Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/a6574d-fb6d-47db-ba0c-f16f1ee4f891/1/KqeI7abIDvkCuV1gOHAKXafW0Mw.mft
File: KqeI7abIDvkCuV1gOHAKXafW0Mw.mft (raw, json)
Hash identifier: lYgZhPWIeaBJWhD+cs6IN7pIC9GpyB0jgJLyLy0FQMM=
Subject key identifier: 06:00:78:EE:26:5E:CB:90:55:21:8D:AE:F7:40:C2:E9:92:B8:8E:5A
Authority key identifier: 2A:A7:88:ED:A6:C8:0E:F9:02:B9:5D:60:38:70:0A:5D:A7:D6:D0:CC
Certificate issuer: /CN=2aa788eda6c80ef902b95d6038700a5da7d6d0cc
Certificate serial: 019D389BCA87554596DB38276CF233ADB92B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqeI7abIDvkCuV1gOHAKXafW0Mw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/a6574d-fb6d-47db-ba0c-f16f1ee4f891/1/KqeI7abIDvkCuV1gOHAKXafW0Mw.mft
Manifest number: 05A6
Signing time: Sun 29 Mar 2026 08:00:27 +0000
Manifest this update: Sun 29 Mar 2026 08:00:27 +0000
Manifest next update: Mon 30 Mar 2026 08:00:27 +0000
Files and hashes: 1: KqeI7abIDvkCuV1gOHAKXafW0Mw.crl (hash: lWYXALJZoUyj7gDfuZAVRe895LPtzo2ypFakfZOK0oM=)
2: gn61ce9ALlX0-z3Eczgbb3WMtWI.roa (hash: RHps1AzWEmNAJdqDkFEU6I0uU1ebWVTlEieytsZ34D4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/a6574d-fb6d-47db-ba0c-f16f1ee4f891/1/KqeI7abIDvkCuV1gOHAKXafW0Mw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/a6574d-fb6d-47db-ba0c-f16f1ee4f891/1/KqeI7abIDvkCuV1gOHAKXafW0Mw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqeI7abIDvkCuV1gOHAKXafW0Mw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:ca:87:55:45:96:db:38:27:6c:f2:33:ad:b9:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa788eda6c80ef902b95d6038700a5da7d6d0cc
Validity
Not Before: Mar 29 08:00:27 2026 GMT
Not After : Mar 30 08:00:27 2026 GMT
Subject: CN=060078ee265ecb9055218daef740c2e992b88e5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:94:d1:21:02:7d:17:f2:11:20:3d:a8:00:be:
94:05:9b:9e:ba:43:93:e4:52:8d:95:b0:bb:0d:52:
9b:5d:88:c9:0e:4b:12:45:9e:53:1c:b4:83:28:46:
b0:7f:00:37:c2:d5:d9:52:cd:86:7c:d5:cb:e0:43:
6f:cc:9e:a2:85:f9:01:8d:3d:4f:30:f9:67:53:ab:
1f:23:96:23:e6:ce:32:83:c9:17:4a:fd:f7:d4:0c:
60:c9:0b:03:50:88:22:11:f8:7f:8a:a5:13:97:e0:
cc:eb:bd:29:a9:85:e9:6b:93:fd:d0:b9:a1:17:27:
e8:bb:9f:c8:d6:67:ed:74:44:73:0e:52:92:1a:e4:
2b:28:49:ce:e2:eb:b1:f7:f9:4d:82:68:f4:57:f9:
87:27:a7:e1:e2:15:26:8c:6d:4a:6f:0b:9e:a2:8c:
2a:9e:7d:e9:06:15:c0:86:06:f3:e2:69:0a:77:9e:
cb:31:56:28:02:8d:96:bd:4c:a4:25:43:50:84:fc:
ae:b4:14:3b:4e:26:7c:93:5d:6b:2f:f2:4e:78:5c:
0b:2a:eb:f3:45:2d:20:28:fd:5d:17:d4:30:b1:0f:
30:07:a5:a6:d1:51:8b:76:0f:f9:f7:aa:2b:41:c4:
9d:1d:b6:ab:85:3f:14:68:d0:00:90:2f:cc:4a:fe:
83:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:00:78:EE:26:5E:CB:90:55:21:8D:AE:F7:40:C2:E9:92:B8:8E:5A
X509v3 Authority Key Identifier:
keyid:2A:A7:88:ED:A6:C8:0E:F9:02:B9:5D:60:38:70:0A:5D:A7:D6:D0:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqeI7abIDvkCuV1gOHAKXafW0Mw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a6574d-fb6d-47db-ba0c-f16f1ee4f891/1/KqeI7abIDvkCuV1gOHAKXafW0Mw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a6574d-fb6d-47db-ba0c-f16f1ee4f891/1/KqeI7abIDvkCuV1gOHAKXafW0Mw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:b6:d4:12:dc:5c:cc:43:12:af:78:87:0d:7a:54:03:fe:02:
b3:33:08:6c:3a:9c:ab:b6:a4:71:cc:ce:27:33:5b:50:51:13:
87:fe:cd:e7:df:07:19:89:62:04:49:62:d3:89:43:b7:0d:06:
3a:d7:86:33:9b:dc:32:08:21:92:4f:b7:5e:18:fd:37:13:4c:
01:c9:d3:fe:36:e8:08:c2:bf:c1:eb:7f:67:b0:ac:2a:e7:ae:
97:ef:e2:5f:0d:f3:be:b2:0e:60:bf:b1:5e:78:7b:4d:b3:14:
0c:26:98:af:ec:a1:db:7c:8b:a5:f9:76:34:01:bf:07:a9:ce:
7a:52:43:4c:5d:e0:13:f1:15:08:75:7a:82:f8:ee:e3:81:d0:
53:e9:c1:d9:90:2a:50:11:b9:eb:98:27:96:28:66:8f:49:16:
48:24:f0:33:d5:87:c7:2d:18:01:e5:1b:20:a4:cd:9d:41:35:
18:e4:93:ed:ff:f9:c6:45:8e:cb:3e:d7:09:a6:d0:d1:2c:68:
2a:54:e9:e6:d6:90:17:d0:87:dc:ab:45:82:fe:b7:7c:da:6e:
50:c9:81:64:53:2d:8d:df:c1:bd:df:fa:d7:de:b0:4d:d6:cd:
5b:b8:5d:fd:14:a4:3d:dd:78:69:b9:06:5c:ff:e3:ed:c5:9b:
62:d2:ec:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:44 2026 by rpki-client