Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.mft
File: KQbwJrH-Y2yaXaAR3H_WnFgdArg.mft (raw, json)
Hash identifier: uK7hfNQ6ZPPATMV6ySkL1aYYGCFtUKZqGL0jy1qykgM=
Subject key identifier: 5F:D9:7C:10:F7:9A:22:47:45:31:F3:7E:44:E2:D1:1B:7F:E7:3C:89
Authority key identifier: 29:06:F0:26:B1:FE:63:6C:9A:5D:A0:11:DC:7F:D6:9C:58:1D:02:B8
Certificate issuer: /CN=2906f026b1fe636c9a5da011dc7fd69c581d02b8
Certificate serial: 01A0C5C4EAC36A4CD2092EDAD22E38FC6D16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQbwJrH-Y2yaXaAR3H_WnFgdArg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.mft
Manifest number: 1A6B
Signing time: Mon 21 Sep 2026 21:00:11 +0000
Manifest this update: Mon 21 Sep 2026 21:00:11 +0000
Manifest next update: Tue 22 Sep 2026 21:00:11 +0000
Files and hashes: 1: KQbwJrH-Y2yaXaAR3H_WnFgdArg.crl (hash: AZiBJGHl4UZsGxVW07jOZyHJDK0RaJE5swqOkA/pJR8=)
2: Q2sWoej5DPGl5wIw-CeODcRVXlM.roa (hash: wQMcbtBLdOGU6mgU9d/xsDpXItDoVCXCwiC3i9zeKw8=)
3: m25_c1bwCRR27TwA0PikcbJqUsY.roa (hash: lmfRRJbGEXu9SMbs8RoEu8bImS24RY0gDFc2/wiVBQo=)
4: ojqh31F-z_PVmb3H-ysSta1HlSw.roa (hash: pXqwdQA/pZAOmvAosw/Ac3zfBMN1XJgVHOWfLUuvoMs=)
5: wsQWFnZ9QvU6rL4ZStrqghoI4IU.roa (hash: aqTWkdbUh2lUmpGqUaJazitQHO++p5bcYZRKvviqQCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQbwJrH-Y2yaXaAR3H_WnFgdArg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:c4:ea:c3:6a:4c:d2:09:2e:da:d2:2e:38:fc:6d:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2906f026b1fe636c9a5da011dc7fd69c581d02b8
Validity
Not Before: Sep 21 21:00:11 2026 GMT
Not After : Sep 22 21:00:11 2026 GMT
Subject: CN=5fd97c10f79a22474531f37e44e2d11b7fe73c89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bf:f7:b3:69:36:8c:cf:2b:fd:19:f8:b2:25:
fa:64:e9:30:c4:ea:18:bf:70:ce:dc:4c:88:24:4b:
28:b9:96:45:88:e2:b2:5d:9c:e0:9b:5b:23:dc:84:
8e:d7:f9:71:0b:8a:82:d3:6f:f2:6b:56:7c:4c:8a:
b4:bb:8b:c7:c3:94:ef:8f:a8:bd:72:61:ae:b2:c3:
07:5d:9c:e0:33:03:99:2c:d8:d7:94:b3:22:13:72:
37:23:c4:56:b8:be:5a:38:fd:c3:44:f6:69:2a:51:
b5:28:94:e2:ce:d4:02:6c:67:ac:11:e6:8b:66:d7:
77:65:cc:51:03:5b:e0:bc:38:7c:d5:b0:a2:41:ea:
1c:41:d8:29:7c:bc:55:20:4f:1c:8c:85:e3:c7:10:
35:5c:ae:fc:4e:65:de:27:4e:9d:92:cf:a7:ea:40:
04:a1:d3:5f:21:54:a9:56:7c:c9:78:82:fe:15:20:
fe:1f:e3:1d:3d:f8:f8:66:81:9c:ab:26:0a:4d:a1:
dd:ed:7a:e4:29:f9:a8:95:39:6c:b8:7e:f3:c0:a3:
4d:8c:75:30:95:d0:71:2e:23:fe:aa:7e:65:f0:ba:
08:b9:ae:58:7a:ae:f1:f9:37:ae:39:c5:5d:d3:af:
20:09:88:82:7c:b4:58:27:df:93:5d:46:ee:02:23:
0e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:D9:7C:10:F7:9A:22:47:45:31:F3:7E:44:E2:D1:1B:7F:E7:3C:89
X509v3 Authority Key Identifier:
keyid:29:06:F0:26:B1:FE:63:6C:9A:5D:A0:11:DC:7F:D6:9C:58:1D:02:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQbwJrH-Y2yaXaAR3H_WnFgdArg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ea:5d:db:2b:45:23:25:aa:0e:49:f9:a4:91:32:72:ec:bd:f9:
7c:d4:2c:38:bd:34:a6:19:54:d4:d7:6d:63:9e:09:72:4a:cc:
95:3a:06:c1:d7:d0:67:6f:82:fa:3d:e4:a1:e3:ff:3d:0c:ac:
70:ab:06:c5:9f:19:48:83:b5:6d:b5:d5:3c:5c:d7:88:5d:43:
5e:fb:f2:62:9f:59:98:ab:3c:af:ba:0c:b2:d4:e1:c2:72:f8:
4d:b3:d5:78:f3:c8:80:98:3f:84:02:1a:a6:13:a2:e4:13:9c:
94:72:b3:f8:d7:01:86:62:bf:8f:71:9b:e3:30:4a:2c:37:5c:
ab:c0:00:27:e0:c6:d7:1f:b2:71:65:9d:d2:7c:34:5f:d0:b4:
1a:d8:34:e0:30:d4:17:c4:1c:2e:63:5b:a2:98:4f:31:b7:aa:
8d:be:df:da:a5:cb:53:dc:25:8d:9f:fb:5c:3f:5c:7e:44:50:
ec:74:84:7f:9b:82:6d:c0:31:b8:91:a7:28:d1:a7:13:2e:99:
d9:d4:09:3d:b8:6f:3e:c2:87:68:70:48:c2:c3:cb:f1:10:c5:
9f:5e:84:aa:2a:2d:a8:bc:71:2b:be:bf:d8:ba:d6:5a:c4:ae:
a2:17:f0:55:ac:88:7f:f6:54:55:72:48:4c:d2:15:14:ef:40:
d0:b4:6c:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 02:10:59 2026 by rpki-client