5d:17:24:c3:6f:ef:59:09:6e:07:
88:1b:e8:75:ed:b7:82:ad:ef:62:3a:1a:25:71:8b:
12:4f:9c:78:7e:8e:7e:4c:77:9d:07:9b:8c:07:13:
e4:85:81:38:6a:f7:ec:05:92:6c:12:f9:8e:fa:ef:
c6:b1:fb:05:1f:9a:1e:aa:89:8b:52:98:53:38:b6:
00:e8:dd:45:2d:2b:83:d1:7a:03:67:63:8d:58:68:
8e:7b:e5:ae:af:2f:91:50:3a:9e:f9:09:55:30:7b:
4d:74:4f:2d:6b:7f:a8:1f:c3:67:82:f3:11:84:f3:
ba:95:96:0a:e2:bf:09:ae:33:ba:f1:d8:9f:cc:26:
7c:95:13:93:04:59:85:4c:ff:cf:6d:60:27:25:09:
29:ca:3d:16:1d:51:fb:2b:1d:50:67:ff:5f:d2:f2:
22:af:eb:a0:39:9b:d7:ee:76:2d:04:44:54:b2:d5:
f1:51:94:0e:b8:15:e3:5f:9a:99:b6:d2:ae:cd:c5:
c4:f6:ff:24:cb:62:f3:aa:ad:33:05:7f:25:e0:39:
69:99:45:5a:b1:e8:e5:54:3a:90:c3:12:b7:c6:46:
b3:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:06:45:1F:15:9E:A9:7F:C7:F2:15:B2:48:0B:8C:C7:54:94:FF:BE
X509v3 Authority Key Identifier:
keyid:2A:A1:7E:D4:07:43:2C:41:8B:1C:9E:AF:61:FD:1C:A1:CB:FF:6A:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqF-1AdDLEGLHJ6vYf0cocv_anQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:23:a4:e9:7e:16:76:27:04:77:58:6f:6c:cf:07:e0:5e:80:
d3:f0:d4:2b:c3:25:38:8f:fd:85:3e:d3:f5:95:bc:58:d9:b3:
79:af:fd:37:aa:19:e7:f5:da:a1:c3:cb:68:dc:97:bf:f4:96:
c4:85:fb:2d:3d:f4:08:51:f4:f7:49:07:e2:3a:05:70:65:56:
7c:0b:82:1b:56:ac:28:0d:66:c2:94:75:36:25:b0:89:bb:69:
f2:67:1a:68:a4:d1:15:cc:4a:5e:29:68:53:c3:16:e1:e5:ad:
59:8b:ac:48:89:a4:97:a8:bd:92:11:08:a6:93:31:62:7f:f0:
04:d7:95:9e:ee:6b:e9:77:f4:0d:2a:39:7f:fa:47:6c:21:b1:
b5:d2:07:27:06:77:03:b4:33:32:69:ab:b7:01:52:dc:8a:f7:
79:75:a5:c0:40:f6:37:ba:42:cd:75:c0:48:31:d9:3a:66:3a:
ab:77:29:80:45:48:90:f9:6f:65:49:b5:69:4f:ee:45:a2:c5:
fc:c5:b1:44:ee:d1:45:c6:b5:64:fd:7b:ac:e6:63:8a:24:0b:
f3:f4:9f:53:c2:a6:bb:70:39:04:e0:20:b0:f7:9a:bd:70:16:
d8:f3:e4:bd:86:d9:e3:7e:b5:b6:c7:97:87:87:79:56:03:ed:
17:c0:54:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:29:49 2026 by rpki-client