Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.mft
File: kq8Dyi32Qjt30O83N7D0eRqgNaM.mft (raw, json)
Hash identifier: 65fH3+6NfcvGtocJAArCjqDEizy42IkPf80RccNZaL0=
Subject key identifier: B8:7F:DE:DB:25:32:89:B9:73:4A:EF:46:72:A3:45:5B:33:40:29:D7
Authority key identifier: 92:AF:03:CA:2D:F6:42:3B:77:D0:EF:37:37:B0:F4:79:1A:A0:35:A3
Certificate issuer: /CN=92af03ca2df6423b77d0ef3737b0f4791aa035a3
Certificate serial: 019D9B19FFE4CC060DCFE7B348AFF5630FE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kq8Dyi32Qjt30O83N7D0eRqgNaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.mft
Manifest number: 0D53
Signing time: Fri 17 Apr 2026 11:01:05 +0000
Manifest this update: Fri 17 Apr 2026 11:01:05 +0000
Manifest next update: Sat 18 Apr 2026 11:01:05 +0000
Files and hashes: 1: 8VSXxcCzy1RczpkkhVuNiNqCitk.roa (hash: nHCP0IVV9N4g1kQbqZXT/navSl3Gd+BXXPdTIW2ZhBA=)
2: kq8Dyi32Qjt30O83N7D0eRqgNaM.crl (hash: ftgbSzGUtffE3xkbG9Tq9+0wfN5k9UbsCPrmlAT2On8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kq8Dyi32Qjt30O83N7D0eRqgNaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 11:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:ff:e4:cc:06:0d:cf:e7:b3:48:af:f5:63:0f:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92af03ca2df6423b77d0ef3737b0f4791aa035a3
Validity
Not Before: Apr 17 11:01:05 2026 GMT
Not After : Apr 18 11:01:05 2026 GMT
Subject: CN=b87fdedb253289b9734aef4672a3455b334029d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:08:65:67:b7:4e:73:22:3b:b2:b8:49:0f:be:
58:7f:08:53:6a:d3:9b:07:1e:54:dc:67:09:01:27:
08:eb:1a:df:9d:5d:77:77:f2:b3:83:c0:ce:14:41:
9a:40:09:f3:25:32:66:20:e4:1c:c2:d3:ad:ff:c6:
7b:a2:ce:72:15:51:16:17:6f:e6:dc:85:39:c5:95:
b7:67:0f:30:ab:e8:97:ec:75:55:8b:53:6c:f4:e4:
6e:1b:28:e7:83:9e:3b:a9:38:73:81:0f:8e:df:ea:
e9:6a:ca:64:02:cb:d7:f0:33:5b:28:a1:18:bf:96:
6c:30:ea:ad:9e:dc:3b:e1:c7:20:fb:f2:e5:a5:5b:
a8:16:75:bb:05:51:dd:1e:42:c3:d3:aa:81:61:12:
b6:57:94:8f:3f:ab:36:93:35:f1:9d:79:5b:a6:e3:
63:62:93:8f:66:c5:35:2e:06:36:3c:b9:f7:9d:e7:
49:ef:48:a5:99:d6:11:f9:e6:3c:cc:59:72:a9:65:
1b:45:71:a5:0b:b1:15:70:e3:d3:d2:6d:16:a9:89:
a2:da:52:48:41:c4:22:5c:4f:ce:bb:e8:5a:71:1f:
88:5e:44:a3:f2:d3:26:8a:6e:dc:22:2e:19:ed:9a:
ba:ec:e6:56:77:da:75:e5:d0:f6:2f:be:07:f4:84:
45:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:7F:DE:DB:25:32:89:B9:73:4A:EF:46:72:A3:45:5B:33:40:29:D7
X509v3 Authority Key Identifier:
keyid:92:AF:03:CA:2D:F6:42:3B:77:D0:EF:37:37:B0:F4:79:1A:A0:35:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kq8Dyi32Qjt30O83N7D0eRqgNaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:8b:ea:93:2c:a8:6f:f4:8a:9a:d2:1f:00:e6:05:ea:ca:52:
88:fc:f0:59:9b:cd:a4:9d:4b:bc:18:42:93:1b:72:eb:08:b5:
c3:81:c2:15:e8:5a:7c:c1:6c:7b:f0:2e:99:69:3b:c9:59:17:
fe:42:fd:32:69:88:df:1f:db:dd:69:80:7d:7a:f9:fa:25:d3:
86:80:9b:0d:d2:a3:05:67:59:85:50:20:06:25:e8:d0:8e:f5:
4a:0c:33:e9:9c:7f:cb:60:72:6b:9b:ac:5c:71:17:e4:d5:9c:
34:3d:b6:38:76:8e:df:5a:7e:dd:94:39:b3:e1:95:f1:21:8f:
f8:8e:66:48:92:b6:6e:6c:82:11:59:f0:f0:d9:a0:30:c1:f9:
91:00:39:3d:c5:29:d1:9c:21:fc:65:f0:d9:20:82:1e:8a:5d:
d8:71:41:c9:81:43:44:fa:2a:01:77:ab:e7:83:6c:89:c6:4d:
13:d2:1b:f2:27:d3:12:9a:d7:2e:b3:40:a8:41:c4:ef:16:e1:
65:d8:8c:94:85:10:16:5e:8e:b0:1b:d5:25:4a:c7:5d:66:d3:
89:65:ea:b5:9e:3f:3b:42:71:a0:7a:f6:bc:7a:c1:41:5c:47:
46:97:06:db:85:ea:e6:f7:37:77:05:05:cf:7e:b0:5d:3f:04:
d1:74:8b:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:51:39 2026 by rpki-client