Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.mft
File: KqrPxdXjsmjyxrpDNrzJQfXI168.mft (raw, json)
Hash identifier: tWuOpyS0XQnzJqPO1QWvj4nLDVhB7/8jvc9ujgbKs+k=
Subject key identifier: 3A:A2:30:10:98:60:A4:4E:3D:41:4C:4A:09:04:AF:C9:FF:30:CE:E0
Authority key identifier: 2A:AA:CF:C5:D5:E3:B2:68:F2:C6:BA:43:36:BC:C9:41:F5:C8:D7:AF
Certificate issuer: /CN=2aaacfc5d5e3b268f2c6ba4336bcc941f5c8d7af
Certificate serial: 019D38D363D4DD6C8116683CA8ABEA501454
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqrPxdXjsmjyxrpDNrzJQfXI168.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.mft
Manifest number: 1276
Signing time: Sun 29 Mar 2026 09:01:10 +0000
Manifest this update: Sun 29 Mar 2026 09:01:10 +0000
Manifest next update: Mon 30 Mar 2026 09:01:10 +0000
Files and hashes: 1: KqrPxdXjsmjyxrpDNrzJQfXI168.crl (hash: SXOe52slPtKEm/O5SRy3fvorMlsyyDuc5SlsYmiFztM=)
2: fedcGuaQw6GYN-hZL-uzH54Rc1I.roa (hash: zm3vjAA+Iy34Xe3WYJQQlDDN2K6FJmbhe/vPYFhLHAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqrPxdXjsmjyxrpDNrzJQfXI168.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:63:d4:dd:6c:81:16:68:3c:a8:ab:ea:50:14:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aaacfc5d5e3b268f2c6ba4336bcc941f5c8d7af
Validity
Not Before: Mar 29 09:01:10 2026 GMT
Not After : Mar 30 09:01:10 2026 GMT
Subject: CN=3aa230109860a44e3d414c4a0904afc9ff30cee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:2c:e1:1c:da:be:88:05:67:b2:14:eb:92:50:
08:c2:57:71:a6:7a:3b:04:3b:60:22:f2:3e:0f:4f:
75:ca:32:bb:19:5b:c9:90:2b:2a:ce:84:1a:f2:66:
1b:eb:45:50:8e:1f:f8:7a:9d:cc:63:9c:10:f8:93:
78:9a:18:5f:cd:69:52:ad:4c:87:e9:5e:56:c3:a5:
88:cf:76:2e:12:3a:4c:38:8f:f6:70:bc:53:81:7f:
9b:69:44:b2:30:a9:b5:59:3e:cd:3f:5a:79:93:5a:
a8:27:9f:70:c3:fa:88:68:83:59:05:df:6a:ce:40:
d1:18:e8:1c:dc:95:dd:07:2b:9a:eb:b4:7e:5b:6d:
23:6c:27:a4:99:09:28:80:36:a5:9e:f8:d0:81:b7:
09:73:b3:62:1f:30:53:24:2c:f0:b6:e9:14:6f:79:
8a:f0:74:f6:1c:c8:38:a5:6d:7d:5b:3b:43:c2:43:
1e:56:f3:62:4e:61:df:ea:36:b8:f9:9e:7e:7e:48:
2a:84:06:06:2a:00:2c:18:7e:5b:f3:fd:60:86:38:
24:2a:fc:4b:c3:ae:c1:fb:9b:45:18:94:40:e8:47:
19:89:27:41:ca:04:2e:7c:2e:02:2c:ba:45:3d:c4:
92:f4:85:c4:36:a4:5d:13:a0:5d:0f:d4:b1:4f:8b:
f2:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:A2:30:10:98:60:A4:4E:3D:41:4C:4A:09:04:AF:C9:FF:30:CE:E0
X509v3 Authority Key Identifier:
keyid:2A:AA:CF:C5:D5:E3:B2:68:F2:C6:BA:43:36:BC:C9:41:F5:C8:D7:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqrPxdXjsmjyxrpDNrzJQfXI168.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:ec:68:13:50:bd:1c:3e:f3:41:4f:b8:8a:48:88:8e:1b:c1:
e0:0f:61:84:7f:d4:41:35:49:94:d3:90:6d:8b:d7:ca:1d:82:
f5:af:bb:0f:aa:bd:33:7e:6c:fe:24:5a:e7:2d:4c:7d:ff:a3:
7b:34:f7:5e:97:85:1c:1d:cf:47:7d:ed:2a:18:07:ec:c6:b9:
95:36:ea:d2:e3:bf:bc:88:fe:f0:9d:06:b9:2b:ef:50:a6:1e:
cb:87:5f:6b:f2:69:5c:2e:b8:60:57:b3:6c:96:33:64:15:1c:
cd:1a:87:9b:78:f7:ee:8f:c4:cb:42:2d:cf:8e:7b:f1:0b:85:
51:f6:87:d9:59:bf:03:82:0e:39:00:42:c2:0a:2d:36:d5:9f:
51:32:f2:36:41:6b:1e:ed:9b:cd:c7:96:dc:02:16:d9:43:e7:
a1:0d:48:a3:36:88:84:5b:76:5c:38:c6:40:0c:e2:23:ee:89:
90:6b:25:d1:5d:bc:26:17:e4:9b:ef:82:37:17:73:8d:cb:22:
e5:39:b3:c5:75:3b:37:63:fc:45:39:78:79:b0:c4:f9:c1:51:
9b:19:49:c4:a0:07:66:ae:bd:c9:42:7a:62:be:14:c4:f1:be:
2c:9e:5d:0d:d7:e0:58:e5:4e:03:ac:56:b8:3a:9a:91:ea:d7:
8f:be:16:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:01:25 2026 by rpki-client