Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.mft
File: KqrPxdXjsmjyxrpDNrzJQfXI168.mft (raw, json)
Hash identifier: CK7rrBg6Ypdj51emmrWWGON/TsiMAkd8Ir+hatnk9Xg=
Subject key identifier: BC:81:58:67:05:54:1B:1C:4A:A9:A3:27:62:BF:71:6F:7E:7D:8F:3A
Authority key identifier: 2A:AA:CF:C5:D5:E3:B2:68:F2:C6:BA:43:36:BC:C9:41:F5:C8:D7:AF
Certificate issuer: /CN=2aaacfc5d5e3b268f2c6ba4336bcc941f5c8d7af
Certificate serial: 019F111C721D43404E042806876803AAB9AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqrPxdXjsmjyxrpDNrzJQfXI168.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.mft
Manifest number: 136C
Signing time: Mon 29 Jun 2026 02:01:44 +0000
Manifest this update: Mon 29 Jun 2026 02:01:44 +0000
Manifest next update: Tue 30 Jun 2026 02:01:44 +0000
Files and hashes: 1: KqrPxdXjsmjyxrpDNrzJQfXI168.crl (hash: FX0cxiAY0uEkKjUtx/C5M0I63CTyXkpOKcIdqDdtayc=)
2: P9Xi_swd13obp_Uu9EpIelH3ibs.asa (hash: ACsc4jn9BWNidz80pgmChNo/puaiemP1X04joTVfolY=)
3: fedcGuaQw6GYN-hZL-uzH54Rc1I.roa (hash: zm3vjAA+Iy34Xe3WYJQQlDDN2K6FJmbhe/vPYFhLHAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqrPxdXjsmjyxrpDNrzJQfXI168.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:1c:72:1d:43:40:4e:04:28:06:87:68:03:aa:b9:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aaacfc5d5e3b268f2c6ba4336bcc941f5c8d7af
Validity
Not Before: Jun 29 02:01:44 2026 GMT
Not After : Jun 30 02:01:44 2026 GMT
Subject: CN=bc81586705541b1c4aa9a32762bf716f7e7d8f3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2b:6b:52:97:31:40:9c:a7:6a:5f:a8:de:a1:
da:b0:91:c7:a7:47:29:b3:d2:12:4a:ee:86:30:69:
f2:e8:e3:fb:1b:ff:12:79:78:90:e8:72:69:30:49:
97:a1:0a:c4:8b:5f:25:16:e1:69:27:6c:22:b7:ba:
c5:f7:25:f1:77:78:31:1e:63:c4:f0:9f:16:4b:e0:
04:8d:b1:ef:cc:bf:ab:e2:c0:2f:b4:ef:c6:aa:c6:
69:83:5f:c3:b9:dc:a2:4b:ac:ac:e3:6d:b2:fb:2a:
2b:20:c1:15:10:88:cb:a9:82:7f:70:c2:c8:67:93:
04:7e:77:99:a3:91:ca:cc:57:51:0e:7b:5c:42:a8:
d8:da:cf:3b:b6:b1:05:ba:88:69:b4:98:1f:18:b3:
7f:db:d6:43:ec:df:dc:b2:69:f8:45:69:56:74:ff:
22:97:44:f8:4f:28:a2:95:1e:8b:dd:95:09:1c:44:
5b:0c:8d:23:a5:3e:07:b0:e4:12:7f:e1:0c:86:70:
5d:d6:0c:6e:51:ed:66:e9:a2:8b:ca:1f:2a:98:cb:
1e:79:7a:94:20:0a:cb:1c:70:22:20:8e:14:e9:61:
ee:43:f3:b8:4b:19:d1:46:d3:7f:c9:07:2b:79:95:
2b:74:cb:14:69:35:30:a3:ac:9a:db:bd:44:61:78:
5b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:81:58:67:05:54:1B:1C:4A:A9:A3:27:62:BF:71:6F:7E:7D:8F:3A
X509v3 Authority Key Identifier:
keyid:2A:AA:CF:C5:D5:E3:B2:68:F2:C6:BA:43:36:BC:C9:41:F5:C8:D7:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqrPxdXjsmjyxrpDNrzJQfXI168.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:e4:4c:05:63:3c:9a:a6:85:6d:25:c7:cc:46:2f:28:05:0c:
c3:59:f8:8a:83:e5:61:6c:48:5d:00:a6:57:da:4f:b0:12:8c:
29:94:9d:80:88:4c:8c:db:d3:ad:80:04:8f:72:9f:d0:3d:46:
59:6e:3f:68:94:fa:b6:7f:71:39:9b:10:da:1e:3c:63:0c:5a:
b9:4b:be:e6:07:90:61:b4:49:13:7a:28:d1:98:69:8c:24:35:
a2:11:50:00:79:c1:80:fc:10:07:f5:0f:c9:54:5d:51:37:21:
bf:73:8a:ed:15:e3:42:fd:76:73:8f:98:f3:07:21:19:a6:0e:
a6:f1:ca:8c:55:57:9a:85:92:9e:ab:28:e7:5b:3c:9e:c4:ed:
76:51:23:c1:7b:1a:83:18:f6:15:37:d1:05:95:45:17:42:e0:
bd:49:74:6c:3c:8b:a3:32:e4:e9:46:16:a0:c7:96:4d:c9:2e:
9e:5b:dd:02:19:ef:c2:89:19:fd:eb:68:02:1e:21:33:86:64:
c2:05:73:33:1a:0e:2d:2e:da:95:2a:87:5d:a5:7e:e6:18:e8:
1f:e7:f0:6a:26:01:60:53:06:ff:8f:67:76:9c:90:76:23:79:
63:85:91:b8:c3:ec:42:2a:74:fc:69:db:43:62:8e:3a:a8:a6:
48:1b:8c:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8RHHIdQ0BOBCgGh2gDqrmrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYWFjZmM1ZDVlM2IyNjhmMmM2YmE0MzM2YmNjOTQxZjVj
OGQ3YWYwHhcNMjYwNjI5MDIwMTQ0WhcNMjYwNjMwMDIwMTQ0WjAzMTEwLwYDVQQD
EyhiYzgxNTg2NzA1NTQxYjFjNGFhOWEzMjc2MmJmNzE2ZjdlN2Q4ZjNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoitrUpcxQJynal+o3qHasJHHp0cp
s9ISSu6GMGny6OP7G/8SeXiQ6HJpMEmXoQrEi18lFuFpJ2wit7rF9yXxd3gxHmPE
8J8WS+AEjbHvzL+r4sAvtO/GqsZpg1/DudyiS6ys422y+yorIMEVEIjLqYJ/cMLI
Z5MEfneZo5HKzFdRDntcQqjY2s87trEFuohptJgfGLN/29ZD7N/csmn4RWlWdP8i
l0T4TyiilR6L3ZUJHERbDI0jpT4HsOQSf+EMhnBd1gxuUe1m6aKLyh8qmMseeXqU
IArLHHAiII4U6WHuQ/O4SxnRRtN/yQcreZUrdMsUaTUwo6ya271EYXhb6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLyBWGcFVBscSqmjJ2K/cW9+fY86MB8GA1UdIwQY
MBaAFCqqz8XV47Jo8sa6Qza8yUH1yNevMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3FyUHhkWGpzbWp5eHJwRE5yekpRZlhJMTY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9jNTJkNDQtMWJiNi00ZGMwLTg2YmEt
NDRjYjRlOTUzMDI3LzEvS3FyUHhkWGpzbWp5eHJwRE5yekpRZlhJMTY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni9jNTJkNDQtMWJiNi00ZGMwLTg2YmEtNDRjYjRlOTUzMDI3
LzEvS3FyUHhkWGpzbWp5eHJwRE5yekpRZlhJMTY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPORMBWM8
mqaFbSXHzEYvKAUMw1n4ioPlYWxIXQCmV9pPsBKMKZSdgIhMjNvTrYAEj3Kf0D1G
WW4/aJT6tn9xOZsQ2h48YwxauUu+5geQYbRJE3oo0ZhpjCQ1ohFQAHnBgPwQB/UP
yVRdUTchv3OK7RXjQv12c4+Y8wchGaYOpvHKjFVXmoWSnqso51s8nsTtdlEjwXsa
gxj2FTfRBZVFF0LgvUl0bDyLozLk6UYWoMeWTckunlvdAhnvwokZ/etoAh4hM4Zk
wgVzMxoOLS7alSqHXaV+5hjoH+fwaiYBYFMG/49ndpyQdiN5Y4WRuMPsQip0/Gnb
Q2KOOqimSBuMdg==
-----END CERTIFICATE-----
Generated at Mon Jun 29 12:35:32 2026 by rpki-client