Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.mft
File: kq8Dyi32Qjt30O83N7D0eRqgNaM.mft (raw, json)
Hash identifier: YxlHXyp7WDI3ouFDae35D2TsUtn0WofjFvQs4j+Peg4=
Subject key identifier: 97:56:92:61:C8:41:30:74:FB:73:6E:A3:40:09:EF:07:96:E9:9D:1C
Authority key identifier: 92:AF:03:CA:2D:F6:42:3B:77:D0:EF:37:37:B0:F4:79:1A:A0:35:A3
Certificate issuer: /CN=92af03ca2df6423b77d0ef3737b0f4791aa035a3
Certificate serial: 01A13FDDE83A4624B3762DDA43BCBB9FA02D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kq8Dyi32Qjt30O83N7D0eRqgNaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.mft
Manifest number: 0F36
Signing time: Thu 15 Oct 2026 14:01:09 +0000
Manifest this update: Thu 15 Oct 2026 14:01:09 +0000
Manifest next update: Fri 16 Oct 2026 14:01:09 +0000
Files and hashes: 1: 8VSXxcCzy1RczpkkhVuNiNqCitk.roa (hash: nHCP0IVV9N4g1kQbqZXT/navSl3Gd+BXXPdTIW2ZhBA=)
2: kq8Dyi32Qjt30O83N7D0eRqgNaM.crl (hash: XafUF1CcS23MzUXsBe0UfvLLxSsOqU8Ze6IG4uQot+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kq8Dyi32Qjt30O83N7D0eRqgNaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:dd:e8:3a:46:24:b3:76:2d:da:43:bc:bb:9f:a0:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92af03ca2df6423b77d0ef3737b0f4791aa035a3
Validity
Not Before: Oct 15 14:01:09 2026 GMT
Not After : Oct 16 14:01:09 2026 GMT
Subject: CN=97569261c8413074fb736ea34009ef0796e99d1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3d:97:3f:e4:b0:9e:46:6a:c8:2a:5f:d8:83:
32:d2:14:2d:e4:f4:21:31:ab:c6:e2:68:a8:f7:05:
8b:7f:e0:f7:3d:9d:ff:37:8a:03:ef:eb:60:07:81:
dc:68:fb:63:1c:c1:03:50:bf:95:07:66:64:9d:24:
cc:f6:a2:3d:68:43:5d:a7:d9:53:d5:40:b2:d7:5e:
3f:0f:ee:51:85:e9:1a:b7:18:ca:f5:e4:d5:02:d2:
5f:2b:af:8a:77:92:8b:c5:bb:34:1b:3b:f3:ac:43:
d0:01:a0:ea:99:4c:85:eb:5e:de:47:8a:e9:8b:03:
77:16:bd:10:b7:f5:7e:9c:99:9c:a2:1b:ac:d4:2d:
87:66:97:9d:d0:28:eb:c3:a3:2c:c6:08:1f:99:8d:
01:85:2c:6c:99:2f:5a:69:94:dc:7a:86:9a:20:32:
96:28:a9:f8:14:67:e9:4e:5c:a6:a8:e8:63:fa:bd:
14:1a:43:f5:ff:1f:d0:06:01:b3:71:68:8a:88:bb:
61:f1:2b:3b:97:61:dc:5e:39:ef:62:a9:77:9e:19:
3e:a6:ba:6e:ed:c0:be:60:77:18:7e:9a:09:4c:43:
cc:84:cb:69:b0:5e:88:8e:98:4c:8a:69:ab:8a:1d:
40:91:75:d8:da:a5:e5:11:55:22:27:cf:03:40:9e:
fc:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:56:92:61:C8:41:30:74:FB:73:6E:A3:40:09:EF:07:96:E9:9D:1C
X509v3 Authority Key Identifier:
keyid:92:AF:03:CA:2D:F6:42:3B:77:D0:EF:37:37:B0:F4:79:1A:A0:35:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kq8Dyi32Qjt30O83N7D0eRqgNaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:16:5d:47:b9:ca:a9:ff:24:59:9a:83:f8:62:9d:56:38:f2:
0e:96:ac:c3:f8:4e:79:a9:2f:2c:ee:c0:e8:c7:e6:19:aa:79:
86:65:cb:d4:01:3c:1d:af:d9:4d:7d:04:81:68:f2:90:05:46:
ed:7d:ac:26:83:13:c4:24:fd:e5:28:fc:14:93:26:68:93:73:
bd:01:b6:9e:49:58:06:f2:ca:2d:3b:53:c4:ea:a1:b6:ff:38:
bd:c4:59:b5:7f:4e:45:6d:90:a0:9d:53:70:61:7c:e3:6b:61:
99:84:37:67:37:79:d7:14:22:0a:ec:45:4e:ce:2d:a0:b7:4d:
c9:62:b6:12:de:3b:33:b2:a6:7f:15:ed:7c:e8:a7:f9:93:df:
17:2d:a6:21:7c:8e:4e:bf:ea:bf:32:55:12:33:98:48:ec:90:
95:46:65:2c:6d:7c:e5:5b:5c:40:08:49:ea:84:e1:45:6b:59:
89:52:6d:9f:cf:4f:92:19:78:30:df:d7:17:9f:39:f1:68:36:
2e:15:f8:65:a8:20:e9:7b:9d:b8:ea:58:8a:1f:4f:e9:57:06:
74:46:96:4d:a2:f6:91:21:e5:d6:18:be:c7:a0:12:88:1a:74:
81:cf:08:11:aa:5b:8d:d4:d5:3c:cc:d1:e2:e6:eb:c1:5f:a5:
ab:8f:ae:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 16:29:06 2026 by rpki-client