Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9e/92352f-4051-450e-b3a6-2e0078cee182/1/KQzE0K1dr8J6pONC-oDjSBToRcM.mft
File: KQzE0K1dr8J6pONC-oDjSBToRcM.mft (raw, json)
Hash identifier: 5EbNzitd7lW+rhuouzISk5OWusDPo01CTtRdyxkIRjc=
Subject key identifier: FB:DE:A4:59:45:69:43:FB:77:DC:5B:B9:15:07:AA:92:66:5A:07:28
Authority key identifier: 29:0C:C4:D0:AD:5D:AF:C2:7A:A4:E3:42:FA:80:E3:48:14:E8:45:C3
Certificate issuer: /CN=290cc4d0ad5dafc27aa4e342fa80e34814e845c3
Certificate serial: 01A0DCBC099E1E705729D08848358478CBC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQzE0K1dr8J6pONC-oDjSBToRcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/92352f-4051-450e-b3a6-2e0078cee182/1/KQzE0K1dr8J6pONC-oDjSBToRcM.mft
Manifest number: 0AB0
Signing time: Sat 26 Sep 2026 08:01:45 +0000
Manifest this update: Sat 26 Sep 2026 08:01:45 +0000
Manifest next update: Sun 27 Sep 2026 08:01:45 +0000
Files and hashes: 1: 8VX81mIN7vUsRhJW48dZspn-gfQ.roa (hash: opWYJ7DxQf0ldyigS/RlqXZSlYWzHJuairf51+euGWc=)
2: KQzE0K1dr8J6pONC-oDjSBToRcM.crl (hash: HIn99xlWg6TtHrsQIWfPuOSoppzkZTMRjhVnu7w1dZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/92352f-4051-450e-b3a6-2e0078cee182/1/KQzE0K1dr8J6pONC-oDjSBToRcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/92352f-4051-450e-b3a6-2e0078cee182/1/KQzE0K1dr8J6pONC-oDjSBToRcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQzE0K1dr8J6pONC-oDjSBToRcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:bc:09:9e:1e:70:57:29:d0:88:48:35:84:78:cb:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=290cc4d0ad5dafc27aa4e342fa80e34814e845c3
Validity
Not Before: Sep 26 08:01:45 2026 GMT
Not After : Sep 27 08:01:45 2026 GMT
Subject: CN=fbdea459456943fb77dc5bb91507aa92665a0728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:c2:13:87:6c:ee:d7:45:21:7b:61:74:e7:e6:
e5:f3:2f:10:f4:cd:7c:57:bf:e2:7b:0a:c3:e6:3d:
98:25:33:f4:65:a2:08:4b:34:5f:8e:5b:dc:14:c6:
33:b4:fb:16:1d:cd:7c:8c:ec:20:51:ea:78:c5:c7:
c4:d2:b4:76:43:93:20:09:8e:93:ce:82:3b:91:0f:
5c:75:82:88:e6:fb:61:03:c0:83:ef:15:aa:74:82:
92:50:01:6a:3a:fb:91:c6:c5:99:7d:01:db:3c:36:
e9:24:a2:d5:cb:4a:05:3e:45:b2:6c:b3:d3:9b:4e:
41:c8:53:13:fb:58:5f:21:ae:08:a7:83:e3:cf:92:
9c:b4:54:89:a8:6d:cc:26:27:b3:4e:c1:64:f2:73:
8d:db:d8:6b:d6:f7:ce:f5:24:8d:c6:4d:62:7b:f8:
47:d8:43:05:d8:c6:a1:1a:fc:5c:6a:69:4a:67:65:
72:a3:64:26:4a:17:df:f6:3b:26:41:b3:6c:95:49:
5d:30:30:e2:98:30:63:ea:2b:d9:13:35:0a:28:83:
b9:00:b7:73:b4:20:3e:18:a8:fc:9c:55:d9:f9:48:
69:5f:02:96:f5:55:18:cd:94:fe:a1:83:e3:67:ba:
f9:84:80:6c:ee:e4:f6:5a:5b:7c:e2:1c:9d:a6:30:
d2:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:DE:A4:59:45:69:43:FB:77:DC:5B:B9:15:07:AA:92:66:5A:07:28
X509v3 Authority Key Identifier:
keyid:29:0C:C4:D0:AD:5D:AF:C2:7A:A4:E3:42:FA:80:E3:48:14:E8:45:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQzE0K1dr8J6pONC-oDjSBToRcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/92352f-4051-450e-b3a6-2e0078cee182/1/KQzE0K1dr8J6pONC-oDjSBToRcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/92352f-4051-450e-b3a6-2e0078cee182/1/KQzE0K1dr8J6pONC-oDjSBToRcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:c8:22:fa:ee:41:c3:b2:05:99:bf:6a:28:54:85:c6:43:fa:
fc:9a:16:f2:63:a8:18:1d:de:dd:e4:1f:3c:ec:b1:e5:3e:92:
3d:a6:9e:7d:61:39:49:b6:35:0d:35:22:3f:e5:c2:79:28:3f:
0e:35:f1:61:1e:f6:79:ef:dd:83:ad:02:b6:4c:ad:73:91:ef:
62:9e:97:d2:41:c3:35:2c:c9:85:86:5a:e7:79:e3:cc:7b:41:
f2:66:3e:82:54:ef:50:d9:80:65:90:21:a4:cb:e7:05:00:11:
f0:46:ed:6f:96:4a:c4:27:e0:5d:f1:90:f5:c8:e2:75:23:be:
f3:46:a3:20:5a:47:0b:0d:6e:75:f4:52:35:07:e4:31:01:b7:
3f:ed:56:db:91:35:be:0d:bf:f6:d5:02:77:24:dc:cf:3c:c7:
9f:75:da:cc:71:9e:24:ed:56:82:b9:db:03:2a:f3:e1:1d:16:
e2:d8:8a:fe:70:14:2c:0f:4b:f7:3b:98:2f:a1:2c:8e:db:7a:
b8:fc:dd:0a:a0:a5:95:5f:cf:bb:0f:2f:c0:36:3f:d0:a4:ea:
08:15:cc:62:d0:37:dd:f3:db:4f:2d:be:1c:e9:55:d2:15:24:
aa:6a:c1:c6:92:35:78:a0:21:d4:64:29:08:6a:67:26:13:5e:
4f:67:cc:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDcvAmeHnBXKdCISDWEeMvHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5MGNjNGQwYWQ1ZGFmYzI3YWE0ZTM0MmZhODBlMzQ4MTRl
ODQ1YzMwHhcNMjYwOTI2MDgwMTQ1WhcNMjYwOTI3MDgwMTQ1WjAzMTEwLwYDVQQD
EyhmYmRlYTQ1OTQ1Njk0M2ZiNzdkYzViYjkxNTA3YWE5MjY2NWEwNzI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA68ITh2zu10Uhe2F05+bl8y8Q9M18
V7/iewrD5j2YJTP0ZaIISzRfjlvcFMYztPsWHc18jOwgUep4xcfE0rR2Q5MgCY6T
zoI7kQ9cdYKI5vthA8CD7xWqdIKSUAFqOvuRxsWZfQHbPDbpJKLVy0oFPkWybLPT
m05ByFMT+1hfIa4Ip4Pjz5KctFSJqG3MJiezTsFk8nON29hr1vfO9SSNxk1ie/hH
2EMF2MahGvxcamlKZ2Vyo2QmShff9jsmQbNslUldMDDimDBj6ivZEzUKKIO5ALdz
tCA+GKj8nFXZ+UhpXwKW9VUYzZT+oYPjZ7r5hIBs7uT2Wlt84hydpjDSuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPvepFlFaUP7d9xbuRUHqpJmWgcoMB8GA1UdIwQY
MBaAFCkMxNCtXa/CeqTjQvqA40gU6EXDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1F6RTBLMWRyOEo2cE9OQy1vRGpTQlRvUmNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS85MjM1MmYtNDA1MS00NTBlLWIzYTYt
MmUwMDc4Y2VlMTgyLzEvS1F6RTBLMWRyOEo2cE9OQy1vRGpTQlRvUmNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS85MjM1MmYtNDA1MS00NTBlLWIzYTYtMmUwMDc4Y2VlMTgy
LzEvS1F6RTBLMWRyOEo2cE9OQy1vRGpTQlRvUmNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApMgi+u5B
w7IFmb9qKFSFxkP6/JoW8mOoGB3e3eQfPOyx5T6SPaaefWE5SbY1DTUiP+XCeSg/
DjXxYR72ee/dg60Ctkytc5HvYp6X0kHDNSzJhYZa53njzHtB8mY+glTvUNmAZZAh
pMvnBQAR8Ebtb5ZKxCfgXfGQ9cjidSO+80ajIFpHCw1udfRSNQfkMQG3P+1W25E1
vg2/9tUCdyTczzzHn3XazHGeJO1WgrnbAyrz4R0W4tiK/nAULA9L9zuYL6Esjtt6
uPzdCqCllV/Puw8vwDY/0KTqCBXMYtA33fPbTy2+HOlV0hUkqmrBxpI1eKAh1GQp
CGpnJhNeT2fMuA==
-----END CERTIFICATE-----
Generated at Sat Sep 26 13:47:27 2026 by rpki-client