Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.mft
File: 1-KQVlKkqmuBcZaBPgD1BGk-IQj8.mft (raw, json)
Hash identifier: itE/0BtLS1HIQgFrYeZP0oq/w0RMlXcDzVJLtVESxNw=
Subject key identifier: AF:38:D7:F2:87:BE:B1:0A:61:96:E4:3B:03:E7:A5:CD:79:27:AF:D0
Authority key identifier: F8:A4:15:94:A9:2A:9A:E0:5C:65:A0:4F:80:3D:41:1A:4F:88:42:3F
Certificate issuer: /CN=f8a41594a92a9ae05c65a04f803d411a4f88423f
Certificate serial: 01A13C6E9D4DC25DCFA9B3BBA9B00084E84E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.mft
Manifest number: 16AE
Signing time: Wed 14 Oct 2026 22:00:44 +0000
Manifest this update: Wed 14 Oct 2026 22:00:44 +0000
Manifest next update: Thu 15 Oct 2026 22:00:44 +0000
Files and hashes: 1: 1-KQVlKkqmuBcZaBPgD1BGk-IQj8.crl (hash: L6SCKQYI8v+viFKxpGeju3hU8PXuVdnlJ1Kqs3z4wKE=)
2: 9I37uSLgJ82CVvmcGNoEOygvMrc.roa (hash: GiAAMKbm7ExVR7C4dV6ZH1ILNv0tH+m6b13CkfxQEmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 22:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:6e:9d:4d:c2:5d:cf:a9:b3:bb:a9:b0:00:84:e8:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a41594a92a9ae05c65a04f803d411a4f88423f
Validity
Not Before: Oct 14 22:00:44 2026 GMT
Not After : Oct 15 22:00:44 2026 GMT
Subject: CN=af38d7f287beb10a6196e43b03e7a5cd7927afd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e5:54:21:7b:03:74:92:50:1c:30:ca:14:51:
49:6b:78:d6:f5:85:32:de:07:a3:09:83:5b:3c:3d:
20:d2:78:93:e6:22:7a:eb:5c:91:6f:06:d7:f2:4b:
8d:18:42:7c:09:42:13:a0:19:5b:2c:17:fd:93:a9:
43:a3:f5:10:b7:54:e1:7b:c3:ee:c5:03:f1:d3:d4:
8f:d2:0c:a8:1d:20:35:92:ae:d2:33:90:7e:ab:4f:
cd:1f:2c:75:6b:2b:f0:e1:da:2d:c6:4d:70:21:5a:
d0:6c:8f:09:71:c7:96:48:00:5a:d3:c1:f9:88:01:
8d:35:e7:e3:51:e4:8e:bf:0f:63:08:f0:f4:15:09:
c7:b1:dc:9d:97:12:3b:19:4d:5e:78:77:0f:fc:11:
1e:35:74:1d:82:6c:6c:11:ad:a8:c4:5b:99:28:33:
c6:ba:a3:ff:43:3e:4c:33:d8:95:7e:37:36:27:f2:
07:b8:8a:38:95:08:4b:8a:b5:50:f1:69:d9:be:9a:
90:1e:8a:6e:24:19:d7:dd:73:ff:4f:57:a5:7e:02:
22:7f:1e:b3:15:4a:31:5c:f0:16:9e:57:eb:ad:62:
5c:8e:3e:d5:28:c4:38:35:fb:46:89:b8:fb:22:fe:
89:96:fa:b1:a3:1d:0c:25:9b:76:4d:ca:81:2f:e8:
60:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:38:D7:F2:87:BE:B1:0A:61:96:E4:3B:03:E7:A5:CD:79:27:AF:D0
X509v3 Authority Key Identifier:
keyid:F8:A4:15:94:A9:2A:9A:E0:5C:65:A0:4F:80:3D:41:1A:4F:88:42:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:06:69:7f:1f:14:a1:31:e5:28:2f:d1:97:c8:53:66:68:c6:
c8:48:62:02:b8:f0:99:cf:3d:c4:84:ae:d5:55:07:50:ec:a5:
37:a7:f5:cd:16:64:a9:02:17:0f:63:2b:1a:74:a8:11:a6:a5:
f9:5b:a9:64:c9:a9:1d:5c:4c:85:00:60:22:b0:a1:1d:3d:60:
a1:97:e9:73:24:33:d1:3a:bd:2a:e6:94:df:fe:3b:2a:ad:25:
c0:73:1c:53:fb:de:1f:6e:9c:ef:94:4d:bd:41:0f:57:ef:a0:
6b:d7:8f:10:4c:fd:f9:15:18:f4:aa:ec:72:07:c8:d8:aa:bc:
33:3d:91:02:56:92:b4:22:34:cf:fe:74:71:0d:32:45:3e:fc:
f5:14:fb:15:17:f5:22:b6:b2:42:71:ce:d6:57:dd:75:d9:f0:
b1:bc:d5:b8:ce:ae:3f:df:3c:93:95:4f:a4:15:fb:f1:1d:ce:
07:63:18:47:5f:4c:47:fc:82:61:06:0a:3f:50:db:7b:91:ee:
d2:3e:d1:d9:67:79:92:92:21:fa:fe:28:cd:6a:89:ba:d0:0b:
32:31:55:28:a7:a9:9a:b9:fa:a8:55:24:50:40:0c:e7:87:e1:
81:37:73:ed:f2:54:8e:77:9e:0b:98:04:4b:be:ca:26:4c:87:
e4:17:f1:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 05:37:27 2026 by rpki-client