Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/KqWx1eAQafqWlumUTlGRCLfB5NE.mft
File: KqWx1eAQafqWlumUTlGRCLfB5NE.mft (raw, json)
Hash identifier: QTYrnagSna01ftgSp6s4dHtWNt+kwG6ZP3D62ksiHYE=
Subject key identifier: 3F:06:03:F8:47:74:E9:A2:07:C6:48:6B:28:CC:49:1D:6C:8E:4D:99
Authority key identifier: 2A:A5:B1:D5:E0:10:69:FA:96:96:E9:94:4E:51:91:08:B7:C1:E4:D1
Certificate issuer: /CN=2aa5b1d5e01069fa9696e9944e519108b7c1e4d1
Certificate serial: 01A0F0E85E3488A38C068B11F467681C803B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqWx1eAQafqWlumUTlGRCLfB5NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/KqWx1eAQafqWlumUTlGRCLfB5NE.mft
Manifest number: F6
Signing time: Wed 30 Sep 2026 06:02:35 +0000
Manifest this update: Wed 30 Sep 2026 06:02:35 +0000
Manifest next update: Thu 01 Oct 2026 06:02:35 +0000
Files and hashes: 1: KqWx1eAQafqWlumUTlGRCLfB5NE.crl (hash: 7xJMTTFyYogwaHcKrfS5o53N4hZZ+DXVc1JgF2NHRGc=)
2: ku84zJjTWzV_Uw0D2cCHPAGq8WA.roa (hash: l+xQkMBojqSS3t8VI6Qv1n5lrRHRggLZADBsh+xBAik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/KqWx1eAQafqWlumUTlGRCLfB5NE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/KqWx1eAQafqWlumUTlGRCLfB5NE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqWx1eAQafqWlumUTlGRCLfB5NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f0:e8:5e:34:88:a3:8c:06:8b:11:f4:67:68:1c:80:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa5b1d5e01069fa9696e9944e519108b7c1e4d1
Validity
Not Before: Sep 30 06:02:35 2026 GMT
Not After : Oct 1 06:02:35 2026 GMT
Subject: CN=3f0603f84774e9a207c6486b28cc491d6c8e4d99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:70:de:b6:3e:d4:25:db:a2:76:e1:b4:9b:94:
3e:6b:9d:8c:b2:1d:0b:89:fc:2b:d2:3d:16:1e:14:
fb:49:6d:38:9f:16:55:7b:d1:ed:81:f8:b5:93:e5:
29:04:2b:bf:66:c9:13:1e:4a:30:c8:0a:a5:a3:8c:
34:f1:ef:dd:89:96:cf:df:fc:3c:32:5c:ad:61:b1:
17:68:d0:96:8e:43:e2:fc:16:e5:99:80:ba:a1:b1:
e5:a1:84:f5:6c:a1:3f:6c:11:3c:0d:0d:3f:51:66:
74:7c:c0:87:a7:fb:ea:cf:08:7c:35:d4:ca:33:be:
8a:6f:bc:7c:06:47:d0:97:30:a3:93:79:05:f7:40:
bd:63:c0:76:a5:f0:ad:22:cc:04:ae:0f:23:96:d8:
27:fd:5a:90:e2:14:c3:1b:c0:2d:d1:26:6b:0b:76:
c0:46:25:dc:47:b9:9e:35:f8:52:99:67:17:42:ee:
1d:5b:12:cf:a1:97:29:63:c7:26:61:6f:db:61:d3:
96:83:6c:7c:ee:dd:c1:f8:0b:d7:ff:92:d9:d6:eb:
3a:4f:22:df:a1:ce:d5:ff:8f:13:4e:f9:17:bd:d4:
fe:6a:09:49:dc:da:f5:4e:a4:13:52:48:0d:3d:41:
e2:44:64:42:71:e9:c1:5a:77:41:a8:97:2b:c7:e0:
e8:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:06:03:F8:47:74:E9:A2:07:C6:48:6B:28:CC:49:1D:6C:8E:4D:99
X509v3 Authority Key Identifier:
keyid:2A:A5:B1:D5:E0:10:69:FA:96:96:E9:94:4E:51:91:08:B7:C1:E4:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqWx1eAQafqWlumUTlGRCLfB5NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/KqWx1eAQafqWlumUTlGRCLfB5NE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/KqWx1eAQafqWlumUTlGRCLfB5NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:1b:42:9c:ac:95:21:4f:e7:06:91:d9:be:a6:bb:0d:62:f9:
4d:4f:d4:06:5a:6d:b2:d8:03:4a:35:63:c3:e4:c5:81:a2:8d:
14:c6:11:2b:f8:5f:cc:8f:8f:79:6b:30:5e:6f:6b:1b:eb:ad:
30:81:c5:a6:37:96:26:7c:a5:47:9b:9e:58:49:36:fe:4e:3f:
5f:82:06:da:04:0a:c1:25:c8:f5:47:18:7e:97:2d:bc:44:2c:
dd:5b:f5:79:2a:8c:ea:fc:fd:c0:f1:4a:48:57:d8:72:ae:01:
1b:0e:49:cf:90:3d:ff:9a:64:1e:8a:9b:c4:f8:69:a2:24:38:
52:12:16:26:58:8b:b3:3f:7f:e9:9a:4c:db:95:c7:ae:0d:80:
ce:04:c6:b4:5c:c0:fe:57:40:5e:1b:48:85:c7:5d:e0:70:e0:
90:ea:0f:13:f3:80:3f:b5:ec:a2:7a:ca:3e:93:97:ab:bd:fb:
7c:87:0b:58:3e:37:47:8d:20:45:ad:99:da:72:de:70:80:7b:
f4:c3:6f:24:3f:f0:c2:63:f3:91:46:5d:03:43:d9:ff:66:af:
db:18:ce:4f:72:ef:a0:09:94:9a:3a:af:4d:c0:59:37:65:81:
27:87:f8:21:ba:21:c1:cb:51:c4:cf:70:c9:45:a5:eb:2b:d5:
64:56:fa:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 09:40:37 2026 by rpki-client