Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/1fc264-885f-49e4-8451-81acfe175df7/1/kg6KqqAOJVZRVcWbjMO42BuhSSA.mft
File: kg6KqqAOJVZRVcWbjMO42BuhSSA.mft (raw, json)
Hash identifier: 4QJ8YqiEaFBzc6eoobSglvaTZvqY+ZfDZXADmMKRO+w=
Subject key identifier: F3:CC:94:30:90:1B:80:46:F3:E9:BC:25:06:B9:E5:48:1D:A7:FF:F9
Authority key identifier: 92:0E:8A:AA:A0:0E:25:56:51:55:C5:9B:8C:C3:B8:D8:1B:A1:49:20
Certificate issuer: /CN=920e8aaaa00e25565155c59b8cc3b8d81ba14920
Certificate serial: 019CAA214A4440214C298F3FB521B5DC2FD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kg6KqqAOJVZRVcWbjMO42BuhSSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/1fc264-885f-49e4-8451-81acfe175df7/1/kg6KqqAOJVZRVcWbjMO42BuhSSA.mft
Manifest number: 070A
Signing time: Sun 01 Mar 2026 16:00:34 +0000
Manifest this update: Sun 01 Mar 2026 16:00:34 +0000
Manifest next update: Mon 02 Mar 2026 16:00:34 +0000
Files and hashes: 1: kg6KqqAOJVZRVcWbjMO42BuhSSA.crl (hash: uK9+VawlkvSpk6PXyzl6KRsiUMhRWr83R3fnIVMuHu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/1fc264-885f-49e4-8451-81acfe175df7/1/kg6KqqAOJVZRVcWbjMO42BuhSSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/1fc264-885f-49e4-8451-81acfe175df7/1/kg6KqqAOJVZRVcWbjMO42BuhSSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kg6KqqAOJVZRVcWbjMO42BuhSSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:4a:44:40:21:4c:29:8f:3f:b5:21:b5:dc:2f:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=920e8aaaa00e25565155c59b8cc3b8d81ba14920
Validity
Not Before: Mar 1 16:00:34 2026 GMT
Not After : Mar 2 16:00:34 2026 GMT
Subject: CN=f3cc9430901b8046f3e9bc2506b9e5481da7fff9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1a:50:4a:02:68:38:61:9a:0e:c7:0b:c2:b4:
20:d4:95:30:f8:45:c8:53:96:3a:85:af:a6:1b:be:
37:60:87:08:bc:64:bb:3f:a7:9f:c2:54:2c:6a:e4:
88:ab:45:b2:40:45:c4:ea:88:09:d7:6b:2b:4c:fa:
2e:fa:2c:cf:9c:e0:59:9f:5d:f4:6a:58:1b:c9:89:
3e:33:a5:f1:4f:34:c2:e6:2b:5b:47:4b:a8:18:a4:
53:91:dc:0d:3b:ed:98:b5:f6:7c:3f:19:d6:c8:16:
06:01:42:41:f8:59:6b:17:b1:47:91:0d:57:82:a7:
84:5a:9d:92:46:b2:d9:95:16:1e:45:0f:22:92:a7:
84:1b:ae:47:3c:a5:fd:4a:fb:15:13:67:8c:31:b5:
02:f9:e6:86:b1:55:8c:54:f3:39:bf:3f:33:4a:e1:
05:0e:c8:e2:9e:f2:85:4a:e7:0b:99:d9:5d:e1:6d:
93:bc:c3:ff:95:80:b2:8b:9f:d5:69:03:08:92:16:
44:54:1e:41:88:5d:57:0f:b9:9b:37:71:6b:57:5e:
a7:f7:0d:01:90:27:28:de:8c:c2:03:20:e8:f3:c9:
1c:e9:d2:77:d8:ba:e8:de:93:e5:8a:08:ed:77:a5:
ef:de:68:04:a5:2d:89:ce:c2:0b:56:be:cb:70:17:
72:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:CC:94:30:90:1B:80:46:F3:E9:BC:25:06:B9:E5:48:1D:A7:FF:F9
X509v3 Authority Key Identifier:
keyid:92:0E:8A:AA:A0:0E:25:56:51:55:C5:9B:8C:C3:B8:D8:1B:A1:49:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kg6KqqAOJVZRVcWbjMO42BuhSSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1fc264-885f-49e4-8451-81acfe175df7/1/kg6KqqAOJVZRVcWbjMO42BuhSSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1fc264-885f-49e4-8451-81acfe175df7/1/kg6KqqAOJVZRVcWbjMO42BuhSSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:56:92:75:6c:4f:6f:3e:d1:5f:00:75:80:0f:47:ea:28:bc:
62:a6:2d:f7:3c:ac:17:7f:4b:e6:27:11:af:3e:27:21:c3:03:
c6:b3:71:28:01:41:2b:2b:56:12:ee:fa:3c:45:1d:60:2c:d6:
dc:ce:86:ec:35:f3:ef:39:ab:3c:32:54:2d:32:6c:3c:37:27:
3e:c0:b0:81:77:3d:d0:45:e1:bf:13:e0:33:62:ad:92:33:ae:
35:82:8a:d3:3f:f7:6e:f2:82:84:45:95:fd:a0:50:db:06:cd:
e9:00:74:7a:ff:fe:e5:b0:f3:54:f1:a8:0a:74:68:88:4e:d1:
0c:64:8e:9a:84:b9:f7:1e:a8:cf:25:da:bc:48:f3:a7:e4:ed:
0a:91:56:ef:10:52:34:1a:7d:70:a7:d7:68:3a:09:f7:35:4f:
70:4c:f5:10:72:a7:66:80:8b:0f:1a:ee:d0:6f:29:4d:c4:70:
4a:9e:1c:22:c1:74:cd:b5:da:24:d3:10:24:ba:48:c5:09:33:
13:31:61:4c:d9:16:af:07:58:5e:b0:a4:86:aa:1e:bc:4c:68:
cd:ca:31:f6:b4:c6:22:11:89:c4:db:bd:28:9d:be:cd:5c:e4:
4d:10:8e:47:aa:c8:91:8a:e7:a9:72:e7:7b:77:a0:ca:f0:b3:
02:f0:50:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:16:54 2026 by rpki-client