Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/KQvMUKmjO6VlHv0a_kC2_bAlVvA.mft
File: KQvMUKmjO6VlHv0a_kC2_bAlVvA.mft (raw, json)
Hash identifier: 5YWepTFznHJbhDpREHQOBR2QrPOm0w+rBDKduNEN/+Y=
Subject key identifier: 27:8C:67:E6:A0:FF:F3:16:E9:C2:DB:D1:E5:59:D8:C2:5D:40:A0:61
Authority key identifier: 29:0B:CC:50:A9:A3:3B:A5:65:1E:FD:1A:FE:40:B6:FD:B0:25:56:F0
Certificate issuer: /CN=290bcc50a9a33ba5651efd1afe40b6fdb02556f0
Certificate serial: 01A0C746529DF1F6FB4E637CC0143DBD2F82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQvMUKmjO6VlHv0a_kC2_bAlVvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/KQvMUKmjO6VlHv0a_kC2_bAlVvA.mft
Manifest number: 0FC8
Signing time: Tue 22 Sep 2026 04:01:09 +0000
Manifest this update: Tue 22 Sep 2026 04:01:09 +0000
Manifest next update: Wed 23 Sep 2026 04:01:09 +0000
Files and hashes: 1: 2D7Qmm8lOUAmehGAGFV4EjXSwO4.roa (hash: 671n1l8f6dvtaMMT0K6YZEwm63zrF391tyZLMVtMits=)
2: 5pnLPx_2hpy3VygTZwAGCHra7kE.roa (hash: 1oHSHq2YY2wBUKVcldVeO85+GN6kBhjSJ3cQgz8RWLo=)
3: KQvMUKmjO6VlHv0a_kC2_bAlVvA.crl (hash: xoXAJjIwsxhHfn2Hy82lR/oYONafNLyo0R8NPq+Qz7U=)
4: KnbEX4UkCWaV7O0wuCkr7A4YupA.roa (hash: LLlXw5GN0fkhrRlbhrlywwISvztA4DkGKjffqRJI8NQ=)
5: ZlWEEzGYFVqbln14VFTl7vY0xlM.roa (hash: 4+sTiTIEM7Q8B0+aFICyPTm4dchReZ/Z4NBsp9md7hs=)
6: hARTp8Mibx8WODEuOIUHpvobncw.roa (hash: xaYjb6X7y2C4MO+aFX5sY8YM6es27SbRjICMp6w4VYw=)
7: yUO-bSyekqEzkSiFcTb4DbKNZ_o.roa (hash: Yz2sZPO7RTS7G2x7CfUC5DUG1B3ygbMjzbaefkWF+54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/KQvMUKmjO6VlHv0a_kC2_bAlVvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/KQvMUKmjO6VlHv0a_kC2_bAlVvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQvMUKmjO6VlHv0a_kC2_bAlVvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 04:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:46:52:9d:f1:f6:fb:4e:63:7c:c0:14:3d:bd:2f:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=290bcc50a9a33ba5651efd1afe40b6fdb02556f0
Validity
Not Before: Sep 22 04:01:09 2026 GMT
Not After : Sep 23 04:01:09 2026 GMT
Subject: CN=278c67e6a0fff316e9c2dbd1e559d8c25d40a061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d5:ee:83:da:29:26:22:4d:3e:a1:4a:bd:ce:
69:c6:08:04:57:90:5c:82:73:48:6f:a3:64:df:fb:
9e:6f:f6:b0:b5:f4:b6:af:41:f0:05:93:09:49:15:
86:70:d1:3a:07:fc:b6:81:23:04:49:24:25:f6:e7:
60:d7:ef:09:7b:37:43:a5:89:4f:53:96:e7:14:40:
ca:33:bf:0d:44:0b:ea:9e:b8:c2:73:14:f0:84:3c:
42:cb:ef:e4:79:b5:08:ff:31:73:a6:0a:42:2a:12:
94:9b:9b:01:1b:74:f1:0a:6d:ed:8d:d9:95:db:a6:
82:09:dd:58:93:75:1b:d5:24:d8:a5:8e:bc:dd:ae:
43:0d:fd:ef:12:a4:e8:b4:ea:01:d4:82:79:57:46:
1c:ec:03:d7:24:15:4b:5f:ef:ec:c9:21:60:ea:50:
3b:9b:1a:87:2a:d3:f4:25:c6:35:e9:1f:cf:33:bb:
a2:4f:98:bf:84:6a:26:bb:80:35:cd:46:1c:74:bc:
8f:11:26:b9:81:61:18:9a:26:17:a4:1f:b6:bd:07:
d4:d5:1e:44:16:62:bd:b0:98:77:6a:e1:6a:57:72:
94:a4:b1:91:d5:6d:80:60:87:c1:1e:0a:55:85:ef:
eb:e0:99:39:58:ad:dd:8b:31:af:f2:5b:c4:31:fd:
d5:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:8C:67:E6:A0:FF:F3:16:E9:C2:DB:D1:E5:59:D8:C2:5D:40:A0:61
X509v3 Authority Key Identifier:
keyid:29:0B:CC:50:A9:A3:3B:A5:65:1E:FD:1A:FE:40:B6:FD:B0:25:56:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQvMUKmjO6VlHv0a_kC2_bAlVvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/KQvMUKmjO6VlHv0a_kC2_bAlVvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/KQvMUKmjO6VlHv0a_kC2_bAlVvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:07:93:80:dd:f6:06:b4:48:72:8a:f4:2c:6c:45:33:6e:05:
c8:ef:5d:82:13:30:0e:3b:6a:73:a3:86:1f:96:b0:58:c4:14:
c7:ca:54:5b:76:50:2b:e2:2c:6a:8b:e3:fc:8b:85:fe:c7:4e:
56:25:53:b3:4f:81:ef:6d:ba:ac:c0:c0:fd:f1:17:3c:ea:1f:
73:79:4d:66:6d:bc:84:69:44:52:99:05:55:b3:17:3a:44:e4:
f2:c8:ba:48:55:93:72:fd:dc:25:15:35:e1:18:72:02:57:36:
30:ba:5c:af:16:8b:5f:fb:58:c3:1c:e2:50:a3:2d:d8:44:63:
e2:97:06:a5:63:3a:fc:1f:bc:3d:20:93:14:5a:6d:9f:58:53:
ad:b6:5a:40:8f:4a:b6:fa:bb:69:96:8b:32:aa:9f:11:fc:81:
86:27:de:9a:3f:03:cb:ae:82:62:0b:4d:cb:66:ea:eb:8a:78:
61:0d:b9:d0:d1:b8:af:b9:a6:62:64:8c:ea:6e:d1:1d:3d:f6:
a4:83:c4:2f:67:74:b1:45:b3:7e:6e:a3:85:bc:87:12:37:d6:
00:b1:03:89:b0:0b:37:c4:d8:20:84:7e:ce:d7:f0:c2:e4:55:
19:27:ac:9d:96:4b:78:c3:ae:6f:56:16:da:75:27:38:c2:f9:
ab:2f:b7:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 14:42:17 2026 by rpki-client