Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/b68f6f-960d-4e33-873f-7367c0f20bc9/1/KQgdaL3eqL6_JuYYIZeFlPIjvL4.mft
File: KQgdaL3eqL6_JuYYIZeFlPIjvL4.mft (raw, json)
Hash identifier: cXu6QXXIybVtsompyGCHqrQK4uNqj8odbzNjAmVg2+w=
Subject key identifier: AD:6B:61:84:03:A5:63:4F:E9:CE:FC:C6:2D:01:2E:FD:1E:F2:9E:C2
Authority key identifier: 29:08:1D:68:BD:DE:A8:BE:BF:26:E6:18:21:97:85:94:F2:23:BC:BE
Certificate issuer: /CN=29081d68bddea8bebf26e61821978594f223bcbe
Certificate serial: 019D99628829FB99503BFA0BD5899D07218B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQgdaL3eqL6_JuYYIZeFlPIjvL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/b68f6f-960d-4e33-873f-7367c0f20bc9/1/KQgdaL3eqL6_JuYYIZeFlPIjvL4.mft
Manifest number: 0AC1
Signing time: Fri 17 Apr 2026 03:01:04 +0000
Manifest this update: Fri 17 Apr 2026 03:01:04 +0000
Manifest next update: Sat 18 Apr 2026 03:01:04 +0000
Files and hashes: 1: KQgdaL3eqL6_JuYYIZeFlPIjvL4.crl (hash: Pjm/WTcc+jCYG0otcs/PRr26Sx1jYbaCyR2nOn3CROc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/b68f6f-960d-4e33-873f-7367c0f20bc9/1/KQgdaL3eqL6_JuYYIZeFlPIjvL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/b68f6f-960d-4e33-873f-7367c0f20bc9/1/KQgdaL3eqL6_JuYYIZeFlPIjvL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQgdaL3eqL6_JuYYIZeFlPIjvL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:88:29:fb:99:50:3b:fa:0b:d5:89:9d:07:21:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29081d68bddea8bebf26e61821978594f223bcbe
Validity
Not Before: Apr 17 03:01:04 2026 GMT
Not After : Apr 18 03:01:04 2026 GMT
Subject: CN=ad6b618403a5634fe9cefcc62d012efd1ef29ec2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e2:57:8a:c7:71:f6:9b:29:68:cf:96:6c:72:
78:8b:13:87:7b:d3:bd:0d:e1:55:e5:06:58:62:2b:
f3:21:a4:fd:7d:b5:c4:60:f0:c8:cf:4d:1d:65:b1:
cd:71:26:eb:d7:1f:6c:aa:3b:12:97:c7:97:57:8b:
8d:2a:81:80:e1:38:29:fc:bc:b9:75:5f:9d:0d:cf:
ae:7d:05:5b:34:5b:4a:6c:fc:94:af:c0:d1:f5:89:
fa:b7:84:48:a3:5a:82:f7:5d:09:b8:ec:18:72:07:
33:3b:7b:04:ca:54:1d:8b:c5:62:7c:6a:2d:d6:be:
3c:51:f0:6c:6c:87:8c:6d:02:1b:a5:cf:78:42:fd:
0f:10:f5:58:4e:2f:6d:7d:0b:0b:9a:2c:1b:9e:87:
94:0e:87:ab:b4:ec:6b:a1:1a:60:32:e9:e4:e1:c5:
4a:1b:df:26:36:58:25:09:ad:4b:ac:f6:ce:4e:0a:
0a:18:e0:bb:6b:73:4e:73:47:2b:f6:8f:c4:54:29:
98:2b:36:86:0e:bf:55:47:c9:e6:70:5f:ed:9c:72:
49:9f:df:7d:83:cd:78:39:a4:54:60:c5:1b:15:21:
aa:70:ca:25:51:e2:fd:70:bf:8d:e2:67:f8:8f:9c:
71:19:ff:cb:1e:7a:cf:6b:64:fa:0f:82:d3:9d:a5:
aa:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:6B:61:84:03:A5:63:4F:E9:CE:FC:C6:2D:01:2E:FD:1E:F2:9E:C2
X509v3 Authority Key Identifier:
keyid:29:08:1D:68:BD:DE:A8:BE:BF:26:E6:18:21:97:85:94:F2:23:BC:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQgdaL3eqL6_JuYYIZeFlPIjvL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/b68f6f-960d-4e33-873f-7367c0f20bc9/1/KQgdaL3eqL6_JuYYIZeFlPIjvL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/b68f6f-960d-4e33-873f-7367c0f20bc9/1/KQgdaL3eqL6_JuYYIZeFlPIjvL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:a1:e0:01:7f:18:ce:f6:e0:c7:b1:92:ee:5e:f2:9e:9b:b7:
57:05:65:36:bd:00:9a:bf:f5:1b:07:2c:a2:5c:2d:32:1f:65:
70:25:af:39:ae:d2:bf:19:d9:6f:f1:d3:ab:06:c2:d5:db:32:
80:fb:47:d5:9a:f0:94:d0:8b:53:24:9b:2d:4d:f5:bc:54:ae:
a7:cf:ca:fe:b8:7f:ea:88:92:54:a7:6c:1d:0b:9c:e6:e1:86:
19:7b:98:26:dc:b7:3b:4b:a8:0a:c1:f1:4c:0e:3a:d5:1a:5d:
fa:36:56:1e:3b:6c:07:ff:4b:f3:b1:eb:d0:fd:25:dc:a7:36:
61:47:27:62:fc:94:d1:c8:e5:82:7b:84:e4:76:9e:7e:ad:38:
b4:92:dd:12:68:42:f1:5a:e4:ca:67:96:a9:4b:19:78:63:53:
d2:42:40:75:ba:b6:b1:04:00:02:27:8c:21:40:92:f1:28:ff:
13:d7:25:69:27:0b:b1:b6:3b:47:0f:4b:50:fe:82:b5:36:87:
3f:31:53:16:e4:f1:09:1d:e6:44:f6:b8:48:24:b6:dc:22:71:
59:be:fd:bd:46:88:7f:91:5e:f4:cc:5c:86:f6:c9:06:4b:af:
8d:64:f9:3a:a7:9a:3c:6e:cd:9f:fa:55:b3:4d:70:c4:d4:15:
af:d1:35:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:40:05 2026 by rpki-client