Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.mft
File: qKumPoBqIdRgNcpunTRbA9vI5VM.mft (raw, json)
Hash identifier: HUfbIv36Rax3hJhryz3Ks0twunmdzj2QIJvNAsWizew=
Subject key identifier: 4C:7D:03:6C:13:F5:81:88:D4:E1:76:4B:39:E5:09:02:0D:C7:F8:C2
Authority key identifier: A8:AB:A6:3E:80:6A:21:D4:60:35:CA:6E:9D:34:5B:03:DB:C8:E5:53
Certificate issuer: /CN=a8aba63e806a21d46035ca6e9d345b03dbc8e553
Certificate serial: 01A17F61CEDD20EFA83B52EA116941291049
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qKumPoBqIdRgNcpunTRbA9vI5VM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.mft
Manifest number: 0B52
Signing time: Tue 27 Oct 2026 22:01:18 +0000
Manifest this update: Tue 27 Oct 2026 22:01:18 +0000
Manifest next update: Wed 28 Oct 2026 22:01:18 +0000
Files and hashes: 1: FVti0CnJBxW_ujwVe576uT5sBZY.roa (hash: wKPtK/uPr/cpuHyaQuhDbiv2SdMMAyJiY4SSf65iULo=)
2: qKumPoBqIdRgNcpunTRbA9vI5VM.crl (hash: BkVUEsRj6RGD395Xxa85i0eOuVvBHlR7ueUVgyrCcik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qKumPoBqIdRgNcpunTRbA9vI5VM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:61:ce:dd:20:ef:a8:3b:52:ea:11:69:41:29:10:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8aba63e806a21d46035ca6e9d345b03dbc8e553
Validity
Not Before: Oct 27 22:01:18 2026 GMT
Not After : Oct 28 22:01:18 2026 GMT
Subject: CN=4c7d036c13f58188d4e1764b39e509020dc7f8c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c7:2f:86:aa:93:ff:b9:dd:48:f3:f4:08:a7:
6c:0c:08:34:77:61:7f:4c:8e:c7:76:73:cf:90:64:
1e:7a:43:5e:5d:9a:8c:50:0e:5b:d4:12:1f:c3:92:
8f:83:72:61:e9:2b:44:28:70:8d:3d:36:a2:c6:05:
be:ac:80:28:db:99:97:d0:06:6d:4f:b4:5b:29:c1:
72:53:56:4b:e4:63:35:e8:c1:dd:e9:c2:2d:cd:07:
19:8b:2c:84:09:2a:d5:1b:92:00:ed:4e:c3:98:67:
0f:a2:a9:8a:2d:c1:5c:f6:e9:8d:10:f3:d5:72:a5:
b1:ec:27:7a:4b:2e:df:d3:b6:bf:a4:cd:7e:a1:36:
98:b1:69:94:f2:5d:a2:bc:f3:b7:c0:bc:a7:65:cd:
af:08:77:da:53:0b:65:28:37:a8:94:87:c4:c6:04:
c1:ff:99:f9:11:7a:e9:22:28:7e:13:97:1a:48:7f:
c2:2e:20:b1:5e:6f:47:5d:32:28:19:5d:58:84:ac:
0a:0e:61:28:da:dd:5e:c0:28:99:95:76:d9:2a:02:
1c:05:03:49:8e:ea:a4:0b:df:45:a4:e1:40:53:fa:
84:a8:6d:04:0c:c4:30:9e:da:bb:70:fb:10:62:ea:
12:3b:f0:f9:ba:2e:50:d6:43:1f:02:32:06:51:39:
59:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:7D:03:6C:13:F5:81:88:D4:E1:76:4B:39:E5:09:02:0D:C7:F8:C2
X509v3 Authority Key Identifier:
keyid:A8:AB:A6:3E:80:6A:21:D4:60:35:CA:6E:9D:34:5B:03:DB:C8:E5:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qKumPoBqIdRgNcpunTRbA9vI5VM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6186da-51d4-4618-95f9-f4a39e18cfb4/1/qKumPoBqIdRgNcpunTRbA9vI5VM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:e2:ed:e1:ee:3a:33:2f:ce:f1:19:ff:cf:21:78:5a:e1:82:
2f:95:8d:28:9a:7b:d8:75:8f:c0:8a:89:3d:98:c4:87:4d:2f:
a6:85:74:77:6a:e9:b1:78:eb:9f:c9:b3:a5:ea:fe:51:00:e5:
3d:a0:0d:bb:29:f4:35:f4:c5:db:73:1e:8d:98:ef:1b:6f:bf:
97:cc:a0:2e:45:5e:2f:57:56:53:14:2b:75:c9:87:cf:35:e8:
83:34:9d:e6:a7:69:0f:c9:fc:be:0b:14:9c:84:4b:9f:61:03:
11:41:81:08:24:2a:9b:94:20:6e:b4:59:7c:5d:5e:c8:96:e3:
d9:59:f2:16:b8:06:bd:93:97:3b:aa:0e:5a:48:eb:19:aa:2b:
c2:c6:4f:c9:d8:4b:9d:28:db:da:59:cc:a9:df:f5:46:ea:9d:
04:4c:05:9d:6d:f0:f4:58:23:5f:2a:3d:1e:e0:29:a0:9a:28:
7b:1a:8a:c6:63:ea:6f:14:85:06:9f:65:e5:e3:42:2f:a6:07:
b4:d7:e9:d3:5c:22:0c:f8:95:27:66:03:47:6c:b0:40:ae:bb:
71:5f:ae:d8:c8:3a:94:68:b4:b6:3b:93:cd:c6:da:43:f0:9f:
86:a9:be:10:57:76:18:85:5b:0e:fb:90:71:15:b7:e4:2b:82:
51:e8:e1:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 05:59:40 2026 by rpki-client