Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/e57efb-861b-4931-88d3-dd973da42721/1/KQgY9N9Ka9El1fIhJBRaafW2o0w.mft
File: KQgY9N9Ka9El1fIhJBRaafW2o0w.mft (raw, json)
Hash identifier: WQL/ahbJd00JCNxdRbw1Llu0Zkt8RBuq7/iCTNtoWBY=
Subject key identifier: A5:F4:E6:AD:C5:88:40:24:18:0F:F6:7A:2C:FD:CA:7D:44:8C:98:38
Authority key identifier: 29:08:18:F4:DF:4A:6B:D1:25:D5:F2:21:24:14:5A:69:F5:B6:A3:4C
Certificate issuer: /CN=290818f4df4a6bd125d5f22124145a69f5b6a34c
Certificate serial: 019D25BAD225C7A9FBC39793EF7F8B736F70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQgY9N9Ka9El1fIhJBRaafW2o0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/e57efb-861b-4931-88d3-dd973da42721/1/KQgY9N9Ka9El1fIhJBRaafW2o0w.mft
Manifest number: 0302
Signing time: Wed 25 Mar 2026 16:01:33 +0000
Manifest this update: Wed 25 Mar 2026 16:01:33 +0000
Manifest next update: Thu 26 Mar 2026 16:01:33 +0000
Files and hashes: 1: GTic-MQ5tjMwB87XapipECuOaNo.roa (hash: OAjAKLqBUkKM9qmV4HtnwZI6RlKw3QQt+qVs91Rbq9g=)
2: KQgY9N9Ka9El1fIhJBRaafW2o0w.crl (hash: Pj412rNZDrTyYOp3UHT/E9q070GdJzdxxepCx9URawQ=)
3: pgKR608oN6zximuaUEgX6MpmTUU.roa (hash: saw7XgMmN0878UPRiyR58fLRD+GohosuFlhuOGzETeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/e57efb-861b-4931-88d3-dd973da42721/1/KQgY9N9Ka9El1fIhJBRaafW2o0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/e57efb-861b-4931-88d3-dd973da42721/1/KQgY9N9Ka9El1fIhJBRaafW2o0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQgY9N9Ka9El1fIhJBRaafW2o0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:d2:25:c7:a9:fb:c3:97:93:ef:7f:8b:73:6f:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=290818f4df4a6bd125d5f22124145a69f5b6a34c
Validity
Not Before: Mar 25 16:01:33 2026 GMT
Not After : Mar 26 16:01:33 2026 GMT
Subject: CN=a5f4e6adc5884024180ff67a2cfdca7d448c9838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a2:12:1d:92:63:68:75:f5:58:71:86:76:c8:
bb:96:c7:b1:34:d2:97:15:e1:db:2f:b8:bb:00:8e:
17:68:a0:61:67:a3:7f:c4:22:4e:c8:10:a7:05:61:
e7:cc:04:75:a5:c8:76:e1:70:07:ed:28:40:e9:52:
4f:03:19:26:a9:52:e0:f8:3c:26:e8:7b:bb:2a:a3:
0f:76:5e:ac:8f:5e:24:56:f6:dc:30:ae:ed:89:9d:
b7:c6:50:2f:42:53:4d:73:1b:5a:f3:09:60:e9:51:
1c:f7:10:9f:fa:6e:85:0b:01:15:49:a9:ea:c6:42:
a8:66:90:53:09:60:e7:6e:4d:9e:5f:60:f7:20:4c:
ee:c2:16:ac:a7:3f:e3:fc:76:ba:9c:97:2e:b8:89:
e5:ab:da:27:8b:45:6a:01:87:cc:6f:fc:58:d2:18:
5e:9d:20:2a:9a:80:35:e3:49:a8:ed:88:e0:f8:0e:
72:89:aa:43:11:92:eb:69:eb:81:2f:0a:ad:30:0a:
43:4b:ec:ff:89:9f:36:fe:85:f9:78:29:72:4b:79:
ed:09:d5:94:b6:be:25:06:9c:da:85:79:76:b8:d1:
64:06:a9:f2:70:43:39:16:b9:84:ab:8c:27:9f:94:
eb:30:50:1a:1d:d6:85:00:97:66:fd:6a:f2:50:7a:
43:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:F4:E6:AD:C5:88:40:24:18:0F:F6:7A:2C:FD:CA:7D:44:8C:98:38
X509v3 Authority Key Identifier:
keyid:29:08:18:F4:DF:4A:6B:D1:25:D5:F2:21:24:14:5A:69:F5:B6:A3:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQgY9N9Ka9El1fIhJBRaafW2o0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/e57efb-861b-4931-88d3-dd973da42721/1/KQgY9N9Ka9El1fIhJBRaafW2o0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/e57efb-861b-4931-88d3-dd973da42721/1/KQgY9N9Ka9El1fIhJBRaafW2o0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:53:c5:93:07:6e:25:e1:0b:2a:7d:a5:71:b7:36:bd:9a:6b:
4d:53:ab:0e:34:10:04:c3:eb:8f:09:8f:88:35:d4:99:cd:41:
57:84:88:eb:cc:46:5d:3f:71:b7:d7:12:b2:54:a7:28:7c:18:
66:07:f2:db:a8:d0:db:17:4f:eb:4b:a7:e1:b8:aa:22:8c:05:
b9:1b:77:c4:33:99:c5:fb:22:90:a1:d6:cc:1b:60:10:cb:e0:
94:82:3f:b4:fd:21:64:bc:b3:b3:ce:ae:d2:7a:d4:dd:b3:41:
74:e0:01:6c:dc:8e:b6:7f:a7:6f:81:53:63:8f:f3:a2:7b:8b:
84:03:4d:22:63:46:25:15:83:70:4f:52:a3:9d:06:20:5e:35:
42:56:04:ce:b0:c6:26:0c:c3:44:48:fd:e6:1b:48:36:de:a8:
96:5b:73:27:6c:50:aa:0c:14:88:9c:c2:3f:13:97:09:92:1f:
97:e3:fa:1c:87:fb:9a:f1:08:de:89:53:9a:20:a5:8b:96:04:
06:34:35:3d:58:80:35:43:78:53:51:3a:0c:31:ec:90:40:1e:
c2:72:3b:b1:14:f7:a0:ac:9c:51:f7:1e:e6:b1:15:5f:8b:8a:
92:5b:dc:78:6e:b0:37:f3:42:a2:45:a7:fc:83:89:97:8a:8d:
1f:b1:81:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:03 2026 by rpki-client