Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/f2c803-43c8-44bb-9dd0-651229830170/1/KqOA4jDLM0NhtIYeL2lBJDh_hSk.mft
File: KqOA4jDLM0NhtIYeL2lBJDh_hSk.mft (raw, json)
Hash identifier: JDHtHDg2sn5ww3dffz/BznQ3XWr71CMaagm12SDMS1A=
Subject key identifier: 0E:FE:64:A0:A7:14:DD:BB:AF:FC:CD:C6:DB:D0:E5:F0:12:3E:D9:CD
Authority key identifier: 2A:A3:80:E2:30:CB:33:43:61:B4:86:1E:2F:69:41:24:38:7F:85:29
Certificate issuer: /CN=2aa380e230cb334361b4861e2f694124387f8529
Certificate serial: 01A04129D19B22546BBD2C8BAA23088EDFA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqOA4jDLM0NhtIYeL2lBJDh_hSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/f2c803-43c8-44bb-9dd0-651229830170/1/KqOA4jDLM0NhtIYeL2lBJDh_hSk.mft
Manifest number: 1A1F
Signing time: Thu 27 Aug 2026 03:00:54 +0000
Manifest this update: Thu 27 Aug 2026 03:00:54 +0000
Manifest next update: Fri 28 Aug 2026 03:00:54 +0000
Files and hashes: 1: Be1pwyGp5FXy6-3Vf2cbj3OaaLE.roa (hash: 720qMBSCWVcC0hnisEl9DaePON43Av8/XJC6cladPqM=)
2: KqOA4jDLM0NhtIYeL2lBJDh_hSk.crl (hash: q/K+W30DasQIZYkOlVzdI9Z8+SeF1q0V7MvZvRwrtVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/f2c803-43c8-44bb-9dd0-651229830170/1/KqOA4jDLM0NhtIYeL2lBJDh_hSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/f2c803-43c8-44bb-9dd0-651229830170/1/KqOA4jDLM0NhtIYeL2lBJDh_hSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqOA4jDLM0NhtIYeL2lBJDh_hSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:41:29:d1:9b:22:54:6b:bd:2c:8b:aa:23:08:8e:df:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa380e230cb334361b4861e2f694124387f8529
Validity
Not Before: Aug 27 03:00:54 2026 GMT
Not After : Aug 28 03:00:54 2026 GMT
Subject: CN=0efe64a0a714ddbbaffccdc6dbd0e5f0123ed9cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8f:17:4b:ee:a5:0f:f5:9a:8e:45:2b:bf:b5:
7d:48:c4:ef:4e:60:d9:c3:c9:03:0b:03:8f:e1:ba:
b5:65:cb:2e:c5:fb:36:a0:ac:31:7c:37:d1:96:a7:
fc:f0:92:78:d1:3a:ae:e2:d1:81:c5:2c:39:69:2a:
13:8e:3b:37:5c:7e:95:6e:df:3a:4b:3b:e0:c0:0b:
41:c9:ca:10:6a:da:33:f9:d6:bf:95:a9:7a:5b:ff:
d7:2e:07:79:3c:e0:0c:c3:45:2e:ea:80:88:38:46:
4b:69:7e:33:be:af:f8:69:21:af:5a:ae:76:34:fd:
35:d3:16:33:a2:13:67:cd:1b:d1:3f:0e:eb:88:01:
d8:9e:3b:68:33:50:0e:e1:82:95:c9:76:ce:4b:b9:
e4:54:f7:81:8a:45:97:65:9a:db:db:b0:e8:67:26:
6c:71:e1:47:1c:bc:a4:35:7a:e4:53:f9:21:1d:bf:
53:d6:0c:68:ba:d2:cd:d9:2e:e5:b0:db:c7:de:11:
e5:46:b7:4e:ba:3f:76:86:97:49:c1:f4:27:b4:be:
72:96:6b:12:e0:ad:7c:5d:46:88:96:26:88:0c:56:
e8:28:bc:2c:69:c0:4a:2a:e8:86:22:02:7b:3c:99:
88:04:0f:9e:58:7d:df:5a:7b:66:00:30:69:67:6e:
f1:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:FE:64:A0:A7:14:DD:BB:AF:FC:CD:C6:DB:D0:E5:F0:12:3E:D9:CD
X509v3 Authority Key Identifier:
keyid:2A:A3:80:E2:30:CB:33:43:61:B4:86:1E:2F:69:41:24:38:7F:85:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqOA4jDLM0NhtIYeL2lBJDh_hSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/f2c803-43c8-44bb-9dd0-651229830170/1/KqOA4jDLM0NhtIYeL2lBJDh_hSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/f2c803-43c8-44bb-9dd0-651229830170/1/KqOA4jDLM0NhtIYeL2lBJDh_hSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:08:01:c7:0e:4e:e8:5a:c3:84:ef:ed:10:08:92:ad:b1:ce:
4b:4b:be:5d:02:9d:7c:28:26:c8:d6:58:09:68:a6:63:85:1d:
9a:ed:c4:5e:68:3e:64:85:cb:04:bd:8c:a5:63:4b:7c:ae:d0:
60:46:d1:f4:56:58:37:98:18:c1:8c:fd:f5:fb:a3:d6:60:a1:
56:91:1a:f7:c4:3b:93:24:c9:02:89:f5:77:7c:94:96:c2:45:
f3:69:d2:42:71:6d:85:e8:d3:11:3e:40:91:e6:10:a2:67:c6:
54:51:df:cc:6d:5d:57:66:83:b7:41:8d:7e:c6:8e:be:ae:bb:
a3:33:1e:5d:d5:36:30:ac:4b:d8:35:bd:1c:d2:43:1b:50:10:
ee:87:af:a7:08:64:c0:dc:a8:a3:33:57:f8:42:db:02:63:eb:
23:4a:e9:be:f9:c5:61:1a:26:6a:a1:d2:d1:60:ce:63:23:04:
5c:43:00:dd:45:59:43:f3:59:45:16:7a:7d:84:9c:39:2f:00:
71:f9:6f:f5:cf:78:c2:cb:39:6e:c6:54:78:9f:7b:94:05:66:
76:71:c5:ef:30:b7:0e:9e:ba:ad:a0:c8:3c:9c:c6:cb:92:c8:
2c:af:03:c9:b3:96:11:3c:f2:b5:f6:98:e6:bb:25:f7:10:2f:
be:13:f2:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 07:56:34 2026 by rpki-client