Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.mft
File: 1-KQVlKkqmuBcZaBPgD1BGk-IQj8.mft (raw, json)
Hash identifier: GfKyVLTVWSQPwo1QPFvGiLwfZjio/NC31Pz0P6f9SEA=
Subject key identifier: 64:BB:2E:D4:D6:AC:E2:74:59:0C:CD:CB:9D:D1:20:FF:48:AF:B9:BB
Authority key identifier: F8:A4:15:94:A9:2A:9A:E0:5C:65:A0:4F:80:3D:41:1A:4F:88:42:3F
Certificate issuer: /CN=f8a41594a92a9ae05c65a04f803d411a4f88423f
Certificate serial: 019E303B284D63D1B50553BE5EBF0ABC257C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.mft
Manifest number: 151A
Signing time: Sat 16 May 2026 10:00:43 +0000
Manifest this update: Sat 16 May 2026 10:00:43 +0000
Manifest next update: Sun 17 May 2026 10:00:43 +0000
Files and hashes: 1: 1-KQVlKkqmuBcZaBPgD1BGk-IQj8.crl (hash: ULdqGjtZTeawf5V3tRnYyCa+nh3o4CQaC974S0j/ifU=)
2: 9I37uSLgJ82CVvmcGNoEOygvMrc.roa (hash: GiAAMKbm7ExVR7C4dV6ZH1ILNv0tH+m6b13CkfxQEmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 10:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:3b:28:4d:63:d1:b5:05:53:be:5e:bf:0a:bc:25:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a41594a92a9ae05c65a04f803d411a4f88423f
Validity
Not Before: May 16 10:00:43 2026 GMT
Not After : May 17 10:00:43 2026 GMT
Subject: CN=64bb2ed4d6ace274590ccdcb9dd120ff48afb9bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:44:25:3f:a0:d3:fc:ea:55:a3:54:c5:25:72:
57:23:e7:d2:1d:9b:e0:dc:dc:90:ae:02:54:d0:2d:
66:16:9c:9d:ad:c3:85:db:ba:08:8c:f4:e7:ee:93:
4c:b9:57:2b:94:51:fc:73:d3:77:bf:91:8e:89:30:
83:63:7d:3d:f0:ef:50:ce:eb:14:8a:23:cb:69:26:
31:21:12:b8:49:f9:9d:0a:3d:f8:8b:f6:37:b7:ef:
b5:ec:e2:54:a4:e9:6c:b7:cc:80:a5:16:7d:b3:7d:
c7:10:75:c9:5c:69:ab:bf:92:74:45:83:34:32:16:
bc:d1:9c:28:f7:5c:33:1b:5c:be:9b:d5:45:76:b6:
22:1e:ae:8c:c8:1a:26:5b:27:ad:6c:ad:d0:07:e2:
53:e7:cc:79:b3:4b:67:5a:d9:6b:0f:84:1a:75:69:
78:68:d5:46:1e:b2:d9:12:c0:89:42:9e:20:c1:13:
e3:00:ec:1f:3f:71:7f:8e:81:57:70:24:81:88:d0:
99:80:14:2e:f0:1b:7d:d1:5c:ea:a0:b9:fe:91:3a:
09:f9:aa:4d:3e:ef:65:9b:71:57:11:28:9b:ba:fb:
97:31:b2:98:16:51:81:94:a7:58:89:d8:f7:2a:b6:
c9:94:ba:50:82:f4:99:6d:31:13:fd:d3:8c:8a:c2:
34:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:BB:2E:D4:D6:AC:E2:74:59:0C:CD:CB:9D:D1:20:FF:48:AF:B9:BB
X509v3 Authority Key Identifier:
keyid:F8:A4:15:94:A9:2A:9A:E0:5C:65:A0:4F:80:3D:41:1A:4F:88:42:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:bf:37:58:64:bb:bc:0e:17:11:e5:4a:f3:9a:e5:bc:b0:d8:
43:eb:5c:18:10:ad:a2:e7:f3:8d:4a:04:cc:c5:69:f0:e0:73:
fb:c8:38:77:9f:61:03:af:b6:ed:be:f7:7a:5d:bf:39:98:93:
b9:0b:62:12:9a:c7:68:3c:0e:97:0a:a6:00:6e:f3:a2:ba:e1:
b9:81:b3:fd:2b:86:59:4e:ce:b9:d1:19:55:12:59:a4:af:73:
4f:c1:10:83:83:f4:61:dd:a0:3a:11:7d:93:82:7e:59:25:0c:
2c:f2:ba:83:c5:a4:4a:29:79:a0:f0:8d:fb:6f:e1:23:72:61:
bd:cf:1e:7b:ba:83:47:b1:d0:5a:2e:7a:57:e9:b8:a0:7e:c9:
f1:c8:7c:0f:b6:11:e9:37:e6:1e:a9:bc:70:08:35:0b:d6:e9:
55:09:1a:1d:dc:e5:04:0a:d4:55:6a:43:c6:68:6a:1d:b8:27:
54:5b:81:74:95:a6:4c:bd:af:6d:70:a9:71:f4:a2:e6:5b:12:
4a:6c:46:b3:fe:4f:dc:18:b7:38:da:16:04:a9:2e:c4:7c:8f:
a4:83:a7:8d:00:df:3e:d0:39:c5:a7:dc:97:78:5d:4e:8b:27:
7c:dd:33:b5:d5:18:17:b5:52:e8:32:c0:29:f9:a7:ff:ef:bc:
11:73:4d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:57:30 2026 by rpki-client