Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.mft
File: KqrPxdXjsmjyxrpDNrzJQfXI168.mft (raw, json)
Hash identifier: rZFYjqnSpG2PwzBVFUDV25ZhwDujFoQK/XrO/9Q5KPw=
Subject key identifier: 9F:69:64:F5:91:09:E6:8D:79:DC:0A:FE:9F:98:DD:40:03:66:C9:97
Authority key identifier: 2A:AA:CF:C5:D5:E3:B2:68:F2:C6:BA:43:36:BC:C9:41:F5:C8:D7:AF
Certificate issuer: /CN=2aaacfc5d5e3b268f2c6ba4336bcc941f5c8d7af
Certificate serial: 019D9C63956A855FF5842FA0EB4C5EC7E273
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqrPxdXjsmjyxrpDNrzJQfXI168.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.mft
Manifest number: 12AB
Signing time: Fri 17 Apr 2026 17:01:05 +0000
Manifest this update: Fri 17 Apr 2026 17:01:05 +0000
Manifest next update: Sat 18 Apr 2026 17:01:05 +0000
Files and hashes: 1: KqrPxdXjsmjyxrpDNrzJQfXI168.crl (hash: KiiCGwO6W8tgY8XP5pcqdhkaJyxwLSlDFZIeQZGLUZU=)
2: P9Xi_swd13obp_Uu9EpIelH3ibs.asa (hash: ACsc4jn9BWNidz80pgmChNo/puaiemP1X04joTVfolY=)
3: fedcGuaQw6GYN-hZL-uzH54Rc1I.roa (hash: zm3vjAA+Iy34Xe3WYJQQlDDN2K6FJmbhe/vPYFhLHAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqrPxdXjsmjyxrpDNrzJQfXI168.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:63:95:6a:85:5f:f5:84:2f:a0:eb:4c:5e:c7:e2:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aaacfc5d5e3b268f2c6ba4336bcc941f5c8d7af
Validity
Not Before: Apr 17 17:01:05 2026 GMT
Not After : Apr 18 17:01:05 2026 GMT
Subject: CN=9f6964f59109e68d79dc0afe9f98dd400366c997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:60:e1:17:40:dd:c2:f3:10:6e:c6:3d:79:fa:
7e:28:0d:02:a4:c9:03:ab:2d:68:bc:65:00:d9:47:
45:f0:e0:fc:30:44:7b:87:a6:f3:3f:bd:6c:33:26:
d5:77:11:53:32:42:13:e4:e0:e3:b7:4a:36:7f:aa:
1c:e3:e1:a1:02:72:14:17:3d:de:1c:9c:74:ba:64:
b8:ff:2b:d5:1b:72:20:32:1d:a8:96:77:ce:09:c4:
c8:8f:a2:8e:37:3a:30:4d:ae:eb:c1:c7:74:cc:54:
ca:46:c6:79:26:29:7e:17:67:dc:c8:f4:f0:a3:c3:
ef:93:68:23:8f:a3:bc:42:2d:e7:b6:9c:3b:cb:2d:
5e:57:9a:d8:34:c1:1f:02:26:35:0f:55:bf:6a:50:
c1:a7:62:55:4e:d9:55:a5:1c:b2:02:3e:55:fe:b8:
ae:47:ee:ef:6c:9b:1a:ce:20:e3:8f:16:6d:9e:aa:
f8:23:db:c5:07:1a:68:1a:a8:72:85:2c:83:8a:0b:
e8:3d:0f:a9:b8:b1:7b:5c:3e:f1:24:e5:18:f0:0c:
10:ff:ba:22:6e:2a:61:62:3c:0c:3f:d3:3b:28:71:
34:de:6b:d2:f6:04:54:73:1c:6d:90:da:e8:39:4f:
d7:e5:28:95:eb:34:9b:ae:01:04:55:b7:9c:6f:3a:
1e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:69:64:F5:91:09:E6:8D:79:DC:0A:FE:9F:98:DD:40:03:66:C9:97
X509v3 Authority Key Identifier:
keyid:2A:AA:CF:C5:D5:E3:B2:68:F2:C6:BA:43:36:BC:C9:41:F5:C8:D7:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqrPxdXjsmjyxrpDNrzJQfXI168.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:01:9b:18:c4:b8:9d:d0:54:08:ce:1d:75:a8:21:8e:46:4e:
f8:09:04:ef:27:19:26:0f:54:0a:c1:77:6d:36:10:ea:90:fa:
31:9d:bf:7d:83:3a:83:5e:2e:5a:89:85:78:b6:85:f0:3a:d4:
5c:aa:74:21:c1:4e:9f:c8:3b:d1:db:dd:6a:b9:3c:82:8b:7e:
e7:a3:0a:1d:6c:27:ff:8d:b7:7e:a6:a5:a4:d3:ca:f7:c8:1f:
17:03:98:44:5a:58:9c:5b:06:58:46:05:11:e6:8b:24:8a:de:
14:cc:38:ec:79:30:2e:76:41:77:8e:57:e5:3e:65:27:2b:33:
a5:66:62:4b:36:14:44:63:bf:e1:8a:7c:7f:9f:f4:07:16:65:
05:5c:02:a8:64:81:eb:03:39:e0:e8:e0:54:d4:02:91:01:93:
57:85:8b:23:48:97:f3:9a:49:4f:49:60:28:f6:95:56:34:14:
37:de:79:ab:b1:ad:73:f9:02:f7:d4:34:c8:21:ee:63:ce:b5:
a4:82:1f:04:10:f3:c1:fa:4c:ec:4e:fe:b6:4a:82:39:c0:16:
e8:aa:91:b9:dc:fd:87:fb:95:a1:08:5c:56:09:a6:09:4f:9d:
59:16:bd:75:2c:7b:7b:e8:e0:01:01:e3:d0:a9:eb:68:f0:09:
27:1c:33:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2cY5VqhV/1hC+g60xex+JzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYWFjZmM1ZDVlM2IyNjhmMmM2YmE0MzM2YmNjOTQxZjVj
OGQ3YWYwHhcNMjYwNDE3MTcwMTA1WhcNMjYwNDE4MTcwMTA1WjAzMTEwLwYDVQQD
Eyg5ZjY5NjRmNTkxMDllNjhkNzlkYzBhZmU5Zjk4ZGQ0MDAzNjZjOTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1mDhF0DdwvMQbsY9efp+KA0CpMkD
qy1ovGUA2UdF8OD8MER7h6bzP71sMybVdxFTMkIT5ODjt0o2f6oc4+GhAnIUFz3e
HJx0umS4/yvVG3IgMh2olnfOCcTIj6KONzowTa7rwcd0zFTKRsZ5Jil+F2fcyPTw
o8Pvk2gjj6O8Qi3ntpw7yy1eV5rYNMEfAiY1D1W/alDBp2JVTtlVpRyyAj5V/riu
R+7vbJsaziDjjxZtnqr4I9vFBxpoGqhyhSyDigvoPQ+puLF7XD7xJOUY8AwQ/7oi
biphYjwMP9M7KHE03mvS9gRUcxxtkNroOU/X5SiV6zSbrgEEVbecbzoe8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ9pZPWRCeaNedwK/p+Y3UADZsmXMB8GA1UdIwQY
MBaAFCqqz8XV47Jo8sa6Qza8yUH1yNevMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3FyUHhkWGpzbWp5eHJwRE5yekpRZlhJMTY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9jNTJkNDQtMWJiNi00ZGMwLTg2YmEt
NDRjYjRlOTUzMDI3LzEvS3FyUHhkWGpzbWp5eHJwRE5yekpRZlhJMTY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni9jNTJkNDQtMWJiNi00ZGMwLTg2YmEtNDRjYjRlOTUzMDI3
LzEvS3FyUHhkWGpzbWp5eHJwRE5yekpRZlhJMTY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIAGbGMS4
ndBUCM4ddaghjkZO+AkE7ycZJg9UCsF3bTYQ6pD6MZ2/fYM6g14uWomFeLaF8DrU
XKp0IcFOn8g70dvdark8got+56MKHWwn/423fqalpNPK98gfFwOYRFpYnFsGWEYF
EeaLJIreFMw47HkwLnZBd45X5T5lJyszpWZiSzYURGO/4Yp8f5/0BxZlBVwCqGSB
6wM54OjgVNQCkQGTV4WLI0iX85pJT0lgKPaVVjQUN955q7Gtc/kC99Q0yCHuY861
pIIfBBDzwfpM7E7+tkqCOcAW6KqRudz9h/uVoQhcVgmmCU+dWRa9dSx7e+jgAQHj
0KnraPAJJxwzdQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 22:02:53 2026 by rpki-client