Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.mft
File: KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.mft (raw, json)
Hash identifier: doEtKsTAVt7lq7uq1jt2PAr4IvPNFmCvQOr9fBJdTGM=
Subject key identifier: D8:0E:CF:D4:07:70:FA:4B:52:B8:F9:8D:E8:0D:22:E2:38:21:F5:70
Authority key identifier: 28:24:34:A9:A0:38:B0:FE:73:CA:F7:76:BC:CD:54:2F:D3:E2:F6:A5
Certificate issuer: /CN=282434a9a038b0fe73caf776bccd542fd3e2f6a5
Certificate serial: 019CF27147E381A4AE1BF8D5C47FC60BD52E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.mft
Manifest number: 186C
Signing time: Sun 15 Mar 2026 17:00:36 +0000
Manifest this update: Sun 15 Mar 2026 17:00:36 +0000
Manifest next update: Mon 16 Mar 2026 17:00:36 +0000
Files and hashes: 1: KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.crl (hash: rkzzsyDgVuRoLxRhWsCpK2RHN9Ikd9HDoOUNo4UwS+w=)
2: mDKfE9L_xC5gURXUxNvBxSesFUw.roa (hash: wMlT9AFioAliO/UwUMrOPGgzXtB6eZatt/SzeGPcD6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Mar 2026 17:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f2:71:47:e3:81:a4:ae:1b:f8:d5:c4:7f:c6:0b:d5:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=282434a9a038b0fe73caf776bccd542fd3e2f6a5
Validity
Not Before: Mar 15 17:00:36 2026 GMT
Not After : Mar 16 17:00:36 2026 GMT
Subject: CN=d80ecfd40770fa4b52b8f98de80d22e23821f570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:1b:6b:a9:9f:b7:0a:05:5f:75:7d:35:d4:5b:
95:29:bd:8f:45:b6:25:cf:de:a1:75:cf:48:c9:b0:
4d:24:e2:43:eb:da:fc:9e:a9:b4:87:92:cf:d0:0e:
79:22:03:a2:fa:d4:40:74:dd:8b:96:b0:e8:7d:95:
b1:b3:e8:39:de:32:7f:5f:96:9c:8e:54:96:58:21:
03:04:be:87:86:6e:2a:89:5f:0a:b9:b8:16:b4:b6:
10:d0:73:b0:21:5f:5e:4b:0e:07:60:21:b1:ff:1b:
e6:a3:a6:f6:be:b2:7a:bf:e0:f6:e1:00:e9:f8:95:
1d:7c:e7:cc:07:3a:1c:08:cd:51:2e:40:29:eb:03:
d8:2a:59:53:87:05:38:b9:4b:85:4d:fd:3c:41:47:
3a:28:53:b6:4b:f3:84:52:99:6c:3a:d1:70:6a:a9:
e6:cf:d3:69:0b:43:78:8e:53:41:5e:9d:74:1d:7d:
03:53:50:bb:fd:12:bc:60:31:4c:54:81:2e:b9:cb:
25:e0:44:c0:87:95:33:cb:11:2a:8c:8e:d2:9f:1d:
d5:19:b3:ba:59:31:1a:2e:0a:dc:ab:2d:b0:39:07:
9a:d0:7e:4b:6c:ae:ef:b6:44:86:e4:7c:4e:5d:88:
6d:b9:f2:61:a1:a4:ad:40:9e:13:6d:e5:2e:88:c2:
a9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:0E:CF:D4:07:70:FA:4B:52:B8:F9:8D:E8:0D:22:E2:38:21:F5:70
X509v3 Authority Key Identifier:
keyid:28:24:34:A9:A0:38:B0:FE:73:CA:F7:76:BC:CD:54:2F:D3:E2:F6:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:ec:a4:92:18:5f:e8:6f:26:b1:61:33:2a:29:77:23:bd:50:
ea:1a:50:8a:a7:a9:4c:12:f4:e3:7e:a8:1a:0d:e7:40:bf:d9:
4f:6a:7c:5c:42:08:d4:d0:46:f7:c1:15:41:a6:93:85:bf:d4:
2d:77:32:86:52:28:df:af:03:da:90:0d:1d:e8:c0:35:78:09:
bf:a2:8b:55:4f:df:07:c9:3b:b9:13:76:60:7c:0c:47:ce:0d:
30:6e:78:eb:2a:01:12:19:a7:c0:32:7c:73:34:3b:1c:9e:06:
10:34:38:45:39:87:3b:ac:51:52:9a:c5:19:59:18:cb:77:7b:
74:9e:f4:f4:80:48:32:e2:f7:62:3d:f0:69:32:bc:07:99:c1:
d4:46:5d:5e:4e:ff:28:93:9f:c7:9f:1b:d6:5e:b3:77:23:99:
d2:7d:2b:9f:c0:33:fb:4f:7f:62:a1:ff:b6:11:2e:1f:64:80:
93:fc:9c:4f:85:11:2a:21:5d:ca:d7:17:47:bf:ef:32:ee:96:
5d:37:f4:72:3b:12:8f:37:4e:b4:69:b7:1c:f7:5e:70:08:6c:
c6:db:84:7f:58:cd:55:a8:60:9a:70:99:ab:36:f5:74:10:9b:
16:69:c0:81:f9:40:66:f1:5b:68:ae:22:17:73:94:a3:08:00:
d7:26:e1:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 02:01:53 2026 by rpki-client