Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft
File: KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft (raw, json)
Hash identifier: DrsLJUdQbBf4MmjLv6LBReCeqqEQXRYtxLRG7bLmnMA=
Subject key identifier: 1D:D9:E5:40:9A:24:26:06:58:06:3D:A9:17:23:3A:A4:2D:67:B4:4F
Authority key identifier: 2A:A3:C9:9F:F5:8B:8F:73:3E:F2:C6:2A:77:72:C0:C1:F2:9E:57:FC
Certificate issuer: /CN=2aa3c99ff58b8f733ef2c62a7772c0c1f29e57fc
Certificate serial: 01A1249D2402B7A29AD5B51BDF20A4D02437
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqPJn_WLj3M-8sYqd3LAwfKeV_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft
Manifest number: 13A3
Signing time: Sat 10 Oct 2026 07:00:40 +0000
Manifest this update: Sat 10 Oct 2026 07:00:40 +0000
Manifest next update: Sun 11 Oct 2026 07:00:40 +0000
Files and hashes: 1: KqPJn_WLj3M-8sYqd3LAwfKeV_w.crl (hash: U31+EvUSaurAnDKBSgrWDqI1SmQ17a3rPqcENIWVL6c=)
2: TjwUrt0QbOg_7Hv7hnE5gPoovGE.roa (hash: vCYAcdHdzTkyR5n/fzt3EtvDXfAERXz/dZUmibVHkag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqPJn_WLj3M-8sYqd3LAwfKeV_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:24:9d:24:02:b7:a2:9a:d5:b5:1b:df:20:a4:d0:24:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa3c99ff58b8f733ef2c62a7772c0c1f29e57fc
Validity
Not Before: Oct 10 07:00:40 2026 GMT
Not After : Oct 11 07:00:40 2026 GMT
Subject: CN=1dd9e5409a24260658063da917233aa42d67b44f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d8:89:11:be:18:aa:66:dd:3a:c5:1a:82:c2:
bc:44:cb:9e:4d:fd:bf:ef:ff:cf:13:2f:19:21:ea:
24:f0:8a:87:df:1c:8c:ca:54:5e:88:48:9a:67:24:
94:ba:4f:fa:cb:b1:94:f3:4a:88:37:a6:4e:6d:6c:
54:9b:d1:88:1f:95:c2:3f:41:c7:01:a1:04:fb:53:
83:b4:1a:09:07:53:9c:24:68:07:1f:d8:1d:ef:c5:
4a:7f:d3:1d:50:23:6b:ee:9b:6c:7b:20:ab:8f:81:
2f:cd:06:65:25:07:62:e2:77:49:c4:7b:cc:c2:29:
2d:9e:9c:79:d4:4e:aa:78:82:4f:e7:4f:ea:80:ce:
2e:8d:68:4d:f1:0c:78:92:91:a0:db:ed:5a:e6:6e:
ad:fa:d6:0b:40:c4:ed:bf:88:41:3e:f0:b3:0e:b5:
7c:11:eb:df:b9:df:c8:6a:ce:c9:62:66:92:0d:0a:
e6:cb:02:e1:bc:b5:31:19:00:7f:4d:a1:b2:c0:bd:
56:70:37:b8:40:c4:c7:77:18:82:31:60:67:13:91:
1d:2b:66:8a:e2:09:45:4f:06:b0:a7:eb:db:b0:b3:
d7:dd:94:12:62:84:05:54:66:96:26:45:88:2d:de:
1e:27:b7:ca:38:36:30:f0:5b:e0:b8:a3:b6:ba:1a:
86:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:D9:E5:40:9A:24:26:06:58:06:3D:A9:17:23:3A:A4:2D:67:B4:4F
X509v3 Authority Key Identifier:
keyid:2A:A3:C9:9F:F5:8B:8F:73:3E:F2:C6:2A:77:72:C0:C1:F2:9E:57:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqPJn_WLj3M-8sYqd3LAwfKeV_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:6e:78:95:69:00:94:0a:dd:37:50:87:1a:79:27:41:9f:c5:
27:45:d6:59:d4:07:7b:bb:ad:a0:92:ad:95:6d:8b:98:57:04:
58:40:f3:5e:22:e7:ed:4a:c6:1b:9c:53:a8:ab:11:13:66:ca:
79:33:22:48:44:5f:f8:70:a5:ab:d0:96:9a:89:d7:fe:06:ab:
98:9c:57:13:f1:56:f3:24:bc:47:5d:98:3b:52:38:45:12:c6:
a1:f7:48:aa:a4:68:e7:df:b3:38:fc:77:b9:4f:1c:34:19:2f:
8b:05:ce:85:a3:65:44:d7:81:e2:b1:5e:94:bd:b3:fa:74:87:
72:17:25:ba:e9:78:bd:24:01:38:39:75:43:f0:3f:67:3c:96:
6a:17:9a:8f:ea:69:37:b0:60:a4:7e:e5:75:44:2b:a1:63:72:
8c:3a:e8:8d:c2:f1:f9:43:d1:59:c6:90:80:61:dd:45:0e:27:
38:80:b2:56:0b:ce:25:bb:af:ac:22:4c:b0:78:c0:fb:93:7d:
79:f2:59:17:43:11:85:e5:d7:fc:fb:dc:8d:d5:61:5f:28:df:
4c:cc:4e:05:67:87:d4:f8:bb:1b:b0:50:ec:a1:2e:57:c4:0c:
0f:de:1d:34:fe:ff:46:3c:76:db:35:70:c5:ab:11:74:40:df:
35:ec:82:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 11:18:21 2026 by rpki-client