Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.mft
File: KQLJnKcyxkoZx9lzSpj7JOVFVUk.mft (raw, json)
Hash identifier: 7zs2GsWK/rRaWf7Gzc6cZU5dG2L1NM5sNk7sNoOnZgI=
Subject key identifier: 5D:3C:5C:54:C0:D0:84:58:3B:39:C0:C1:0D:44:B0:98:39:19:8B:BF
Authority key identifier: 29:02:C9:9C:A7:32:C6:4A:19:C7:D9:73:4A:98:FB:24:E5:45:55:49
Certificate issuer: /CN=2902c99ca732c64a19c7d9734a98fb24e5455549
Certificate serial: 019EC111E0A90A100FF9D7F4BE79CBD48AA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQLJnKcyxkoZx9lzSpj7JOVFVUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.mft
Manifest number: 12C7
Signing time: Sat 13 Jun 2026 13:00:34 +0000
Manifest this update: Sat 13 Jun 2026 13:00:34 +0000
Manifest next update: Sun 14 Jun 2026 13:00:34 +0000
Files and hashes: 1: KQLJnKcyxkoZx9lzSpj7JOVFVUk.crl (hash: XGqgl3AZ8jHJg2wqWs92f35uReiiCXu/cKv/ZduRl/Q=)
2: KT302nZV2Y2p4WDMTwVmIhKydvc.roa (hash: RA/+n+j+c+JYu9hIIUbQQ1FyM1sNRqfioO7K+YA4lYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQLJnKcyxkoZx9lzSpj7JOVFVUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 13:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:11:e0:a9:0a:10:0f:f9:d7:f4:be:79:cb:d4:8a:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2902c99ca732c64a19c7d9734a98fb24e5455549
Validity
Not Before: Jun 13 13:00:34 2026 GMT
Not After : Jun 14 13:00:34 2026 GMT
Subject: CN=5d3c5c54c0d084583b39c0c10d44b09839198bbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fb:c4:d2:50:46:4e:fb:02:e1:e5:0d:29:06:
a1:75:15:8c:ca:0e:51:90:f9:0f:23:f8:f6:19:d4:
46:eb:c9:71:5a:c1:b3:12:7e:a3:b7:54:7c:7b:b4:
ac:a5:8b:a3:54:7a:1d:03:cb:cc:a1:0a:23:e8:b6:
bf:bf:21:9d:ba:57:38:a7:05:2c:84:17:ff:73:24:
44:19:02:75:dc:cc:ee:8e:6d:c8:33:38:fc:6c:31:
de:19:7a:9d:62:4b:6e:2a:4b:bb:0b:91:c9:48:1c:
67:cc:0c:16:47:36:79:68:b0:c6:dd:aa:fc:c4:a3:
6b:aa:f3:8c:c3:f3:e8:fa:3d:2b:1a:41:04:c5:43:
69:e4:63:a2:56:cb:69:de:aa:33:51:eb:b5:4d:71:
0d:ba:32:5a:e2:d4:ca:bf:b0:f2:05:c2:08:9a:c8:
bb:f2:d6:9b:ea:43:c2:29:35:b4:83:87:1d:24:a7:
da:da:24:66:f5:65:c6:d5:2c:c8:e4:97:06:ce:1b:
8f:ae:da:f4:bb:97:6f:69:83:c1:c2:2f:a2:a9:b8:
d1:29:1e:d7:81:56:8f:64:f6:80:d6:eb:34:f8:a8:
9c:f1:55:62:9a:70:97:10:7f:cb:c4:6a:75:13:88:
ab:2a:9c:5e:2f:ab:4c:19:40:63:6a:59:8b:0f:69:
5c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:3C:5C:54:C0:D0:84:58:3B:39:C0:C1:0D:44:B0:98:39:19:8B:BF
X509v3 Authority Key Identifier:
keyid:29:02:C9:9C:A7:32:C6:4A:19:C7:D9:73:4A:98:FB:24:E5:45:55:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQLJnKcyxkoZx9lzSpj7JOVFVUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:1b:fb:0e:5d:c7:6a:e9:bd:fd:55:1a:67:cc:0f:67:bf:25:
02:fd:21:64:a2:17:e6:c2:4b:5e:c1:be:c8:c6:76:cf:da:27:
7a:94:3b:b7:0b:69:57:5d:58:4c:0b:5d:3e:00:54:3d:2d:30:
e6:a0:71:46:df:5b:46:17:29:98:bb:a1:40:55:94:bd:87:04:
35:3a:a8:55:ea:50:0d:26:36:fc:e8:d6:8f:ec:09:73:62:68:
5a:6a:c4:bd:d2:aa:76:9d:28:5f:54:18:5d:8d:c5:29:83:a5:
61:0c:f1:cc:c9:10:4a:a6:18:46:c7:47:af:c5:4e:1e:5e:26:
83:79:67:2c:57:ec:91:35:11:4a:89:10:5a:a7:bb:01:99:d5:
57:1b:ea:dc:76:09:c4:ea:74:1a:d4:72:b5:0c:2a:44:d8:4b:
c4:5e:88:b3:90:a8:55:bf:15:e4:8a:a3:e3:71:be:30:fc:59:
f4:e7:e6:be:8f:30:02:99:3b:b0:0f:6c:bd:02:99:ee:15:71:
9f:63:4d:6a:91:10:54:a0:ed:26:69:ac:66:f0:1d:4a:3d:67:
87:b5:b7:de:cc:20:cc:37:eb:1f:c8:46:20:4b:11:5c:0c:1e:
3d:53:4c:4c:a6:7c:7f:10:47:0b:2f:db:69:a2:58:77:99:5a:
b3:01:0f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:57:36 2026 by rpki-client