Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/05c3a1-c8fe-40ff-9c52-3e6f0324410a/1/KQHXZDHG6HPTxEcwVx4eUNYCBXw.mft
File: KQHXZDHG6HPTxEcwVx4eUNYCBXw.mft (raw, json)
Hash identifier: WNJbvn368OcjXCd4dW49CiqMwHc4c9Cab+XNNeLW5sM=
Subject key identifier: 4E:FC:86:03:47:6C:0D:9D:47:3A:2B:60:80:27:41:69:B9:1C:8D:9E
Authority key identifier: 29:01:D7:64:31:C6:E8:73:D3:C4:47:30:57:1E:1E:50:D6:02:05:7C
Certificate issuer: /CN=2901d76431c6e873d3c44730571e1e50d602057c
Certificate serial: 019CAA59378978A08C7E5844B65E7AC47746
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQHXZDHG6HPTxEcwVx4eUNYCBXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/05c3a1-c8fe-40ff-9c52-3e6f0324410a/1/KQHXZDHG6HPTxEcwVx4eUNYCBXw.mft
Manifest number: 1455
Signing time: Sun 01 Mar 2026 17:01:39 +0000
Manifest this update: Sun 01 Mar 2026 17:01:39 +0000
Manifest next update: Mon 02 Mar 2026 17:01:39 +0000
Files and hashes: 1: KQHXZDHG6HPTxEcwVx4eUNYCBXw.crl (hash: bE81T58uxiy7cwWLWoLpSvMCoAXL4FH0XJtoC6lQiko=)
2: TOF3ZgA2E3UTCvybT5QOxSPJdVo.roa (hash: iSQvu/X4RZ2TX/v9Xw2MSqYTLV+RJbk0Qnv9Fb30Cgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/05c3a1-c8fe-40ff-9c52-3e6f0324410a/1/KQHXZDHG6HPTxEcwVx4eUNYCBXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/05c3a1-c8fe-40ff-9c52-3e6f0324410a/1/KQHXZDHG6HPTxEcwVx4eUNYCBXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQHXZDHG6HPTxEcwVx4eUNYCBXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:59:37:89:78:a0:8c:7e:58:44:b6:5e:7a:c4:77:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2901d76431c6e873d3c44730571e1e50d602057c
Validity
Not Before: Mar 1 17:01:39 2026 GMT
Not After : Mar 2 17:01:39 2026 GMT
Subject: CN=4efc8603476c0d9d473a2b6080274169b91c8d9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:71:e1:eb:25:d5:19:15:4c:ca:50:71:fb:94:
4f:44:69:07:af:28:2b:78:83:75:a4:5f:b0:37:f4:
35:5f:54:20:e1:c1:8a:96:6f:29:57:4c:b0:54:15:
d9:72:c8:6b:f9:dd:cd:d7:3f:2e:8a:5d:22:bd:1f:
b6:02:a6:3d:1f:1c:4e:ea:b8:92:72:2f:11:fd:ee:
49:b5:6e:e4:d6:26:58:06:98:2c:63:3e:a8:c5:5d:
5f:ea:1f:0a:b9:57:b3:41:3d:f6:ee:1a:5a:96:51:
7a:1a:e8:82:0a:75:85:58:24:49:1b:88:a7:56:0c:
a8:f1:0b:da:1c:d0:67:57:8a:8a:f8:c3:93:c9:67:
1c:80:8a:6d:85:d7:b8:ac:1f:42:0f:90:6d:a9:a0:
e8:09:1f:d1:36:a5:c0:4e:54:d1:20:f6:a6:8b:10:
5f:5d:ac:4c:bb:28:04:65:31:9f:26:d1:84:0f:4f:
09:b7:5a:e7:cd:d6:2c:5e:e6:f9:77:dd:57:70:cd:
d1:ab:3b:fa:e3:49:c4:11:dc:bc:6c:40:95:73:66:
78:33:13:a8:13:e3:42:11:aa:8c:d9:74:92:e0:73:
fa:8e:97:97:b2:23:82:bd:c5:d6:bc:cc:ac:be:eb:
94:f3:29:b9:b8:a8:32:a7:f6:95:e8:02:c0:e2:25:
f5:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:FC:86:03:47:6C:0D:9D:47:3A:2B:60:80:27:41:69:B9:1C:8D:9E
X509v3 Authority Key Identifier:
keyid:29:01:D7:64:31:C6:E8:73:D3:C4:47:30:57:1E:1E:50:D6:02:05:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQHXZDHG6HPTxEcwVx4eUNYCBXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/05c3a1-c8fe-40ff-9c52-3e6f0324410a/1/KQHXZDHG6HPTxEcwVx4eUNYCBXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/05c3a1-c8fe-40ff-9c52-3e6f0324410a/1/KQHXZDHG6HPTxEcwVx4eUNYCBXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:f4:1f:cd:e0:82:0f:1e:4d:e3:60:d4:45:e2:31:0a:5d:09:
b8:d8:a0:6b:8a:0f:d9:77:83:1c:c8:32:94:f4:1f:13:18:99:
85:ec:50:f2:92:26:d2:e5:2c:fc:5a:e7:42:66:fc:21:61:7e:
42:1c:32:e2:6a:2f:fb:04:4b:0c:b9:e7:68:5c:b6:1b:a0:c0:
2b:22:09:9c:d1:32:54:13:5d:5b:85:c4:91:b5:cf:2b:0e:86:
ce:03:35:76:6a:6f:32:46:7d:f3:0e:07:4c:62:eb:96:b7:24:
f8:91:fb:65:e9:48:49:cb:c4:74:61:b2:77:eb:11:7a:24:02:
b4:08:d6:a1:a6:48:31:fb:4e:f3:a8:8d:a3:6f:a2:c2:b7:12:
bc:66:2a:98:05:79:42:b7:26:67:d6:0a:77:b3:c0:69:13:9a:
17:75:cd:ee:4e:9d:54:a5:7b:ee:c6:d6:ff:76:ba:51:e4:e6:
89:97:91:f6:61:bf:2b:f1:1e:5d:3a:39:cc:cd:f7:58:4d:a9:
7f:8f:72:0e:7d:64:43:2a:b6:03:45:5a:cd:1f:8f:59:61:21:
fb:16:6f:74:86:56:41:f2:5d:e1:98:34:d3:63:14:a3:22:a7:
00:7e:a6:6a:c0:f2:7c:97:24:79:cc:2b:10:df:32:dc:bb:09:
3c:69:7f:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:23 2026 by rpki-client