Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.mft
File: KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.mft (raw, json)
Hash identifier: 6hwdUBOIvn+LUE61SN0qU8LN+mqq7LHHpfcTvU8uX+0=
Subject key identifier: 86:9B:53:C4:3F:17:7C:D6:14:44:3B:5D:75:A7:BF:FF:09:C6:F5:98
Authority key identifier: 28:24:34:A9:A0:38:B0:FE:73:CA:F7:76:BC:CD:54:2F:D3:E2:F6:A5
Certificate issuer: /CN=282434a9a038b0fe73caf776bccd542fd3e2f6a5
Certificate serial: 01A0F9B3A677ECE364B0146DCAB64625BCAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.mft
Manifest number: 1A82
Signing time: Thu 01 Oct 2026 23:01:35 +0000
Manifest this update: Thu 01 Oct 2026 23:01:35 +0000
Manifest next update: Fri 02 Oct 2026 23:01:35 +0000
Files and hashes: 1: KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.crl (hash: 3K+CHPCIotyrEF02pTgTcMRHLxSaJrpF2LWmqfQZwk4=)
2: mDKfE9L_xC5gURXUxNvBxSesFUw.roa (hash: wMlT9AFioAliO/UwUMrOPGgzXtB6eZatt/SzeGPcD6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f9:b3:a6:77:ec:e3:64:b0:14:6d:ca:b6:46:25:bc:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=282434a9a038b0fe73caf776bccd542fd3e2f6a5
Validity
Not Before: Oct 1 23:01:35 2026 GMT
Not After : Oct 2 23:01:35 2026 GMT
Subject: CN=869b53c43f177cd614443b5d75a7bfff09c6f598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:75:4e:98:11:15:00:04:5f:32:dd:81:49:47:
04:a6:5c:bd:23:cf:8d:64:99:7e:55:c7:40:d3:45:
f3:79:75:ae:55:e3:02:7a:af:0b:b2:d2:f4:40:ff:
a4:c8:ee:c7:75:a1:35:d3:a2:2b:a6:0d:4a:a4:5d:
86:bd:b1:a4:27:e6:1a:ea:84:b3:24:0a:67:e3:08:
bf:d1:c3:cd:1d:df:88:91:f2:3c:68:dd:53:a8:89:
65:f3:42:24:80:1f:40:b0:47:1e:12:1b:34:0d:88:
1c:c1:fc:c2:aa:e4:95:d9:b3:b5:fa:c3:5d:b5:19:
cb:c2:95:1e:48:89:62:dc:29:1a:fc:1a:8c:22:a0:
27:23:3b:8e:97:ae:ef:10:a1:0c:fa:a2:68:5d:1b:
35:bc:cf:71:ca:dc:fd:49:d7:74:5c:68:21:83:fb:
7b:3f:fe:4f:b1:52:ce:da:a8:c6:9c:dc:f7:39:ba:
ac:6f:23:1c:0f:10:12:ac:92:0b:f3:c4:2a:2f:0f:
3f:10:45:f8:9a:4e:5d:d8:df:91:d3:f9:5d:5e:3f:
ad:d7:95:93:c0:f7:c0:59:49:c2:d3:1e:42:8a:3f:
48:f5:62:40:70:12:d1:44:f8:d3:5c:38:60:07:47:
36:73:18:82:bd:ff:7e:ad:d5:bb:be:20:11:e8:7a:
6b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:9B:53:C4:3F:17:7C:D6:14:44:3B:5D:75:A7:BF:FF:09:C6:F5:98
X509v3 Authority Key Identifier:
keyid:28:24:34:A9:A0:38:B0:FE:73:CA:F7:76:BC:CD:54:2F:D3:E2:F6:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:aa:4a:4a:32:87:58:7c:a8:a9:f0:79:90:d8:b7:73:da:65:
fd:6a:a8:2b:b4:5e:cb:26:b5:87:b1:23:8d:24:f7:f2:33:ba:
53:d5:78:fc:59:e0:68:0e:3e:5f:23:fb:ca:39:b1:4f:05:e9:
25:6e:61:38:97:46:ea:1a:88:48:1e:99:74:d3:15:39:b0:24:
33:14:5c:12:b8:4e:da:d9:7e:68:6f:95:45:a4:8c:7e:0d:cd:
95:0c:ef:7a:cb:ed:aa:b0:0f:6f:09:7b:01:1f:fc:65:00:33:
6d:51:9b:4c:77:82:06:7b:de:aa:6f:17:fd:0c:33:b4:23:3c:
60:97:e4:3f:e1:35:5d:f5:b3:0c:40:89:c4:4a:d7:4d:f3:29:
42:a7:88:ae:19:2a:b4:6f:78:78:22:9c:d6:22:96:67:e4:76:
b1:29:aa:3c:ea:67:5b:8f:09:17:93:a7:0c:83:0a:5e:70:d0:
c2:74:da:ae:ce:7c:4a:55:7d:df:1d:26:ce:82:bc:c2:21:c9:
24:e5:c8:54:8c:fb:c7:df:f2:57:af:30:e7:f7:ec:b2:be:f4:
71:20:e3:a5:f0:b2:03:63:86:f9:f6:b4:9d:58:04:4b:1d:6b:
d6:8f:07:c5:a9:2b:10:dd:38:23:8c:7e:4e:fc:e1:b9:65:5e:
fc:64:73:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 10:42:26 2026 by rpki-client