
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.mft
File: KqGB-LCskT3cN34Z1WZLEbGXU3M.mft (raw, json)
Hash identifier: hbnBh6caDRzPyaky/qs7ry7G/T2n1tcHSMJYGckMd/M=
Subject key identifier: 2B:06:F9:F3:74:58:A1:B4:82:B3:CA:DD:EE:8E:4D:6A:6E:B6:98:36
Authority key identifier: 2A:A1:81:F8:B0:AC:91:3D:DC:37:7E:19:D5:66:4B:11:B1:97:53:73
Certificate issuer: /CN=2aa181f8b0ac913ddc377e19d5664b11b1975373
Certificate serial: 019FAD516198AA61428F625F9A67D6E5B8AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqGB-LCskT3cN34Z1WZLEbGXU3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.mft
Manifest number: 0F48
Signing time: Wed 29 Jul 2026 10:00:19 +0000
Manifest this update: Wed 29 Jul 2026 10:00:19 +0000
Manifest next update: Thu 30 Jul 2026 10:00:19 +0000
Files and hashes: 1: 6JMQmYaXJRiml5BYtsy3jnW-erA.roa (hash: kbV9Lg8RcdOaIR/u2kpU49sw8x1vZ57CjX7SJnkdSvg=)
2: KqGB-LCskT3cN34Z1WZLEbGXU3M.crl (hash: uCgtX4ovh+Xp2mrvxGhJ1Dz2dFQwIXHjrV5Sie7chxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqGB-LCskT3cN34Z1WZLEbGXU3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 10:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:51:61:98:aa:61:42:8f:62:5f:9a:67:d6:e5:b8:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa181f8b0ac913ddc377e19d5664b11b1975373
Validity
Not Before: Jul 29 10:00:19 2026 GMT
Not After : Jul 30 10:00:19 2026 GMT
Subject: CN=2b06f9f37458a1b482b3caddee8e4d6a6eb69836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7b:a3:9a:07:90:4f:6b:e0:5a:7f:82:f9:95:
c1:21:fa:eb:a3:33:7b:99:36:54:04:43:38:95:7f:
15:db:ae:c0:cf:9b:93:59:13:13:82:e3:7b:6b:9a:
b8:f3:1f:a1:56:f8:64:5f:1f:51:f2:89:e9:b0:38:
c2:ae:bf:49:aa:2a:48:74:3f:1d:ec:a7:4a:7a:55:
58:b8:39:9d:e0:66:d9:17:6f:0e:73:3d:eb:bd:fd:
2d:7b:b2:87:c0:35:aa:44:75:3b:ed:77:10:dd:7f:
63:3f:23:64:39:a5:d3:c0:fe:6c:c0:41:1f:c9:0c:
e4:94:8e:15:e0:3f:f7:09:2d:fa:ca:ef:67:05:49:
1b:75:db:66:59:68:e9:32:20:38:89:b3:96:7d:54:
e4:37:74:f0:f5:1b:7f:5a:c2:98:39:b9:7c:ee:8f:
3a:5e:c0:49:da:77:35:83:08:c7:80:7b:10:8d:dd:
fd:e2:2d:02:db:b4:54:d1:21:a0:be:38:69:c6:28:
b7:fc:71:1e:ae:9b:34:0a:01:b3:e5:1e:d2:0a:a0:
13:83:8f:bb:19:e4:aa:76:27:22:4f:a4:5b:5e:a8:
b2:b3:d7:31:dd:48:ff:8c:d4:26:6a:2e:53:31:a8:
e0:66:3a:04:47:a1:3e:e6:d8:a3:ae:e4:19:ba:dc:
eb:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:06:F9:F3:74:58:A1:B4:82:B3:CA:DD:EE:8E:4D:6A:6E:B6:98:36
X509v3 Authority Key Identifier:
keyid:2A:A1:81:F8:B0:AC:91:3D:DC:37:7E:19:D5:66:4B:11:B1:97:53:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqGB-LCskT3cN34Z1WZLEbGXU3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:65:43:ff:be:97:26:51:ea:af:d3:2e:d9:92:11:6a:e5:c6:
a9:6d:3d:51:49:8d:79:2f:8c:ce:43:bf:3d:81:ea:d4:c6:bc:
e9:7f:8a:35:96:99:d4:bf:32:2e:97:6a:2c:3d:c2:eb:69:27:
d5:65:88:1e:da:4e:42:93:fe:d1:77:57:5f:7c:db:2a:d9:e2:
c6:d6:22:d1:74:23:32:84:d1:21:3b:b9:59:a2:3d:e7:8d:c5:
41:5e:c3:85:c5:80:db:47:4b:50:f5:25:45:77:5d:92:c9:89:
09:45:57:18:a1:01:09:2e:4e:90:77:9d:3b:df:95:51:35:e3:
1e:4e:26:79:bd:0a:36:b3:0c:0b:8b:f3:f1:ff:26:20:e5:eb:
70:3a:e1:43:fc:a4:e4:ae:a6:14:91:18:0a:0f:e0:a3:44:f4:
63:5c:19:1d:94:67:42:7c:af:29:b1:d8:61:91:5e:ba:f6:31:
28:22:82:23:81:6d:47:38:da:23:5d:5e:a3:8c:23:dc:57:7f:
37:c7:61:42:fe:41:89:7e:93:19:be:9c:20:58:24:bf:65:05:
6c:50:03:e4:66:a1:84:62:0a:2d:71:56:e3:d9:49:f8:03:ee:
72:eb:9a:6b:0a:85:96:6a:e2:1b:6f:fc:83:3d:0b:73:c9:5f:
a7:29:52:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 16:33:01 2026 by rpki-client