Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.mft
File: 1-KQVlKkqmuBcZaBPgD1BGk-IQj8.mft (raw, json)
Hash identifier: DUZWMws+ozujpQGmRBL42kh3Z8+goE/fHsPOPP7irRU=
Subject key identifier: 31:C9:32:CD:B4:4C:38:14:FE:46:34:FA:D8:B1:0D:AA:1C:09:E1:BC
Authority key identifier: F8:A4:15:94:A9:2A:9A:E0:5C:65:A0:4F:80:3D:41:1A:4F:88:42:3F
Certificate issuer: /CN=f8a41594a92a9ae05c65a04f803d411a4f88423f
Certificate serial: 019CADFE8BEC09289427147C945AF2CEDE72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.mft
Manifest number: 1452
Signing time: Mon 02 Mar 2026 10:01:06 +0000
Manifest this update: Mon 02 Mar 2026 10:01:06 +0000
Manifest next update: Tue 03 Mar 2026 10:01:06 +0000
Files and hashes: 1: 1-KQVlKkqmuBcZaBPgD1BGk-IQj8.crl (hash: x2AcP9VopQmXKGn560xdezsK98kWSzJfwUKhAMd5a50=)
2: 9I37uSLgJ82CVvmcGNoEOygvMrc.roa (hash: GiAAMKbm7ExVR7C4dV6ZH1ILNv0tH+m6b13CkfxQEmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:8b:ec:09:28:94:27:14:7c:94:5a:f2:ce:de:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a41594a92a9ae05c65a04f803d411a4f88423f
Validity
Not Before: Mar 2 10:01:06 2026 GMT
Not After : Mar 3 10:01:06 2026 GMT
Subject: CN=31c932cdb44c3814fe4634fad8b10daa1c09e1bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:51:54:fd:07:71:aa:eb:ea:08:ae:da:4c:dd:
eb:2f:19:53:d4:e8:d7:8b:0d:93:78:e4:82:37:e4:
c5:a6:5a:fc:77:fc:0d:4f:38:bd:f3:99:82:46:f8:
66:e6:d4:b3:bd:83:35:6b:60:f0:c9:23:d9:42:bf:
35:a1:f0:82:0f:48:d5:06:3c:3c:b6:89:58:be:a4:
e0:ad:1d:98:a6:c2:14:4f:1a:98:13:c6:6f:0c:82:
74:23:77:5d:4d:2f:8f:81:1a:25:f5:38:73:f0:bf:
e0:c4:7f:f3:47:99:57:2d:bd:c0:d1:97:eb:42:01:
f4:53:f4:d9:b8:3b:db:44:a8:95:88:d7:f2:d3:bf:
e5:69:ea:de:39:74:e5:8f:49:79:d6:c8:41:f3:19:
e1:98:00:ee:87:c7:22:f5:bf:67:cc:9b:31:f9:9c:
82:5e:6b:2a:ef:ce:4c:b1:4d:8d:db:fb:23:1e:c9:
e0:8e:ee:4e:d8:5a:fb:cd:75:ae:ec:76:db:bd:a6:
a8:aa:61:9b:d9:6e:17:8a:32:f0:df:13:25:d5:94:
04:a7:e2:de:d9:f4:23:20:bf:10:07:45:e5:57:96:
2b:7b:ff:c1:4e:22:c6:69:38:c6:ca:1a:db:6d:ad:
09:c1:db:79:9c:45:b2:77:0b:6a:79:82:f5:40:b8:
df:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:C9:32:CD:B4:4C:38:14:FE:46:34:FA:D8:B1:0D:AA:1C:09:E1:BC
X509v3 Authority Key Identifier:
keyid:F8:A4:15:94:A9:2A:9A:E0:5C:65:A0:4F:80:3D:41:1A:4F:88:42:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:1f:cb:29:bd:c2:4e:68:5d:77:73:bc:dc:af:ba:ea:27:fb:
ac:df:fe:a0:5c:58:d9:7f:cb:c1:ee:e2:bb:8b:c7:78:d6:93:
d1:93:f3:cc:8d:ad:f1:25:14:25:cf:4d:27:92:59:14:65:98:
d1:33:14:bb:47:3b:db:43:29:01:cb:f2:c4:59:38:85:bf:8b:
fd:c3:ac:a3:88:5c:67:58:6f:55:2d:b3:06:ca:3f:36:e9:41:
ba:f1:3d:25:0a:59:06:60:25:30:2b:1d:43:44:50:58:09:89:
a5:b9:bb:cc:a3:22:bb:15:e6:32:84:ef:16:ce:6c:ae:9a:82:
44:03:4e:6a:1c:a9:7f:94:98:9b:8e:fc:39:8d:85:cd:37:01:
e4:f5:d1:94:1b:4a:b4:6d:74:d0:30:78:07:87:c8:43:25:a4:
f3:21:f0:e0:9b:dc:b1:74:6a:af:38:f9:2d:43:c7:c1:a7:5c:
38:96:f2:df:ba:15:f5:74:d3:39:35:6e:4d:6a:57:a8:20:77:
ac:f5:3c:05:08:31:f2:d5:99:ba:96:8a:44:14:77:7e:bc:9a:
b8:41:da:8c:71:cb:2a:6f:e6:cf:88:d2:07:93:78:31:ab:33:
ae:44:d6:7a:cf:0d:6a:b4:85:6c:87:90:5b:0d:e3:99:f2:6b:
ea:87:9a:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:37:53 2026 by rpki-client