Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/a6574d-fb6d-47db-ba0c-f16f1ee4f891/1/KqeI7abIDvkCuV1gOHAKXafW0Mw.mft
File: KqeI7abIDvkCuV1gOHAKXafW0Mw.mft (raw, json)
Hash identifier: isxb/JSaDEm647hBcYES+0Z/M/AuZwJiTwcn9bTJFYA=
Subject key identifier: 9C:88:42:58:61:37:E1:92:16:FC:05:DB:20:11:F4:92:6E:7A:D3:0C
Authority key identifier: 2A:A7:88:ED:A6:C8:0E:F9:02:B9:5D:60:38:70:0A:5D:A7:D6:D0:CC
Certificate issuer: /CN=2aa788eda6c80ef902b95d6038700a5da7d6d0cc
Certificate serial: 019CAD90AD837FBE4884FD7F720E285A297F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqeI7abIDvkCuV1gOHAKXafW0Mw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/a6574d-fb6d-47db-ba0c-f16f1ee4f891/1/KqeI7abIDvkCuV1gOHAKXafW0Mw.mft
Manifest number: 055E
Signing time: Mon 02 Mar 2026 08:01:05 +0000
Manifest this update: Mon 02 Mar 2026 08:01:05 +0000
Manifest next update: Tue 03 Mar 2026 08:01:05 +0000
Files and hashes: 1: KqeI7abIDvkCuV1gOHAKXafW0Mw.crl (hash: 3F7/t32S87e+PpwaB3f0oJ14WmajUnBjgRUP4f/P9fA=)
2: gn61ce9ALlX0-z3Eczgbb3WMtWI.roa (hash: RHps1AzWEmNAJdqDkFEU6I0uU1ebWVTlEieytsZ34D4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/a6574d-fb6d-47db-ba0c-f16f1ee4f891/1/KqeI7abIDvkCuV1gOHAKXafW0Mw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/a6574d-fb6d-47db-ba0c-f16f1ee4f891/1/KqeI7abIDvkCuV1gOHAKXafW0Mw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqeI7abIDvkCuV1gOHAKXafW0Mw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:ad:83:7f:be:48:84:fd:7f:72:0e:28:5a:29:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa788eda6c80ef902b95d6038700a5da7d6d0cc
Validity
Not Before: Mar 2 08:01:05 2026 GMT
Not After : Mar 3 08:01:05 2026 GMT
Subject: CN=9c8842586137e19216fc05db2011f4926e7ad30c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:46:bc:2a:db:85:2e:7e:07:02:a7:65:3e:1f:
2e:cd:b1:15:8c:d6:d8:68:42:57:d5:87:19:65:15:
e1:51:08:42:66:d5:41:25:22:57:99:af:92:da:be:
77:20:82:2b:ee:d2:83:50:bf:ad:9c:85:b8:bd:c2:
07:71:9d:b9:b1:12:54:69:af:78:ac:08:45:92:94:
2f:90:bb:74:22:47:15:f0:1d:f9:16:36:d4:29:34:
6f:8b:c3:69:97:2c:b7:2d:23:cd:54:e8:22:e6:a8:
43:8c:89:70:26:d9:c4:17:f0:5d:f2:9a:d5:a2:e2:
85:6a:45:53:65:16:18:cf:f5:99:48:25:6e:76:b3:
f9:db:e0:d5:e2:09:a8:6e:dd:0a:60:35:be:0f:24:
42:89:ef:65:86:13:41:26:a4:ce:5f:10:31:77:7c:
f8:58:47:c2:f6:59:a3:44:9a:c7:4a:53:d6:de:a5:
86:ed:e8:33:b2:41:3f:f2:3e:26:37:2b:2d:cd:b2:
15:98:f1:02:bd:52:5d:77:72:b4:99:a1:df:be:dd:
5f:09:e1:d1:7e:9d:47:3d:39:ea:44:8a:cf:0a:0c:
e2:a2:93:16:12:fd:b9:fd:1b:69:71:1a:a7:df:32:
20:e2:28:5c:25:37:2a:bf:c4:2c:44:5c:a9:5c:81:
e1:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:88:42:58:61:37:E1:92:16:FC:05:DB:20:11:F4:92:6E:7A:D3:0C
X509v3 Authority Key Identifier:
keyid:2A:A7:88:ED:A6:C8:0E:F9:02:B9:5D:60:38:70:0A:5D:A7:D6:D0:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqeI7abIDvkCuV1gOHAKXafW0Mw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a6574d-fb6d-47db-ba0c-f16f1ee4f891/1/KqeI7abIDvkCuV1gOHAKXafW0Mw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a6574d-fb6d-47db-ba0c-f16f1ee4f891/1/KqeI7abIDvkCuV1gOHAKXafW0Mw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:ab:cf:3c:75:17:c5:4d:4a:8f:01:9f:6b:5e:e3:95:1b:b7:
3b:eb:47:12:e0:fb:84:1a:9a:0f:e5:1f:2c:83:f4:e5:58:9a:
94:3b:16:c5:a4:a9:79:a1:74:89:99:f6:a2:f2:9e:e0:e2:e7:
c1:46:36:f5:aa:36:d6:ca:74:f2:75:44:53:0d:79:f2:5a:7d:
a8:64:b0:cc:3b:c0:1f:b6:9c:a2:50:91:2e:bf:8a:00:68:c0:
b0:d6:34:a6:05:e4:90:99:92:30:80:24:e7:19:8c:17:c3:f3:
80:98:58:5f:27:a4:55:cf:08:71:35:30:38:1f:01:36:e8:a0:
51:7e:a0:af:21:57:d1:8a:c2:1f:69:cd:c4:06:dd:74:fc:d5:
54:3a:89:b9:f1:13:66:82:40:d9:c6:f4:39:a5:b4:a5:20:cd:
26:08:e1:13:e2:d4:01:c0:08:98:43:4a:3b:a0:d3:41:6c:76:
1f:c0:51:7d:ad:9d:e4:b3:75:02:c6:26:95:67:28:85:56:b9:
53:ee:44:6e:a4:ad:62:a5:f6:2a:2b:f4:57:f0:26:08:11:6f:
d8:a7:78:55:c7:9a:3c:d0:2e:14:37:54:3b:78:bd:98:09:0a:
07:d4:4b:12:0a:4f:87:a0:d1:c4:e0:8a:c1:7d:14:3a:80:a4:
74:a3:d8:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:02:08 2026 by rpki-client