Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.mft
File: KqrPxdXjsmjyxrpDNrzJQfXI168.mft (raw, json)
Hash identifier: n2zLRJZGtp1/PLpS8G/c31T2uZUGVPMPzT6lgEPiToE=
Subject key identifier: 94:7B:CF:84:EF:1F:6A:10:56:8B:D0:C1:A5:F9:79:EF:CF:B3:86:CD
Authority key identifier: 2A:AA:CF:C5:D5:E3:B2:68:F2:C6:BA:43:36:BC:C9:41:F5:C8:D7:AF
Certificate issuer: /CN=2aaacfc5d5e3b268f2c6ba4336bcc941f5c8d7af
Certificate serial: 019E295DB701993E9D29727BE696E2C45F1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqrPxdXjsmjyxrpDNrzJQfXI168.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.mft
Manifest number: 12F4
Signing time: Fri 15 May 2026 02:01:07 +0000
Manifest this update: Fri 15 May 2026 02:01:07 +0000
Manifest next update: Sat 16 May 2026 02:01:07 +0000
Files and hashes: 1: KqrPxdXjsmjyxrpDNrzJQfXI168.crl (hash: uF4oYSQiBWiM/C7Hebv3s9amfDSu/vWS03UkGo4zHes=)
2: P9Xi_swd13obp_Uu9EpIelH3ibs.asa (hash: ACsc4jn9BWNidz80pgmChNo/puaiemP1X04joTVfolY=)
3: fedcGuaQw6GYN-hZL-uzH54Rc1I.roa (hash: zm3vjAA+Iy34Xe3WYJQQlDDN2K6FJmbhe/vPYFhLHAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqrPxdXjsmjyxrpDNrzJQfXI168.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:29:5d:b7:01:99:3e:9d:29:72:7b:e6:96:e2:c4:5f:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aaacfc5d5e3b268f2c6ba4336bcc941f5c8d7af
Validity
Not Before: May 15 02:01:07 2026 GMT
Not After : May 16 02:01:07 2026 GMT
Subject: CN=947bcf84ef1f6a10568bd0c1a5f979efcfb386cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c2:7e:57:6c:d8:9e:cc:4b:5e:89:59:14:1e:
45:bb:3f:b4:21:2a:9a:61:5c:47:0d:9d:cb:aa:bc:
ae:92:e1:ea:ea:de:37:bf:fa:44:17:39:b2:d8:01:
da:27:3a:45:43:fc:f2:09:67:a1:67:5f:d5:62:24:
88:41:03:e6:82:54:ce:ee:cf:34:e6:34:fb:8e:d3:
5c:b8:7c:a6:53:82:c5:f1:10:5b:d0:81:7e:a6:0f:
73:8d:5a:08:80:a4:b3:08:9d:01:3d:ba:8e:29:98:
de:09:1d:eb:7c:11:40:92:a0:5e:a4:44:49:2b:f8:
35:f5:c9:92:7a:93:d3:dd:17:a2:a8:b2:9d:f2:c5:
aa:87:d6:7d:94:ba:5b:70:ce:ce:c7:7e:4d:35:9f:
d3:6b:5b:25:91:5c:fc:f8:bc:80:11:ff:fe:ab:30:
bd:13:c2:c5:31:d2:66:a3:d5:0c:26:bc:4d:e1:f7:
e9:38:d6:e2:a7:8e:3f:eb:29:7c:12:b0:a0:cb:d7:
ca:d3:59:8b:02:5f:b0:9f:51:38:bb:1a:f1:2b:0a:
59:00:0a:32:71:f8:42:43:c7:05:01:82:61:51:39:
93:61:a4:2c:bc:ff:c5:0f:d7:e3:e3:50:c6:e9:6f:
66:f3:5f:15:4e:24:fe:90:4c:a0:12:7f:37:3d:50:
06:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:7B:CF:84:EF:1F:6A:10:56:8B:D0:C1:A5:F9:79:EF:CF:B3:86:CD
X509v3 Authority Key Identifier:
keyid:2A:AA:CF:C5:D5:E3:B2:68:F2:C6:BA:43:36:BC:C9:41:F5:C8:D7:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqrPxdXjsmjyxrpDNrzJQfXI168.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:51:6c:c7:11:4d:59:7f:0a:5d:d5:dd:4d:d5:4e:d7:e1:d2:
67:9d:fc:6f:a3:79:f1:31:20:51:11:2c:f9:4c:6f:35:35:85:
8d:93:41:ce:27:4f:45:dd:07:0f:86:b1:58:08:46:3a:72:70:
fe:74:e4:cd:8f:02:41:99:26:2d:80:06:a4:29:ba:29:81:eb:
1b:26:88:6f:3e:55:aa:26:02:9b:c5:69:cd:6d:06:dd:1e:ce:
4b:3a:50:e2:57:a1:69:5d:b1:fd:e7:f8:4c:2b:a5:de:ba:c1:
27:65:95:67:5d:af:d9:b2:ac:77:5a:f6:95:88:27:8a:7a:4c:
a0:e2:94:aa:c0:a6:24:22:24:89:24:56:76:c5:81:1c:e5:2b:
41:4a:13:0e:a4:ab:66:a4:0f:b8:89:ad:2f:be:54:b7:6f:62:
9f:9c:a9:eb:e3:28:db:c5:71:c2:c6:65:bd:2b:b6:42:51:45:
e9:cf:d5:78:06:73:1e:bb:f2:b7:89:fd:dc:1a:05:79:e4:05:
e2:88:61:4a:04:46:ea:b4:d0:b5:38:9c:60:1a:9a:4b:2d:88:
6b:41:6c:2e:0f:2f:da:45:03:18:44:10:0e:d5:e2:8e:91:7b:
df:15:78:8b:f9:af:49:44:ca:c9:5d:a4:31:72:21:e7:f0:22:
3f:c2:71:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4pXbcBmT6dKXJ75pbixF8bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYWFjZmM1ZDVlM2IyNjhmMmM2YmE0MzM2YmNjOTQxZjVj
OGQ3YWYwHhcNMjYwNTE1MDIwMTA3WhcNMjYwNTE2MDIwMTA3WjAzMTEwLwYDVQQD
Eyg5NDdiY2Y4NGVmMWY2YTEwNTY4YmQwYzFhNWY5NzllZmNmYjM4NmNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcJ+V2zYnsxLXolZFB5Fuz+0ISqa
YVxHDZ3LqryukuHq6t43v/pEFzmy2AHaJzpFQ/zyCWehZ1/VYiSIQQPmglTO7s80
5jT7jtNcuHymU4LF8RBb0IF+pg9zjVoIgKSzCJ0BPbqOKZjeCR3rfBFAkqBepERJ
K/g19cmSepPT3ReiqLKd8sWqh9Z9lLpbcM7Ox35NNZ/Ta1slkVz8+LyAEf/+qzC9
E8LFMdJmo9UMJrxN4ffpONbip44/6yl8ErCgy9fK01mLAl+wn1E4uxrxKwpZAAoy
cfhCQ8cFAYJhUTmTYaQsvP/FD9fj41DG6W9m818VTiT+kEygEn83PVAGLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJR7z4TvH2oQVovQwaX5ee/Ps4bNMB8GA1UdIwQY
MBaAFCqqz8XV47Jo8sa6Qza8yUH1yNevMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3FyUHhkWGpzbWp5eHJwRE5yekpRZlhJMTY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9jNTJkNDQtMWJiNi00ZGMwLTg2YmEt
NDRjYjRlOTUzMDI3LzEvS3FyUHhkWGpzbWp5eHJwRE5yekpRZlhJMTY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni9jNTJkNDQtMWJiNi00ZGMwLTg2YmEtNDRjYjRlOTUzMDI3
LzEvS3FyUHhkWGpzbWp5eHJwRE5yekpRZlhJMTY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXlFsxxFN
WX8KXdXdTdVO1+HSZ538b6N58TEgUREs+UxvNTWFjZNBzidPRd0HD4axWAhGOnJw
/nTkzY8CQZkmLYAGpCm6KYHrGyaIbz5VqiYCm8VpzW0G3R7OSzpQ4lehaV2x/ef4
TCul3rrBJ2WVZ12v2bKsd1r2lYgninpMoOKUqsCmJCIkiSRWdsWBHOUrQUoTDqSr
ZqQPuImtL75Ut29in5yp6+Mo28VxwsZlvSu2QlFF6c/VeAZzHrvyt4n93BoFeeQF
4ohhSgRG6rTQtTicYBqaSy2Ia0FsLg8v2kUDGEQQDtXijpF73xV4i/mvSUTKyV2k
MXIh5/AiP8JxDw==
-----END CERTIFICATE-----
Generated at Fri May 15 06:59:33 2026 by rpki-client