Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/5fa681-2566-40ee-9f04-5df44295b4c9/1/kQRcV5lsmjyeYnekMmsRgyFdW2o.mft
File: kQRcV5lsmjyeYnekMmsRgyFdW2o.mft (raw, json)
Hash identifier: cRADbjXSsIt7zLrv3nCIHVYWBncHVvcTRqvUDwAtKWg=
Subject key identifier: 26:E5:82:FB:89:24:53:A2:E6:63:8C:1F:8A:35:3D:41:DD:87:8C:4B
Authority key identifier: 91:04:5C:57:99:6C:9A:3C:9E:62:77:A4:32:6B:11:83:21:5D:5B:6A
Certificate issuer: /CN=91045c57996c9a3c9e6277a4326b1183215d5b6a
Certificate serial: 019CAAFD5CE77B5567C52098B34D676199A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kQRcV5lsmjyeYnekMmsRgyFdW2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/5fa681-2566-40ee-9f04-5df44295b4c9/1/kQRcV5lsmjyeYnekMmsRgyFdW2o.mft
Manifest number: 1240
Signing time: Sun 01 Mar 2026 20:00:56 +0000
Manifest this update: Sun 01 Mar 2026 20:00:56 +0000
Manifest next update: Mon 02 Mar 2026 20:00:56 +0000
Files and hashes: 1: 0nPKlV2FgZ0LZAZQ71hQLBw38Uo.roa (hash: Fb/Fjfm/zNM0E1C+LzpEdYLGiz1+AVF8bxpn6ETeoj4=)
2: kQRcV5lsmjyeYnekMmsRgyFdW2o.crl (hash: HAMhZ4LwHedxABYlQwxY061hXSvnVpvKKUn2IriAf2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/5fa681-2566-40ee-9f04-5df44295b4c9/1/kQRcV5lsmjyeYnekMmsRgyFdW2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/5fa681-2566-40ee-9f04-5df44295b4c9/1/kQRcV5lsmjyeYnekMmsRgyFdW2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/kQRcV5lsmjyeYnekMmsRgyFdW2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:5c:e7:7b:55:67:c5:20:98:b3:4d:67:61:99:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91045c57996c9a3c9e6277a4326b1183215d5b6a
Validity
Not Before: Mar 1 20:00:56 2026 GMT
Not After : Mar 2 20:00:56 2026 GMT
Subject: CN=26e582fb892453a2e6638c1f8a353d41dd878c4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:71:f8:6f:5e:9c:cd:2f:6c:da:4f:55:4c:74:
b6:1c:60:3c:43:97:bd:0f:cc:e6:ea:49:32:ae:7a:
6a:94:ef:21:d0:1c:ff:47:ac:a4:e6:ea:7f:bd:37:
59:45:b2:08:4f:cc:e0:d5:b1:dc:61:55:5b:dc:04:
d0:a6:d9:c8:8e:48:50:8a:87:5f:3b:66:a2:44:58:
d7:74:3e:bf:5a:5a:9b:f2:3f:85:40:0c:b7:b6:76:
b9:05:d0:f6:2c:2d:54:8a:5d:9b:18:7e:5f:33:88:
d6:4f:d4:1e:93:66:18:c1:80:e4:80:9d:56:34:36:
af:b6:6b:f7:e8:a0:a7:eb:d0:f4:2d:6b:ec:10:e5:
0e:ad:4b:04:f2:dd:eb:4b:56:b0:a5:e3:7e:56:87:
47:20:20:fc:01:c4:02:bd:fb:e4:45:ad:53:1b:53:
2c:da:78:cf:6a:86:8e:fc:64:3c:ef:f2:21:d5:8c:
86:3c:a2:a7:3b:33:7d:e1:58:52:d8:13:02:81:20:
09:36:97:02:34:2d:2a:5e:56:81:ee:d6:fc:0c:b3:
46:f2:38:c6:b3:77:cd:fc:a3:61:c3:52:2e:46:34:
ae:04:6b:1a:f1:31:37:db:33:1d:1d:15:29:c9:65:
c5:21:9c:9d:45:7f:e9:64:38:b0:ab:0a:7d:f2:17:
69:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:E5:82:FB:89:24:53:A2:E6:63:8C:1F:8A:35:3D:41:DD:87:8C:4B
X509v3 Authority Key Identifier:
keyid:91:04:5C:57:99:6C:9A:3C:9E:62:77:A4:32:6B:11:83:21:5D:5B:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kQRcV5lsmjyeYnekMmsRgyFdW2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5fa681-2566-40ee-9f04-5df44295b4c9/1/kQRcV5lsmjyeYnekMmsRgyFdW2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5fa681-2566-40ee-9f04-5df44295b4c9/1/kQRcV5lsmjyeYnekMmsRgyFdW2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:43:0e:75:0b:98:77:80:8c:62:de:3b:59:7d:d0:93:94:17:
ea:25:66:7e:1f:5b:03:1c:42:94:e5:04:45:8a:1c:5e:e3:98:
f5:e7:85:b0:a2:7b:3f:50:81:e8:30:d4:03:18:cf:30:96:cf:
fd:18:ff:73:bf:1f:58:e7:6d:13:2b:d9:ba:b1:c4:03:a4:d9:
92:5f:eb:2a:28:d4:30:7d:18:87:e5:39:de:f7:27:6a:fb:6e:
ed:97:1e:74:4b:08:42:89:59:c4:34:66:48:cd:d8:ed:bd:43:
38:5a:15:b0:7f:28:55:a1:58:6e:b4:8f:0f:2c:ee:30:24:37:
b4:4e:09:46:06:f8:7b:ac:7b:b5:f4:e7:7f:70:cb:35:97:43:
a8:28:22:b8:2e:2b:e4:0a:d5:4b:bb:f6:34:bc:89:0f:ca:e4:
45:f8:2c:f6:a6:7f:40:3e:05:c6:43:d0:76:f3:c4:ee:4d:4d:
24:73:8d:d3:60:5a:50:87:8a:03:ff:09:0b:e9:7b:87:ec:ca:
a4:cd:97:0a:c6:8c:d5:09:02:aa:d9:fb:be:7c:7e:fc:3d:25:
25:15:ea:e9:f9:8f:4f:c6:46:48:09:7c:f5:fc:2e:3b:ad:42:
b8:0b:93:d7:7d:84:cc:f1:5e:5a:87:fe:f8:a7:65:c1:f1:3a:
d8:12:49:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:56:42 2026 by rpki-client