Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/a0b266-3c9e-4e0c-8a6d-5895b69d189e/1/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.mft
File: KjacqbqErYR9SdMeJ0Zfr1e_KOQ.mft (raw, json)
Hash identifier: R4U/FjYit7codyuKZ/OXXLrqYTRAXojHjtcbpzmhbJI=
Subject key identifier: 79:15:7F:7E:41:BA:BF:2E:5A:11:83:4D:D0:00:39:20:02:02:D7:E8
Authority key identifier: 2A:36:9C:A9:BA:84:AD:84:7D:49:D3:1E:27:46:5F:AF:57:BF:28:E4
Certificate issuer: /CN=2a369ca9ba84ad847d49d31e27465faf57bf28e4
Certificate serial: 019CAAFCFF7E788E0CFF2A549D55A9AA0421
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/a0b266-3c9e-4e0c-8a6d-5895b69d189e/1/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.mft
Manifest number: 1844
Signing time: Sun 01 Mar 2026 20:00:33 +0000
Manifest this update: Sun 01 Mar 2026 20:00:33 +0000
Manifest next update: Mon 02 Mar 2026 20:00:33 +0000
Files and hashes: 1: KjacqbqErYR9SdMeJ0Zfr1e_KOQ.crl (hash: XpAxYVKtLSpmU1y2yA5XCIseRD/ZD3C3dbrDaEPlgMs=)
2: kJEiuD-GMOjhqR0rKkDRKANvZg0.roa (hash: VBIq2jI9wWHxfuXZX8azYqnz8N0JMYIJ6HfvAGOQ2uk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/a0b266-3c9e-4e0c-8a6d-5895b69d189e/1/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/a0b266-3c9e-4e0c-8a6d-5895b69d189e/1/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fc:ff:7e:78:8e:0c:ff:2a:54:9d:55:a9:aa:04:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a369ca9ba84ad847d49d31e27465faf57bf28e4
Validity
Not Before: Mar 1 20:00:33 2026 GMT
Not After : Mar 2 20:00:33 2026 GMT
Subject: CN=79157f7e41babf2e5a11834dd00039200202d7e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fa:e3:d2:cf:9f:73:e2:32:32:97:e9:e0:9e:
3b:26:39:d2:13:15:85:b2:53:91:1e:0b:df:0e:30:
49:22:13:af:59:8f:79:4f:3d:cb:63:de:29:e7:fc:
56:95:cb:99:c4:67:1e:d1:27:1e:a3:18:df:2f:3b:
83:70:18:f1:83:c1:be:ce:9b:83:97:3c:fa:db:87:
e9:4c:11:f9:ed:1e:62:56:9a:c9:84:4a:0b:2e:ab:
14:40:cc:27:53:d6:e3:06:bd:46:37:a4:b2:56:4f:
35:84:8a:cd:f3:2d:91:e4:39:07:fa:83:6f:a0:2f:
f9:4f:1c:9f:2b:f9:1f:ab:d4:6c:84:f1:c2:7d:b1:
ff:b5:5d:8a:1b:6d:45:f4:55:82:28:be:01:03:e9:
18:f9:6e:b3:6c:f1:26:c3:e6:85:ee:e1:83:ff:69:
e8:35:91:66:8f:dd:f1:53:25:fc:12:0c:b3:5c:62:
60:39:c3:18:9e:ee:86:03:07:72:23:9d:13:96:04:
bb:23:d0:79:57:09:dd:9c:f3:82:b1:fa:8e:34:cd:
a1:19:dc:3d:74:55:c9:90:8a:7d:85:42:88:11:c7:
b2:30:2a:76:df:38:a9:5e:a0:64:42:20:fe:09:02:
94:a1:72:93:f2:08:38:80:27:90:03:3c:3d:55:6e:
02:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:15:7F:7E:41:BA:BF:2E:5A:11:83:4D:D0:00:39:20:02:02:D7:E8
X509v3 Authority Key Identifier:
keyid:2A:36:9C:A9:BA:84:AD:84:7D:49:D3:1E:27:46:5F:AF:57:BF:28:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a0b266-3c9e-4e0c-8a6d-5895b69d189e/1/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a0b266-3c9e-4e0c-8a6d-5895b69d189e/1/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:50:11:72:a6:bf:85:83:ef:9d:cf:fb:7d:2a:18:e7:91:21:
36:37:ec:ee:17:da:69:75:79:48:10:29:41:88:9f:f8:ce:bc:
cd:fb:be:2e:ed:94:d9:72:49:91:2e:22:22:7d:bd:e7:b8:e5:
c4:1c:1f:be:f5:89:0c:f0:80:2d:d7:67:2f:9a:c8:04:a7:70:
c2:bc:d9:bc:08:92:16:ff:a9:ca:29:65:6d:3e:85:0b:c1:a1:
62:1d:f5:a5:d5:6a:63:ba:7a:fc:34:b8:ad:1b:ce:6a:93:db:
6a:3b:b7:9c:6d:46:2d:36:ba:b6:3d:2d:16:3d:87:1f:34:a8:
21:c1:ac:8d:43:e0:b8:97:fb:20:34:38:8e:8a:d3:fe:47:4f:
3a:28:34:27:e4:76:83:81:74:ff:47:d5:5b:28:77:82:49:fd:
53:d7:57:3b:f9:ee:60:ec:5b:cf:5a:e6:76:c6:08:62:0f:1a:
03:da:f5:37:5c:7a:75:29:e4:90:bf:f8:8b:7d:dd:0f:0e:21:
3e:fa:3d:c4:02:5a:bf:ee:80:4f:26:67:8c:e5:99:bb:f1:89:
e4:93:cc:3b:1e:81:9e:8f:85:23:2e:c3:ed:c3:96:c7:6a:86:
02:91:21:42:f8:14:70:e6:c5:c6:01:1d:28:42:91:97:b3:b6:
8f:c6:09:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:51:22 2026 by rpki-client