Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.mft
File: KEQn3OurQOvBmDny0l7qLOClYv8.mft (raw, json)
Hash identifier: egG18XdHr0baSZi0YXQr17wzXJKEv+2Jc47ZRr3+LFk=
Subject key identifier: 6B:40:8D:5C:88:CC:99:FE:BF:3E:11:D9:D6:BC:61:7E:C8:BC:22:3B
Authority key identifier: 28:44:27:DC:EB:AB:40:EB:C1:98:39:F2:D2:5E:EA:2C:E0:A5:62:FF
Certificate issuer: /CN=284427dcebab40ebc19839f2d25eea2ce0a562ff
Certificate serial: 019D26CD2FFA58391B5B0308FD2DC8D3C34B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KEQn3OurQOvBmDny0l7qLOClYv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.mft
Manifest number: 074F
Signing time: Wed 25 Mar 2026 21:01:14 +0000
Manifest this update: Wed 25 Mar 2026 21:01:14 +0000
Manifest next update: Thu 26 Mar 2026 21:01:14 +0000
Files and hashes: 1: KEQn3OurQOvBmDny0l7qLOClYv8.crl (hash: 5KrVog2HOX57Q5rf4kJOAkITagZpT5GiZLiShN273bk=)
2: cHwhEhAGxzfypZx4-M1NRLg_x6g.roa (hash: iI8gUBUQGaxZbo8P6CcEli8I0PR4IRfA40i94puh4EU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KEQn3OurQOvBmDny0l7qLOClYv8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:2f:fa:58:39:1b:5b:03:08:fd:2d:c8:d3:c3:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=284427dcebab40ebc19839f2d25eea2ce0a562ff
Validity
Not Before: Mar 25 21:01:14 2026 GMT
Not After : Mar 26 21:01:14 2026 GMT
Subject: CN=6b408d5c88cc99febf3e11d9d6bc617ec8bc223b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:af:5b:4d:bb:e6:4e:a3:c9:8c:09:1f:77:de:
b7:ea:5b:29:ef:b9:dc:e6:40:07:c6:71:e5:26:c7:
1f:12:7b:7a:be:22:06:5f:f3:14:53:11:fb:47:16:
48:f5:23:3a:0e:03:a4:2c:17:24:ae:79:f1:7a:8f:
00:39:e9:47:38:1e:bb:b9:b3:ff:6a:c4:57:d6:1a:
d6:f6:b5:5a:d7:2d:97:f3:b3:77:61:e1:37:d1:e0:
af:a9:a6:bc:d9:3e:10:ec:77:51:76:5a:50:a6:4a:
35:80:61:d6:a6:b3:2e:3f:cf:38:28:a4:62:d8:b5:
73:72:d2:3f:e1:82:24:75:cd:b9:28:e3:9f:b3:fa:
09:3c:da:cb:da:9f:8b:9a:ed:c8:3f:df:20:33:60:
c2:08:ec:7d:9f:cf:19:5f:fc:24:80:9e:fd:8a:c9:
57:c7:fd:11:2c:01:3f:78:6b:f6:65:2d:dd:90:e5:
1d:60:24:39:ea:cb:ec:99:1d:cc:50:f2:51:37:8c:
53:a6:6d:e4:f0:95:c9:87:94:d4:f6:e6:a3:ce:60:
1e:02:5a:b0:f9:27:ae:3f:e8:c7:85:2d:9c:f7:fb:
85:7b:71:0f:f4:5a:2a:8e:66:c4:22:ee:2f:c7:33:
25:56:a7:2c:d8:41:31:e7:ee:d1:06:1e:a4:f1:7f:
60:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:40:8D:5C:88:CC:99:FE:BF:3E:11:D9:D6:BC:61:7E:C8:BC:22:3B
X509v3 Authority Key Identifier:
keyid:28:44:27:DC:EB:AB:40:EB:C1:98:39:F2:D2:5E:EA:2C:E0:A5:62:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KEQn3OurQOvBmDny0l7qLOClYv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:59:61:c7:6c:4b:41:8f:3e:0e:05:26:e0:be:51:48:68:76:
59:3d:59:2d:1e:3f:4d:a1:e1:a2:c3:3e:dd:54:ac:b1:db:cf:
0e:fb:ad:3c:4c:b6:ab:f7:d5:6d:29:33:93:fb:24:04:ff:2c:
54:91:68:39:b5:52:8a:35:12:6b:ea:3e:e6:ac:fe:55:e3:8c:
aa:ae:04:f2:1e:61:dd:9f:4b:f1:5b:1b:8d:5a:66:53:ab:20:
ac:fe:6b:c2:0b:f1:62:52:2e:43:e3:92:d2:9b:2e:89:d3:c2:
87:81:af:8f:be:5d:57:d3:be:95:95:b1:66:db:34:2c:eb:ae:
ee:54:91:cd:86:ee:2d:9e:bf:ae:f3:98:61:6d:97:55:80:5c:
37:42:51:59:4d:cf:e6:ec:72:8e:e5:c3:48:b6:04:7d:02:91:
2e:04:0b:de:80:9b:3b:84:f7:c0:25:be:2b:0c:7f:2b:7a:cc:
f1:d0:11:45:a9:41:b9:fd:a4:06:00:f3:2c:7e:89:e6:be:5e:
42:10:53:30:0b:55:8d:1c:39:f0:f7:3f:c4:e5:84:7e:20:b3:
e3:46:9c:62:0d:b9:cb:bb:29:56:21:34:68:00:97:da:86:3a:
93:4a:5b:07:ad:27:c9:54:61:2b:8f:e5:2d:91:88:61:c9:9e:
3e:ba:7a:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:28:04 2026 by rpki-client