Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.mft
File: KqGB-LCskT3cN34Z1WZLEbGXU3M.mft (raw, json)
Hash identifier: lrw1+dmvcn1JU5b05rRc+e6SaquiHl72sPxYUcailiY=
Subject key identifier: 06:C0:B0:09:E3:17:FE:7C:51:5A:DB:D5:5D:12:90:85:40:F4:C0:34
Authority key identifier: 2A:A1:81:F8:B0:AC:91:3D:DC:37:7E:19:D5:66:4B:11:B1:97:53:73
Certificate issuer: /CN=2aa181f8b0ac913ddc377e19d5664b11b1975373
Certificate serial: 019D284D70E9CC785B4A2F6695E4D2DF3C41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqGB-LCskT3cN34Z1WZLEbGXU3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.mft
Manifest number: 0DFA
Signing time: Thu 26 Mar 2026 04:00:56 +0000
Manifest this update: Thu 26 Mar 2026 04:00:56 +0000
Manifest next update: Fri 27 Mar 2026 04:00:56 +0000
Files and hashes: 1: 6JMQmYaXJRiml5BYtsy3jnW-erA.roa (hash: kbV9Lg8RcdOaIR/u2kpU49sw8x1vZ57CjX7SJnkdSvg=)
2: KqGB-LCskT3cN34Z1WZLEbGXU3M.crl (hash: 3c+UB2DugGLSCDbC80nEajF+bc1gxxbTMUVczsDBj7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqGB-LCskT3cN34Z1WZLEbGXU3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:70:e9:cc:78:5b:4a:2f:66:95:e4:d2:df:3c:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa181f8b0ac913ddc377e19d5664b11b1975373
Validity
Not Before: Mar 26 04:00:56 2026 GMT
Not After : Mar 27 04:00:56 2026 GMT
Subject: CN=06c0b009e317fe7c515adbd55d12908540f4c034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a3:82:11:ed:b1:8f:35:39:d3:33:79:4b:bc:
db:0f:4d:c2:d7:2d:ef:c5:f8:c2:26:a7:2f:3d:8a:
d6:58:01:8f:44:2b:b4:c8:08:77:c7:fa:b5:52:e0:
ef:a0:61:5d:14:2e:31:dd:d1:ad:90:32:ec:18:92:
0e:75:d2:53:41:40:cd:bc:18:0b:dc:0a:31:36:44:
59:08:94:0c:0f:7b:53:96:6c:e2:1c:0a:1c:b9:86:
ae:f7:34:b0:b5:d8:f3:96:7b:b3:d0:ef:75:24:f6:
d6:f0:d5:cf:fa:d3:ac:d4:07:45:06:eb:45:ee:1f:
cb:43:a2:80:30:eb:f5:a0:d9:fa:b6:4b:e9:16:76:
e1:b1:1b:7e:e7:97:0a:81:30:55:6a:09:78:aa:fd:
2e:d3:33:53:85:df:ae:cc:a9:1b:56:76:3d:db:5b:
13:15:da:3c:cc:bc:66:0a:c2:22:8f:77:ac:63:4b:
73:86:0c:b7:e7:27:c2:ee:e1:29:ec:30:04:3c:87:
e6:55:fd:59:09:a1:81:80:d2:2d:39:97:cc:af:dd:
88:98:c1:3f:e0:ba:38:a1:be:5a:45:76:ee:66:29:
d0:c3:41:8a:4d:2c:e3:db:78:11:19:72:71:a1:a5:
f4:43:bf:2f:bb:7d:78:c8:81:22:18:73:b0:22:0e:
6d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:C0:B0:09:E3:17:FE:7C:51:5A:DB:D5:5D:12:90:85:40:F4:C0:34
X509v3 Authority Key Identifier:
keyid:2A:A1:81:F8:B0:AC:91:3D:DC:37:7E:19:D5:66:4B:11:B1:97:53:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqGB-LCskT3cN34Z1WZLEbGXU3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:6b:53:7f:06:42:6e:72:7d:98:16:32:31:9f:d8:49:91:e8:
f4:d1:1a:62:97:1b:34:45:4f:83:cd:29:5c:5b:e8:63:e2:dd:
89:4b:48:19:83:97:bc:7a:63:b9:dc:e4:8e:47:b8:63:e3:3d:
b0:a8:a1:34:1a:ae:18:65:ad:34:ca:a8:82:32:5f:c5:e3:d9:
eb:0b:28:05:6d:ff:b0:7e:1e:67:b1:c6:19:b1:45:23:be:f6:
7a:df:f1:16:71:1e:d1:20:9f:88:cb:7b:31:a5:c2:1b:76:3a:
36:f5:af:51:ba:fe:78:b1:9b:f1:90:52:15:7e:ed:d2:2f:05:
29:ff:e4:1b:b6:74:03:f5:82:35:df:0e:cb:f3:0b:ad:92:91:
40:cb:28:af:ce:5f:d5:e4:ff:54:4b:45:d6:71:3d:35:70:07:
4d:93:1d:ba:d1:22:fa:10:cd:52:12:e6:e8:51:cd:d5:2e:84:
60:fe:93:44:a5:2d:92:51:7a:f4:e0:5d:76:5a:79:04:f3:8f:
c2:42:6d:1a:c0:30:63:04:c0:8f:ca:77:2e:20:5d:e6:1d:40:
86:07:e5:c6:35:3b:99:d2:b5:e2:ca:db:ff:41:a1:f9:49:f3:
0a:2d:ae:33:16:a0:86:81:b9:15:5e:f1:f5:22:9c:09:c5:39:
a0:88:22:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:17:52 2026 by rpki-client