Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/05c3a1-c8fe-40ff-9c52-3e6f0324410a/1/KQHXZDHG6HPTxEcwVx4eUNYCBXw.mft
File: KQHXZDHG6HPTxEcwVx4eUNYCBXw.mft (raw, json)
Hash identifier: PtZvxbcbxZerDKsJppCzi1u0wjv5A6kQ+7icLF9urCM=
Subject key identifier: 39:14:FA:31:7E:29:01:34:BD:8E:78:5B:73:7F:6F:39:88:2E:E8:44
Authority key identifier: 29:01:D7:64:31:C6:E8:73:D3:C4:47:30:57:1E:1E:50:D6:02:05:7C
Certificate issuer: /CN=2901d76431c6e873d3c44730571e1e50d602057c
Certificate serial: 01A0CCA3D6249E371EA1A99E3F377988F2C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQHXZDHG6HPTxEcwVx4eUNYCBXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/05c3a1-c8fe-40ff-9c52-3e6f0324410a/1/KQHXZDHG6HPTxEcwVx4eUNYCBXw.mft
Manifest number: 167A
Signing time: Wed 23 Sep 2026 05:01:24 +0000
Manifest this update: Wed 23 Sep 2026 05:01:24 +0000
Manifest next update: Thu 24 Sep 2026 05:01:24 +0000
Files and hashes: 1: KQHXZDHG6HPTxEcwVx4eUNYCBXw.crl (hash: h8qQb3LVcyjdLpmmlpUkZJpXF6xPFIvsavWkleBij5E=)
2: TOF3ZgA2E3UTCvybT5QOxSPJdVo.roa (hash: iSQvu/X4RZ2TX/v9Xw2MSqYTLV+RJbk0Qnv9Fb30Cgo=)
3: qR34p5ccxusFmYGiqxqs-x0VLfo.asa (hash: qsNT5FbF31r9LydstqWQ8uToHpVi2El6JTZvM1F/ZNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/05c3a1-c8fe-40ff-9c52-3e6f0324410a/1/KQHXZDHG6HPTxEcwVx4eUNYCBXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/05c3a1-c8fe-40ff-9c52-3e6f0324410a/1/KQHXZDHG6HPTxEcwVx4eUNYCBXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQHXZDHG6HPTxEcwVx4eUNYCBXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 05:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:a3:d6:24:9e:37:1e:a1:a9:9e:3f:37:79:88:f2:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2901d76431c6e873d3c44730571e1e50d602057c
Validity
Not Before: Sep 23 05:01:24 2026 GMT
Not After : Sep 24 05:01:24 2026 GMT
Subject: CN=3914fa317e290134bd8e785b737f6f39882ee844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f3:b7:69:2d:18:e0:52:58:a2:c4:e9:58:85:
58:bb:af:02:09:e7:1a:9d:34:98:cf:93:88:d5:63:
ff:67:1b:51:65:48:b0:a2:f9:60:6f:90:3b:16:af:
b6:65:9c:84:f5:f3:65:77:60:ff:60:18:b2:3b:de:
3c:0d:6e:8c:cb:7d:3a:bc:98:ab:97:ec:f0:57:49:
ea:7d:ce:64:b8:8c:fd:49:de:b5:8a:32:91:29:8e:
f0:b6:3f:d0:8e:7b:09:7b:a7:0c:81:0d:2f:f8:72:
25:d4:f1:f7:dd:ad:16:b6:51:f3:66:0d:fe:9c:58:
6a:85:ff:61:d5:35:d2:b7:f2:16:b8:b1:1e:25:93:
9c:79:d4:8b:10:d2:17:45:94:d3:00:c2:97:f9:60:
0b:5a:52:3f:be:a5:e9:f4:28:61:c2:ad:8e:de:81:
a4:06:19:47:78:de:78:5d:4e:cf:40:f7:c1:79:fd:
61:dc:64:cf:e7:64:a7:e4:c3:0b:83:4f:e9:2c:7e:
17:de:59:b7:f8:18:71:11:62:1b:14:25:9f:6a:5c:
05:0f:1f:a7:cb:db:54:16:30:68:a4:84:73:7e:96:
16:0c:23:da:d4:1a:e3:6a:b4:a9:92:55:b7:41:c3:
a7:a8:e5:78:c3:05:e2:eb:47:5a:2e:bf:1a:a8:0a:
74:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:14:FA:31:7E:29:01:34:BD:8E:78:5B:73:7F:6F:39:88:2E:E8:44
X509v3 Authority Key Identifier:
keyid:29:01:D7:64:31:C6:E8:73:D3:C4:47:30:57:1E:1E:50:D6:02:05:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQHXZDHG6HPTxEcwVx4eUNYCBXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/05c3a1-c8fe-40ff-9c52-3e6f0324410a/1/KQHXZDHG6HPTxEcwVx4eUNYCBXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/05c3a1-c8fe-40ff-9c52-3e6f0324410a/1/KQHXZDHG6HPTxEcwVx4eUNYCBXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:a1:8f:82:e7:96:58:66:e5:ec:78:9e:0b:f9:51:fd:25:b2:
71:53:ac:2d:f7:74:e1:b1:36:17:c5:1b:3e:ff:81:72:1b:bc:
45:8a:70:dd:e0:69:26:bb:60:35:4d:ba:59:20:ea:c5:ff:21:
af:aa:7b:06:14:ce:79:c2:65:6c:1e:f1:2d:ce:21:a0:0d:7f:
e0:0f:3e:9f:7c:f7:a1:a4:9e:6f:d4:67:02:18:a3:42:48:28:
34:54:ef:7e:dc:72:3b:c1:cc:2a:81:a8:dd:63:5d:6f:ff:91:
74:4c:bf:01:b9:f9:a7:9e:4f:d1:72:e9:80:63:f9:12:f8:82:
0c:0a:b9:6d:87:81:25:77:c9:17:7d:ac:3f:51:af:8a:fd:7c:
63:17:7e:43:05:93:3d:cc:13:1a:e7:a1:0d:00:83:cf:a0:de:
9d:e1:76:16:40:6f:52:74:de:91:84:33:8a:72:a6:75:d7:1c:
be:5a:a0:17:85:c0:3d:87:09:fb:82:9b:ba:8c:6f:fd:6f:af:
a0:ca:fb:fd:af:ce:dd:12:b1:0b:34:a6:c2:e0:fc:f5:35:e2:
f6:04:00:49:79:73:dd:ae:2f:71:f2:8c:44:e3:ad:fb:84:61:
b7:f7:c5:8e:90:00:8f:c7:56:0d:ab:28:d5:e0:3a:f3:8b:7e:
f1:c2:fe:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:51:17 2026 by rpki-client