Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.mft
File: KQbwJrH-Y2yaXaAR3H_WnFgdArg.mft (raw, json)
Hash identifier: mZt2F16vMZzuxqQfPgQIr+fR0HFXj/NEcoK6DrcT8xE=
Subject key identifier: 7D:59:ED:D3:B9:C6:7A:01:7F:0C:B0:E1:AB:62:5F:BB:BC:35:CB:57
Authority key identifier: 29:06:F0:26:B1:FE:63:6C:9A:5D:A0:11:DC:7F:D6:9C:58:1D:02:B8
Certificate issuer: /CN=2906f026b1fe636c9a5da011dc7fd69c581d02b8
Certificate serial: 019D3A1C3D0C91B67CDC9BDFAF93EF046DCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQbwJrH-Y2yaXaAR3H_WnFgdArg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.mft
Manifest number: 1895
Signing time: Sun 29 Mar 2026 15:00:22 +0000
Manifest this update: Sun 29 Mar 2026 15:00:22 +0000
Manifest next update: Mon 30 Mar 2026 15:00:22 +0000
Files and hashes: 1: KQbwJrH-Y2yaXaAR3H_WnFgdArg.crl (hash: caN2htq4nuW/urio6lf+lIawnNGc6EY3R81W8WByYEE=)
2: Q2sWoej5DPGl5wIw-CeODcRVXlM.roa (hash: wQMcbtBLdOGU6mgU9d/xsDpXItDoVCXCwiC3i9zeKw8=)
3: m25_c1bwCRR27TwA0PikcbJqUsY.roa (hash: lmfRRJbGEXu9SMbs8RoEu8bImS24RY0gDFc2/wiVBQo=)
4: ojqh31F-z_PVmb3H-ysSta1HlSw.roa (hash: pXqwdQA/pZAOmvAosw/Ac3zfBMN1XJgVHOWfLUuvoMs=)
5: wsQWFnZ9QvU6rL4ZStrqghoI4IU.roa (hash: aqTWkdbUh2lUmpGqUaJazitQHO++p5bcYZRKvviqQCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQbwJrH-Y2yaXaAR3H_WnFgdArg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:3d:0c:91:b6:7c:dc:9b:df:af:93:ef:04:6d:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2906f026b1fe636c9a5da011dc7fd69c581d02b8
Validity
Not Before: Mar 29 15:00:22 2026 GMT
Not After : Mar 30 15:00:22 2026 GMT
Subject: CN=7d59edd3b9c67a017f0cb0e1ab625fbbbc35cb57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:fb:29:50:18:e5:4a:15:f0:8e:f8:38:8d:40:
ad:4e:2c:4f:18:26:e1:e2:b7:a2:3a:e4:f8:ef:0d:
f4:98:77:e9:7b:30:5d:53:5a:a8:a6:ad:ff:44:84:
2d:cd:d5:71:ff:c3:e2:ac:e8:c2:ea:f2:89:61:f7:
96:ef:e7:42:c5:61:73:de:dc:40:3e:99:3c:48:52:
f9:74:b2:35:f1:a7:86:bb:d0:ad:40:a6:ca:20:d2:
ac:31:a3:9b:38:a4:e4:f5:4c:10:e1:c0:36:a3:ee:
44:53:b9:14:fb:2e:5a:a2:98:de:38:54:53:89:ed:
50:99:0a:45:2b:1e:3a:a4:0c:11:58:e8:48:d2:24:
8e:ee:ab:62:ad:a1:43:07:39:67:b8:76:4c:e6:95:
d3:64:3c:f4:be:ac:08:45:30:46:a1:1c:24:c0:60:
d6:39:1e:a2:0c:34:e8:24:9b:fc:6b:c4:37:b7:80:
06:c8:d2:17:fa:28:51:d2:95:88:30:62:08:fd:0b:
e5:f7:21:53:48:ff:9b:36:84:a7:78:f0:8e:a3:ba:
cd:e0:9d:a0:ed:e2:5c:f0:fe:5a:72:62:07:af:2a:
6c:a7:31:b5:29:fa:ab:31:5c:53:2e:89:5e:5b:63:
05:ef:8b:7e:b0:89:64:3d:1f:a5:ed:05:49:a3:69:
29:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:59:ED:D3:B9:C6:7A:01:7F:0C:B0:E1:AB:62:5F:BB:BC:35:CB:57
X509v3 Authority Key Identifier:
keyid:29:06:F0:26:B1:FE:63:6C:9A:5D:A0:11:DC:7F:D6:9C:58:1D:02:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQbwJrH-Y2yaXaAR3H_WnFgdArg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/67a32d-7bf8-4b04-aa05-80a91be83e4b/1/KQbwJrH-Y2yaXaAR3H_WnFgdArg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:23:7d:ce:31:33:68:fe:aa:dc:2c:4a:88:bf:09:af:28:f3:
91:49:0d:35:e3:ff:9e:3d:92:bd:6f:81:22:44:ef:12:83:f4:
fb:d5:77:3f:77:f4:91:a6:0e:d9:7f:60:bb:67:fe:cd:b4:35:
a9:3b:ce:80:4b:3f:e7:1e:9b:53:65:82:a7:1b:45:61:47:4f:
da:56:9f:9c:e1:7d:5a:8f:25:f6:24:f6:01:bf:60:c3:99:42:
ee:fe:81:9c:72:64:b8:e2:14:db:b3:9b:4a:3a:ca:5d:14:30:
b9:58:97:d7:45:38:4f:05:81:8e:f3:61:0e:4f:41:96:63:fc:
bd:be:6a:ec:2b:13:93:9b:e9:92:6d:d8:34:d2:ca:9f:87:ec:
82:08:ec:9b:a3:23:87:12:ce:4c:10:39:3c:e8:0b:b7:f2:4e:
e6:74:32:66:1d:da:0b:60:ec:7f:4f:e5:ce:ee:f0:5d:da:d0:
a3:9a:72:f3:7e:29:75:42:82:89:ab:7b:6f:55:ff:6c:2f:5c:
e5:92:e5:22:25:62:73:fa:5e:44:39:b4:07:06:6d:c8:ec:12:
89:73:12:ed:a9:17:84:08:39:bc:81:68:05:ae:b3:5a:92:89:
8b:51:f1:a0:e6:d8:4d:48:aa:e1:16:e1:f0:40:4f:cd:58:f0:
2a:ce:b3:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ06HD0MkbZ83Jvfr5PvBG3NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5MDZmMDI2YjFmZTYzNmM5YTVkYTAxMWRjN2ZkNjljNTgx
ZDAyYjgwHhcNMjYwMzI5MTUwMDIyWhcNMjYwMzMwMTUwMDIyWjAzMTEwLwYDVQQD
Eyg3ZDU5ZWRkM2I5YzY3YTAxN2YwY2IwZTFhYjYyNWZiYmJjMzVjYjU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPspUBjlShXwjvg4jUCtTixPGCbh
4reiOuT47w30mHfpezBdU1qopq3/RIQtzdVx/8PirOjC6vKJYfeW7+dCxWFz3txA
Ppk8SFL5dLI18aeGu9CtQKbKINKsMaObOKTk9UwQ4cA2o+5EU7kU+y5aopjeOFRT
ie1QmQpFKx46pAwRWOhI0iSO7qtiraFDBzlnuHZM5pXTZDz0vqwIRTBGoRwkwGDW
OR6iDDToJJv8a8Q3t4AGyNIX+ihR0pWIMGII/Qvl9yFTSP+bNoSnePCOo7rN4J2g
7eJc8P5acmIHrypspzG1KfqrMVxTLoleW2MF74t+sIlkPR+l7QVJo2kpTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH1Z7dO5xnoBfwyw4atiX7u8NctXMB8GA1UdIwQY
MBaAFCkG8Cax/mNsml2gEdx/1pxYHQK4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1Fid0pySC1ZMnlhWGFBUjNIX1duRmdkQXJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy82N2EzMmQtN2JmOC00YjA0LWFhMDUt
ODBhOTFiZTgzZTRiLzEvS1Fid0pySC1ZMnlhWGFBUjNIX1duRmdkQXJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy82N2EzMmQtN2JmOC00YjA0LWFhMDUtODBhOTFiZTgzZTRi
LzEvS1Fid0pySC1ZMnlhWGFBUjNIX1duRmdkQXJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMyN9zjEz
aP6q3CxKiL8JryjzkUkNNeP/nj2SvW+BIkTvEoP0+9V3P3f0kaYO2X9gu2f+zbQ1
qTvOgEs/5x6bU2WCpxtFYUdP2lafnOF9Wo8l9iT2Ab9gw5lC7v6BnHJkuOIU27Ob
SjrKXRQwuViX10U4TwWBjvNhDk9BlmP8vb5q7CsTk5vpkm3YNNLKn4fsggjsm6Mj
hxLOTBA5POgLt/JO5nQyZh3aC2Dsf0/lzu7wXdrQo5py834pdUKCiat7b1X/bC9c
5ZLlIiVic/peRDm0BwZtyOwSiXMS7akXhAg5vIFoBa6zWpKJi1HxoObYTUiq4Rbh
8EBPzVjwKs6zwQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 17:47:35 2026 by rpki-client