Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.mft
File: KQLJnKcyxkoZx9lzSpj7JOVFVUk.mft (raw, json)
Hash identifier: V+GH/L1FhZYLBakdfRpVIMjcp6GZm24RB66rU9uNoMk=
Subject key identifier: 83:DB:56:A7:D9:32:84:9A:4A:DB:A0:8F:4C:8C:EB:31:D9:F6:67:78
Authority key identifier: 29:02:C9:9C:A7:32:C6:4A:19:C7:D9:73:4A:98:FB:24:E5:45:55:49
Certificate issuer: /CN=2902c99ca732c64a19c7d9734a98fb24e5455549
Certificate serial: 019D9B876051874E3C0BFACEA43777CB1F6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQLJnKcyxkoZx9lzSpj7JOVFVUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.mft
Manifest number: 122F
Signing time: Fri 17 Apr 2026 13:00:33 +0000
Manifest this update: Fri 17 Apr 2026 13:00:33 +0000
Manifest next update: Sat 18 Apr 2026 13:00:33 +0000
Files and hashes: 1: KQLJnKcyxkoZx9lzSpj7JOVFVUk.crl (hash: P2lN26w6ziokVuBDKMUMTVL2VIPsKkbuceGlcVOSFXE=)
2: KT302nZV2Y2p4WDMTwVmIhKydvc.roa (hash: RA/+n+j+c+JYu9hIIUbQQ1FyM1sNRqfioO7K+YA4lYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQLJnKcyxkoZx9lzSpj7JOVFVUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:60:51:87:4e:3c:0b:fa:ce:a4:37:77:cb:1f:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2902c99ca732c64a19c7d9734a98fb24e5455549
Validity
Not Before: Apr 17 13:00:33 2026 GMT
Not After : Apr 18 13:00:33 2026 GMT
Subject: CN=83db56a7d932849a4adba08f4c8ceb31d9f66778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9f:83:df:a3:65:93:f4:7a:08:e3:00:c8:5a:
ee:96:63:bd:2c:96:78:8c:3a:dd:bf:28:8a:f9:4d:
a1:36:c6:67:6d:7d:95:a8:a0:af:d5:2b:25:e4:26:
f3:3c:3d:ba:61:f3:2a:9f:37:ee:eb:bb:60:c3:a9:
0d:a8:a2:8c:69:6a:3f:9a:8e:a3:73:e9:c9:93:af:
ce:66:ba:e7:be:19:f5:15:1e:6c:8d:c0:48:dd:7e:
69:d2:1f:01:f8:16:ee:76:14:5a:8e:cb:e2:cd:1f:
f3:d9:55:fc:28:1a:5d:24:0e:6c:7e:28:c1:bf:68:
6c:07:2f:df:c8:04:42:9d:13:6c:bd:15:14:52:e5:
90:52:ea:16:77:3e:f0:ed:ff:f9:14:14:88:c1:dd:
1a:b2:a6:6c:72:d7:ad:9d:82:0c:4d:2c:ac:e8:7e:
8d:40:cc:5d:34:a1:dd:9f:40:f6:8d:d8:60:65:cb:
91:d9:cf:5b:4c:07:05:33:03:33:78:92:c9:1e:49:
2b:86:fc:c5:f0:a5:d1:b5:7f:f4:42:05:93:59:ac:
d8:17:9d:1d:ef:1d:2e:c5:2e:58:c1:1c:b8:e0:34:
cf:6e:4e:3c:e7:9f:a8:43:8a:47:1e:89:01:34:63:
e4:2d:03:48:db:84:68:2c:db:76:0e:fe:28:4f:0d:
96:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:DB:56:A7:D9:32:84:9A:4A:DB:A0:8F:4C:8C:EB:31:D9:F6:67:78
X509v3 Authority Key Identifier:
keyid:29:02:C9:9C:A7:32:C6:4A:19:C7:D9:73:4A:98:FB:24:E5:45:55:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQLJnKcyxkoZx9lzSpj7JOVFVUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:7b:62:1f:2f:5c:7c:d1:64:c3:2b:d5:61:06:da:be:1b:e7:
0d:53:d5:10:c8:d3:22:8c:df:3f:e8:93:29:38:32:a5:9e:60:
a5:ce:63:67:1c:dd:30:78:77:aa:83:24:a7:34:f2:45:47:c7:
79:91:12:48:b4:fa:0f:cb:f8:91:3b:e2:6c:49:59:97:9c:bd:
eb:3f:00:a4:3f:c8:71:54:1b:37:77:67:93:68:a5:4b:99:27:
fb:72:99:5c:ef:a0:11:3e:0e:32:78:a0:3a:3d:8b:fd:1f:98:
07:dc:5d:83:ce:5c:30:32:1d:57:96:35:bd:39:76:cc:86:56:
1d:0e:86:70:81:ae:3b:f4:4b:7c:e1:76:fe:28:5c:e1:ca:08:
54:92:8e:a8:62:47:03:e4:02:d6:9b:52:0b:6a:1a:f9:e1:6f:
6f:45:9e:c6:06:4f:cc:3e:a1:4f:aa:b7:01:06:cf:f8:be:f4:
08:9b:ab:6b:5e:34:28:5a:9d:29:6e:b8:d4:08:53:79:84:b7:
54:01:25:df:f7:30:74:13:3e:57:d9:76:42:74:c9:a1:3c:0b:
29:d4:7c:e6:7c:da:3e:d6:8f:95:6b:96:dc:df:e8:28:78:3b:
e5:f0:78:3f:96:db:5d:c7:bd:86:2d:31:90:d8:7a:a3:f3:b1:
59:71:d2:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bh2BRh048C/rOpDd3yx9qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5MDJjOTljYTczMmM2NGExOWM3ZDk3MzRhOThmYjI0ZTU0
NTU1NDkwHhcNMjYwNDE3MTMwMDMzWhcNMjYwNDE4MTMwMDMzWjAzMTEwLwYDVQQD
Eyg4M2RiNTZhN2Q5MzI4NDlhNGFkYmEwOGY0YzhjZWIzMWQ5ZjY2Nzc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArp+D36Nlk/R6COMAyFrulmO9LJZ4
jDrdvyiK+U2hNsZnbX2VqKCv1Ssl5CbzPD26YfMqnzfu67tgw6kNqKKMaWo/mo6j
c+nJk6/OZrrnvhn1FR5sjcBI3X5p0h8B+BbudhRajsvizR/z2VX8KBpdJA5sfijB
v2hsBy/fyARCnRNsvRUUUuWQUuoWdz7w7f/5FBSIwd0asqZsctetnYIMTSys6H6N
QMxdNKHdn0D2jdhgZcuR2c9bTAcFMwMzeJLJHkkrhvzF8KXRtX/0QgWTWazYF50d
7x0uxS5YwRy44DTPbk4855+oQ4pHHokBNGPkLQNI24RoLNt2Dv4oTw2WVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIPbVqfZMoSaStugj0yM6zHZ9md4MB8GA1UdIwQY
MBaAFCkCyZynMsZKGcfZc0qY+yTlRVVJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1FMSm5LY3l4a29aeDlselNwajdKT1ZGVlVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi81NGNhMjQtNmU1Ni00N2QzLWE0Mjkt
YjY0OWE1NzhmODljLzEvS1FMSm5LY3l4a29aeDlselNwajdKT1ZGVlVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi81NGNhMjQtNmU1Ni00N2QzLWE0MjktYjY0OWE1NzhmODlj
LzEvS1FMSm5LY3l4a29aeDlselNwajdKT1ZGVlVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeHtiHy9c
fNFkwyvVYQbavhvnDVPVEMjTIozfP+iTKTgypZ5gpc5jZxzdMHh3qoMkpzTyRUfH
eZESSLT6D8v4kTvibElZl5y96z8ApD/IcVQbN3dnk2ilS5kn+3KZXO+gET4OMnig
Oj2L/R+YB9xdg85cMDIdV5Y1vTl2zIZWHQ6GcIGuO/RLfOF2/ihc4coIVJKOqGJH
A+QC1ptSC2oa+eFvb0WexgZPzD6hT6q3AQbP+L70CJura140KFqdKW641AhTeYS3
VAEl3/cwdBM+V9l2QnTJoTwLKdR85nzaPtaPlWuW3N/oKHg75fB4P5bbXce9hi0x
kNh6o/OxWXHSjg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:27:05 2026 by rpki-client