Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.mft
File: KqrPxdXjsmjyxrpDNrzJQfXI168.mft (raw, json)
Hash identifier: emZmYGwt/P2ojfSGBvHvA0TRNeuXXvUGz7zHQ35R+Ko=
Subject key identifier: D8:A4:21:18:23:97:72:56:0D:95:14:7A:6F:B3:E8:87:97:47:5A:DA
Authority key identifier: 2A:AA:CF:C5:D5:E3:B2:68:F2:C6:BA:43:36:BC:C9:41:F5:C8:D7:AF
Certificate issuer: /CN=2aaacfc5d5e3b268f2c6ba4336bcc941f5c8d7af
Certificate serial: 019CADC808BDE4BD1F76F7FC136852AAC3A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqrPxdXjsmjyxrpDNrzJQfXI168.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.mft
Manifest number: 122E
Signing time: Mon 02 Mar 2026 09:01:33 +0000
Manifest this update: Mon 02 Mar 2026 09:01:33 +0000
Manifest next update: Tue 03 Mar 2026 09:01:33 +0000
Files and hashes: 1: KqrPxdXjsmjyxrpDNrzJQfXI168.crl (hash: hPdFFVMTB3+dDBsRZalevt6fH/GQMxLEJInp/+x2g+g=)
2: fedcGuaQw6GYN-hZL-uzH54Rc1I.roa (hash: zm3vjAA+Iy34Xe3WYJQQlDDN2K6FJmbhe/vPYFhLHAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqrPxdXjsmjyxrpDNrzJQfXI168.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c8:08:bd:e4:bd:1f:76:f7:fc:13:68:52:aa:c3:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aaacfc5d5e3b268f2c6ba4336bcc941f5c8d7af
Validity
Not Before: Mar 2 09:01:33 2026 GMT
Not After : Mar 3 09:01:33 2026 GMT
Subject: CN=d8a42118239772560d95147a6fb3e88797475ada
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a1:e7:ba:2e:99:0e:c6:16:76:eb:c4:29:04:
fb:46:59:cc:d2:6e:2a:1b:6d:b1:10:dd:02:37:1e:
8c:44:10:de:40:be:67:d9:e5:48:a3:99:8c:be:ee:
2e:df:f2:8a:04:07:85:7d:e6:31:e3:06:e7:79:90:
12:6f:61:13:cd:2f:49:ce:71:f2:22:b4:96:95:53:
34:87:ba:64:03:dd:b2:73:34:ca:be:86:ec:35:f9:
36:57:d9:98:10:67:17:b8:e5:0d:14:d8:21:d0:a4:
93:05:ff:dc:96:62:6f:01:bb:d4:7d:5f:1c:bf:5c:
10:90:ca:c8:21:e4:3e:d8:b1:5e:7a:86:2a:bb:5d:
b3:e1:90:53:f9:4e:70:65:3c:d9:ba:f5:2f:41:4c:
77:2c:91:e3:e6:f1:ee:b0:96:d3:e6:6f:d5:38:01:
37:59:a9:c4:14:d7:01:66:45:e4:66:bc:a6:e8:00:
b0:00:49:56:f1:ca:d8:57:9f:e2:28:8c:c9:bd:3d:
df:c5:b3:ca:5e:10:aa:50:59:96:e9:5e:8b:c6:84:
f5:e9:74:28:c6:3a:17:bf:81:a6:37:b7:37:e0:f2:
5e:f9:60:4f:6b:b7:11:78:f6:03:39:df:91:df:3f:
ee:2b:b0:ab:22:9b:c7:61:cc:91:32:7b:af:9f:9d:
7a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:A4:21:18:23:97:72:56:0D:95:14:7A:6F:B3:E8:87:97:47:5A:DA
X509v3 Authority Key Identifier:
keyid:2A:AA:CF:C5:D5:E3:B2:68:F2:C6:BA:43:36:BC:C9:41:F5:C8:D7:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqrPxdXjsmjyxrpDNrzJQfXI168.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:17:1b:13:59:bb:81:e5:99:40:10:98:69:43:2a:01:69:4c:
54:8e:f1:c5:0e:6a:a3:4a:91:da:f7:1b:aa:1f:87:86:e2:1a:
0f:3d:86:1a:c7:f5:98:e9:a0:fb:44:6d:17:c2:fc:d9:9a:9a:
0b:75:16:0b:8b:6c:55:3b:2e:6a:07:44:de:1d:23:3d:ea:a4:
f4:65:8b:94:82:af:c3:b6:8d:c8:75:4f:60:de:89:88:3a:33:
37:42:18:59:36:00:20:25:f2:99:cd:0b:14:fd:9a:c5:76:02:
af:11:6c:66:b9:cf:56:c8:45:d4:22:01:3c:2c:bc:4f:cc:3a:
19:30:51:6b:b3:87:66:30:b3:59:d1:98:cc:25:57:5a:ac:e5:
f9:6b:e0:58:96:4f:ad:96:9d:0a:d8:97:21:13:94:ff:a7:1e:
09:18:8a:d5:de:79:24:8f:4f:57:d7:37:37:7c:b8:72:09:84:
9e:8b:51:9e:dc:28:fb:69:c5:71:dd:52:16:c2:7e:1e:32:a3:
ad:af:76:42:88:99:0c:58:4e:01:60:a1:e7:65:22:33:b0:b4:
38:3e:db:ee:2f:d2:2e:6f:91:53:18:97:74:1b:77:d7:1b:d4:
96:6e:ee:73:25:06:8b:a9:52:d5:35:64:5b:5d:ee:9e:0b:10:
15:60:cb:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytyAi95L0fdvf8E2hSqsOgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYWFjZmM1ZDVlM2IyNjhmMmM2YmE0MzM2YmNjOTQxZjVj
OGQ3YWYwHhcNMjYwMzAyMDkwMTMzWhcNMjYwMzAzMDkwMTMzWjAzMTEwLwYDVQQD
EyhkOGE0MjExODIzOTc3MjU2MGQ5NTE0N2E2ZmIzZTg4Nzk3NDc1YWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaHnui6ZDsYWduvEKQT7RlnM0m4q
G22xEN0CNx6MRBDeQL5n2eVIo5mMvu4u3/KKBAeFfeYx4wbneZASb2ETzS9JznHy
IrSWlVM0h7pkA92yczTKvobsNfk2V9mYEGcXuOUNFNgh0KSTBf/clmJvAbvUfV8c
v1wQkMrIIeQ+2LFeeoYqu12z4ZBT+U5wZTzZuvUvQUx3LJHj5vHusJbT5m/VOAE3
WanEFNcBZkXkZrym6ACwAElW8crYV5/iKIzJvT3fxbPKXhCqUFmW6V6LxoT16XQo
xjoXv4GmN7c34PJe+WBPa7cRePYDOd+R3z/uK7CrIpvHYcyRMnuvn516EwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNikIRgjl3JWDZUUem+z6IeXR1raMB8GA1UdIwQY
MBaAFCqqz8XV47Jo8sa6Qza8yUH1yNevMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3FyUHhkWGpzbWp5eHJwRE5yekpRZlhJMTY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9jNTJkNDQtMWJiNi00ZGMwLTg2YmEt
NDRjYjRlOTUzMDI3LzEvS3FyUHhkWGpzbWp5eHJwRE5yekpRZlhJMTY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni9jNTJkNDQtMWJiNi00ZGMwLTg2YmEtNDRjYjRlOTUzMDI3
LzEvS3FyUHhkWGpzbWp5eHJwRE5yekpRZlhJMTY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJxcbE1m7
geWZQBCYaUMqAWlMVI7xxQ5qo0qR2vcbqh+HhuIaDz2GGsf1mOmg+0RtF8L82Zqa
C3UWC4tsVTsuagdE3h0jPeqk9GWLlIKvw7aNyHVPYN6JiDozN0IYWTYAICXymc0L
FP2axXYCrxFsZrnPVshF1CIBPCy8T8w6GTBRa7OHZjCzWdGYzCVXWqzl+WvgWJZP
rZadCtiXIROU/6ceCRiK1d55JI9PV9c3N3y4cgmEnotRntwo+2nFcd1SFsJ+HjKj
ra92QoiZDFhOAWCh52UiM7C0OD7b7i/SLm+RUxiXdBt31xvUlm7ucyUGi6lS1TVk
W13ungsQFWDL7w==
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:08:47 2026 by rpki-client