Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/kqOPWtZym-9NSerlHAFGmCIewUY.mft
File: kqOPWtZym-9NSerlHAFGmCIewUY.mft (raw, json)
Hash identifier: A0HqNaex5Hy5J+dDW/H7HO5Jszem1kHyfd4VP5Reteg=
Subject key identifier: AD:29:8A:B1:CD:7F:AF:47:C8:66:ED:E4:3A:E9:28:AF:A3:89:94:00
Authority key identifier: 92:A3:8F:5A:D6:72:9B:EF:4D:49:EA:E5:1C:01:46:98:22:1E:C1:46
Certificate issuer: /CN=92a38f5ad6729bef4d49eae51c014698221ec146
Certificate serial: 01A115610131F3A1AA3B3A66A897C21D186C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kqOPWtZym-9NSerlHAFGmCIewUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/kqOPWtZym-9NSerlHAFGmCIewUY.mft
Manifest number: 0109
Signing time: Wed 07 Oct 2026 08:00:41 +0000
Manifest this update: Wed 07 Oct 2026 08:00:41 +0000
Manifest next update: Thu 08 Oct 2026 08:00:41 +0000
Files and hashes: 1: EeuHOP1ld_YxpuE_gQSJqZEtgX4.roa (hash: XyhhD+tamYBfloB02aI97R1OMdqo6L/U/hCCCp5CY44=)
2: kqOPWtZym-9NSerlHAFGmCIewUY.crl (hash: TbdzRPnDtkwDLul4cLiTvYbXCWT3ib6YG44HdD1tZPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/kqOPWtZym-9NSerlHAFGmCIewUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/kqOPWtZym-9NSerlHAFGmCIewUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/kqOPWtZym-9NSerlHAFGmCIewUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:15:61:01:31:f3:a1:aa:3b:3a:66:a8:97:c2:1d:18:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92a38f5ad6729bef4d49eae51c014698221ec146
Validity
Not Before: Oct 7 08:00:41 2026 GMT
Not After : Oct 8 08:00:41 2026 GMT
Subject: CN=ad298ab1cd7faf47c866ede43ae928afa3899400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9b:3b:46:30:73:c0:c2:d4:23:58:2b:38:3e:
d5:92:53:0d:eb:81:ac:e4:43:34:e8:b7:83:5e:d8:
59:e5:17:fe:3f:44:50:ba:af:2e:26:ed:37:14:ff:
c7:29:bc:6b:80:c9:cd:45:cc:49:d0:e9:53:b4:8c:
c9:94:45:9d:0b:4e:ba:92:e5:54:51:52:f3:49:07:
7f:f9:91:30:dd:2d:c8:fa:56:a8:d9:37:77:e5:00:
ae:66:4b:3d:f1:d7:73:cd:d8:ae:65:57:13:af:be:
76:5b:49:fd:2f:70:dc:72:7b:49:c0:b8:6a:13:c4:
55:3c:97:30:88:c7:7c:8e:71:0c:26:09:25:da:2d:
22:c4:a0:8b:61:58:80:08:e4:59:9d:f7:75:9c:5d:
51:9d:7c:bf:6a:c4:70:62:64:a2:98:c3:dd:ef:17:
59:0f:be:f5:68:3f:3f:c2:4c:80:08:2b:43:d7:a7:
ec:d0:96:3e:a9:6d:1d:0a:92:bc:80:c3:68:90:70:
69:dc:4c:02:b0:4f:4f:17:f7:7b:ce:4a:e5:52:65:
20:c2:de:45:42:d0:69:89:8f:43:dd:73:87:ca:0d:
e4:05:e0:80:16:3d:0b:d2:f5:10:6a:9c:cb:c0:fd:
bc:d6:0a:0f:5c:99:f8:9d:1b:63:d1:42:66:9f:7f:
c2:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:29:8A:B1:CD:7F:AF:47:C8:66:ED:E4:3A:E9:28:AF:A3:89:94:00
X509v3 Authority Key Identifier:
keyid:92:A3:8F:5A:D6:72:9B:EF:4D:49:EA:E5:1C:01:46:98:22:1E:C1:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kqOPWtZym-9NSerlHAFGmCIewUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/kqOPWtZym-9NSerlHAFGmCIewUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/kqOPWtZym-9NSerlHAFGmCIewUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:00:c4:69:23:35:cc:f3:db:83:e2:45:c9:cf:1c:3b:18:f0:
c7:a1:59:f8:23:35:99:3c:8c:0e:c0:ee:c9:7c:0f:79:47:fd:
60:79:f8:ab:a3:9f:45:5a:84:91:0f:f3:73:d0:91:67:50:81:
1d:16:d5:a1:de:ed:4d:b2:4d:a8:9f:b6:bf:46:15:4e:86:f3:
5a:81:08:e4:93:4b:ab:1b:f1:ef:c0:a6:d4:dd:d9:12:b4:d1:
b5:6b:0a:94:42:2c:f3:52:01:21:08:a2:5c:4f:3c:d4:a2:4f:
b3:aa:e0:9a:78:ef:1e:b8:47:6d:e8:92:94:c4:36:b7:21:d0:
83:83:b1:f6:7e:73:11:d8:88:1b:29:49:0e:a4:92:4b:cf:a3:
c2:bf:31:45:5c:4f:6e:4e:c9:ba:83:27:78:c3:ad:ec:7b:f3:
87:9d:1e:4e:ed:e3:b3:47:38:d3:4c:1b:e2:3a:de:b5:7b:98:
7a:a4:3d:eb:2a:08:72:94:56:cf:dd:d7:ec:b6:97:c1:28:1d:
ac:7b:7d:ce:1d:95:e8:b2:67:9a:de:39:cf:35:3e:0d:96:5b:
aa:a1:9e:ac:11:d5:81:21:b5:49:a0:6d:3c:83:17:ab:c5:45:
41:23:fc:e7:67:fa:9f:87:e8:c3:60:07:48:ac:8e:bc:0a:aa:
b9:76:00:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 13:01:13 2026 by rpki-client