Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft
File: KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft (raw, json)
Hash identifier: 3xeITLFDfpR2f5EoGQfwf4zC5oArpaFbXaUR6l+AdIg=
Subject key identifier: AC:A4:6A:B8:A3:45:7A:EB:4D:A5:39:C3:29:E5:AC:E4:04:48:73:20
Authority key identifier: 2A:A3:C9:9F:F5:8B:8F:73:3E:F2:C6:2A:77:72:C0:C1:F2:9E:57:FC
Certificate issuer: /CN=2aa3c99ff58b8f733ef2c62a7772c0c1f29e57fc
Certificate serial: 019E202417ACCB9F4687BEECEEE758ED4FEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqPJn_WLj3M-8sYqd3LAwfKeV_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft
Manifest number: 1213
Signing time: Wed 13 May 2026 07:01:36 +0000
Manifest this update: Wed 13 May 2026 07:01:36 +0000
Manifest next update: Thu 14 May 2026 07:01:36 +0000
Files and hashes: 1: KqPJn_WLj3M-8sYqd3LAwfKeV_w.crl (hash: mh40sYz9egUaWON3yeg0uC6SBdKMPJDNIUltAHPz+vE=)
2: TjwUrt0QbOg_7Hv7hnE5gPoovGE.roa (hash: vCYAcdHdzTkyR5n/fzt3EtvDXfAERXz/dZUmibVHkag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqPJn_WLj3M-8sYqd3LAwfKeV_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:24:17:ac:cb:9f:46:87:be:ec:ee:e7:58:ed:4f:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa3c99ff58b8f733ef2c62a7772c0c1f29e57fc
Validity
Not Before: May 13 07:01:36 2026 GMT
Not After : May 14 07:01:36 2026 GMT
Subject: CN=aca46ab8a3457aeb4da539c329e5ace404487320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:17:ec:b9:3c:d8:57:4e:72:ab:9b:fb:c8:e9:
2f:e5:2f:56:c3:40:93:72:00:f7:0d:11:e1:4f:82:
42:55:97:64:cc:eb:37:e7:9a:6c:08:9c:9b:08:59:
fd:e9:31:b1:5f:2b:38:e8:5a:da:1d:fd:8e:c5:47:
38:fa:cc:d4:07:52:5c:79:26:44:fd:ec:3c:23:ae:
90:52:d5:76:0d:da:fc:25:83:d6:1f:cd:d0:3f:ec:
c2:8e:c1:3b:00:e0:6a:b6:b3:27:bb:a2:6c:b9:d9:
2e:fb:cf:46:2d:19:41:b5:23:fe:64:a9:fe:a5:c4:
f1:d0:d6:e9:41:5f:39:70:3d:19:73:5f:1f:cf:83:
45:d0:75:97:09:42:ea:c8:a2:7a:c7:da:59:96:3d:
b6:d5:f9:b5:21:70:90:d9:f8:7d:a9:2b:06:41:2a:
3b:cd:1d:89:5e:53:44:56:04:96:e8:79:77:f8:43:
6a:1b:48:ac:86:97:b0:5c:45:ff:b5:57:d4:39:42:
05:cf:bc:8e:c9:31:98:70:86:1b:9f:a6:e2:a4:7e:
ea:1e:82:2c:25:f9:f0:48:cc:74:e6:d6:e0:c6:2d:
57:f2:c7:c3:55:fa:de:ec:47:b2:09:7f:fe:2b:60:
0a:e8:58:c2:c7:8d:43:06:44:a8:bd:16:02:2e:57:
24:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:A4:6A:B8:A3:45:7A:EB:4D:A5:39:C3:29:E5:AC:E4:04:48:73:20
X509v3 Authority Key Identifier:
keyid:2A:A3:C9:9F:F5:8B:8F:73:3E:F2:C6:2A:77:72:C0:C1:F2:9E:57:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqPJn_WLj3M-8sYqd3LAwfKeV_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:ed:79:89:b6:1f:1e:03:e5:cb:3c:d1:be:b1:a2:01:1f:c7:
d6:56:bd:92:75:d1:1b:af:3a:d4:15:c5:e5:85:72:54:4d:0b:
bd:88:19:70:54:44:da:fa:d9:88:4d:50:27:8d:38:ab:07:66:
8e:4d:43:0f:9e:3f:06:ee:2c:fc:f1:63:97:92:1b:9a:bd:c2:
e7:ae:a0:d5:ca:1b:5e:91:55:9f:1b:d5:74:16:0a:cd:ac:07:
b2:e2:52:2a:bc:95:34:55:b1:89:88:75:38:c4:01:b8:1d:7a:
5d:47:47:e1:32:a7:6a:1b:88:c8:89:91:1c:2a:00:28:a5:72:
a1:83:d5:a6:b3:e8:43:e5:b5:05:ff:f4:c2:a0:8c:4f:24:7b:
cb:6f:51:c8:64:a9:16:f0:3c:73:33:16:6a:74:70:fb:bc:2e:
8f:4e:5a:4e:27:4f:1f:07:51:c2:8f:2d:c0:da:97:2e:cd:aa:
c4:81:5e:a9:e9:37:7f:da:e8:84:b5:84:0d:64:86:51:3a:e3:
e9:02:b7:d6:2c:ac:e7:ac:f6:68:a8:8c:5a:33:85:8e:22:67:
3b:4d:e8:7e:fc:65:ac:44:21:d9:bf:45:52:f4:d0:9f:d8:99:
54:9a:f5:a1:0d:21:36:ef:75:32:57:69:71:31:5b:f0:fd:63:
56:b6:ee:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:26:48 2026 by rpki-client