Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.mft
File: KEQn3OurQOvBmDny0l7qLOClYv8.mft (raw, json)
Hash identifier: QFcA0VSsYVR/WFp5CvGu6kY8LDqED7UXuiv0MpMTh3Y=
Subject key identifier: 99:92:8D:B3:0D:D5:D9:B4:77:B8:FB:7B:1B:87:73:F2:3A:21:3A:BA
Authority key identifier: 28:44:27:DC:EB:AB:40:EB:C1:98:39:F2:D2:5E:EA:2C:E0:A5:62:FF
Certificate issuer: /CN=284427dcebab40ebc19839f2d25eea2ce0a562ff
Certificate serial: 01A0D34ABEB07F1D4A32DDACD9EA0BAC7766
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KEQn3OurQOvBmDny0l7qLOClYv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.mft
Manifest number: 0936
Signing time: Thu 24 Sep 2026 12:01:26 +0000
Manifest this update: Thu 24 Sep 2026 12:01:26 +0000
Manifest next update: Fri 25 Sep 2026 12:01:26 +0000
Files and hashes: 1: KEQn3OurQOvBmDny0l7qLOClYv8.crl (hash: GdyuAxvFldgsVelRYdco/fRQmb8U7sGr5eYXAUK5XXE=)
2: cHwhEhAGxzfypZx4-M1NRLg_x6g.roa (hash: iI8gUBUQGaxZbo8P6CcEli8I0PR4IRfA40i94puh4EU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KEQn3OurQOvBmDny0l7qLOClYv8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:4a:be:b0:7f:1d:4a:32:dd:ac:d9:ea:0b:ac:77:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=284427dcebab40ebc19839f2d25eea2ce0a562ff
Validity
Not Before: Sep 24 12:01:26 2026 GMT
Not After : Sep 25 12:01:26 2026 GMT
Subject: CN=99928db30dd5d9b477b8fb7b1b8773f23a213aba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f6:ac:ba:d7:8f:91:3d:af:ff:0f:ee:17:71:
bc:ed:ed:be:b2:13:ef:15:74:f5:53:ae:33:11:e3:
29:84:76:40:b1:a4:29:b5:3b:05:db:89:32:e8:87:
07:d0:84:25:d3:68:d2:cb:5f:92:74:cc:b6:c3:f9:
0b:d7:5f:27:4c:b5:a6:4d:ba:7e:2f:c8:cd:cd:36:
de:4f:61:49:95:78:e7:6d:52:bc:4d:ea:6b:1d:88:
10:85:f1:72:92:53:fe:c4:f5:0f:ed:6f:19:3d:a2:
a0:01:e9:7b:f8:9a:d0:1a:e7:cc:02:3c:43:00:7d:
42:8a:5f:ad:aa:f1:b0:5f:c5:e6:e0:70:cc:f5:35:
8c:29:5a:35:f1:1a:6b:d8:5c:08:25:66:64:aa:2e:
a5:4e:e6:02:d1:a1:76:b9:2a:b0:b6:be:3f:41:68:
dc:29:0e:77:46:6f:e4:e6:12:1d:b6:16:d6:69:78:
38:4e:48:83:fc:7a:00:f7:ac:ee:3d:37:9a:b6:b0:
76:6a:c4:4f:e5:b7:72:5a:a0:13:93:06:42:3d:65:
54:e5:af:01:c0:5b:e9:d0:87:db:2e:d9:b3:82:c1:
51:f4:47:c7:b7:54:f0:b0:e7:d3:2a:2c:51:b4:0e:
82:cc:d6:ea:8a:f9:6c:87:fe:0e:31:82:ca:af:0b:
a9:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:92:8D:B3:0D:D5:D9:B4:77:B8:FB:7B:1B:87:73:F2:3A:21:3A:BA
X509v3 Authority Key Identifier:
keyid:28:44:27:DC:EB:AB:40:EB:C1:98:39:F2:D2:5E:EA:2C:E0:A5:62:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KEQn3OurQOvBmDny0l7qLOClYv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:b6:c5:30:70:3b:0c:2c:7c:cc:0c:5e:e2:31:5d:8a:d5:59:
57:ef:3c:ef:a9:55:d2:e8:f4:19:28:60:e6:ff:26:e3:28:ba:
a8:f7:86:92:c3:46:8c:b2:97:9c:95:a3:95:ba:f0:b5:46:3b:
00:25:1e:cb:69:2c:69:99:28:1e:3c:dd:75:68:48:84:93:a9:
aa:4f:cf:9f:d0:38:2b:42:92:38:14:b6:c8:a8:a3:13:ab:be:
58:e7:8b:06:e3:2d:33:04:7b:f4:d3:62:cc:38:3a:88:49:4a:
ec:5d:e1:96:36:d1:a7:9b:bb:29:c3:c5:a2:95:1e:64:74:6d:
77:50:cf:f5:84:9a:bf:94:49:11:f0:61:ee:91:d0:f3:be:b0:
bb:7e:af:e2:1d:6e:6c:43:ee:70:be:b3:bb:7a:4f:f8:42:27:
09:56:41:bf:44:a8:0d:55:be:5a:ca:6d:bd:76:af:97:8e:a3:
34:5f:eb:c1:47:cd:c7:7e:ae:91:dc:23:5c:6d:5d:91:0d:17:
2c:79:aa:70:6e:94:69:9a:15:6c:29:06:c9:cb:74:1b:8b:e9:
08:c1:77:3c:91:74:09:87:b6:55:6d:60:ea:9c:61:49:14:cb:
6e:dc:f0:b0:12:08:20:2e:35:d5:e5:e0:c1:ed:0d:71:00:69:
75:d4:1c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:47:27 2026 by rpki-client