Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.mft
File: KQLJnKcyxkoZx9lzSpj7JOVFVUk.mft (raw, json)
Hash identifier: tcLEuoRvAI+DDRWg/Y1bc9UqAhfqdlkdqhbdLS0xZ/o=
Subject key identifier: 63:79:2F:92:9E:DB:96:D6:AE:07:26:FA:CD:AD:1D:1F:9A:D0:C3:2D
Authority key identifier: 29:02:C9:9C:A7:32:C6:4A:19:C7:D9:73:4A:98:FB:24:E5:45:55:49
Certificate issuer: /CN=2902c99ca732c64a19c7d9734a98fb24e5455549
Certificate serial: 01A12B0D7E7F9DCFEC3326234C687D20CCF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQLJnKcyxkoZx9lzSpj7JOVFVUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.mft
Manifest number: 1407
Signing time: Sun 11 Oct 2026 13:01:06 +0000
Manifest this update: Sun 11 Oct 2026 13:01:06 +0000
Manifest next update: Mon 12 Oct 2026 13:01:06 +0000
Files and hashes: 1: KQLJnKcyxkoZx9lzSpj7JOVFVUk.crl (hash: riA6cyr3sYezH8TGF+XT28a5KfyxeKoj+GZglHNSMNA=)
2: KT302nZV2Y2p4WDMTwVmIhKydvc.roa (hash: RA/+n+j+c+JYu9hIIUbQQ1FyM1sNRqfioO7K+YA4lYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQLJnKcyxkoZx9lzSpj7JOVFVUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 13:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:0d:7e:7f:9d:cf:ec:33:26:23:4c:68:7d:20:cc:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2902c99ca732c64a19c7d9734a98fb24e5455549
Validity
Not Before: Oct 11 13:01:06 2026 GMT
Not After : Oct 12 13:01:06 2026 GMT
Subject: CN=63792f929edb96d6ae0726facdad1d1f9ad0c32d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:15:a0:18:38:c2:64:ec:c5:cd:58:26:06:22:
95:94:2a:06:c6:e4:37:65:67:fb:ee:e8:28:22:ea:
67:34:de:fa:be:19:33:1c:0c:63:31:97:c1:05:f9:
6f:cf:42:f0:eb:16:ca:d0:a7:f8:99:66:7d:76:9b:
92:0d:08:61:51:e0:58:b2:03:5e:42:f0:2f:3b:af:
b2:2a:56:b2:ce:16:e7:dc:5a:c5:d8:2b:32:cc:9f:
d9:d4:54:13:7b:eb:59:ca:c9:66:d0:9a:96:2a:a0:
aa:9e:31:ce:02:97:e6:63:3f:66:0f:d9:cb:03:0a:
69:79:8b:a9:80:53:47:b6:0b:84:60:ad:10:c1:76:
77:47:fa:8c:12:35:83:0f:f9:0a:ca:9d:a3:d9:d6:
65:e9:1c:fe:e1:0d:5d:d9:33:ac:7b:62:34:b3:48:
b1:28:cf:a2:9d:98:0d:42:7c:c3:90:d4:6a:85:b1:
f6:b2:76:4e:c5:ca:18:b4:f3:58:70:e6:94:d0:a2:
05:07:78:77:51:93:fc:76:ab:f3:99:e0:11:0b:12:
54:6a:06:c4:1b:82:36:d0:e5:37:13:75:d2:e0:c2:
48:9f:b9:6f:b7:41:f6:fb:eb:54:57:c4:43:df:b2:
d5:34:e0:22:e5:ee:b4:27:e6:e6:66:0b:77:0a:fe:
b4:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:79:2F:92:9E:DB:96:D6:AE:07:26:FA:CD:AD:1D:1F:9A:D0:C3:2D
X509v3 Authority Key Identifier:
keyid:29:02:C9:9C:A7:32:C6:4A:19:C7:D9:73:4A:98:FB:24:E5:45:55:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQLJnKcyxkoZx9lzSpj7JOVFVUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:8b:1c:e0:3c:60:8a:6e:61:e7:6f:cc:1b:e2:ea:04:d5:c7:
fb:eb:09:c5:b0:31:96:dc:9b:77:f9:ea:ba:b2:7a:27:08:10:
61:f8:09:25:95:92:80:9c:26:bf:9c:d4:f1:bd:05:67:93:ca:
30:6d:43:a7:8f:c7:26:6e:15:7e:42:f9:5a:93:ed:df:e5:ef:
85:c7:2e:0c:3e:10:93:8d:2a:82:16:66:c6:29:c8:cf:09:e0:
97:58:96:92:d7:ca:e9:bd:bf:1f:05:df:ad:8d:2c:b9:44:a4:
c9:7c:05:73:2f:59:23:50:b6:54:21:77:4f:f0:d9:06:4a:ee:
8d:6e:09:2b:f8:e8:fb:f6:0d:de:31:ea:5f:d5:1b:c0:1c:ad:
35:9d:5f:af:57:f1:f4:39:6a:35:12:3d:1e:aa:c0:10:88:77:
1b:24:be:95:2b:99:1e:e7:ff:05:a9:fc:2a:b3:7e:a0:d6:da:
ab:e0:1b:ad:65:c8:47:75:38:db:b6:60:cf:f5:fd:9f:1f:9f:
2d:e7:34:03:50:d7:b2:da:b6:37:68:c0:4e:10:b1:f8:e9:de:
cd:8c:98:97:05:bb:6a:b5:12:e7:83:3f:27:48:4f:9b:a7:5d:
92:a9:0b:ab:d5:11:e5:37:8f:67:55:58:58:40:36:0b:a3:7d:
4b:7c:1b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 23:19:28 2026 by rpki-client