Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.mft
File: KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.mft (raw, json)
Hash identifier: uFAMY/7eglzVDS2bhowRuOrw4eSWIGXbNy9/wBBVC0Y=
Subject key identifier: 46:B5:B8:0D:AB:79:C4:EF:95:E5:5F:FA:08:B0:72:E3:12:A6:57:A1
Authority key identifier: 28:24:34:A9:A0:38:B0:FE:73:CA:F7:76:BC:CD:54:2F:D3:E2:F6:A5
Certificate issuer: /CN=282434a9a038b0fe73caf776bccd542fd3e2f6a5
Certificate serial: 019CAAFD01A64B84D3973366C749DAB94A47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 20:00:33 +0000
Manifest this update: Sun 01 Mar 2026 20:00:33 +0000
Manifest next update: Mon 02 Mar 2026 20:00:33 +0000
Files and hashes: 1: KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.crl (hash: FQCqxfRlfe/799qU1BBV7vA4+Aw/OvdnAnm2jWWyiI0=)
2: mDKfE9L_xC5gURXUxNvBxSesFUw.roa (hash: wMlT9AFioAliO/UwUMrOPGgzXtB6eZatt/SzeGPcD6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:01:a6:4b:84:d3:97:33:66:c7:49:da:b9:4a:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=282434a9a038b0fe73caf776bccd542fd3e2f6a5
Validity
Not Before: Mar 1 20:00:33 2026 GMT
Not After : Mar 2 20:00:33 2026 GMT
Subject: CN=46b5b80dab79c4ef95e55ffa08b072e312a657a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b6:ea:ac:0c:b9:b9:7a:9f:45:46:8f:4d:9a:
b8:41:b8:43:e8:7e:3d:35:eb:5e:7d:78:bd:52:b8:
dd:95:f6:47:fe:ef:fe:cb:10:6c:84:5b:0b:74:45:
d1:e9:03:ef:d3:76:6c:6c:01:f0:1c:3c:d7:f8:69:
d8:cf:01:68:6e:3d:ff:1e:92:96:e9:22:be:7c:68:
f4:3f:ca:32:3c:5e:53:34:20:0b:95:80:c3:99:8c:
25:1b:02:1a:0f:7b:73:e4:64:36:c5:27:c4:84:c4:
99:2d:97:3c:08:5b:80:0c:dc:71:b3:93:59:ff:6b:
c1:4e:61:ad:d8:16:51:de:59:87:d2:32:f9:23:c9:
ed:a9:41:d8:07:ff:32:9e:b2:e8:de:40:7a:0b:3b:
c1:71:b0:1d:3d:41:b2:6d:84:38:4b:56:0e:37:6c:
d7:26:c5:ca:8f:a5:26:91:d2:bc:41:72:55:dc:79:
43:e2:2a:0d:1f:2d:5a:ee:63:f4:11:91:ae:53:4c:
21:a5:c0:eb:b9:7b:55:62:7e:4b:f6:64:75:a1:5b:
7b:f4:f6:17:ce:80:8a:ef:0a:d9:52:7c:74:51:96:
5f:95:79:cd:db:50:4d:8c:8a:97:76:a5:1e:eb:e8:
8d:72:a4:06:1c:bf:d9:81:2b:e1:0a:b7:21:9f:a8:
10:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:B5:B8:0D:AB:79:C4:EF:95:E5:5F:FA:08:B0:72:E3:12:A6:57:A1
X509v3 Authority Key Identifier:
keyid:28:24:34:A9:A0:38:B0:FE:73:CA:F7:76:BC:CD:54:2F:D3:E2:F6:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:65:98:b0:d4:5c:eb:04:d4:c1:1f:66:a8:2f:44:18:67:ad:
cc:fc:7c:55:b9:ce:81:73:2d:95:e4:1a:ba:9b:9e:95:70:6d:
dd:c7:ff:8b:53:07:b8:4c:b7:c6:0e:6b:1e:01:95:ac:a8:65:
97:66:e8:99:47:61:16:00:29:37:89:c0:39:05:16:e1:a5:43:
7a:85:10:c4:ed:a3:e2:16:25:fa:c3:83:f6:63:12:c3:38:97:
25:5a:22:dd:6d:df:10:53:ee:f0:b7:f1:02:34:76:e0:f9:ac:
a5:3d:d1:16:d4:2e:03:de:e9:cf:51:82:4e:53:62:dd:3a:97:
5d:61:bd:1e:a4:e3:87:c2:06:09:fa:94:e7:d1:0e:7a:f2:d3:
c0:b9:9c:33:f0:bc:33:d2:bd:61:9a:43:3f:55:ff:fe:91:fc:
d0:7f:28:f3:4b:bb:9a:01:d3:78:25:9e:0d:03:55:13:a5:11:
2e:9e:7e:c1:e7:3e:b3:86:48:57:c6:bd:79:7a:33:59:dc:1b:
7a:a6:1c:b7:fc:bb:14:ea:d8:d0:eb:aa:c2:02:4f:e0:bd:87:
f3:20:e3:c7:38:2e:4f:91:96:9f:40:fe:d7:92:71:d4:f1:91:
24:7a:6d:41:69:cb:d0:ab:ae:7c:ef:dc:88:20:d6:2b:f0:fb:
17:89:2c:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyq/QGmS4TTlzNmx0nauUpHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4MjQzNGE5YTAzOGIwZmU3M2NhZjc3NmJjY2Q1NDJmZDNl
MmY2YTUwHhcNMjYwMzAxMjAwMDMzWhcNMjYwMzAyMjAwMDMzWjAzMTEwLwYDVQQD
Eyg0NmI1YjgwZGFiNzljNGVmOTVlNTVmZmEwOGIwNzJlMzEyYTY1N2ExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrbqrAy5uXqfRUaPTZq4QbhD6H49
NetefXi9UrjdlfZH/u/+yxBshFsLdEXR6QPv03ZsbAHwHDzX+GnYzwFobj3/HpKW
6SK+fGj0P8oyPF5TNCALlYDDmYwlGwIaD3tz5GQ2xSfEhMSZLZc8CFuADNxxs5NZ
/2vBTmGt2BZR3lmH0jL5I8ntqUHYB/8ynrLo3kB6CzvBcbAdPUGybYQ4S1YON2zX
JsXKj6UmkdK8QXJV3HlD4ioNHy1a7mP0EZGuU0whpcDruXtVYn5L9mR1oVt79PYX
zoCK7wrZUnx0UZZflXnN21BNjIqXdqUe6+iNcqQGHL/ZgSvhCrchn6gQpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEa1uA2recTvleVf+giwcuMSplehMB8GA1UdIwQY
MBaAFCgkNKmgOLD+c8r3drzNVC/T4valMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0NRMHFhQTRzUDV6eXZkMnZNMVVMOVBpOXFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9lN2ZiZTgtZDk4ZS00NWQyLWIxOWMt
MTE2MjdkNzQ2OWFiLzEvS0NRMHFhQTRzUDV6eXZkMnZNMVVMOVBpOXFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9lN2ZiZTgtZDk4ZS00NWQyLWIxOWMtMTE2MjdkNzQ2OWFi
LzEvS0NRMHFhQTRzUDV6eXZkMnZNMVVMOVBpOXFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVmWYsNRc
6wTUwR9mqC9EGGetzPx8VbnOgXMtleQaupuelXBt3cf/i1MHuEy3xg5rHgGVrKhl
l2bomUdhFgApN4nAOQUW4aVDeoUQxO2j4hYl+sOD9mMSwziXJVoi3W3fEFPu8Lfx
AjR24PmspT3RFtQuA97pz1GCTlNi3TqXXWG9HqTjh8IGCfqU59EOevLTwLmcM/C8
M9K9YZpDP1X//pH80H8o80u7mgHTeCWeDQNVE6URLp5+wec+s4ZIV8a9eXozWdwb
eqYct/y7FOrY0OuqwgJP4L2H8yDjxzguT5GWn0D+15Jx1PGRJHptQWnL0KuufO/c
iCDWK/D7F4ks7w==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:51:36 2026 by rpki-client