Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/94d441-d987-4062-89c1-94c5ad17a7a0/1/kGQm9IPDaqzahzIySriK1YAMmi0.mft
File: kGQm9IPDaqzahzIySriK1YAMmi0.mft (raw, json)
Hash identifier: em6WEatt4q911W14zFIAk5g3EKktSCosOIr+603m5tM=
Subject key identifier: 8B:E7:54:2C:EF:CA:99:1D:22:66:0B:84:10:9C:3E:A3:C9:3B:1E:65
Authority key identifier: 90:64:26:F4:83:C3:6A:AC:DA:87:32:32:4A:B8:8A:D5:80:0C:9A:2D
Certificate issuer: /CN=906426f483c36aacda8732324ab88ad5800c9a2d
Certificate serial: 01A1069345A319792C12F2FEE80B4447646B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kGQm9IPDaqzahzIySriK1YAMmi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/94d441-d987-4062-89c1-94c5ad17a7a0/1/kGQm9IPDaqzahzIySriK1YAMmi0.mft
Manifest number: 0FAB
Signing time: Sun 04 Oct 2026 11:01:17 +0000
Manifest this update: Sun 04 Oct 2026 11:01:17 +0000
Manifest next update: Mon 05 Oct 2026 11:01:17 +0000
Files and hashes: 1: kGQm9IPDaqzahzIySriK1YAMmi0.crl (hash: 0WntdX2U9QcM31slTkqYvRuRttnPvF0xk2ftAhcArgo=)
2: pEXsp_wHHGLaZhZhYFoeKyAe4xU.roa (hash: xI/2+qldJxPTklb7r+PHTCSnZEv4TfvhGV7Tifv5aSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/94d441-d987-4062-89c1-94c5ad17a7a0/1/kGQm9IPDaqzahzIySriK1YAMmi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/94d441-d987-4062-89c1-94c5ad17a7a0/1/kGQm9IPDaqzahzIySriK1YAMmi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kGQm9IPDaqzahzIySriK1YAMmi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 11:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:06:93:45:a3:19:79:2c:12:f2:fe:e8:0b:44:47:64:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=906426f483c36aacda8732324ab88ad5800c9a2d
Validity
Not Before: Oct 4 11:01:17 2026 GMT
Not After : Oct 5 11:01:17 2026 GMT
Subject: CN=8be7542cefca991d22660b84109c3ea3c93b1e65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:fd:8d:48:b0:00:19:c2:e8:89:10:d7:0c:5d:
bc:7e:99:ed:d2:6b:27:c7:0a:cb:ad:d9:e3:a2:0e:
79:b6:55:d5:bf:3a:ec:03:08:49:7d:7b:b0:cd:cd:
93:c1:57:39:cf:cf:a2:a9:65:d1:1c:6f:d4:4b:36:
97:58:e1:b6:69:a9:8b:ba:37:0a:32:48:88:44:11:
66:63:88:5c:fc:00:30:3b:4d:e8:20:74:af:cc:86:
91:8c:3c:fa:5a:64:2e:d6:fa:7a:19:d4:56:a2:f6:
6b:3b:60:f9:d0:a6:49:25:21:e9:a9:25:11:23:8c:
c5:6d:75:88:51:f3:8c:b0:b2:da:41:2e:3d:8b:37:
8d:61:89:9f:28:9d:f6:8c:dc:8a:73:d7:1c:0a:e7:
78:1a:ba:85:21:87:c1:ac:0a:11:ce:68:df:13:40:
50:d2:84:3f:3c:e3:3f:6e:1a:e5:f2:c5:b0:9d:e1:
55:e1:38:c1:df:25:0f:01:f8:14:62:9b:ba:1d:f1:
b3:7e:7a:f5:cd:01:fc:74:50:07:8d:32:33:30:94:
d3:b1:d0:9e:86:89:9f:6d:25:f7:a0:30:72:30:d6:
8f:71:be:01:72:a0:ab:71:3e:d2:6d:04:67:9d:e1:
34:61:07:ee:04:37:07:30:60:3f:04:1d:47:23:c8:
c4:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:E7:54:2C:EF:CA:99:1D:22:66:0B:84:10:9C:3E:A3:C9:3B:1E:65
X509v3 Authority Key Identifier:
keyid:90:64:26:F4:83:C3:6A:AC:DA:87:32:32:4A:B8:8A:D5:80:0C:9A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGQm9IPDaqzahzIySriK1YAMmi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/94d441-d987-4062-89c1-94c5ad17a7a0/1/kGQm9IPDaqzahzIySriK1YAMmi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/94d441-d987-4062-89c1-94c5ad17a7a0/1/kGQm9IPDaqzahzIySriK1YAMmi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:b6:13:4a:35:1f:5a:ac:3c:ba:da:d9:83:bf:2e:9b:f3:c2:
6a:e1:f4:11:a4:bc:83:ad:8c:74:42:6e:fa:09:04:3c:be:09:
04:1c:d9:e7:a1:ef:61:fc:80:9a:eb:27:37:8b:94:b8:7d:ed:
19:20:9c:30:7b:5a:4d:9d:a4:f7:16:1c:7c:cf:9e:b4:a5:7d:
d7:64:d6:c8:d5:86:fe:88:d3:30:3d:ad:67:2e:f8:09:f3:dc:
ff:e5:25:35:82:b5:25:9e:00:8b:87:64:e6:3d:09:48:ae:cd:
e7:54:f8:64:70:1b:1b:60:fe:05:da:03:17:ed:ba:5e:85:45:
a3:a7:9c:57:fe:57:3d:3f:43:da:6e:83:6e:2e:23:22:45:c3:
14:89:8f:a1:52:4f:03:d1:d0:24:b6:ae:16:a2:90:4e:48:56:
fb:27:42:e5:61:dd:11:81:d8:36:6a:70:57:ad:6b:bb:d8:84:
2a:d2:cb:c6:26:c8:b8:a8:11:1c:31:96:d2:2a:f0:bd:9f:bc:
4d:24:93:d0:d3:b2:30:ce:d2:ce:28:4c:22:c7:09:aa:66:bc:
df:7a:4e:c3:55:c3:2b:5c:bf:12:97:e4:5c:53:18:ff:9b:d0:
6a:69:30:84:54:0b:9b:41:b3:10:f9:e1:64:01:4d:a7:75:b1:
00:31:e5:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 22:27:28 2026 by rpki-client