Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.mft
File: KqrPxdXjsmjyxrpDNrzJQfXI168.mft (raw, json)
Hash identifier: BhshNp0MUyzNgErkQVnfUamlaLK106buCT0K6xcDmiM=
Subject key identifier: 2C:45:CE:BC:3F:02:36:32:44:8A:54:AC:B1:F3:68:E9:61:6D:EE:08
Authority key identifier: 2A:AA:CF:C5:D5:E3:B2:68:F2:C6:BA:43:36:BC:C9:41:F5:C8:D7:AF
Certificate issuer: /CN=2aaacfc5d5e3b268f2c6ba4336bcc941f5c8d7af
Certificate serial: 01A03E5F63C93021EB413693DA3A60DF3A85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqrPxdXjsmjyxrpDNrzJQfXI168.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.mft
Manifest number: 1408
Signing time: Wed 26 Aug 2026 14:00:33 +0000
Manifest this update: Wed 26 Aug 2026 14:00:33 +0000
Manifest next update: Thu 27 Aug 2026 14:00:33 +0000
Files and hashes: 1: KqrPxdXjsmjyxrpDNrzJQfXI168.crl (hash: 6pnG3wLROEqIBpVmpPBjN1fRqBB7WZr/RQ3JpYEqOVM=)
2: P9Xi_swd13obp_Uu9EpIelH3ibs.asa (hash: ACsc4jn9BWNidz80pgmChNo/puaiemP1X04joTVfolY=)
3: fedcGuaQw6GYN-hZL-uzH54Rc1I.roa (hash: zm3vjAA+Iy34Xe3WYJQQlDDN2K6FJmbhe/vPYFhLHAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqrPxdXjsmjyxrpDNrzJQfXI168.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3e:5f:63:c9:30:21:eb:41:36:93:da:3a:60:df:3a:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aaacfc5d5e3b268f2c6ba4336bcc941f5c8d7af
Validity
Not Before: Aug 26 14:00:33 2026 GMT
Not After : Aug 27 14:00:33 2026 GMT
Subject: CN=2c45cebc3f023632448a54acb1f368e9616dee08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:97:c1:a5:65:3d:0f:ab:d7:96:f6:ac:ee:68:
bb:2f:e1:ae:59:b5:52:2b:61:f4:b7:53:29:10:80:
16:80:db:e5:4d:4e:97:c2:0c:40:17:61:52:e3:c2:
97:92:6d:ff:fc:5b:a4:26:6f:77:4d:ce:ae:49:47:
e5:8b:20:b2:4e:f0:41:31:72:46:e7:60:2b:c2:f6:
9c:2c:c5:90:dc:fd:3b:cf:db:c9:f9:33:8e:b6:eb:
4a:90:27:1a:5f:4f:dc:19:85:fe:da:c6:96:8d:87:
9f:ba:85:0a:40:03:84:1c:0b:85:12:98:86:e3:c1:
6a:e4:73:62:99:83:9a:7f:b3:8c:3a:ae:86:37:a8:
c6:cc:a3:cc:62:dd:6f:a8:00:56:c2:ba:38:a1:bf:
47:42:b2:0c:0e:4e:78:a8:ca:fb:6f:c1:1d:d7:80:
b6:f1:73:8b:f3:e7:54:28:ca:f4:43:98:35:5c:f3:
0f:a6:20:42:2f:87:9c:c7:b5:6c:fa:dd:10:05:25:
83:90:96:11:aa:84:87:e1:2f:5c:7f:bb:13:e4:70:
65:53:ee:0b:ca:f9:af:98:7d:94:a6:d5:ed:41:f6:
fb:f9:9a:15:ea:38:b5:a5:c7:0a:27:1b:85:55:c9:
17:11:30:3e:3d:cb:d0:e1:29:2a:35:32:3e:06:0e:
40:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:45:CE:BC:3F:02:36:32:44:8A:54:AC:B1:F3:68:E9:61:6D:EE:08
X509v3 Authority Key Identifier:
keyid:2A:AA:CF:C5:D5:E3:B2:68:F2:C6:BA:43:36:BC:C9:41:F5:C8:D7:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqrPxdXjsmjyxrpDNrzJQfXI168.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:4b:41:fe:c0:90:a6:f8:48:bf:9e:3c:89:99:e3:98:37:18:
f1:04:98:13:9c:dc:55:06:1f:a2:f0:0f:27:14:ff:ee:5e:a8:
5b:57:20:1b:2a:0d:39:0b:d3:10:4c:d0:ec:09:9f:8f:21:11:
9f:df:5f:ed:e2:e0:f6:08:43:33:67:72:ac:05:68:fc:c8:54:
e5:12:e8:cb:a6:84:5c:84:b4:f9:bb:f4:b9:67:45:be:dc:af:
e7:21:41:ad:e1:39:28:3c:c6:fa:a3:a1:37:99:5e:95:80:c0:
09:58:71:25:26:23:c9:30:13:3a:b7:d0:7c:b1:8d:89:57:c3:
e3:11:b1:be:42:ae:39:99:2a:13:1c:1f:e5:e8:83:cb:9a:fb:
f4:c8:65:58:74:27:b7:9b:02:9a:df:65:df:4b:1e:8f:f5:ee:
62:1f:5f:5f:45:a2:36:36:d6:a4:3c:72:2c:6d:2d:6a:67:f7:
04:0e:f8:4e:d2:a6:ca:79:75:21:3a:7f:4d:d9:3f:68:0b:1c:
a7:ed:ad:23:8f:d5:cc:20:83:ae:b8:8b:81:9e:54:12:f1:a3:
f4:6d:30:04:24:5d:40:2c:d4:bd:6a:5f:e3:89:9b:15:ce:02:
d3:96:d7:18:d6:de:cf:9d:1c:e5:9e:83:da:e7:88:52:f8:7a:
27:0d:97:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 18:04:03 2026 by rpki-client