Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.mft
File: KQLJnKcyxkoZx9lzSpj7JOVFVUk.mft (raw, json)
Hash identifier: qaP4ODRXsbJTaBNRq4yEEzCxhxLoRz1dfR6znEFX/LQ=
Subject key identifier: 04:9E:CD:6D:3B:38:D8:2E:83:E5:4B:9A:67:02:4E:A8:47:5B:46:DA
Authority key identifier: 29:02:C9:9C:A7:32:C6:4A:19:C7:D9:73:4A:98:FB:24:E5:45:55:49
Certificate issuer: /CN=2902c99ca732c64a19c7d9734a98fb24e5455549
Certificate serial: 019CAC1008E991E63B020CC740CC0386B9B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQLJnKcyxkoZx9lzSpj7JOVFVUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.mft
Manifest number: 11B3
Signing time: Mon 02 Mar 2026 01:00:57 +0000
Manifest this update: Mon 02 Mar 2026 01:00:57 +0000
Manifest next update: Tue 03 Mar 2026 01:00:57 +0000
Files and hashes: 1: KQLJnKcyxkoZx9lzSpj7JOVFVUk.crl (hash: AFI4he0QNW/6NPtcTvhtswsXGYPP6uFPntr+6X/rqP4=)
2: KT302nZV2Y2p4WDMTwVmIhKydvc.roa (hash: RA/+n+j+c+JYu9hIIUbQQ1FyM1sNRqfioO7K+YA4lYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQLJnKcyxkoZx9lzSpj7JOVFVUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:08:e9:91:e6:3b:02:0c:c7:40:cc:03:86:b9:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2902c99ca732c64a19c7d9734a98fb24e5455549
Validity
Not Before: Mar 2 01:00:57 2026 GMT
Not After : Mar 3 01:00:57 2026 GMT
Subject: CN=049ecd6d3b38d82e83e54b9a67024ea8475b46da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:cf:e3:12:cb:36:ca:a5:c9:44:a8:d1:fa:f5:
9a:00:a1:b5:15:5a:1d:2f:63:91:29:75:f9:2d:7a:
1a:a8:50:13:78:e8:a5:c2:66:1e:0a:5e:fe:ca:38:
1c:6a:6b:6c:73:c6:c9:74:f6:3e:1c:cb:18:de:4d:
4a:7a:1b:4b:00:63:1b:7a:18:79:32:ee:1c:cf:3e:
05:8d:cb:34:60:9b:d4:90:97:68:26:22:b6:eb:9b:
1b:9c:83:1e:40:cf:98:2b:38:db:89:a6:3f:db:86:
16:3c:92:63:f9:d6:fb:0e:95:57:15:ed:72:5d:c7:
ea:d6:69:2a:f0:ae:ca:9d:94:54:b8:c9:27:41:63:
83:6c:07:e1:11:eb:b7:d1:a7:41:17:e6:89:81:7c:
bc:c2:9e:11:78:1a:df:46:74:21:16:95:5a:9f:46:
9d:76:cf:46:cd:07:01:84:b1:b0:8a:59:cb:62:a5:
cf:cc:b0:53:3d:58:db:be:bf:b5:26:ba:84:de:97:
cc:1a:3e:87:a6:46:5b:54:11:72:87:bd:b2:35:c9:
df:ad:82:05:8e:1b:f0:bd:c6:04:67:6f:f6:94:58:
93:8d:dc:07:d7:c6:67:1c:67:b0:f4:2c:17:2f:e0:
2b:a2:52:1c:2e:8b:1a:01:46:8b:2e:77:42:7d:6d:
0f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:9E:CD:6D:3B:38:D8:2E:83:E5:4B:9A:67:02:4E:A8:47:5B:46:DA
X509v3 Authority Key Identifier:
keyid:29:02:C9:9C:A7:32:C6:4A:19:C7:D9:73:4A:98:FB:24:E5:45:55:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQLJnKcyxkoZx9lzSpj7JOVFVUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:6f:f8:05:4a:48:fa:49:04:31:66:05:6a:c6:d5:c1:78:24:
5b:e1:d4:dd:2b:3b:7a:c2:b8:e6:84:72:3d:5d:e8:88:1a:42:
95:4a:50:31:ad:d6:2c:e3:a0:5a:27:3e:95:68:1b:b0:92:63:
9f:a4:8b:a3:a4:36:56:99:ac:b4:1a:bd:9a:88:9e:9c:9e:64:
07:c7:d3:e0:b6:3f:d0:84:c4:cb:43:36:b4:92:71:24:05:05:
66:e3:f0:28:f4:fd:96:4f:70:10:92:89:57:27:ca:f2:68:c4:
49:47:c9:2d:e2:96:98:eb:fd:e5:a7:82:6c:21:5c:32:50:c1:
b7:7e:9d:56:00:1c:5a:bc:65:69:f1:ce:ba:91:af:84:98:72:
91:6d:3d:1b:c2:7a:c7:f7:fb:50:71:a3:ec:af:89:c8:51:a9:
83:c6:f1:d5:83:ad:c5:29:40:fa:07:9d:ae:1f:d4:69:ce:45:
ad:3b:7b:ba:e3:3e:39:14:df:1c:06:3d:49:10:f7:ed:b7:6b:
ab:49:13:82:19:15:c0:7c:99:19:38:d0:71:c7:d0:5b:07:b5:
6e:21:fe:78:fe:1a:10:8a:d3:5d:88:51:5d:64:87:e2:b9:07:
a3:30:4a:32:d6:b5:06:22:80:0d:47:0f:aa:6f:15:47:c5:a6:
cd:1c:6f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:51:31 2026 by rpki-client