Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/92352f-4051-450e-b3a6-2e0078cee182/1/KQzE0K1dr8J6pONC-oDjSBToRcM.mft
File: KQzE0K1dr8J6pONC-oDjSBToRcM.mft (raw, json)
Hash identifier: 1Lvu9DyyXP/q7piZjhweQq8RIKUzO28xUOQCjyjTaLA=
Subject key identifier: 9B:F0:01:7C:E9:00:D0:80:1C:18:89:EA:4B:59:98:4C:04:B9:59:ED
Authority key identifier: 29:0C:C4:D0:AD:5D:AF:C2:7A:A4:E3:42:FA:80:E3:48:14:E8:45:C3
Certificate issuer: /CN=290cc4d0ad5dafc27aa4e342fa80e34814e845c3
Certificate serial: 019E1FB5F21920038F12066EFEBD0726F384
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQzE0K1dr8J6pONC-oDjSBToRcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/92352f-4051-450e-b3a6-2e0078cee182/1/KQzE0K1dr8J6pONC-oDjSBToRcM.mft
Manifest number: 0945
Signing time: Wed 13 May 2026 05:01:18 +0000
Manifest this update: Wed 13 May 2026 05:01:18 +0000
Manifest next update: Thu 14 May 2026 05:01:18 +0000
Files and hashes: 1: 8VX81mIN7vUsRhJW48dZspn-gfQ.roa (hash: opWYJ7DxQf0ldyigS/RlqXZSlYWzHJuairf51+euGWc=)
2: KQzE0K1dr8J6pONC-oDjSBToRcM.crl (hash: ErKvNDNMN8aJUele/hmVecVYS5atcaRa6XRMEXRcsDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/92352f-4051-450e-b3a6-2e0078cee182/1/KQzE0K1dr8J6pONC-oDjSBToRcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/92352f-4051-450e-b3a6-2e0078cee182/1/KQzE0K1dr8J6pONC-oDjSBToRcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQzE0K1dr8J6pONC-oDjSBToRcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 05:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b5:f2:19:20:03:8f:12:06:6e:fe:bd:07:26:f3:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=290cc4d0ad5dafc27aa4e342fa80e34814e845c3
Validity
Not Before: May 13 05:01:18 2026 GMT
Not After : May 14 05:01:18 2026 GMT
Subject: CN=9bf0017ce900d0801c1889ea4b59984c04b959ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:8d:fa:47:5c:43:c2:4a:fc:af:16:bf:07:8f:
0f:a4:22:c4:07:c6:eb:f9:81:b5:e4:83:b7:aa:91:
db:68:77:4a:ac:6d:7b:6e:35:95:0f:95:2e:35:40:
f1:48:e2:c8:49:3d:a1:39:98:6d:a8:5a:d0:46:64:
54:0c:c5:ff:dc:1e:cd:97:90:0d:6e:2d:fe:48:c5:
a4:31:d6:03:dc:58:92:54:46:22:9b:ec:32:4b:d8:
a1:14:05:ad:a2:7b:48:af:a2:8c:a8:18:1c:01:f4:
74:c0:47:57:85:58:0d:45:77:cd:d5:95:68:76:ee:
40:45:f7:81:6e:e5:d3:c8:b4:16:c9:e3:ac:80:35:
34:fe:11:e1:d9:64:83:ac:c9:b6:5e:be:0b:73:74:
1a:f1:03:3c:d8:d6:c2:c4:4d:a8:22:9c:a3:91:69:
ac:38:a8:67:1f:d5:b0:de:83:58:8d:e4:08:69:30:
5b:06:51:c3:20:4d:91:bf:cb:40:ac:ed:c9:3f:d0:
d2:51:f9:ec:49:25:e7:1e:a9:9a:15:20:d5:e5:77:
db:be:8a:f9:08:02:35:57:fc:52:5c:41:46:93:51:
fc:04:b1:44:7b:99:01:2d:8f:ac:ff:79:cf:e4:45:
31:6b:8a:c3:81:7f:15:9e:07:75:be:bd:df:c4:b8:
01:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:F0:01:7C:E9:00:D0:80:1C:18:89:EA:4B:59:98:4C:04:B9:59:ED
X509v3 Authority Key Identifier:
keyid:29:0C:C4:D0:AD:5D:AF:C2:7A:A4:E3:42:FA:80:E3:48:14:E8:45:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQzE0K1dr8J6pONC-oDjSBToRcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/92352f-4051-450e-b3a6-2e0078cee182/1/KQzE0K1dr8J6pONC-oDjSBToRcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/92352f-4051-450e-b3a6-2e0078cee182/1/KQzE0K1dr8J6pONC-oDjSBToRcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:0b:45:37:7e:59:3d:b8:06:da:9b:f1:a0:8a:f3:04:e6:f5:
81:ff:11:ca:03:be:0f:80:8f:7e:ba:39:5f:94:08:e5:a2:ff:
f1:8a:ae:b0:6d:e2:f0:b9:c1:5a:35:1c:70:7f:5c:b7:11:88:
5b:bc:0c:dd:0e:3b:33:c4:13:2b:2b:4f:24:a7:1b:d3:a1:fd:
13:5c:90:61:9e:70:56:14:f1:78:44:29:d4:a8:8d:bc:a0:0d:
48:d8:90:52:37:26:28:46:d5:ae:c0:df:c7:b4:51:93:4c:85:
4b:d0:8b:2c:6d:cf:ea:71:19:52:76:75:08:06:76:65:41:4c:
c7:0f:e3:bf:b8:7b:46:4b:d5:ea:f1:a3:d5:d5:98:21:ae:a1:
02:97:fe:57:93:07:72:55:ff:1b:10:fe:ab:3b:cc:e6:a4:6e:
b6:2d:a4:fb:10:9e:bb:87:76:66:f1:32:dc:9b:69:c5:04:8a:
8f:09:b8:a7:b2:cb:de:b0:54:49:57:ee:29:17:64:9d:c4:c3:
cb:5a:3d:ad:cd:a4:ab:94:2c:b2:f9:64:71:6f:d1:09:b3:fe:
e0:80:78:75:37:9e:7d:93:b4:33:a1:a8:3a:af:09:fc:a3:4a:
6e:bf:96:b0:19:7b:18:fc:7c:91:9e:d8:d2:b0:6f:a5:13:29:
a2:61:62:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:37:23 2026 by rpki-client