Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/KbQgo4_encPUwgIf0JU9nr27kLw.mft
File: KbQgo4_encPUwgIf0JU9nr27kLw.mft (raw, json)
Hash identifier: 2y4VUQ9QyPc9Os+QTmcFhaorCxhErU6/LwlDUvAYXh8=
Subject key identifier: 06:51:A3:4A:D0:CC:1B:6F:42:78:2F:1B:24:C8:8D:12:F2:76:69:16
Authority key identifier: 29:B4:20:A3:8F:DE:9D:C3:D4:C2:02:1F:D0:95:3D:9E:BD:BB:90:BC
Certificate issuer: /CN=29b420a38fde9dc3d4c2021fd0953d9ebdbb90bc
Certificate serial: 01A162D80EC02BFAC937941052411E9C146D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KbQgo4_encPUwgIf0JU9nr27kLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/KbQgo4_encPUwgIf0JU9nr27kLw.mft
Manifest number: 0131
Signing time: Thu 22 Oct 2026 09:01:29 +0000
Manifest this update: Thu 22 Oct 2026 09:01:29 +0000
Manifest next update: Fri 23 Oct 2026 09:01:29 +0000
Files and hashes: 1: KbQgo4_encPUwgIf0JU9nr27kLw.crl (hash: lVlQrqXyzytxHDE40cLB7BmlyRqIjJCINiQsOHMaVnY=)
2: omwuLvZPG_OI5FuAKOGoVvhHAhY.roa (hash: j9iA9TG/Xu3J+sOmuPiV21st08l1RRGEXzENpjL0/AE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/KbQgo4_encPUwgIf0JU9nr27kLw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/KbQgo4_encPUwgIf0JU9nr27kLw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KbQgo4_encPUwgIf0JU9nr27kLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:62:d8:0e:c0:2b:fa:c9:37:94:10:52:41:1e:9c:14:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29b420a38fde9dc3d4c2021fd0953d9ebdbb90bc
Validity
Not Before: Oct 22 09:01:29 2026 GMT
Not After : Oct 23 09:01:29 2026 GMT
Subject: CN=0651a34ad0cc1b6f42782f1b24c88d12f2766916
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:bb:b5:e9:92:1f:ce:7f:83:c6:29:5b:bf:25:
29:b3:38:c3:94:a6:ee:20:50:2c:6f:67:47:45:9b:
ce:86:6e:80:62:c6:42:eb:3a:ca:5d:bf:ee:10:56:
54:c8:d0:c1:dd:69:11:81:4d:b7:09:83:bd:f0:f4:
6f:92:7c:79:3a:0b:37:f2:0e:49:42:14:aa:17:03:
c6:42:88:d9:4f:94:9b:f2:1f:d1:58:0a:2e:5d:59:
85:27:06:26:70:9d:a6:0e:70:de:d6:c3:3f:11:9e:
d8:56:83:da:90:5a:08:00:f4:5c:38:69:70:53:9d:
1e:49:c3:ef:30:2d:a7:d2:bc:53:25:ea:75:3a:46:
01:09:a3:9f:e8:c5:18:07:67:5c:66:e0:01:ef:81:
1d:f9:32:04:53:e0:e6:fe:03:3c:aa:a5:03:55:54:
09:c7:41:3b:5a:84:c0:49:98:a9:84:db:2a:62:c2:
00:b3:ef:df:8d:51:f9:eb:a1:6d:72:b2:c4:36:9a:
3b:fb:19:c8:84:49:02:f0:62:c2:70:b0:81:9b:5a:
18:25:d4:e0:b7:e0:0b:66:08:ee:97:cd:f3:bc:eb:
e9:7d:57:7b:c0:f8:e8:ec:2d:12:73:1c:b8:af:df:
1b:a6:e4:32:8d:ad:f5:7f:7f:8f:f6:f6:ba:9b:f1:
17:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:51:A3:4A:D0:CC:1B:6F:42:78:2F:1B:24:C8:8D:12:F2:76:69:16
X509v3 Authority Key Identifier:
keyid:29:B4:20:A3:8F:DE:9D:C3:D4:C2:02:1F:D0:95:3D:9E:BD:BB:90:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KbQgo4_encPUwgIf0JU9nr27kLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/KbQgo4_encPUwgIf0JU9nr27kLw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/KbQgo4_encPUwgIf0JU9nr27kLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:a2:1e:e1:2e:1d:fb:a8:5c:bb:e9:a5:9d:d2:44:38:ac:90:
6e:ca:16:f5:d7:b6:0e:05:96:4c:b6:bc:70:cf:06:8d:6c:df:
1a:92:7b:68:e6:b4:22:e2:3f:e9:87:3d:fe:9d:89:ab:3e:f6:
7a:4b:62:47:ca:a6:ec:77:3e:d4:ca:de:15:3d:dc:40:eb:8a:
58:6a:5f:a3:ca:b6:2a:27:6e:4f:53:96:d6:4c:08:64:fd:70:
61:60:df:cb:9e:ab:df:6d:8a:49:5c:09:2f:f6:be:5e:82:c2:
a6:65:5a:5a:e0:76:8a:79:17:f4:df:5e:8a:66:4f:2d:91:5a:
1e:ca:1d:5c:0d:33:fe:18:5e:da:39:a8:bf:81:24:0f:58:e8:
ba:26:49:0d:10:92:9e:5e:c9:df:eb:a1:81:fc:3f:11:f0:e7:
4b:62:10:b4:be:1b:68:41:a4:a6:3f:4e:cb:e8:07:24:90:19:
c1:70:0d:8e:2f:7e:56:f9:c8:21:2d:07:e5:5e:69:91:fa:fd:
4d:6e:ef:94:95:45:1d:71:b9:4f:31:98:ff:86:a7:87:fe:32:
8d:8d:63:14:27:c7:30:b9:a9:cb:ae:91:03:86:97:39:03:61:
18:da:cc:9c:d5:f1:0f:72:5f:e4:34:36:7e:b5:9e:44:57:47:
2a:46:fb:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 15:51:29 2026 by rpki-client