Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft
File: KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft (raw, json)
Hash identifier: RdloZ50N1c2oEMeT5YVbSdwhyM0ZJe8DfG+HH22TWkc=
Subject key identifier: 0C:E8:3A:D0:AB:3E:F6:B1:64:A5:FA:DF:AA:06:CF:18:94:70:9A:B6
Authority key identifier: 2A:A3:C9:9F:F5:8B:8F:73:3E:F2:C6:2A:77:72:C0:C1:F2:9E:57:FC
Certificate issuer: /CN=2aa3c99ff58b8f733ef2c62a7772c0c1f29e57fc
Certificate serial: 019F94DBFA4CBA86E0FFE7A1DA9EE4DF1093
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqPJn_WLj3M-8sYqd3LAwfKeV_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft
Manifest number: 12D4
Signing time: Fri 24 Jul 2026 16:01:12 +0000
Manifest this update: Fri 24 Jul 2026 16:01:12 +0000
Manifest next update: Sat 25 Jul 2026 16:01:12 +0000
Files and hashes: 1: KqPJn_WLj3M-8sYqd3LAwfKeV_w.crl (hash: wfdMvNtOaZ3aT3tTEEgZNXDlY9gVgsHxaZ2NtMAwSYE=)
2: TjwUrt0QbOg_7Hv7hnE5gPoovGE.roa (hash: vCYAcdHdzTkyR5n/fzt3EtvDXfAERXz/dZUmibVHkag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqPJn_WLj3M-8sYqd3LAwfKeV_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:db:fa:4c:ba:86:e0:ff:e7:a1:da:9e:e4:df:10:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa3c99ff58b8f733ef2c62a7772c0c1f29e57fc
Validity
Not Before: Jul 24 16:01:12 2026 GMT
Not After : Jul 25 16:01:12 2026 GMT
Subject: CN=0ce83ad0ab3ef6b164a5fadfaa06cf1894709ab6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:30:b0:2f:8b:b4:32:63:07:6c:03:fa:b8:fb:
87:1b:75:97:3e:a4:6b:f8:0a:c3:8a:46:d3:fb:0b:
07:44:35:23:4a:88:67:a9:7a:c6:e9:1b:e5:0e:24:
a8:e7:5f:eb:b7:2a:e8:8f:e6:ba:bf:63:5c:01:c5:
a1:bc:15:11:b6:ed:bd:a2:54:60:25:22:84:54:9e:
78:e6:6a:7b:56:4b:81:ee:37:3a:47:f1:2c:e1:ff:
fb:2f:98:7d:11:9f:09:f0:4c:59:a8:45:a1:ac:2a:
bf:0d:19:e2:3b:7b:0a:d7:b7:e2:a3:fe:33:a7:93:
9d:c1:fa:3f:05:8b:24:ee:5a:13:f7:a7:2d:c8:ef:
6e:17:c9:09:63:3d:2a:71:b3:83:35:1e:43:f6:8f:
55:27:af:f0:c2:96:4d:11:9a:30:b7:df:66:a9:13:
f0:94:3d:fa:94:8b:df:62:22:e1:bb:be:b2:f6:c0:
30:41:0e:78:4f:7f:48:03:59:7a:1d:d2:04:7b:09:
82:ed:2b:12:fa:df:ac:fb:5e:ee:52:32:0a:c4:36:
44:b6:a5:43:24:64:65:34:1b:79:3f:84:f6:bb:f2:
78:bf:05:e5:0d:b8:ab:df:5e:fd:60:24:c1:1d:35:
68:e4:13:51:09:f4:30:08:d8:29:7e:a3:79:71:c2:
26:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:E8:3A:D0:AB:3E:F6:B1:64:A5:FA:DF:AA:06:CF:18:94:70:9A:B6
X509v3 Authority Key Identifier:
keyid:2A:A3:C9:9F:F5:8B:8F:73:3E:F2:C6:2A:77:72:C0:C1:F2:9E:57:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqPJn_WLj3M-8sYqd3LAwfKeV_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:80:3c:09:0a:48:c8:0e:ad:c3:2a:7d:00:78:00:a9:ea:d7:
28:72:fd:ca:3f:05:1e:26:8a:5a:e3:00:9d:47:7d:cf:ed:b9:
b6:27:60:5a:60:b8:de:c6:ff:f2:b5:9e:a7:a8:12:6e:75:0c:
95:04:34:e2:00:54:54:1e:6d:98:63:21:a5:f5:96:63:8b:07:
8a:c3:bd:f1:c3:0c:52:7b:8d:c5:75:c3:fd:3a:b0:34:3b:1b:
71:6f:43:51:10:94:fc:be:52:07:35:f9:c4:ab:39:a0:cc:92:
b9:85:21:bb:3e:e5:82:c6:c8:1b:e4:36:36:4a:66:06:98:ee:
d3:2d:97:ed:d1:5f:b1:d4:b1:c7:c3:11:98:60:3f:3c:80:a1:
5b:87:01:6f:2a:18:45:7d:fd:1c:cc:c8:9c:03:4c:ef:55:43:
41:8e:f2:7d:c7:d7:ef:1d:ce:4a:bc:e6:76:13:dc:9e:45:ed:
b5:e9:d0:01:d7:69:e3:6d:6c:13:f6:04:d7:aa:b7:23:65:bb:
75:89:c9:b8:49:38:6f:a9:2b:1d:cc:36:76:73:27:a2:15:b7:
c6:79:3f:b9:c2:32:77:67:a7:d6:50:db:de:a2:84:56:9b:41:
d2:f1:b3:6a:6d:01:35:5c:0f:43:16:d1:6d:9c:a5:e7:9d:a5:
b5:7f:5a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:18:41 2026 by rpki-client