Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/94d441-d987-4062-89c1-94c5ad17a7a0/1/kGQm9IPDaqzahzIySriK1YAMmi0.mft
File: kGQm9IPDaqzahzIySriK1YAMmi0.mft (raw, json)
Hash identifier: 8EC9+dcNpHFnzaosDtdRi1n3BiqDzJ+h0I64EsApqHI=
Subject key identifier: 27:1C:FE:A0:17:08:08:A0:3E:8F:7C:00:4C:F9:9C:35:4D:30:B5:4E
Authority key identifier: 90:64:26:F4:83:C3:6A:AC:DA:87:32:32:4A:B8:8A:D5:80:0C:9A:2D
Certificate issuer: /CN=906426f483c36aacda8732324ab88ad5800c9a2d
Certificate serial: 01A001DD33C9CE61542CD756B2FB189B0B56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kGQm9IPDaqzahzIySriK1YAMmi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/94d441-d987-4062-89c1-94c5ad17a7a0/1/kGQm9IPDaqzahzIySriK1YAMmi0.mft
Manifest number: 0F24
Signing time: Fri 14 Aug 2026 20:01:08 +0000
Manifest this update: Fri 14 Aug 2026 20:01:08 +0000
Manifest next update: Sat 15 Aug 2026 20:01:08 +0000
Files and hashes: 1: kGQm9IPDaqzahzIySriK1YAMmi0.crl (hash: 52oFN5B/blRuNMBeCn+7xolhdDTSMf7GppgotVjjkgA=)
2: pEXsp_wHHGLaZhZhYFoeKyAe4xU.roa (hash: xI/2+qldJxPTklb7r+PHTCSnZEv4TfvhGV7Tifv5aSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/94d441-d987-4062-89c1-94c5ad17a7a0/1/kGQm9IPDaqzahzIySriK1YAMmi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/94d441-d987-4062-89c1-94c5ad17a7a0/1/kGQm9IPDaqzahzIySriK1YAMmi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kGQm9IPDaqzahzIySriK1YAMmi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dd:33:c9:ce:61:54:2c:d7:56:b2:fb:18:9b:0b:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=906426f483c36aacda8732324ab88ad5800c9a2d
Validity
Not Before: Aug 14 20:01:08 2026 GMT
Not After : Aug 15 20:01:08 2026 GMT
Subject: CN=271cfea0170808a03e8f7c004cf99c354d30b54e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cf:c6:71:c3:e0:1b:f0:39:3d:d6:c0:7d:4d:
20:94:5d:14:34:ab:18:f4:bc:a7:8d:9c:ca:61:01:
2a:23:d2:7c:0f:57:ac:eb:37:a8:d4:65:79:24:0c:
3f:bb:f8:49:8a:2d:e3:63:8e:fb:1f:f9:a2:54:9d:
7d:a7:4b:be:c0:aa:e4:ad:4d:3e:c5:05:7c:23:08:
ed:f0:0f:20:74:c7:10:7c:01:4b:b9:45:77:6a:40:
47:5e:a5:0e:fd:87:4c:d1:f6:8c:1f:06:8e:e8:d9:
6f:f6:7c:40:2e:5d:0f:98:f2:e8:8d:5f:7b:bf:1d:
a5:0b:4a:a7:d2:f2:a0:57:27:26:4c:d2:fd:5f:32:
10:02:1f:f5:36:c6:38:4e:28:98:01:bf:b4:3e:69:
8b:36:b7:87:19:73:d9:e6:9e:c6:15:6e:5f:bb:9d:
98:15:d9:a8:d9:86:b8:59:e9:0d:60:e3:d2:10:31:
0f:4f:3a:a3:5b:dd:05:ec:72:95:66:53:11:0b:7a:
37:8f:36:fa:e0:04:ce:83:fc:cb:d9:5f:e2:90:0f:
69:c8:ab:6c:29:7a:1a:d9:15:48:63:6a:ef:7e:9e:
ce:9e:28:9a:2c:2c:00:30:8b:62:6c:bd:55:4c:17:
f1:0e:30:3e:9c:9d:96:a0:52:24:62:9e:be:70:92:
7a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:1C:FE:A0:17:08:08:A0:3E:8F:7C:00:4C:F9:9C:35:4D:30:B5:4E
X509v3 Authority Key Identifier:
keyid:90:64:26:F4:83:C3:6A:AC:DA:87:32:32:4A:B8:8A:D5:80:0C:9A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGQm9IPDaqzahzIySriK1YAMmi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/94d441-d987-4062-89c1-94c5ad17a7a0/1/kGQm9IPDaqzahzIySriK1YAMmi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/94d441-d987-4062-89c1-94c5ad17a7a0/1/kGQm9IPDaqzahzIySriK1YAMmi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:a3:d7:48:15:dc:fc:e6:1d:c2:c8:a8:75:b1:5f:53:e3:7a:
eb:fc:fe:ac:bd:13:d7:48:cb:5d:f6:b9:1b:b1:e7:65:e7:d2:
d8:e7:be:aa:30:b4:94:6c:d5:b6:96:15:0a:e2:4a:0b:72:0b:
b0:54:3b:33:40:0e:63:a3:5d:04:bf:6e:b5:63:3c:f6:8c:4d:
d6:39:bf:3a:12:4c:f8:e0:15:1d:17:fd:e3:9b:4d:dd:c6:bd:
d5:f1:81:de:b8:c4:49:8a:69:ad:b1:15:68:a7:5f:4a:e6:f4:
38:7e:c5:20:b3:44:1b:3d:e1:b2:9f:27:f4:57:53:90:98:b6:
f5:4d:0f:95:ff:10:72:4a:50:0c:fc:9c:8e:17:37:62:44:85:
6c:f7:d2:68:25:f0:42:16:7f:58:9a:0d:17:cd:4f:6b:a8:54:
7b:fe:9b:5d:9a:fd:cd:41:ba:ed:83:7a:56:15:46:7b:b7:11:
2e:56:c4:f0:15:36:cb:04:db:70:20:5a:51:ef:3b:5d:e8:ef:
a2:cf:9a:07:d8:d3:9a:07:8f:b6:78:bc:9a:0b:80:58:7b:45:
f8:ee:85:af:8f:23:0e:e1:f2:53:f7:83:d6:30:08:c7:12:f4:
6a:2c:61:69:3d:22:cb:ea:f3:ce:ab:f8:0a:32:2f:f3:de:67:
43:c3:42:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 02:29:40 2026 by rpki-client