Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/05c3a1-c8fe-40ff-9c52-3e6f0324410a/1/KQHXZDHG6HPTxEcwVx4eUNYCBXw.mft
File: KQHXZDHG6HPTxEcwVx4eUNYCBXw.mft (raw, json)
Hash identifier: +FLdrs1Ie++anfYH46L5jhSwYwZQGYbFOjcWNu1QvEc=
Subject key identifier: FE:84:05:51:A1:60:5B:C5:12:8D:E1:01:C6:56:AF:72:D5:0A:9E:27
Authority key identifier: 29:01:D7:64:31:C6:E8:73:D3:C4:47:30:57:1E:1E:50:D6:02:05:7C
Certificate issuer: /CN=2901d76431c6e873d3c44730571e1e50d602057c
Certificate serial: 01A0E99C4B1B6ED9E83CEA940B540319D00D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQHXZDHG6HPTxEcwVx4eUNYCBXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/05c3a1-c8fe-40ff-9c52-3e6f0324410a/1/KQHXZDHG6HPTxEcwVx4eUNYCBXw.mft
Manifest number: 1689
Signing time: Mon 28 Sep 2026 20:02:09 +0000
Manifest this update: Mon 28 Sep 2026 20:02:09 +0000
Manifest next update: Tue 29 Sep 2026 20:02:09 +0000
Files and hashes: 1: KQHXZDHG6HPTxEcwVx4eUNYCBXw.crl (hash: G5hJ3gIJ4Ohc6+KWa3dYKHJx0EAIOuyWLJD4OXVA5Tg=)
2: TOF3ZgA2E3UTCvybT5QOxSPJdVo.roa (hash: iSQvu/X4RZ2TX/v9Xw2MSqYTLV+RJbk0Qnv9Fb30Cgo=)
3: qR34p5ccxusFmYGiqxqs-x0VLfo.asa (hash: qsNT5FbF31r9LydstqWQ8uToHpVi2El6JTZvM1F/ZNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/05c3a1-c8fe-40ff-9c52-3e6f0324410a/1/KQHXZDHG6HPTxEcwVx4eUNYCBXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/05c3a1-c8fe-40ff-9c52-3e6f0324410a/1/KQHXZDHG6HPTxEcwVx4eUNYCBXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQHXZDHG6HPTxEcwVx4eUNYCBXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 20:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:9c:4b:1b:6e:d9:e8:3c:ea:94:0b:54:03:19:d0:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2901d76431c6e873d3c44730571e1e50d602057c
Validity
Not Before: Sep 28 20:02:09 2026 GMT
Not After : Sep 29 20:02:09 2026 GMT
Subject: CN=fe840551a1605bc5128de101c656af72d50a9e27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d2:7b:0e:79:48:f3:53:a0:af:bc:4f:88:ab:
bd:58:8a:0f:53:bf:75:e9:c6:9f:0b:0d:4a:02:70:
ab:19:4f:c3:6e:6a:68:2f:ba:af:e4:fe:c0:67:18:
10:0a:0b:0a:68:bb:1a:ef:4b:07:0e:bc:60:71:75:
ea:f0:cc:2d:9c:2b:cf:d4:e9:81:5f:0d:8d:ce:f0:
12:38:c3:88:1b:2f:26:40:cd:88:43:94:af:18:50:
66:86:91:87:15:82:02:d9:a5:fa:5b:e3:dd:8c:95:
11:b6:bd:0b:d4:01:48:f3:3f:c3:ba:cf:53:e8:2c:
46:e4:63:e5:08:b2:9d:a3:54:5d:55:6f:dd:6b:50:
db:b3:05:71:de:6a:25:17:ac:d9:2c:28:e6:90:87:
3d:9a:42:84:df:e6:95:8e:b4:70:6a:35:5e:05:f2:
38:4d:c5:7b:38:99:e7:ec:a7:e7:7c:a8:00:00:fd:
38:18:06:70:7e:ec:68:32:13:37:64:e2:ef:b6:6b:
5a:40:af:65:8e:90:6c:e0:22:f0:17:a2:28:10:e4:
14:2e:65:14:51:93:91:f4:ac:f7:0c:50:0b:a4:1d:
19:77:4e:3b:36:47:e6:7e:16:2c:b6:ce:46:a3:fb:
50:8c:79:58:b7:15:28:a3:f5:e2:90:d4:87:48:01:
37:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:84:05:51:A1:60:5B:C5:12:8D:E1:01:C6:56:AF:72:D5:0A:9E:27
X509v3 Authority Key Identifier:
keyid:29:01:D7:64:31:C6:E8:73:D3:C4:47:30:57:1E:1E:50:D6:02:05:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQHXZDHG6HPTxEcwVx4eUNYCBXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/05c3a1-c8fe-40ff-9c52-3e6f0324410a/1/KQHXZDHG6HPTxEcwVx4eUNYCBXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/05c3a1-c8fe-40ff-9c52-3e6f0324410a/1/KQHXZDHG6HPTxEcwVx4eUNYCBXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:dc:e0:0e:28:31:20:a7:10:6a:c8:dc:76:bd:48:e5:a9:ce:
3f:94:50:5a:84:22:25:67:16:82:db:80:35:48:9e:4e:a4:5f:
22:6e:57:45:60:fe:b3:14:af:75:21:46:dc:12:ec:8d:16:fc:
d0:4d:47:67:90:c1:b6:ab:cb:c9:46:24:88:05:d5:63:5e:db:
c3:91:4d:e7:2b:a7:50:52:5b:2c:fc:7a:cd:89:eb:45:07:d5:
e1:4c:cb:0a:5c:7a:63:f5:c3:c5:97:4c:b9:e9:2b:74:38:07:
69:1f:bd:4c:be:95:b0:70:6c:61:a0:7c:ec:f9:13:05:de:93:
48:37:fb:dd:4b:08:30:cc:ec:3a:0b:59:4a:60:1c:e2:a4:73:
52:23:e7:d0:ea:d8:a7:6f:f5:68:96:a6:52:f3:36:f1:bd:ee:
f3:6c:a7:ee:43:39:9b:fa:85:60:e4:21:62:86:2a:55:df:81:
3a:83:13:65:59:21:04:13:1e:ae:d9:b9:78:b2:b5:c1:d4:df:
9d:a9:88:95:dd:01:1c:59:b5:d9:ae:96:e4:a4:08:04:cd:35:
1a:e4:f8:ef:00:8a:23:47:78:83:83:66:63:03:5f:7f:8f:b5:
e5:c4:68:b5:7d:86:ed:20:8c:6a:2f:5f:e2:e9:08:16:ac:b9:
52:e6:c9:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 08:35:10 2026 by rpki-client