Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.mft
File: KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.mft (raw, json)
Hash identifier: /iYNO1ErMzTq9eiA8ZwgDR+KXpi8CEL33hhS93xRcOk=
Subject key identifier: EA:35:A6:DE:80:23:62:7B:14:E4:7F:D2:71:AD:AA:89:18:91:A7:68
Authority key identifier: 28:24:34:A9:A0:38:B0:FE:73:CA:F7:76:BC:CD:54:2F:D3:E2:F6:A5
Certificate issuer: /CN=282434a9a038b0fe73caf776bccd542fd3e2f6a5
Certificate serial: 01A1DF833C436BF0EF5A7CD2A2B42AE3CBEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.mft
Manifest number: 1AF9
Signing time: Sun 15 Nov 2026 14:01:22 +0000
Manifest this update: Sun 15 Nov 2026 14:01:22 +0000
Manifest next update: Mon 16 Nov 2026 14:01:22 +0000
Files and hashes: 1: KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.crl (hash: qapxuHHeSCSx9GXOWNSh95YhnvlzlBS7e8wOX26gsU0=)
2: mDKfE9L_xC5gURXUxNvBxSesFUw.roa (hash: wMlT9AFioAliO/UwUMrOPGgzXtB6eZatt/SzeGPcD6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:83:3c:43:6b:f0:ef:5a:7c:d2:a2:b4:2a:e3:cb:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=282434a9a038b0fe73caf776bccd542fd3e2f6a5
Validity
Not Before: Nov 15 14:01:22 2026 GMT
Not After : Nov 16 14:01:22 2026 GMT
Subject: CN=ea35a6de8023627b14e47fd271adaa891891a768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:77:b5:59:68:14:4f:80:43:6b:eb:93:f9:58:
56:31:69:32:dc:92:07:c8:bb:da:8b:b8:64:2f:ae:
79:6c:f8:f4:54:dd:30:f9:ea:a4:ee:60:fe:c8:a5:
29:e0:fb:3b:26:0b:99:0f:2e:73:f0:03:db:44:bd:
74:42:8a:79:e2:95:22:11:b7:0a:3a:f8:9d:c3:94:
a7:04:b7:de:e2:02:ff:b7:ab:fe:60:1c:12:e3:af:
96:e6:01:c4:62:4a:dc:00:3b:a7:57:79:37:eb:46:
47:67:44:e3:51:aa:d9:28:a0:43:d8:17:7e:bb:40:
3e:9b:8c:30:da:b1:a2:c7:42:92:02:c0:95:f8:8e:
c6:3a:48:f1:66:83:a3:65:f2:3e:2c:f0:56:12:e5:
f3:6a:ee:e1:fc:ea:d1:3f:fe:9d:c0:a7:30:1a:bf:
00:02:42:d1:1d:3c:94:42:f7:65:00:2a:e3:05:ee:
83:2b:4c:50:9c:a8:ef:42:a8:a4:37:db:86:8a:44:
7c:c5:db:fa:28:da:9e:dd:48:33:61:62:45:03:1a:
d6:2f:fc:fc:ba:54:0f:f3:5e:a2:b1:67:06:ab:62:
1a:39:dd:ec:31:2d:80:5b:ba:90:4e:e5:2f:95:8c:
00:06:51:47:66:59:e3:aa:ad:44:2b:47:fe:03:bd:
d6:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:35:A6:DE:80:23:62:7B:14:E4:7F:D2:71:AD:AA:89:18:91:A7:68
X509v3 Authority Key Identifier:
keyid:28:24:34:A9:A0:38:B0:FE:73:CA:F7:76:BC:CD:54:2F:D3:E2:F6:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/e7fbe8-d98e-45d2-b19c-11627d7469ab/1/KCQ0qaA4sP5zyvd2vM1UL9Pi9qU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:f0:db:9a:e3:c5:65:c1:df:96:59:12:ca:b6:ad:49:0f:9b:
92:01:61:ad:79:27:38:d2:32:e4:28:2e:82:21:c8:69:1a:bd:
73:d2:5a:86:4f:f5:aa:d8:75:e5:84:2d:88:87:84:70:5b:9e:
9e:14:d4:60:6d:86:64:67:4c:91:aa:d0:64:09:8a:bd:4f:a4:
00:a1:b7:1d:89:34:cf:0d:64:2e:19:c1:ca:96:38:2a:f7:78:
d4:07:4f:39:92:1c:6e:be:e8:a6:a0:0a:00:75:23:30:6c:c5:
4b:2e:f1:9c:f1:d4:d8:89:04:e4:ff:25:82:48:47:53:05:c6:
83:0b:a3:be:9a:de:95:27:1a:e3:33:48:5c:a8:d0:9b:c9:78:
64:13:4d:d0:cd:bb:8a:dd:c3:8c:d3:9c:07:5d:74:56:02:a6:
fa:2e:ab:01:e2:e8:e8:f1:39:89:6a:a9:87:90:98:e3:36:58:
17:2a:cd:6d:12:b7:db:38:ec:98:10:e7:f5:4c:6b:53:7a:df:
7b:49:f0:0d:bd:e9:f6:6a:dc:1b:55:bc:40:ef:4e:5c:9c:93:
4c:fa:f9:19:d3:ea:2a:8a:4d:67:4d:c0:df:23:2b:59:44:eb:
d0:0a:43:2d:21:16:ca:0d:de:82:83:3c:11:3e:dd:fc:a3:6c:
81:5c:2a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 22:32:24 2026 by rpki-client