Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/KqWx1eAQafqWlumUTlGRCLfB5NE.mft
File: KqWx1eAQafqWlumUTlGRCLfB5NE.mft (raw, json)
Hash identifier: 7Kq9rbO1lziH1go98utH3/KzXKxT5RURtLIRqre2q84=
Subject key identifier: 18:86:C6:EB:E9:BA:8F:8D:A0:F2:00:1A:55:E6:D1:49:62:8A:A4:7D
Authority key identifier: 2A:A5:B1:D5:E0:10:69:FA:96:96:E9:94:4E:51:91:08:B7:C1:E4:D1
Certificate issuer: /CN=2aa5b1d5e01069fa9696e9944e519108b7c1e4d1
Certificate serial: 01A0DD9728B52138708634CCFC083FF1EAB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqWx1eAQafqWlumUTlGRCLfB5NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/KqWx1eAQafqWlumUTlGRCLfB5NE.mft
Manifest number: EC
Signing time: Sat 26 Sep 2026 12:01:06 +0000
Manifest this update: Sat 26 Sep 2026 12:01:06 +0000
Manifest next update: Sun 27 Sep 2026 12:01:06 +0000
Files and hashes: 1: KqWx1eAQafqWlumUTlGRCLfB5NE.crl (hash: D14cqp+lJN70unG5mYEvy+XThXrsdkcav3FINdemEvg=)
2: ku84zJjTWzV_Uw0D2cCHPAGq8WA.roa (hash: l+xQkMBojqSS3t8VI6Qv1n5lrRHRggLZADBsh+xBAik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/KqWx1eAQafqWlumUTlGRCLfB5NE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/KqWx1eAQafqWlumUTlGRCLfB5NE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqWx1eAQafqWlumUTlGRCLfB5NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:97:28:b5:21:38:70:86:34:cc:fc:08:3f:f1:ea:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa5b1d5e01069fa9696e9944e519108b7c1e4d1
Validity
Not Before: Sep 26 12:01:06 2026 GMT
Not After : Sep 27 12:01:06 2026 GMT
Subject: CN=1886c6ebe9ba8f8da0f2001a55e6d149628aa47d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a8:78:1b:78:f8:c0:2e:3e:c7:b3:3e:24:3d:
54:55:fa:8d:3c:6f:cb:73:2e:bf:9c:af:e3:29:be:
03:3f:14:f2:45:f7:43:e0:4e:f9:70:ae:dc:b5:a2:
50:d7:7c:72:06:3c:3a:43:9b:c3:2a:b6:b6:1b:3b:
70:4c:13:1a:fa:6d:76:7d:ab:bb:59:9e:9a:9b:15:
ae:bb:3c:d8:fc:c2:73:1e:20:12:19:7c:63:d9:ba:
54:3f:38:02:6f:ad:68:e8:02:b3:de:f6:82:59:bb:
1a:5f:4d:9d:7b:fa:ff:4e:6c:e9:f3:24:0a:b0:eb:
1f:87:cc:af:c0:96:07:76:91:53:59:d5:d5:0e:3d:
e3:ca:8a:8f:2c:c4:fc:74:e4:f1:a1:a3:35:1e:f9:
83:43:f2:cf:38:0e:6a:14:5a:91:2d:7b:81:7b:6d:
77:95:df:f4:99:08:54:a9:62:bf:08:0b:63:e5:87:
08:63:25:4b:0d:df:1d:99:cb:75:c7:c6:68:35:2f:
e0:3a:1e:40:7d:87:55:b2:59:15:a2:6c:53:05:bc:
5b:07:81:80:58:98:50:c9:87:ce:b8:e3:5c:22:11:
fd:14:a6:d6:4b:0b:06:55:d5:56:01:10:fb:7b:7e:
e3:6f:94:10:c6:e1:dc:0c:e8:4e:9f:e3:d2:30:02:
d8:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:86:C6:EB:E9:BA:8F:8D:A0:F2:00:1A:55:E6:D1:49:62:8A:A4:7D
X509v3 Authority Key Identifier:
keyid:2A:A5:B1:D5:E0:10:69:FA:96:96:E9:94:4E:51:91:08:B7:C1:E4:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqWx1eAQafqWlumUTlGRCLfB5NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/KqWx1eAQafqWlumUTlGRCLfB5NE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/KqWx1eAQafqWlumUTlGRCLfB5NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:9a:33:df:96:b8:6b:27:c9:9a:e8:bd:d0:80:d0:98:21:da:
1f:f4:52:25:83:43:c5:6d:25:47:20:2a:d0:5d:c4:d8:31:b6:
bc:a4:79:1a:59:c5:e8:3f:ac:93:f2:cf:68:df:02:cd:60:5b:
f6:53:c5:d6:94:47:e3:f3:f2:d6:e2:14:f0:08:b2:f3:3f:2a:
3d:f5:41:0c:7a:d2:6c:c3:ba:2a:73:a6:42:52:71:d6:0a:36:
6b:b4:81:6f:90:e0:81:a8:09:d2:9a:9b:f4:03:21:29:73:20:
0a:84:72:6f:1d:b7:7d:ad:59:b0:ec:de:ef:03:a4:6d:85:06:
45:71:51:68:1d:19:bc:f2:c7:46:4f:77:65:77:82:d5:2c:f7:
c9:9b:c1:4c:1d:e5:5d:48:ab:a2:55:32:3d:76:3e:27:c3:21:
60:80:15:4b:9d:99:cf:54:ae:3e:3b:9e:66:62:1b:70:73:cb:
6a:4c:99:2c:8e:57:ea:6a:0c:3d:70:42:aa:86:46:fc:2c:93:
54:ac:79:70:14:75:bb:31:d6:6b:3e:b4:4f:c6:41:c1:d4:78:
f3:e6:d3:4a:75:37:c4:43:2a:7b:22:93:09:36:aa:35:54:19:
09:98:81:28:b5:22:a2:72:29:38:82:8c:7d:bd:6b:73:e0:81:
a6:7d:9e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 15:12:04 2026 by rpki-client