Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/KqggK00MXBEdN08emLc9tJJNZLE.mft
File: KqggK00MXBEdN08emLc9tJJNZLE.mft (raw, json)
Hash identifier: 1Y5Jx6b8elQr2PP81SHgaHijgggolehIa6SGPDi03Lk=
Subject key identifier: B4:59:E6:89:06:25:0A:00:B2:AD:2B:82:A5:66:2A:65:8B:93:B7:A3
Authority key identifier: 2A:A8:20:2B:4D:0C:5C:11:1D:37:4F:1E:98:B7:3D:B4:92:4D:64:B1
Certificate issuer: /CN=2aa8202b4d0c5c111d374f1e98b73db4924d64b1
Certificate serial: 019CAD593CC79A7663F64FAFD6B9E9D54C08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqggK00MXBEdN08emLc9tJJNZLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/KqggK00MXBEdN08emLc9tJJNZLE.mft
Manifest number: 0E7C
Signing time: Mon 02 Mar 2026 07:00:32 +0000
Manifest this update: Mon 02 Mar 2026 07:00:32 +0000
Manifest next update: Tue 03 Mar 2026 07:00:32 +0000
Files and hashes: 1: KqggK00MXBEdN08emLc9tJJNZLE.crl (hash: Qz1fsB8b89lJFsZ23XO2Xwm0sbNwbxottSKmGA7UYf0=)
2: Ws4in-OWRWSEcoBN7waoCEBULUk.roa (hash: Uju7zYqejr4rhXJP4MJKAs7Vc49ym9vbx4ol+jWt7tA=)
3: hQ65-JJPcn9XxnJlMV8R8YaKILg.roa (hash: BnQj/39qzfqqWoNJrrD5UWocu4HxdA3qcueXigYXVac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/KqggK00MXBEdN08emLc9tJJNZLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/KqggK00MXBEdN08emLc9tJJNZLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqggK00MXBEdN08emLc9tJJNZLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:3c:c7:9a:76:63:f6:4f:af:d6:b9:e9:d5:4c:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa8202b4d0c5c111d374f1e98b73db4924d64b1
Validity
Not Before: Mar 2 07:00:32 2026 GMT
Not After : Mar 3 07:00:32 2026 GMT
Subject: CN=b459e68906250a00b2ad2b82a5662a658b93b7a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fb:22:a2:4c:cf:a3:b1:16:ad:fa:66:9a:3e:
92:ca:4d:86:e4:c4:5e:c8:2e:0d:1c:4c:6a:bc:b7:
db:c0:17:34:be:d4:ed:e8:d2:cc:99:79:d3:3c:13:
ec:37:67:d4:17:20:27:85:36:f8:d6:fc:84:6c:eb:
6d:38:10:16:23:dc:9d:20:ff:1e:5a:e6:56:8e:8c:
18:d7:0e:c3:84:48:1f:a2:29:e2:29:0d:75:9b:7a:
bd:9e:49:09:30:fb:36:fd:7d:5f:8e:55:2a:b5:91:
28:bb:88:53:5c:9c:b6:5d:07:43:ce:d3:13:41:7f:
0a:8b:d4:71:c7:e3:41:00:bd:21:ff:0c:16:58:0d:
a6:98:d2:71:a4:e0:9c:75:1f:61:69:92:e0:bd:de:
94:7f:36:94:1c:ab:e4:d3:69:ba:23:7d:1a:a2:b7:
88:b3:c4:ad:83:12:2f:73:96:51:e6:93:ce:be:8c:
a9:bf:c1:1b:a6:59:bc:ad:0b:c9:15:d6:47:10:66:
b0:86:37:7f:ce:44:79:7c:29:81:25:45:34:1a:b7:
19:be:c3:c6:85:a3:52:4b:06:37:fc:19:60:28:8b:
4f:39:be:2d:59:26:ac:fc:00:27:9e:00:47:eb:0b:
c2:96:bc:b3:0d:41:87:22:67:30:26:d7:ac:f5:41:
67:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:59:E6:89:06:25:0A:00:B2:AD:2B:82:A5:66:2A:65:8B:93:B7:A3
X509v3 Authority Key Identifier:
keyid:2A:A8:20:2B:4D:0C:5C:11:1D:37:4F:1E:98:B7:3D:B4:92:4D:64:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqggK00MXBEdN08emLc9tJJNZLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/KqggK00MXBEdN08emLc9tJJNZLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/KqggK00MXBEdN08emLc9tJJNZLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:d7:4b:56:8f:1c:15:5d:fb:ed:5c:d5:5c:b8:4d:5a:5a:eb:
f1:a7:33:ae:1b:0b:72:f9:b2:35:d8:a7:38:85:63:bc:b6:11:
18:45:61:65:3d:b1:64:f4:8b:a3:57:a4:fe:5f:16:90:f2:8c:
fe:9e:9f:15:cb:ab:d0:13:f4:6f:92:f8:a7:f8:b5:d6:d9:08:
9f:13:94:41:00:55:70:87:33:e1:17:70:42:2d:53:8b:00:62:
b7:3b:a5:16:26:1b:27:05:d2:c9:1b:ee:1a:c8:44:11:6c:5d:
08:98:d2:cf:25:32:b0:b6:03:87:90:fe:7e:cc:41:b0:cc:65:
cc:3b:c4:5d:54:60:62:59:2c:7f:ed:1d:23:87:c8:1c:5f:67:
16:ed:92:43:9a:08:95:2e:e6:05:e4:c4:00:66:39:95:5d:b1:
cc:a0:96:4d:97:35:63:44:91:54:6e:a8:05:a8:63:ae:06:cb:
85:50:ad:dc:9e:c5:7d:c9:7d:a3:1f:95:bd:ce:ea:19:0e:12:
04:ba:2b:72:ca:89:6f:9e:51:86:ed:bc:b2:49:dd:49:f7:e4:
cb:6c:05:7c:25:6e:12:3d:ea:bd:4f:cf:94:b5:b2:72:ab:29:
e0:c7:46:17:55:23:ac:0a:33:ad:25:48:8a:81:d4:a6:d7:0c:
03:c1:6f:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytWTzHmnZj9k+v1rnp1UwIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYTgyMDJiNGQwYzVjMTExZDM3NGYxZTk4YjczZGI0OTI0
ZDY0YjEwHhcNMjYwMzAyMDcwMDMyWhcNMjYwMzAzMDcwMDMyWjAzMTEwLwYDVQQD
EyhiNDU5ZTY4OTA2MjUwYTAwYjJhZDJiODJhNTY2MmE2NThiOTNiN2EzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyfsiokzPo7EWrfpmmj6Syk2G5MRe
yC4NHExqvLfbwBc0vtTt6NLMmXnTPBPsN2fUFyAnhTb41vyEbOttOBAWI9ydIP8e
WuZWjowY1w7DhEgfoiniKQ11m3q9nkkJMPs2/X1fjlUqtZEou4hTXJy2XQdDztMT
QX8Ki9Rxx+NBAL0h/wwWWA2mmNJxpOCcdR9haZLgvd6UfzaUHKvk02m6I30aoreI
s8StgxIvc5ZR5pPOvoypv8Ebplm8rQvJFdZHEGawhjd/zkR5fCmBJUU0GrcZvsPG
haNSSwY3/BlgKItPOb4tWSas/AAnngBH6wvClryzDUGHImcwJtes9UFnjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLRZ5okGJQoAsq0rgqVmKmWLk7ejMB8GA1UdIwQY
MBaAFCqoICtNDFwRHTdPHpi3PbSSTWSxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3FnZ0swME1YQkVkTjA4ZW1MYzl0SkpOWkxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8yN2IzYjMtNGIyMi00NzQwLWE2NWEt
NmU3YmFlNWZmODk4LzEvS3FnZ0swME1YQkVkTjA4ZW1MYzl0SkpOWkxFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC8yN2IzYjMtNGIyMi00NzQwLWE2NWEtNmU3YmFlNWZmODk4
LzEvS3FnZ0swME1YQkVkTjA4ZW1MYzl0SkpOWkxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE9dLVo8c
FV377VzVXLhNWlrr8aczrhsLcvmyNdinOIVjvLYRGEVhZT2xZPSLo1ek/l8WkPKM
/p6fFcur0BP0b5L4p/i11tkInxOUQQBVcIcz4RdwQi1TiwBitzulFiYbJwXSyRvu
GshEEWxdCJjSzyUysLYDh5D+fsxBsMxlzDvEXVRgYlksf+0dI4fIHF9nFu2SQ5oI
lS7mBeTEAGY5lV2xzKCWTZc1Y0SRVG6oBahjrgbLhVCt3J7Ffcl9ox+Vvc7qGQ4S
BLorcsqJb55Rhu28skndSffky2wFfCVuEj3qvU/PlLWycqsp4MdGF1UjrAozrSVI
ioHUptcMA8Fvnw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:02:05 2026 by rpki-client