Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.mft
File: KQLJnKcyxkoZx9lzSpj7JOVFVUk.mft (raw, json)
Hash identifier: SLXWRfFj+if8K5Wxk2kJvODyOk0dClxNMM2Ddw+Qvj0=
Subject key identifier: 2C:DE:35:AE:AC:30:FA:84:37:6C:1B:05:0B:ED:45:35:2D:5D:28:3A
Authority key identifier: 29:02:C9:9C:A7:32:C6:4A:19:C7:D9:73:4A:98:FB:24:E5:45:55:49
Certificate issuer: /CN=2902c99ca732c64a19c7d9734a98fb24e5455549
Certificate serial: 01A1046DF17375F8788EAC6B9E5EE77E1600
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQLJnKcyxkoZx9lzSpj7JOVFVUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.mft
Manifest number: 13F3
Signing time: Sun 04 Oct 2026 01:01:16 +0000
Manifest this update: Sun 04 Oct 2026 01:01:16 +0000
Manifest next update: Mon 05 Oct 2026 01:01:16 +0000
Files and hashes: 1: KQLJnKcyxkoZx9lzSpj7JOVFVUk.crl (hash: +WCqspgTSgXtfaWa73cuSMTcloT5VRGoSLcVOcewh30=)
2: KT302nZV2Y2p4WDMTwVmIhKydvc.roa (hash: RA/+n+j+c+JYu9hIIUbQQ1FyM1sNRqfioO7K+YA4lYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQLJnKcyxkoZx9lzSpj7JOVFVUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 00:44:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:04:6d:f1:73:75:f8:78:8e:ac:6b:9e:5e:e7:7e:16:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2902c99ca732c64a19c7d9734a98fb24e5455549
Validity
Not Before: Oct 4 01:01:16 2026 GMT
Not After : Oct 5 01:01:16 2026 GMT
Subject: CN=2cde35aeac30fa84376c1b050bed45352d5d283a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4e:ed:d9:82:a6:65:08:69:71:97:ce:0d:41:
c9:89:56:36:9f:28:fc:4a:b8:62:0d:ba:3c:2f:c7:
65:6e:dc:bc:be:32:bb:91:f3:c8:73:dc:98:7d:3b:
c5:60:fa:24:36:b7:69:4e:66:f1:c1:b3:7b:c9:53:
63:fa:75:a4:ac:ea:65:38:d2:88:c4:74:75:17:db:
da:34:6d:22:c3:dd:ad:ac:c7:52:a1:56:d5:55:17:
7a:8e:60:5f:b7:0f:e1:46:b6:6d:05:31:31:ab:53:
2f:f1:1e:e9:de:8e:e0:a2:b5:6e:05:31:21:fb:6e:
63:8e:38:07:ca:05:c7:b8:0a:58:29:06:5f:c4:35:
2d:4d:fe:9f:8f:05:35:2b:a8:95:2a:9a:f8:3f:e7:
b3:91:41:5d:cb:a8:fb:4e:02:ca:90:78:82:75:d0:
00:91:9c:c7:6e:94:c2:ba:50:d8:4d:7d:c3:13:63:
ae:46:dc:53:43:71:25:78:88:cb:87:75:85:30:13:
33:93:e6:ac:3e:f1:9a:20:f2:4c:56:59:ca:06:01:
d4:48:5f:20:3b:86:b6:e5:9d:ef:38:1f:66:c4:62:
20:fe:00:ac:f0:5e:b1:44:30:18:1e:cb:21:bf:80:
0b:17:c6:61:74:7f:48:2c:18:9b:af:b0:5c:d4:d4:
d7:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:DE:35:AE:AC:30:FA:84:37:6C:1B:05:0B:ED:45:35:2D:5D:28:3A
X509v3 Authority Key Identifier:
keyid:29:02:C9:9C:A7:32:C6:4A:19:C7:D9:73:4A:98:FB:24:E5:45:55:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQLJnKcyxkoZx9lzSpj7JOVFVUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:93:5c:82:2a:ff:3e:62:3e:cf:b2:f3:cf:c1:9a:19:25:f9:
cf:f1:9b:30:72:60:d9:09:ef:06:a2:3c:a5:5f:bc:fa:dc:11:
6c:3e:9c:67:57:15:0e:6c:4f:3c:3b:0e:f9:bb:26:84:65:52:
08:05:3b:0e:f5:32:1b:8d:81:a8:96:1d:59:a2:91:b8:61:58:
e6:92:a1:4e:28:c9:ad:db:8e:25:6d:da:d8:df:9e:56:6b:4c:
ae:2b:82:87:8b:4a:e2:66:84:f3:55:d4:38:d4:a4:33:93:18:
06:cf:cf:18:09:3b:d7:f9:77:36:b1:38:05:bf:1d:d4:0f:19:
48:69:7e:ac:16:ba:fd:9d:39:39:4d:d5:29:bc:f7:b6:79:2d:
0a:1d:60:ba:9c:19:37:0a:65:bd:c1:9b:92:a8:68:46:fe:00:
b9:b2:a2:be:c4:7e:34:0f:20:d6:47:95:21:4f:aa:74:d2:55:
10:2d:93:ab:b7:19:fe:9b:52:20:0c:fd:aa:53:c2:3c:ac:de:
e7:6a:4b:f5:77:a6:fa:f2:93:05:fd:a6:da:5d:a4:58:e7:ce:
52:bb:a1:c6:ee:4b:7f:b8:9f:59:f9:41:2e:d3:70:bb:ae:b8:
f0:d1:dd:4c:21:e5:73:94:97:e8:03:c5:b7:52:c4:a4:d2:7d:
c3:d5:22:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 10:16:22 2026 by rpki-client