Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.mft
File: KqGB-LCskT3cN34Z1WZLEbGXU3M.mft (raw, json)
Hash identifier: WjTzePi0IYi0lm52141Y1bS1VKT4NBX574lQ9VJ6XG8=
Subject key identifier: F7:C7:6F:52:77:92:CC:06:10:C3:19:7C:95:FF:43:7F:DB:DA:00:F3
Authority key identifier: 2A:A1:81:F8:B0:AC:91:3D:DC:37:7E:19:D5:66:4B:11:B1:97:53:73
Certificate issuer: /CN=2aa181f8b0ac913ddc377e19d5664b11b1975373
Certificate serial: 019CAAC66A017172309DF6B1EE85076D3AE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqGB-LCskT3cN34Z1WZLEbGXU3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.mft
Manifest number: 0DB9
Signing time: Sun 01 Mar 2026 19:00:55 +0000
Manifest this update: Sun 01 Mar 2026 19:00:55 +0000
Manifest next update: Mon 02 Mar 2026 19:00:55 +0000
Files and hashes: 1: 6JMQmYaXJRiml5BYtsy3jnW-erA.roa (hash: kbV9Lg8RcdOaIR/u2kpU49sw8x1vZ57CjX7SJnkdSvg=)
2: KqGB-LCskT3cN34Z1WZLEbGXU3M.crl (hash: +umodFsE++ZsV6ko+54G6otcYiUapkzy7QhdZ3YIO9c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqGB-LCskT3cN34Z1WZLEbGXU3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:6a:01:71:72:30:9d:f6:b1:ee:85:07:6d:3a:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa181f8b0ac913ddc377e19d5664b11b1975373
Validity
Not Before: Mar 1 19:00:55 2026 GMT
Not After : Mar 2 19:00:55 2026 GMT
Subject: CN=f7c76f527792cc0610c3197c95ff437fdbda00f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f6:ba:d4:0b:fa:d3:3c:a8:82:c4:46:6e:a1:
44:8e:3d:75:14:c1:0d:5d:e6:12:62:59:c0:10:33:
cc:82:39:ee:2a:29:9f:76:61:10:44:45:71:ce:d2:
6b:ff:a4:d9:9f:c3:83:ed:5d:1b:b4:97:43:54:e0:
12:81:23:2f:92:ea:69:75:43:8d:47:86:5d:0b:04:
04:6d:64:e5:85:36:b7:d7:4f:bd:55:83:da:a3:1b:
5d:54:49:23:49:0b:0e:9f:17:a6:ce:af:62:9e:2b:
cf:20:11:db:53:5c:b0:af:0d:39:d9:3f:4c:4c:0c:
2e:dd:b7:63:63:4f:4b:c2:55:f9:20:72:38:71:39:
b5:0c:5c:4d:7c:53:98:4b:6e:a3:57:3e:e5:22:f5:
46:b5:84:09:24:85:64:cc:64:ca:6c:93:c6:94:2f:
b7:d6:e5:51:33:a4:74:42:dc:6e:6c:f9:87:64:bc:
2f:6f:e9:b3:fc:71:e7:89:4b:17:93:0f:5b:6e:b2:
02:ee:58:1d:d4:9d:18:00:a7:91:00:04:73:b6:cc:
ae:aa:b2:38:31:2d:90:05:0f:09:36:f6:41:98:19:
ed:9c:c5:3d:e1:c4:df:0e:bb:d6:15:7e:f5:c3:40:
d7:4e:69:e7:e4:82:c7:73:96:38:e4:dc:f0:69:9e:
d5:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:C7:6F:52:77:92:CC:06:10:C3:19:7C:95:FF:43:7F:DB:DA:00:F3
X509v3 Authority Key Identifier:
keyid:2A:A1:81:F8:B0:AC:91:3D:DC:37:7E:19:D5:66:4B:11:B1:97:53:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqGB-LCskT3cN34Z1WZLEbGXU3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:0b:00:6b:a2:90:12:71:27:09:f2:99:92:5f:0a:9d:b7:10:
3e:8f:6a:52:f5:55:fc:ab:0d:ea:4b:03:bc:0e:93:6c:09:84:
ee:a1:0d:20:52:c7:27:91:4c:42:ec:ea:be:b9:dc:7f:41:a4:
fa:b3:43:3f:d6:2d:17:39:7b:f6:5b:a4:c5:b4:e8:a4:71:89:
2a:5a:b3:35:d4:05:86:da:a7:58:9a:2e:75:f5:ea:c9:15:62:
df:ca:ee:14:89:bf:42:c0:c1:2f:a3:4b:ef:9d:9c:be:e2:a3:
00:d6:53:6d:31:a1:9c:15:ed:ad:38:bb:09:c2:14:33:5c:97:
8b:33:a0:10:ab:fe:55:a1:ac:4c:6d:0a:b0:50:fc:ed:38:91:
13:97:d9:4a:c1:4b:cd:3d:ca:f6:9b:c9:35:e3:41:ad:b7:96:
21:c1:09:2a:7f:e8:3a:5a:84:d9:52:e8:85:fe:72:64:dd:3c:
1f:54:26:3c:af:1f:39:64:e9:f2:2b:0b:d5:94:44:4b:ee:59:
38:55:2b:55:0e:95:74:25:3c:fb:b9:3d:8f:90:58:c0:59:87:
f2:ac:20:6e:ad:d9:1e:9b:5c:32:cb:b4:43:26:f0:d6:b8:80:
38:a5:28:5d:0f:33:3e:9d:bd:98:ea:27:44:d9:13:12:95:fd:
17:c7:dc:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:21:39 2026 by rpki-client