Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/92352f-4051-450e-b3a6-2e0078cee182/1/KQzE0K1dr8J6pONC-oDjSBToRcM.mft
File: KQzE0K1dr8J6pONC-oDjSBToRcM.mft (raw, json)
Hash identifier: eWcCNP9T+xyMToAfJuNwUr0m8o+bIn/zXKYSwN65Gw8=
Subject key identifier: D4:2C:71:0A:A6:E2:35:A6:FB:7E:33:C5:17:24:90:42:D3:BD:0E:DD
Authority key identifier: 29:0C:C4:D0:AD:5D:AF:C2:7A:A4:E3:42:FA:80:E3:48:14:E8:45:C3
Certificate issuer: /CN=290cc4d0ad5dafc27aa4e342fa80e34814e845c3
Certificate serial: 019D2696478597EF9E21CB959E25E1AE5A8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQzE0K1dr8J6pONC-oDjSBToRcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/92352f-4051-450e-b3a6-2e0078cee182/1/KQzE0K1dr8J6pONC-oDjSBToRcM.mft
Manifest number: 08C4
Signing time: Wed 25 Mar 2026 20:01:16 +0000
Manifest this update: Wed 25 Mar 2026 20:01:16 +0000
Manifest next update: Thu 26 Mar 2026 20:01:16 +0000
Files and hashes: 1: 8VX81mIN7vUsRhJW48dZspn-gfQ.roa (hash: opWYJ7DxQf0ldyigS/RlqXZSlYWzHJuairf51+euGWc=)
2: KQzE0K1dr8J6pONC-oDjSBToRcM.crl (hash: jKZbuMYdxs1+seElt706klJg9G4/SJo+ZTK5UFcl8oE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/92352f-4051-450e-b3a6-2e0078cee182/1/KQzE0K1dr8J6pONC-oDjSBToRcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/92352f-4051-450e-b3a6-2e0078cee182/1/KQzE0K1dr8J6pONC-oDjSBToRcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQzE0K1dr8J6pONC-oDjSBToRcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:47:85:97:ef:9e:21:cb:95:9e:25:e1:ae:5a:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=290cc4d0ad5dafc27aa4e342fa80e34814e845c3
Validity
Not Before: Mar 25 20:01:16 2026 GMT
Not After : Mar 26 20:01:16 2026 GMT
Subject: CN=d42c710aa6e235a6fb7e33c517249042d3bd0edd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:1c:74:a3:74:79:a0:c4:0a:91:75:a9:66:b6:
bb:16:07:75:50:a9:15:6e:ff:6a:ce:1f:19:67:5f:
b0:b9:e7:91:10:55:5a:2a:06:d9:10:10:d1:6d:4f:
64:72:c0:3d:bd:1a:08:34:1c:a7:4f:3c:83:cf:31:
8c:0c:c8:56:03:d1:04:70:84:71:42:12:1b:53:f9:
4c:b2:ee:3d:b5:54:c5:84:5a:3b:70:14:56:2f:b5:
cf:a0:4c:c1:ed:45:f2:f4:7a:70:c7:f8:65:2f:3f:
3b:79:20:e8:69:92:df:0f:c0:8e:48:b6:1e:28:1a:
de:ca:ba:83:06:54:5f:9a:fa:67:1d:df:4f:6f:ec:
c6:59:79:3e:63:19:61:0a:27:ad:db:92:57:f0:99:
4a:71:97:43:6f:8e:6b:c5:a2:85:96:e0:71:55:d0:
b3:d9:f4:9f:e1:67:41:57:74:38:94:c4:c2:d8:58:
6e:94:85:52:a4:8a:27:5d:8b:79:60:24:f1:25:44:
44:59:cd:a2:8d:89:03:5d:85:a1:73:95:b3:ec:97:
de:d2:70:93:69:70:e7:dd:79:bf:87:f3:b3:c3:94:
6a:ae:d1:4b:2b:84:d8:9e:fc:e4:0c:7c:c7:ad:b7:
6e:56:df:58:fe:f9:bd:20:1d:93:c8:7e:e3:df:b9:
31:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:2C:71:0A:A6:E2:35:A6:FB:7E:33:C5:17:24:90:42:D3:BD:0E:DD
X509v3 Authority Key Identifier:
keyid:29:0C:C4:D0:AD:5D:AF:C2:7A:A4:E3:42:FA:80:E3:48:14:E8:45:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQzE0K1dr8J6pONC-oDjSBToRcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/92352f-4051-450e-b3a6-2e0078cee182/1/KQzE0K1dr8J6pONC-oDjSBToRcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/92352f-4051-450e-b3a6-2e0078cee182/1/KQzE0K1dr8J6pONC-oDjSBToRcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:6a:a6:01:88:05:5b:c8:cd:43:7f:74:4f:45:ec:67:8d:89:
ce:eb:24:d8:d3:ee:2f:54:da:80:29:76:bd:04:ed:54:61:d2:
40:dc:12:1b:4c:e3:52:b7:64:2d:94:1a:0c:27:e5:ef:f0:bd:
f8:64:27:70:2d:f3:84:b4:36:b0:cc:b0:84:51:03:16:e0:8d:
de:be:51:c4:c1:2a:ba:ed:29:d1:51:e4:4c:86:d5:c5:84:cb:
63:86:23:d6:02:f0:95:ce:9a:1d:e1:a0:c3:8d:88:bd:ac:04:
45:20:4c:8f:27:cb:dd:1d:e4:11:33:25:b5:39:9d:28:1e:02:
42:b5:0e:d6:d1:01:3c:d5:0b:f8:6f:84:7e:73:cf:34:76:15:
65:50:a7:5a:d0:c6:97:ee:b6:d4:2b:69:9c:a8:4a:45:c4:38:
72:c9:aa:11:de:b1:69:06:e5:b3:00:56:16:ea:bb:62:5d:4d:
58:36:9b:bb:de:32:88:f4:ec:9b:9c:91:2d:e6:82:04:ba:72:
e1:c9:52:40:f5:4a:45:7e:88:34:71:32:a4:13:ae:d9:32:3e:
7e:cb:38:63:cb:01:16:ee:69:de:00:0b:54:f4:e5:b6:f2:e2:
b8:23:0a:3d:f3:3e:d6:40:b4:52:2a:15:6f:ec:7c:29:fc:af:
80:61:21:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:53:40 2026 by rpki-client