Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.mft
File: kq8Dyi32Qjt30O83N7D0eRqgNaM.mft (raw, json)
Hash identifier: /svZwqik6OSMTxFrN5OhXajAVfEjw6RFkSRjM5V7UF4=
Subject key identifier: 70:BB:77:69:9F:54:E2:51:22:D1:1D:16:84:5C:4A:2A:17:75:B2:C6
Authority key identifier: 92:AF:03:CA:2D:F6:42:3B:77:D0:EF:37:37:B0:F4:79:1A:A0:35:A3
Certificate issuer: /CN=92af03ca2df6423b77d0ef3737b0f4791aa035a3
Certificate serial: 01A1306A932C38B51B40AEA0F528E639BFE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kq8Dyi32Qjt30O83N7D0eRqgNaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.mft
Manifest number: 0F2E
Signing time: Mon 12 Oct 2026 14:00:53 +0000
Manifest this update: Mon 12 Oct 2026 14:00:53 +0000
Manifest next update: Tue 13 Oct 2026 14:00:53 +0000
Files and hashes: 1: 8VSXxcCzy1RczpkkhVuNiNqCitk.roa (hash: nHCP0IVV9N4g1kQbqZXT/navSl3Gd+BXXPdTIW2ZhBA=)
2: kq8Dyi32Qjt30O83N7D0eRqgNaM.crl (hash: FPPcecjonIT9ePqwmPgXIIf2nr6VwCJUcIdwriB7g/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kq8Dyi32Qjt30O83N7D0eRqgNaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 14:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:30:6a:93:2c:38:b5:1b:40:ae:a0:f5:28:e6:39:bf:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92af03ca2df6423b77d0ef3737b0f4791aa035a3
Validity
Not Before: Oct 12 14:00:53 2026 GMT
Not After : Oct 13 14:00:53 2026 GMT
Subject: CN=70bb77699f54e25122d11d16845c4a2a1775b2c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d3:4b:a3:14:58:88:0e:54:d2:b0:7d:3d:1d:
4a:16:86:e0:c6:49:62:d0:34:ee:28:04:94:88:a2:
e1:95:27:fb:44:48:78:90:77:a2:d4:bc:59:80:be:
01:2c:95:a7:0a:67:fb:b4:46:5a:64:84:88:73:bd:
2f:7f:69:02:81:03:e4:0a:5c:17:ce:b9:e0:9c:1b:
a9:60:22:27:ac:0d:0b:fa:ce:e3:3d:cd:f4:d0:32:
77:e3:72:47:83:96:18:22:91:f8:1b:82:27:d5:b8:
66:7b:e9:3f:67:e5:02:a8:80:3f:f9:cf:4b:fd:d8:
b0:9c:30:96:dd:9a:7c:00:79:01:0e:c2:76:03:1d:
ed:8f:6c:11:ea:5a:ac:05:8a:86:5b:77:7d:a2:98:
5d:fe:2c:05:8a:05:35:43:f2:03:13:6b:55:cd:52:
f0:9f:56:ee:8a:e2:2e:e1:93:aa:f8:34:13:9a:a1:
75:ef:12:ba:0a:0b:b7:de:9a:de:92:a0:b1:3c:c9:
b6:18:17:db:11:e9:35:65:dd:e9:14:13:62:38:fb:
5b:94:9c:fe:d8:38:66:08:e6:79:fb:db:f5:d3:6a:
49:30:dd:f2:6c:21:5a:26:be:2b:57:28:c4:61:a6:
d8:e9:d5:2d:99:c0:20:6a:54:7c:7a:68:e2:aa:3c:
01:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:BB:77:69:9F:54:E2:51:22:D1:1D:16:84:5C:4A:2A:17:75:B2:C6
X509v3 Authority Key Identifier:
keyid:92:AF:03:CA:2D:F6:42:3B:77:D0:EF:37:37:B0:F4:79:1A:A0:35:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kq8Dyi32Qjt30O83N7D0eRqgNaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:39:62:4f:47:00:76:cb:bd:1e:9f:40:99:08:16:7e:2d:23:
8c:d2:42:ef:fe:d5:ca:9c:f4:b2:65:58:35:48:f3:20:0b:c1:
bb:4e:2f:56:62:26:b3:3c:29:e0:e3:2b:c2:79:a8:62:78:cf:
1f:51:7d:18:89:1b:1d:ee:ae:f7:34:ec:d8:51:81:2f:d4:21:
49:6d:f0:06:7c:bc:52:43:59:6c:25:51:b5:5f:53:ff:cf:c0:
d7:c2:16:20:e6:c7:38:d4:58:5d:22:54:c6:ad:2b:67:d1:22:
58:99:19:3e:10:6f:3d:5d:f1:f8:24:ee:14:a5:87:74:ec:70:
38:29:cd:b4:01:d4:ab:4a:4d:82:2c:78:80:10:dc:0e:52:74:
3b:70:48:a0:9e:3d:aa:dc:c5:69:b7:13:1e:00:66:b7:5f:de:
54:71:d9:16:c1:8a:ea:b0:d2:98:9a:a9:ae:a4:e2:8f:76:4c:
16:54:af:b1:2a:9a:33:e7:86:b4:a6:9c:6b:c8:41:83:7e:8a:
86:7f:bb:25:67:93:2d:6c:93:a5:af:8e:60:9a:1e:cc:ea:af:
97:e0:f5:71:d7:42:b5:97:10:61:60:41:e5:13:c0:aa:bc:2f:
84:4a:ef:93:d6:29:52:b5:b7:a5:57:39:aa:4c:0c:e1:9f:27:
8b:bb:0c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 23:09:46 2026 by rpki-client