Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft
File: KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft (raw, json)
Hash identifier: ja0g/GKefb/rRZNR5bQnWhRSgJiY0FY5WgLtpDKKWzg=
Subject key identifier: B2:BC:DE:1B:59:ED:91:49:22:1E:03:D4:9C:CC:81:F8:4C:4F:5C:16
Authority key identifier: 2A:A3:C9:9F:F5:8B:8F:73:3E:F2:C6:2A:77:72:C0:C1:F2:9E:57:FC
Certificate issuer: /CN=2aa3c99ff58b8f733ef2c62a7772c0c1f29e57fc
Certificate serial: 01A18909C2696AE4FE2AE005BE2533755752
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqPJn_WLj3M-8sYqd3LAwfKeV_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft
Manifest number: 13D7
Signing time: Thu 29 Oct 2026 19:01:20 +0000
Manifest this update: Thu 29 Oct 2026 19:01:20 +0000
Manifest next update: Fri 30 Oct 2026 19:01:20 +0000
Files and hashes: 1: KqPJn_WLj3M-8sYqd3LAwfKeV_w.crl (hash: XaX6IhQkAyPoVzgT0Wwi0dUef0QYceL11kAeG7SwcNI=)
2: TjwUrt0QbOg_7Hv7hnE5gPoovGE.roa (hash: vCYAcdHdzTkyR5n/fzt3EtvDXfAERXz/dZUmibVHkag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqPJn_WLj3M-8sYqd3LAwfKeV_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 19:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:89:09:c2:69:6a:e4:fe:2a:e0:05:be:25:33:75:57:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa3c99ff58b8f733ef2c62a7772c0c1f29e57fc
Validity
Not Before: Oct 29 19:01:20 2026 GMT
Not After : Oct 30 19:01:20 2026 GMT
Subject: CN=b2bcde1b59ed9149221e03d49ccc81f84c4f5c16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ee:00:52:ff:71:cf:b8:44:1b:a9:3c:91:18:
d5:a8:d5:13:86:eb:1a:20:1d:c7:3f:82:ca:b9:d5:
79:f6:e1:c0:2e:c5:5d:cb:3f:96:4f:cf:da:da:d7:
e4:a7:5a:c1:78:8e:f5:fd:ec:c9:b0:6d:08:74:b8:
2d:f4:0a:ed:81:de:5a:d0:b7:d0:1c:65:f9:c5:ce:
65:9e:cd:53:d4:98:cf:aa:4f:b1:dd:e6:d4:38:14:
49:05:e4:a3:84:5f:07:37:6a:6a:63:51:46:35:1e:
ac:db:be:c5:51:0e:37:38:69:63:c8:8b:20:d7:69:
aa:ea:ea:6c:b5:54:d9:e1:24:5a:76:4a:42:35:00:
36:fa:ad:48:fd:2e:b3:1f:18:2d:4a:99:a1:c1:73:
13:a4:40:1c:a7:ee:9a:77:c1:31:ac:df:ca:9a:a1:
05:45:f4:ff:da:7f:5e:fe:d4:da:b5:41:6b:83:e2:
50:5d:1f:a4:16:98:56:b6:ac:e0:dd:0d:f4:d0:88:
8d:f6:00:b7:ba:ce:60:8e:fe:a2:5d:13:25:91:ad:
26:a2:a5:df:0b:ee:08:8f:d9:b2:b5:b5:4e:27:67:
fe:f2:25:ef:25:15:5d:6c:b4:e0:99:d4:4f:ee:fe:
20:46:0c:dc:7b:9f:c7:bd:22:06:e3:6a:a4:64:86:
e4:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:BC:DE:1B:59:ED:91:49:22:1E:03:D4:9C:CC:81:F8:4C:4F:5C:16
X509v3 Authority Key Identifier:
keyid:2A:A3:C9:9F:F5:8B:8F:73:3E:F2:C6:2A:77:72:C0:C1:F2:9E:57:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqPJn_WLj3M-8sYqd3LAwfKeV_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:b1:4f:5c:ac:81:c3:ac:37:bb:53:40:b2:0a:fe:64:7a:14:
5e:d9:76:07:cd:13:19:e1:1e:3b:09:fb:2a:37:27:98:30:1f:
5d:d4:5e:8d:42:95:9e:bb:1e:d2:2d:c7:5b:f5:ee:40:7f:a4:
ea:6e:e5:11:26:de:8a:58:f2:63:1f:3a:45:1c:46:98:0d:49:
55:98:a9:be:07:89:99:a1:14:5e:62:3a:ab:da:b6:1c:b1:ee:
6d:74:f5:6c:3d:4e:6c:50:ed:38:e8:c4:87:67:7e:ad:e4:75:
83:21:a1:2b:f8:29:78:2d:e6:31:9e:54:e4:fb:e0:d3:d1:d5:
1c:ad:90:b3:7b:1e:ab:bd:bc:0e:50:e5:e4:25:b8:fd:6e:64:
ca:b9:af:e3:a9:29:e0:38:58:44:07:93:d9:54:e6:7a:9a:e9:
dd:69:ad:9a:8b:98:5f:95:20:fd:5e:1e:04:f8:c9:fb:3d:bc:
25:52:65:38:cf:52:18:61:13:72:3f:68:c2:79:93:b2:23:59:
bb:e2:8c:1a:33:9a:93:54:81:73:b8:14:9f:47:0a:c7:ed:22:
3f:9d:b1:2a:a3:ae:a4:df:5f:41:75:8e:38:0c:ee:cd:1c:73:
44:43:54:a1:5a:de:39:84:2e:fe:7a:79:5c:0f:fa:ed:72:63:
ba:35:73:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 04:56:59 2026 by rpki-client