Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.mft
File: 1-KQVlKkqmuBcZaBPgD1BGk-IQj8.mft (raw, json)
Hash identifier: /E705DoV/qPbP4JKtEuqn0Fa+XmWp923kqDnoAd3bpM=
Subject key identifier: 16:57:7E:3A:B8:DC:69:D5:EF:49:A7:F6:B1:CE:98:06:BD:5B:CC:15
Authority key identifier: F8:A4:15:94:A9:2A:9A:E0:5C:65:A0:4F:80:3D:41:1A:4F:88:42:3F
Certificate issuer: /CN=f8a41594a92a9ae05c65a04f803d411a4f88423f
Certificate serial: 019D371B5C2A4ADEB59FFBAC9C3251F84AA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.mft
Manifest number: 1499
Signing time: Sun 29 Mar 2026 01:00:33 +0000
Manifest this update: Sun 29 Mar 2026 01:00:33 +0000
Manifest next update: Mon 30 Mar 2026 01:00:33 +0000
Files and hashes: 1: 1-KQVlKkqmuBcZaBPgD1BGk-IQj8.crl (hash: j3h2J280DxAOzOU1FzmuvF/826gfbe+qtjFMP9Ka2IE=)
2: 9I37uSLgJ82CVvmcGNoEOygvMrc.roa (hash: GiAAMKbm7ExVR7C4dV6ZH1ILNv0tH+m6b13CkfxQEmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:5c:2a:4a:de:b5:9f:fb:ac:9c:32:51:f8:4a:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a41594a92a9ae05c65a04f803d411a4f88423f
Validity
Not Before: Mar 29 01:00:33 2026 GMT
Not After : Mar 30 01:00:33 2026 GMT
Subject: CN=16577e3ab8dc69d5ef49a7f6b1ce9806bd5bcc15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:cd:21:f4:98:41:d5:69:6e:54:9c:c0:71:07:
87:93:70:b3:67:95:13:9b:8b:29:dc:bf:0b:b9:be:
65:77:42:70:e0:0b:a9:e3:d9:ac:29:99:22:14:1f:
75:5a:4c:e4:05:53:4c:7c:c3:54:00:1b:ac:8c:fe:
ae:dc:b3:44:ae:3b:09:ce:f9:28:55:de:bb:eb:f8:
c2:70:7f:68:19:e0:8e:7b:ea:66:0b:ac:1b:8e:ca:
80:6b:fe:6c:b2:d9:22:05:23:8d:64:23:1b:6f:45:
11:00:14:1a:91:29:15:4b:a6:40:09:48:bb:14:b2:
c7:96:00:ab:cf:a9:94:3a:0e:e9:6f:63:4a:ea:ba:
64:60:60:02:9a:d5:d8:0f:12:55:4f:f3:88:65:94:
ad:7d:cd:3e:62:ca:f6:d8:2e:ac:0b:36:84:c7:e7:
1f:15:fb:64:47:f0:5d:87:3e:1d:4d:a2:17:66:7d:
b0:ac:d9:ed:66:3f:ed:8f:3c:68:e4:77:a8:38:64:
bc:52:8a:95:cc:a1:b7:7d:f0:60:1a:58:dd:7f:ea:
c2:e8:6c:35:c1:13:37:a1:fd:36:18:e2:62:e6:79:
97:d1:c1:05:62:7c:6f:a0:85:07:d1:bb:8d:0c:cf:
b9:d7:d8:48:d2:f4:54:d6:c1:29:56:31:ce:26:1b:
b3:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:57:7E:3A:B8:DC:69:D5:EF:49:A7:F6:B1:CE:98:06:BD:5B:CC:15
X509v3 Authority Key Identifier:
keyid:F8:A4:15:94:A9:2A:9A:E0:5C:65:A0:4F:80:3D:41:1A:4F:88:42:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:4c:42:7e:56:23:1c:a6:26:8f:c6:85:d8:8d:33:c2:5f:b6:
4d:29:dc:fe:dd:c2:2b:e1:df:7f:98:0b:b2:e7:1d:02:f2:25:
a7:ba:de:6d:90:be:32:f2:bb:8a:f3:ab:26:d5:d4:bf:83:3c:
ac:56:de:b0:0d:2b:df:a4:ff:de:bd:2a:82:bf:4f:e1:b4:a6:
ac:97:d6:81:6d:ea:dd:8f:cb:4d:3d:21:30:ee:3e:6c:f8:11:
08:0b:0d:62:99:99:72:24:8c:22:18:bc:d8:dc:25:8d:ae:e8:
ef:4f:bd:10:97:64:b9:b0:fb:04:8a:d2:33:ea:20:49:2e:f8:
84:30:4b:ac:5b:41:d8:31:12:61:0a:9c:8d:d4:e2:7d:a8:1f:
8a:d2:6a:3d:d2:f3:1e:f3:c0:55:de:65:ab:44:d2:3d:32:b3:
21:27:c0:e6:89:86:78:48:fa:9f:92:aa:04:51:0f:2d:5a:a4:
a0:ce:dc:83:a0:f8:af:99:a6:ca:29:fb:fa:f2:ec:7c:61:2f:
47:b4:3a:8c:82:82:06:9e:73:54:0f:76:45:99:6a:8f:27:4e:
b6:7b:12:8d:68:69:d9:21:79:c9:1a:89:c8:52:70:05:17:2e:
55:7d:ba:ed:36:97:a3:dc:9e:a0:8f:bc:b5:ed:ae:f2:e9:59:
a9:da:b8:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:55 2026 by rpki-client