Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/KqggK00MXBEdN08emLc9tJJNZLE.mft
File: KqggK00MXBEdN08emLc9tJJNZLE.mft (raw, json)
Hash identifier: rumv6/RiPkr4mAB7/3C6KxTD2Taw9qNbczKVg3d7z4I=
Subject key identifier: 9C:D7:51:EC:8E:30:D2:FC:AA:35:E6:57:BC:05:0E:7F:80:BC:DD:2A
Authority key identifier: 2A:A8:20:2B:4D:0C:5C:11:1D:37:4F:1E:98:B7:3D:B4:92:4D:64:B1
Certificate issuer: /CN=2aa8202b4d0c5c111d374f1e98b73db4924d64b1
Certificate serial: 019D2703B431622F97539F71583B12DCFB6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqggK00MXBEdN08emLc9tJJNZLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/KqggK00MXBEdN08emLc9tJJNZLE.mft
Manifest number: 0EBB
Signing time: Wed 25 Mar 2026 22:00:47 +0000
Manifest this update: Wed 25 Mar 2026 22:00:47 +0000
Manifest next update: Thu 26 Mar 2026 22:00:47 +0000
Files and hashes: 1: KqggK00MXBEdN08emLc9tJJNZLE.crl (hash: ZOD7w20Przl+MxYEqNQdxnDwr7kyRiwsvmBNmtWcji4=)
2: Ws4in-OWRWSEcoBN7waoCEBULUk.roa (hash: Uju7zYqejr4rhXJP4MJKAs7Vc49ym9vbx4ol+jWt7tA=)
3: hQ65-JJPcn9XxnJlMV8R8YaKILg.roa (hash: BnQj/39qzfqqWoNJrrD5UWocu4HxdA3qcueXigYXVac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/KqggK00MXBEdN08emLc9tJJNZLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/KqggK00MXBEdN08emLc9tJJNZLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqggK00MXBEdN08emLc9tJJNZLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:b4:31:62:2f:97:53:9f:71:58:3b:12:dc:fb:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa8202b4d0c5c111d374f1e98b73db4924d64b1
Validity
Not Before: Mar 25 22:00:47 2026 GMT
Not After : Mar 26 22:00:47 2026 GMT
Subject: CN=9cd751ec8e30d2fcaa35e657bc050e7f80bcdd2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:42:8d:64:4c:a7:9a:69:14:8c:f4:73:31:70:
6e:a4:ca:b5:dd:fe:03:fe:5d:e3:e3:38:92:7f:4d:
2e:2b:64:ac:34:5d:ae:a9:93:67:94:33:24:d1:4d:
ee:a0:f4:cf:5b:5b:44:00:3c:56:fd:9b:a1:bd:79:
3b:11:3d:6d:e5:1f:7a:a8:ae:d2:8b:20:a9:cc:d6:
a9:60:28:84:ed:4e:ae:b4:c1:4a:22:48:68:8b:6d:
19:9c:c2:d2:dc:82:62:ac:d6:10:4f:e7:00:1e:65:
a6:f9:c3:91:9f:a7:3c:07:f4:8e:03:a7:6b:81:de:
00:a9:f5:e9:41:b2:91:04:d7:05:bb:bc:f2:f2:f4:
af:01:f1:62:0a:82:77:bf:03:74:06:0d:81:79:76:
83:4c:f4:d6:4e:2d:4d:f5:f1:05:ba:61:b6:33:0c:
c3:ba:a1:53:60:a6:31:b2:4c:44:44:87:71:da:78:
18:4d:0f:3b:b0:7a:fc:d9:b3:1a:79:c9:30:0e:f0:
92:ca:d3:1a:09:be:9d:94:7b:31:fd:9d:72:2d:a5:
4b:4b:60:8b:c4:fa:ee:f5:9f:3f:00:0e:48:44:ff:
df:ab:8f:51:10:71:fe:de:06:31:43:bc:a1:1f:0d:
07:1a:cb:6c:2b:90:e4:24:60:ca:9f:77:91:f5:31:
c9:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:D7:51:EC:8E:30:D2:FC:AA:35:E6:57:BC:05:0E:7F:80:BC:DD:2A
X509v3 Authority Key Identifier:
keyid:2A:A8:20:2B:4D:0C:5C:11:1D:37:4F:1E:98:B7:3D:B4:92:4D:64:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqggK00MXBEdN08emLc9tJJNZLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/KqggK00MXBEdN08emLc9tJJNZLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/KqggK00MXBEdN08emLc9tJJNZLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:4f:bc:d9:1c:f2:92:a5:3d:ae:da:f6:f9:82:43:08:71:8d:
2e:a2:37:15:87:f4:8e:d6:95:b9:ba:7c:34:25:a2:b8:62:f6:
53:b2:1b:d6:d7:2c:19:4f:38:14:e3:f1:58:a4:c8:95:9d:14:
a0:81:ef:f3:0a:57:f0:bf:43:77:5c:69:50:6a:b6:dc:3b:c8:
20:98:7c:df:72:df:11:4a:a2:1e:f3:ca:1a:da:ef:c6:00:83:
96:06:06:2c:ca:f7:8f:2c:d7:a5:ef:ca:a8:44:b2:3c:72:ea:
7a:f7:4d:9a:fd:0d:d6:81:59:63:67:92:8e:13:5c:bf:bd:f9:
fb:3c:92:15:46:f7:3a:4f:8d:f4:47:75:2f:4d:8e:d1:eb:34:
59:81:15:cf:06:1d:93:d2:d0:15:97:65:c7:bd:e8:30:8f:76:
0e:0d:8d:f4:b8:48:91:4e:67:5a:71:56:83:c7:b7:73:75:d8:
ff:06:e0:81:e9:69:d5:bc:5c:7b:23:02:69:b1:0f:87:20:7e:
bf:87:04:d8:60:89:d1:6e:2b:27:16:d5:75:d3:dd:02:12:47:
11:84:64:d0:ad:46:0f:36:a8:31:77:7d:b9:1d:a9:13:32:4f:
2b:f4:99:56:e8:d2:e5:49:ee:b2:aa:c7:11:e0:ee:92:4e:94:
03:93:01:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:35:43 2026 by rpki-client