Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/b68f6f-960d-4e33-873f-7367c0f20bc9/1/KQgdaL3eqL6_JuYYIZeFlPIjvL4.mft
File: KQgdaL3eqL6_JuYYIZeFlPIjvL4.mft (raw, json)
Hash identifier: AB3/KWOR4ckR4lLO9puliHVsKnuhZ0fbJfYj2BjjiWs=
Subject key identifier: 48:01:A7:E5:9F:25:92:22:12:1D:06:FD:12:FE:A6:BC:9C:14:9F:CE
Authority key identifier: 29:08:1D:68:BD:DE:A8:BE:BF:26:E6:18:21:97:85:94:F2:23:BC:BE
Certificate issuer: /CN=29081d68bddea8bebf26e61821978594f223bcbe
Certificate serial: 019CABD98631B5AD630CB720E6215943E186
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQgdaL3eqL6_JuYYIZeFlPIjvL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/b68f6f-960d-4e33-873f-7367c0f20bc9/1/KQgdaL3eqL6_JuYYIZeFlPIjvL4.mft
Manifest number: 0A46
Signing time: Mon 02 Mar 2026 00:01:25 +0000
Manifest this update: Mon 02 Mar 2026 00:01:25 +0000
Manifest next update: Tue 03 Mar 2026 00:01:25 +0000
Files and hashes: 1: KQgdaL3eqL6_JuYYIZeFlPIjvL4.crl (hash: YzNn8Em3uxR1CRIP9QYsO/PdX1NNbFy9rIzu09/nspo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/b68f6f-960d-4e33-873f-7367c0f20bc9/1/KQgdaL3eqL6_JuYYIZeFlPIjvL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/b68f6f-960d-4e33-873f-7367c0f20bc9/1/KQgdaL3eqL6_JuYYIZeFlPIjvL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQgdaL3eqL6_JuYYIZeFlPIjvL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:86:31:b5:ad:63:0c:b7:20:e6:21:59:43:e1:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29081d68bddea8bebf26e61821978594f223bcbe
Validity
Not Before: Mar 2 00:01:25 2026 GMT
Not After : Mar 3 00:01:25 2026 GMT
Subject: CN=4801a7e59f259222121d06fd12fea6bc9c149fce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:97:be:67:33:08:1d:5b:4c:f6:f3:09:a7:22:
7d:b9:89:2c:ae:8d:2b:1d:dd:f1:44:81:93:1d:d1:
3c:1c:fb:16:de:06:56:27:32:71:7f:ed:d9:4a:1e:
a0:f2:ef:ba:f9:64:d4:41:1d:05:43:60:ad:22:eb:
0b:0d:5a:76:12:2b:cc:1a:e1:e1:b9:13:5d:91:2f:
bf:fd:a2:be:f3:93:a7:ea:a1:0a:f6:37:94:8d:88:
a5:d1:ab:88:ab:f1:d9:43:61:d0:2a:46:1f:e7:be:
03:4e:a2:76:cd:22:9a:9a:82:e0:df:01:e4:3a:21:
2d:fb:12:7a:84:e2:49:e2:51:62:31:94:b1:69:e7:
ee:bb:32:dd:c3:b8:e7:e7:d6:c4:ec:e7:ca:6e:aa:
ff:2c:93:f9:08:27:69:77:5d:cd:84:a4:5b:4c:c7:
ae:02:ea:63:9b:51:bf:ba:9a:85:a0:44:b3:35:9c:
f9:8d:76:38:c9:2c:cd:82:01:36:66:fb:b4:bd:4e:
77:66:e8:08:14:47:54:4b:49:1c:89:44:27:99:26:
99:f1:04:23:a3:59:5a:2a:07:28:61:2a:85:88:f0:
10:fb:bf:2f:20:13:4c:64:29:02:89:e7:0d:45:94:
da:1a:c4:ab:9b:b0:7f:94:96:03:f4:81:a2:2d:db:
24:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:01:A7:E5:9F:25:92:22:12:1D:06:FD:12:FE:A6:BC:9C:14:9F:CE
X509v3 Authority Key Identifier:
keyid:29:08:1D:68:BD:DE:A8:BE:BF:26:E6:18:21:97:85:94:F2:23:BC:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQgdaL3eqL6_JuYYIZeFlPIjvL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/b68f6f-960d-4e33-873f-7367c0f20bc9/1/KQgdaL3eqL6_JuYYIZeFlPIjvL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/b68f6f-960d-4e33-873f-7367c0f20bc9/1/KQgdaL3eqL6_JuYYIZeFlPIjvL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:4b:eb:5e:d9:86:fe:78:58:0d:59:91:41:9f:b2:78:f1:f1:
fe:6b:81:ab:35:7a:9b:73:35:dd:09:c1:dd:1f:c1:98:33:3a:
93:44:50:cd:82:f9:a2:ba:39:bd:e7:6c:97:67:40:87:19:a8:
d0:7f:3d:3b:db:87:d8:ea:e5:77:08:92:28:0c:8d:a3:ca:b7:
7b:74:9d:13:87:cb:7b:73:05:10:c6:ea:d7:43:f0:e4:e2:49:
0f:79:28:72:00:0b:bb:50:12:42:0a:de:9a:0a:29:71:6e:8b:
b1:2c:32:0d:bc:84:3d:0e:4b:a8:96:f5:06:80:0f:d1:31:a4:
8d:40:df:29:f1:f5:6b:e1:6d:96:66:ff:70:13:64:fc:e0:03:
01:9b:bc:dc:1e:82:d1:f1:dd:a3:ca:1a:5f:83:55:82:2e:25:
b3:c1:52:7a:ca:f3:76:99:03:84:25:ff:86:1c:04:96:28:40:
72:2d:fe:1d:2f:8a:86:44:8c:55:93:ce:07:32:07:a7:19:23:
33:0d:13:51:55:f3:0b:c7:04:8c:19:bc:47:b9:b9:a2:fa:ac:
a2:d2:1d:d0:d9:a6:1b:78:e9:9d:36:58:8d:a0:7a:83:04:f7:
a7:cf:2a:b8:1b:ce:e4:ea:96:ff:83:f9:c8:08:4b:2e:a4:62:
84:47:96:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:40:24 2026 by rpki-client