Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.mft
File: kq8Dyi32Qjt30O83N7D0eRqgNaM.mft (raw, json)
Hash identifier: Q0dnozRuppw138E/Z2faolOOZqnc+lp6iF61x/aP4d8=
Subject key identifier: A9:EE:B6:52:D1:0A:18:DF:5A:FE:21:3F:8A:5E:96:2F:38:D6:AC:72
Authority key identifier: 92:AF:03:CA:2D:F6:42:3B:77:D0:EF:37:37:B0:F4:79:1A:A0:35:A3
Certificate issuer: /CN=92af03ca2df6423b77d0ef3737b0f4791aa035a3
Certificate serial: 019CAEA3D789E512E35AF584A4AB7AEEFA55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kq8Dyi32Qjt30O83N7D0eRqgNaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.mft
Manifest number: 0CD7
Signing time: Mon 02 Mar 2026 13:01:38 +0000
Manifest this update: Mon 02 Mar 2026 13:01:38 +0000
Manifest next update: Tue 03 Mar 2026 13:01:38 +0000
Files and hashes: 1: XPHIg8FqJ9UAJRe3LojhRYNXryY.roa (hash: opDGHpio8SYtIUSk+cF4WF228dM9/Rjti5oGCuaSNos=)
2: kq8Dyi32Qjt30O83N7D0eRqgNaM.crl (hash: 2ZxAEt56IKGsrATQIBxz9DYZp+vVAibbO3stZmBinME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kq8Dyi32Qjt30O83N7D0eRqgNaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:a3:d7:89:e5:12:e3:5a:f5:84:a4:ab:7a:ee:fa:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92af03ca2df6423b77d0ef3737b0f4791aa035a3
Validity
Not Before: Mar 2 13:01:38 2026 GMT
Not After : Mar 3 13:01:38 2026 GMT
Subject: CN=a9eeb652d10a18df5afe213f8a5e962f38d6ac72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8f:db:e8:48:32:14:68:eb:2a:78:78:a3:fc:
0c:8e:25:6a:00:9b:0a:9b:f6:34:6b:62:ce:1a:ec:
13:aa:a0:8f:88:34:f7:ba:71:50:24:a7:c2:9d:53:
28:11:3a:70:95:6d:e6:1d:f4:bd:72:f9:c0:4a:3a:
ee:96:7d:57:ea:0e:55:d1:4d:c7:f8:33:49:a9:bf:
38:c0:46:34:f8:89:06:d6:8b:a0:9f:09:fb:bc:ad:
eb:64:73:dd:88:fe:cd:e2:ad:11:ca:34:6b:8f:12:
c9:f2:2b:6e:75:b2:d7:ea:61:5f:a5:ac:75:61:54:
99:e5:cd:8e:ee:bf:0c:b1:24:0f:77:fa:c5:1b:94:
2a:87:78:95:a3:34:97:1e:eb:17:f2:ea:66:56:4f:
5b:2d:d6:63:01:88:58:0c:57:71:58:12:c0:7d:28:
1d:c7:8d:80:d4:80:e3:fe:fc:4f:bb:96:52:0d:1b:
8c:f2:ea:1a:cc:b4:cc:89:c7:54:72:2d:fb:fb:b8:
4e:d2:3b:ba:95:fa:39:20:85:bd:0d:d8:ba:8d:88:
4e:f5:ed:95:2a:82:f1:c9:cb:04:75:d8:f0:9b:a0:
44:e9:60:0f:00:50:55:34:31:4d:95:3c:0e:cf:32:
c0:4f:fb:4d:45:b4:21:8c:69:2a:e2:4f:39:4a:0d:
b6:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:EE:B6:52:D1:0A:18:DF:5A:FE:21:3F:8A:5E:96:2F:38:D6:AC:72
X509v3 Authority Key Identifier:
keyid:92:AF:03:CA:2D:F6:42:3B:77:D0:EF:37:37:B0:F4:79:1A:A0:35:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kq8Dyi32Qjt30O83N7D0eRqgNaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:8d:d5:84:9a:12:77:73:e3:1c:2e:a8:9f:ee:85:4e:26:65:
ed:4f:d1:25:ad:a8:bd:bf:c1:0b:e8:6a:c5:50:8b:e6:75:de:
35:be:35:4f:ce:fb:19:13:0e:c4:4a:b9:c3:77:36:2f:48:3d:
db:b5:3a:ca:38:3b:5a:d9:3e:32:dc:a2:fe:01:97:95:22:aa:
44:87:d5:12:93:5a:0f:9e:14:3c:f7:6c:07:f9:15:76:d7:04:
f0:db:48:84:5f:4c:9e:32:f5:d5:25:ce:36:76:19:b8:9c:ce:
50:e7:b8:23:13:f6:d1:c1:48:c7:66:92:0a:d9:88:8d:f0:a1:
07:14:0e:87:15:fe:78:74:91:04:67:a2:0e:89:ba:2a:af:bd:
f9:1a:37:44:c8:8d:7f:5d:b4:34:d0:db:a2:90:14:41:6d:b3:
fa:9c:f6:e1:90:49:2e:49:00:4b:53:d3:a5:09:9f:e0:60:82:
f4:b2:63:21:58:61:41:79:46:ae:b3:3e:21:15:e8:33:08:c5:
e2:d3:60:91:44:f0:76:70:e7:7f:e9:a0:a7:24:8c:fc:e6:2b:
12:42:26:88:f6:81:6c:3e:fe:93:91:c3:27:11:4e:0f:6b:8c:
ce:a4:69:4a:5e:18:29:4d:5f:1f:58:46:c2:36:1e:f6:79:ae:
35:e3:e0:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:32:01 2026 by rpki-client