Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.mft
File: KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.mft (raw, json)
Hash identifier: D3BrThaGfy1fUB6ItOv0remDsUVbqiM8LzZTW74BLik=
Subject key identifier: C6:F7:6A:02:A6:A3:6F:C6:B7:28:DC:AA:31:2C:E5:08:77:79:69:67
Authority key identifier: 28:24:34:A9:A0:38:B0:FE:73:CA:F7:76:BC:CD:54:2F:D3:E2:F6:A5
Certificate issuer: /CN=282434a9a038b0fe73caf776bccd542fd3e2f6a5
Certificate serial: 01A0B61AEAED509DD82DAA87B93EAF0CF577
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.mft
Manifest number: 1A5F
Signing time: Fri 18 Sep 2026 20:00:12 +0000
Manifest this update: Fri 18 Sep 2026 20:00:12 +0000
Manifest next update: Sat 19 Sep 2026 20:00:12 +0000
Files and hashes: 1: KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.crl (hash: BKji9er95uZAD5J90U1qlGFj2DSDohDzAzMzbxjyStQ=)
2: mDKfE9L_xC5gURXUxNvBxSesFUw.roa (hash: wMlT9AFioAliO/UwUMrOPGgzXtB6eZatt/SzeGPcD6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 17:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b6:1a:ea:ed:50:9d:d8:2d:aa:87:b9:3e:af:0c:f5:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=282434a9a038b0fe73caf776bccd542fd3e2f6a5
Validity
Not Before: Sep 18 20:00:12 2026 GMT
Not After : Sep 19 20:00:12 2026 GMT
Subject: CN=c6f76a02a6a36fc6b728dcaa312ce50877796967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:65:5a:a1:c6:ad:c5:3b:63:e9:2f:7a:3d:ba:
56:e1:8f:c2:42:e5:f3:de:62:a3:63:d8:d4:0b:0f:
37:22:fb:b3:ba:30:93:20:a2:45:ed:ae:c1:21:09:
ab:85:46:2a:78:b1:c8:2c:72:aa:33:21:43:ff:31:
07:68:71:61:8a:b1:43:d0:0d:c0:22:93:f9:c9:e9:
07:03:f8:41:30:1f:06:55:e9:12:c8:ca:9f:6c:d1:
63:db:4e:8e:d0:a6:c2:b8:d8:50:83:1c:b1:5b:7c:
7f:bd:22:31:43:3b:e7:ec:56:87:bd:8c:dd:37:b7:
b7:a0:29:b7:4e:a6:dc:16:0c:ab:f1:53:5d:b6:43:
9a:73:a2:06:b4:c1:a7:c5:1c:bb:73:82:ab:60:ca:
6d:e1:f8:db:b9:38:d1:8e:e8:12:f5:60:f1:b5:90:
4c:37:ad:63:ab:2c:7f:73:69:0c:6d:1f:6c:0b:10:
09:0b:9f:b7:da:e3:e4:86:da:54:1a:e0:6d:12:93:
97:3f:23:52:ac:fd:fd:bf:d2:5e:61:55:1c:f2:e8:
14:ac:4e:b4:8c:97:7d:c7:ed:9f:11:4a:d7:f6:30:
25:a2:a5:33:bd:5e:ac:ea:7d:39:2b:99:85:49:7f:
04:cf:a3:4c:45:96:c1:56:d5:6c:cd:c4:13:61:cc:
a8:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:F7:6A:02:A6:A3:6F:C6:B7:28:DC:AA:31:2C:E5:08:77:79:69:67
X509v3 Authority Key Identifier:
keyid:28:24:34:A9:A0:38:B0:FE:73:CA:F7:76:BC:CD:54:2F:D3:E2:F6:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:bb:1e:c0:5e:99:f9:98:2b:0f:92:52:24:3e:75:67:a1:1f:
23:86:0d:1f:92:ce:86:c9:88:62:73:93:95:de:ac:59:b9:6e:
31:7c:a9:fa:08:6d:fe:ab:e5:82:19:20:06:e0:cb:dd:1e:45:
a3:27:21:92:5b:cc:f1:ce:03:c6:f7:81:79:f3:a6:55:0d:82:
c5:09:35:61:76:c7:47:a1:f3:2b:61:cc:ac:0f:91:59:78:8b:
11:44:cf:05:35:e3:38:d4:3d:b2:ad:41:99:4c:54:8a:d3:3f:
6a:7a:51:3a:a1:16:52:18:c3:31:c4:03:8b:c5:12:f2:03:09:
a0:a6:ef:c5:4f:ee:43:0c:40:51:dc:d0:40:8d:72:61:e5:8a:
b6:25:78:8a:37:c9:7c:91:8d:7b:28:53:88:e2:c3:7d:cf:37:
e4:54:8c:36:f3:67:0e:e1:e3:49:56:e5:5c:ca:21:be:06:40:
5a:94:37:b1:38:7b:60:4d:0d:65:0e:92:e4:5a:12:37:ac:9f:
dc:17:44:cc:48:0f:59:87:4f:68:92:bd:c5:56:d9:9a:a5:82:
50:de:86:0b:5b:fa:eb:13:ed:f2:e9:0c:ed:40:e6:dd:d5:85:
e3:00:0d:76:ce:95:87:85:ce:8c:f8:de:81:89:f6:a9:41:68:
c8:86:77:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 03:20:04 2026 by rpki-client