Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/b19811-fa23-47b0-b577-17698f88c3bd/1/KqFL_4NIDRDND767gLLLUJH8-C8.mft
File: KqFL_4NIDRDND767gLLLUJH8-C8.mft (raw, json)
Hash identifier: hls6jAyfCrnHVfzu6n3KirJROAPDfetghblY98csTfg=
Subject key identifier: 39:80:61:11:CA:F7:03:9A:86:DD:F5:32:A9:1A:AF:1D:1C:BE:1F:1D
Authority key identifier: 2A:A1:4B:FF:83:48:0D:10:CD:0F:BE:BB:80:B2:CB:50:91:FC:F8:2F
Certificate issuer: /CN=2aa14bff83480d10cd0fbebb80b2cb5091fcf82f
Certificate serial: 019CACEBC450F19D2C56B861E6915BA84391
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqFL_4NIDRDND767gLLLUJH8-C8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/b19811-fa23-47b0-b577-17698f88c3bd/1/KqFL_4NIDRDND767gLLLUJH8-C8.mft
Manifest number: 1846
Signing time: Mon 02 Mar 2026 05:00:58 +0000
Manifest this update: Mon 02 Mar 2026 05:00:58 +0000
Manifest next update: Tue 03 Mar 2026 05:00:58 +0000
Files and hashes: 1: H4vZZgy8L-83loBlfJ2Z1eRuVjI.roa (hash: n3TtZKW8jTF8quOeFDtPkhw+ZhgsE56xwHQyTvZ/ifg=)
2: KqFL_4NIDRDND767gLLLUJH8-C8.crl (hash: +W2uPYDhfJNiyWebnSePXc8MwA5MIX2WUPwLUiBG/hw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/b19811-fa23-47b0-b577-17698f88c3bd/1/KqFL_4NIDRDND767gLLLUJH8-C8.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/b19811-fa23-47b0-b577-17698f88c3bd/1/KqFL_4NIDRDND767gLLLUJH8-C8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqFL_4NIDRDND767gLLLUJH8-C8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:c4:50:f1:9d:2c:56:b8:61:e6:91:5b:a8:43:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa14bff83480d10cd0fbebb80b2cb5091fcf82f
Validity
Not Before: Mar 2 05:00:58 2026 GMT
Not After : Mar 3 05:00:58 2026 GMT
Subject: CN=39806111caf7039a86ddf532a91aaf1d1cbe1f1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:ae:59:d8:cd:4c:52:6a:de:d9:5e:4f:c7:de:
5d:f8:1f:0b:c3:c1:13:78:b1:dc:89:a5:02:e1:f6:
98:93:8a:ff:71:42:c5:bb:8c:70:0d:88:6d:bb:1b:
3b:46:54:d9:c1:b5:74:4d:af:42:b1:10:1c:6c:a5:
58:00:84:fb:ba:06:ff:2a:12:58:58:14:8a:ac:bb:
7b:54:be:e8:06:4a:24:3b:cb:0e:e2:b7:a7:2d:af:
64:7e:0a:a8:65:ae:65:2f:1f:0d:49:cc:87:0e:c7:
b0:13:e8:1b:bd:51:5b:6e:db:c6:ff:7f:20:68:cc:
bd:0c:d2:87:55:9f:ad:7a:15:18:4f:11:be:7b:33:
04:c0:ac:1c:79:40:ef:bc:a6:c3:0d:af:34:37:00:
66:df:1a:ce:f6:b6:f2:ba:8d:79:d8:84:39:4d:b2:
a8:1e:ce:3e:86:cb:64:dc:c9:f1:0c:3c:10:1f:07:
c3:f3:29:63:80:f2:30:3c:c0:47:bf:58:a1:9b:7b:
1e:98:f9:53:14:c1:b0:d2:a1:73:42:9d:26:cd:13:
2a:55:f9:20:5a:25:ae:c3:76:45:9e:0f:98:31:1c:
99:64:fe:4c:2b:0c:14:2d:f3:62:54:28:7c:11:73:
bf:d9:e8:47:05:37:53:d7:0e:27:17:4e:b6:db:ff:
d6:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:80:61:11:CA:F7:03:9A:86:DD:F5:32:A9:1A:AF:1D:1C:BE:1F:1D
X509v3 Authority Key Identifier:
keyid:2A:A1:4B:FF:83:48:0D:10:CD:0F:BE:BB:80:B2:CB:50:91:FC:F8:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqFL_4NIDRDND767gLLLUJH8-C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b19811-fa23-47b0-b577-17698f88c3bd/1/KqFL_4NIDRDND767gLLLUJH8-C8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b19811-fa23-47b0-b577-17698f88c3bd/1/KqFL_4NIDRDND767gLLLUJH8-C8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:20:cc:46:10:37:1a:5b:e3:5a:d7:ba:10:14:87:4b:45:be:
5f:07:3b:6f:db:c4:b8:54:ec:ac:00:2a:a3:6a:f2:29:75:52:
d6:ec:5b:04:04:5b:a0:e7:66:6d:7e:f6:8f:b5:f6:1c:35:e3:
1c:87:c7:15:4c:05:cc:b3:03:fc:19:a3:bc:3b:25:fe:d5:e4:
05:5b:88:2d:56:ab:ab:fa:df:2f:82:c8:ee:46:64:85:43:21:
36:80:9f:cc:15:37:d7:4a:46:65:9c:32:cf:53:6e:30:a9:ec:
30:e5:2f:a0:da:2e:d2:0f:4d:50:9e:a2:07:a1:a0:1e:a2:4c:
df:5f:88:d5:5b:c0:80:1b:9e:ff:e3:93:27:76:56:ef:e6:e5:
8e:e4:51:d5:bb:9d:7a:6e:72:b5:d6:92:2e:88:d3:20:2a:e5:
76:55:54:4e:97:c5:44:df:b8:f0:8c:a8:b2:ba:5e:3f:c5:d4:
be:2f:8b:d9:42:28:67:3a:2d:1c:71:ca:84:67:3a:41:cf:42:
43:4e:e4:b1:58:6c:b3:5d:a2:b0:bc:61:4a:64:f0:42:4e:3e:
39:2c:42:1b:8e:6c:04:b6:e3:39:77:e2:52:6c:db:75:41:cb:
7a:2a:24:8d:06:dd:ef:ae:ca:ec:29:bd:9c:6b:3f:04:0e:b7:
85:fa:58:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:14:14 2026 by rpki-client