Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/94d441-d987-4062-89c1-94c5ad17a7a0/1/kGQm9IPDaqzahzIySriK1YAMmi0.mft
File: kGQm9IPDaqzahzIySriK1YAMmi0.mft (raw, json)
Hash identifier: haDpqIA5X+xVJ+BJfbyNteopzt0N8Ta85n7W+dqaI5s=
Subject key identifier: FE:E1:07:46:5A:0C:61:E9:59:7B:56:87:0F:47:BC:92:AB:4D:FF:16
Authority key identifier: 90:64:26:F4:83:C3:6A:AC:DA:87:32:32:4A:B8:8A:D5:80:0C:9A:2D
Certificate issuer: /CN=906426f483c36aacda8732324ab88ad5800c9a2d
Certificate serial: 01A16CED4DE17F87CD41C8F8D641C6FC3E33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kGQm9IPDaqzahzIySriK1YAMmi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/94d441-d987-4062-89c1-94c5ad17a7a0/1/kGQm9IPDaqzahzIySriK1YAMmi0.mft
Manifest number: 0FE0
Signing time: Sat 24 Oct 2026 08:00:53 +0000
Manifest this update: Sat 24 Oct 2026 08:00:53 +0000
Manifest next update: Sun 25 Oct 2026 08:00:53 +0000
Files and hashes: 1: kGQm9IPDaqzahzIySriK1YAMmi0.crl (hash: WZ1JT8iIN6eixY/5mm/5UlY508MebvTF+jr9RZOGiDw=)
2: pEXsp_wHHGLaZhZhYFoeKyAe4xU.roa (hash: xI/2+qldJxPTklb7r+PHTCSnZEv4TfvhGV7Tifv5aSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/94d441-d987-4062-89c1-94c5ad17a7a0/1/kGQm9IPDaqzahzIySriK1YAMmi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/94d441-d987-4062-89c1-94c5ad17a7a0/1/kGQm9IPDaqzahzIySriK1YAMmi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kGQm9IPDaqzahzIySriK1YAMmi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 08:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6c:ed:4d:e1:7f:87:cd:41:c8:f8:d6:41:c6:fc:3e:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=906426f483c36aacda8732324ab88ad5800c9a2d
Validity
Not Before: Oct 24 08:00:53 2026 GMT
Not After : Oct 25 08:00:53 2026 GMT
Subject: CN=fee107465a0c61e9597b56870f47bc92ab4dff16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d5:c3:92:71:ae:98:70:c8:35:80:a3:01:d0:
00:a8:2c:6d:47:12:ce:71:76:0f:2d:41:7b:ae:a7:
00:c7:25:06:0f:81:d8:cd:4e:cb:f2:f0:97:8f:be:
76:aa:54:e5:af:43:1f:18:7f:fd:97:15:59:47:ac:
df:62:0b:70:49:8c:46:2e:b1:f5:10:93:37:65:20:
68:2d:5d:41:6b:85:f5:8c:d4:7f:37:2f:09:99:e1:
a1:73:8a:19:ad:22:d0:f2:a4:51:df:0c:2d:74:0f:
3c:58:fd:4f:c2:7d:68:b4:57:fb:ae:d8:97:32:8e:
73:e4:03:0b:70:99:51:64:89:a9:fd:c4:22:50:25:
05:1f:9a:ac:b0:7d:de:af:a9:82:47:07:6a:2e:ca:
ce:e7:37:a8:8a:45:b5:a6:3a:d1:9f:1e:69:de:56:
c4:c0:bd:70:66:51:c3:4a:ec:cb:ce:d6:b7:d5:ec:
59:1a:79:76:56:f0:b3:ec:a7:d0:ed:09:d3:e6:0f:
88:ec:d1:bc:be:32:9d:10:e3:ef:d2:85:92:c5:bf:
e9:15:1a:1d:f3:bf:9d:8e:50:23:91:72:19:38:7f:
7d:ab:fc:53:5f:b0:94:c3:62:18:92:07:88:08:54:
15:f9:7b:e1:d7:42:04:10:5f:58:53:bc:35:9a:43:
5a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:E1:07:46:5A:0C:61:E9:59:7B:56:87:0F:47:BC:92:AB:4D:FF:16
X509v3 Authority Key Identifier:
keyid:90:64:26:F4:83:C3:6A:AC:DA:87:32:32:4A:B8:8A:D5:80:0C:9A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGQm9IPDaqzahzIySriK1YAMmi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/94d441-d987-4062-89c1-94c5ad17a7a0/1/kGQm9IPDaqzahzIySriK1YAMmi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/94d441-d987-4062-89c1-94c5ad17a7a0/1/kGQm9IPDaqzahzIySriK1YAMmi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:6d:a8:b1:7b:6e:3e:5a:c4:ed:b2:86:6e:cc:84:f0:0d:8e:
da:1b:a6:a0:b6:7a:2d:1c:19:ff:f6:13:56:26:62:76:82:00:
5a:3a:60:3c:f5:c8:94:4d:66:38:e8:c8:8a:5b:ce:a5:4f:63:
2f:8c:17:7f:22:cd:0e:f7:33:a8:ae:15:ab:69:d2:56:5f:e0:
89:b1:7b:11:9b:ec:2d:4d:16:26:8a:83:04:eb:91:0d:9e:20:
0a:b4:19:33:a7:a9:3d:a6:32:27:e6:6a:c3:c7:7a:f0:4b:ef:
bb:a2:61:4c:5f:09:8c:cc:75:72:f3:13:6e:5a:3d:2b:e4:9c:
a3:7d:a5:81:89:13:01:e6:82:1a:e7:59:4b:2c:fa:62:0a:de:
3a:86:bd:cf:ac:f7:d3:32:9b:b0:b4:d6:da:91:bb:d5:4f:fc:
fc:9e:87:89:5f:d3:8c:0d:9f:f3:a6:5b:69:ec:64:27:25:3d:
64:ce:58:42:82:6f:8a:57:e2:cb:5c:ca:a5:6c:bb:a8:76:ff:
4d:ba:d3:b2:37:11:7f:9e:4d:8d:fe:35:32:32:c4:12:45:51:
5a:2d:8c:5a:16:de:e0:7f:ef:97:09:fb:91:82:86:0c:26:9c:
a3:02:5d:17:19:8e:5b:e9:9c:cc:05:2d:8c:7b:b0:74:9f:ef:
82:24:4b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 19:07:47 2026 by rpki-client