Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.mft
File: kq8Dyi32Qjt30O83N7D0eRqgNaM.mft (raw, json)
Hash identifier: 5a0jgWQVgR+V/LKSelargrxYTTJI7wZwz6dafr+oGDA=
Subject key identifier: A2:59:5D:9F:2C:0A:DF:CE:8C:F9:17:69:C3:EB:B5:5F:56:90:8B:EC
Authority key identifier: 92:AF:03:CA:2D:F6:42:3B:77:D0:EF:37:37:B0:F4:79:1A:A0:35:A3
Certificate issuer: /CN=92af03ca2df6423b77d0ef3737b0f4791aa035a3
Certificate serial: 019D9D0815A9C4FEA8EAB2B22285A85FC62E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kq8Dyi32Qjt30O83N7D0eRqgNaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.mft
Manifest number: 0D54
Signing time: Fri 17 Apr 2026 20:00:45 +0000
Manifest this update: Fri 17 Apr 2026 20:00:45 +0000
Manifest next update: Sat 18 Apr 2026 20:00:45 +0000
Files and hashes: 1: 8VSXxcCzy1RczpkkhVuNiNqCitk.roa (hash: nHCP0IVV9N4g1kQbqZXT/navSl3Gd+BXXPdTIW2ZhBA=)
2: kq8Dyi32Qjt30O83N7D0eRqgNaM.crl (hash: 6GMmEayK3iQxAuVZi5OOkqSENOzrNBJVsxNMKbt/8To=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kq8Dyi32Qjt30O83N7D0eRqgNaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:08:15:a9:c4:fe:a8:ea:b2:b2:22:85:a8:5f:c6:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92af03ca2df6423b77d0ef3737b0f4791aa035a3
Validity
Not Before: Apr 17 20:00:45 2026 GMT
Not After : Apr 18 20:00:45 2026 GMT
Subject: CN=a2595d9f2c0adfce8cf91769c3ebb55f56908bec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a8:13:bc:9e:71:eb:bc:af:df:dd:51:2b:dc:
ad:0a:25:bb:c4:d1:62:00:32:94:56:0c:2a:dd:0a:
86:d7:cc:b1:88:cd:09:55:54:10:05:d2:f6:f7:81:
a9:b6:fb:e2:5b:f9:d0:df:dd:03:5d:b2:60:96:20:
c1:c6:3b:44:06:dd:aa:e4:68:5c:a1:96:2a:a9:ca:
93:73:1a:a2:d6:a7:53:ba:e3:c8:2c:ea:b3:20:e6:
e7:be:50:17:2c:99:2a:3f:c5:54:2c:ea:37:4b:63:
ea:35:f4:b2:5f:6f:03:7c:2e:56:8a:f4:2d:87:b7:
48:2d:87:d5:ef:fa:d9:6e:cc:04:98:54:bd:a2:97:
88:26:89:34:56:f5:09:8e:ff:47:63:14:5a:5f:4d:
5d:f2:d2:af:03:9a:91:54:e6:9e:70:e9:13:5a:3c:
22:09:19:6c:cc:3f:39:39:76:cc:13:62:00:b9:a1:
15:91:16:b3:d4:76:96:cf:7c:29:7c:40:9c:d9:63:
54:87:3b:d5:4d:c3:c1:c8:c0:61:42:40:5b:3e:f4:
26:43:a0:99:db:1e:e5:32:8e:63:73:8e:e1:2a:0c:
3d:43:38:a9:ac:40:b3:95:90:db:7d:04:56:79:46:
c8:65:bf:db:f7:9d:66:24:dd:68:48:8d:4c:dd:a1:
3b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:59:5D:9F:2C:0A:DF:CE:8C:F9:17:69:C3:EB:B5:5F:56:90:8B:EC
X509v3 Authority Key Identifier:
keyid:92:AF:03:CA:2D:F6:42:3B:77:D0:EF:37:37:B0:F4:79:1A:A0:35:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kq8Dyi32Qjt30O83N7D0eRqgNaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:ce:40:24:5f:20:cc:e1:0f:d2:b0:81:69:de:39:e3:c6:a4:
56:30:4f:cf:23:a0:cd:c8:3d:63:41:66:e7:94:8d:ac:bf:e1:
2e:ae:5c:39:6f:cd:47:6d:b9:2d:4d:42:bb:d5:dd:b7:0d:de:
68:0b:1d:28:d0:e8:b7:6a:54:65:ad:7e:dc:a9:66:10:47:dd:
d7:b4:ba:30:b7:ff:bc:05:99:3e:2a:65:0e:a3:8e:70:f6:7c:
20:d0:2b:37:ca:2b:b7:f4:15:17:fe:6c:53:53:03:f6:4a:54:
91:4a:ce:d1:9b:ad:0f:44:c7:89:52:73:3c:ae:54:15:ae:0a:
16:5b:c9:cf:ec:10:34:6c:a3:56:1d:d4:c3:62:08:1e:72:87:
d9:73:be:71:9e:c5:dd:c1:ff:28:2d:17:e6:01:10:50:04:7d:
75:fa:26:b4:c6:d4:87:6f:ca:41:aa:fe:0a:63:2e:da:9f:93:
3f:db:fe:02:c1:49:34:6d:d1:08:55:65:09:93:60:9b:b4:bf:
da:3b:6c:71:1b:f3:0a:59:96:69:4d:b1:02:5e:17:48:ad:81:
69:a8:d2:47:71:e0:7a:28:a4:c5:1e:3c:f1:04:16:7e:43:85:
32:a1:bf:81:5a:5e:eb:c1:80:a1:e8:31:ef:f8:b5:c0:dd:76:
83:3a:9d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:50:20 2026 by rpki-client