Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft
File: KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft (raw, json)
Hash identifier: Sw3Q19JrISqgdMlyBNfvprP5jBW5ro6IBBAvPvO0ovg=
Subject key identifier: 7A:EE:A0:79:64:59:16:65:8F:50:CD:87:75:F2:ED:81:B3:B7:36:AE
Authority key identifier: 2A:A3:C9:9F:F5:8B:8F:73:3E:F2:C6:2A:77:72:C0:C1:F2:9E:57:FC
Certificate issuer: /CN=2aa3c99ff58b8f733ef2c62a7772c0c1f29e57fc
Certificate serial: 019D27044A8E4E6B8456EA4A08118D305BE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqPJn_WLj3M-8sYqd3LAwfKeV_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft
Manifest number: 1192
Signing time: Wed 25 Mar 2026 22:01:25 +0000
Manifest this update: Wed 25 Mar 2026 22:01:25 +0000
Manifest next update: Thu 26 Mar 2026 22:01:25 +0000
Files and hashes: 1: KqPJn_WLj3M-8sYqd3LAwfKeV_w.crl (hash: TKX19Kcf0BWekJW0uFBxQn/uEEHAfJXzEzdmM48JyS0=)
2: TjwUrt0QbOg_7Hv7hnE5gPoovGE.roa (hash: vCYAcdHdzTkyR5n/fzt3EtvDXfAERXz/dZUmibVHkag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqPJn_WLj3M-8sYqd3LAwfKeV_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:4a:8e:4e:6b:84:56:ea:4a:08:11:8d:30:5b:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa3c99ff58b8f733ef2c62a7772c0c1f29e57fc
Validity
Not Before: Mar 25 22:01:25 2026 GMT
Not After : Mar 26 22:01:25 2026 GMT
Subject: CN=7aeea079645916658f50cd8775f2ed81b3b736ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:05:ca:ba:5e:34:b0:65:04:09:54:18:c6:ba:
24:d5:cc:1a:3e:c0:5f:59:e6:da:94:bf:3e:1f:a8:
01:53:bb:eb:e3:0d:77:a2:3d:80:61:56:09:fa:69:
e8:52:8e:e4:32:29:7d:2d:c8:4a:3c:6f:37:d8:44:
86:69:97:46:c2:59:13:fe:84:05:17:e3:b4:3b:3e:
52:19:9a:ae:fc:7a:a4:d7:90:7f:1d:08:6b:f3:40:
f9:7e:0e:5d:85:14:1f:52:f6:e5:06:c0:61:38:dc:
e0:34:c8:f5:9b:11:57:d6:f3:b9:de:e0:a5:01:3f:
1d:fc:8f:8e:5e:9b:dc:8c:07:3e:6d:eb:72:0d:68:
74:84:2f:4f:d3:59:eb:cb:c4:04:eb:5c:32:0e:ca:
47:b1:45:47:86:fc:ad:14:30:96:33:67:39:82:2d:
72:57:b0:ef:63:58:1c:37:8d:6f:61:8a:2a:4d:ae:
c1:52:00:21:78:b0:70:c2:17:ff:b8:cc:a9:3a:fd:
65:84:d2:9c:ee:e3:82:16:9c:8b:46:4b:fc:21:ef:
d4:ae:39:48:b9:4a:d4:3e:c3:ed:01:4f:cd:30:4d:
93:a6:d6:f7:13:9d:96:d3:75:f9:dc:66:06:1e:dd:
72:2a:65:5d:8c:5a:0e:da:f4:39:71:fc:40:2d:98:
70:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:EE:A0:79:64:59:16:65:8F:50:CD:87:75:F2:ED:81:B3:B7:36:AE
X509v3 Authority Key Identifier:
keyid:2A:A3:C9:9F:F5:8B:8F:73:3E:F2:C6:2A:77:72:C0:C1:F2:9E:57:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqPJn_WLj3M-8sYqd3LAwfKeV_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:79:ce:bf:e0:c8:aa:da:61:3f:28:58:2b:65:e7:26:7e:84:
28:6f:a6:61:17:af:9b:5d:a9:1e:d7:42:b2:f3:14:37:44:fb:
2d:8e:4e:da:b7:87:87:7e:6f:a8:4b:ac:09:69:a6:29:22:d1:
50:25:e3:2b:45:f2:38:b4:67:a0:3a:93:c8:31:54:9a:2f:63:
59:0c:bb:3f:09:ce:76:e2:6d:72:04:79:1b:5a:ec:eb:f5:d3:
c9:36:3d:c5:18:6f:d8:fb:b6:95:64:ff:80:2f:53:81:fe:1f:
bd:86:58:81:c9:8b:28:d7:1d:61:c3:6a:c4:49:28:70:06:81:
2c:ad:f0:45:4c:25:a6:d0:de:1e:c9:46:a7:5a:1f:82:ca:8a:
e7:85:89:4e:11:65:3f:07:3b:1b:6d:42:f4:86:ac:32:ce:68:
62:b2:0f:4f:6f:14:b8:4a:9b:ed:25:f4:20:22:44:2b:45:ac:
d8:83:32:77:c9:a0:61:08:2f:e3:76:09:f7:35:b6:20:21:84:
62:2d:7a:e1:bd:5f:a0:89:18:4d:02:4c:8c:d0:6e:26:ef:b0:
80:be:8b:22:73:40:a9:d3:5a:77:8f:03:8b:18:8c:b4:6e:38:
ec:3c:f4:5b:4f:da:a9:07:61:da:9e:d2:93:96:94:fa:03:84:
cc:00:88:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:58:09 2026 by rpki-client