Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/10346e-1504-43dd-ab28-66858bc8eb77/1/KqJOWBL8wxBrnrCusA5ie6I10FY.mft
File: KqJOWBL8wxBrnrCusA5ie6I10FY.mft (raw, json)
Hash identifier: afqMY7CD3XjmtgM6agZixFM/eAncOa0MDD14ZlSYwHo=
Subject key identifier: 4D:F5:D1:80:AD:20:53:9B:A7:EA:E9:1B:9B:A4:7F:39:D1:82:B2:7B
Authority key identifier: 2A:A2:4E:58:12:FC:C3:10:6B:9E:B0:AE:B0:0E:62:7B:A2:35:D0:56
Certificate issuer: /CN=2aa24e5812fcc3106b9eb0aeb00e627ba235d056
Certificate serial: 01A1242F89886BBAA8D6AAB83D6A9B4F9830
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqJOWBL8wxBrnrCusA5ie6I10FY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/10346e-1504-43dd-ab28-66858bc8eb77/1/KqJOWBL8wxBrnrCusA5ie6I10FY.mft
Manifest number: 0D2B
Signing time: Sat 10 Oct 2026 05:00:57 +0000
Manifest this update: Sat 10 Oct 2026 05:00:57 +0000
Manifest next update: Sun 11 Oct 2026 05:00:57 +0000
Files and hashes: 1: KqJOWBL8wxBrnrCusA5ie6I10FY.crl (hash: BH15xIMi7nbI/BLHw6EAOI/+QcC47DYsbci0t+fLFqU=)
2: yXEtTJb7Q9QNq9QwBOpKF1Og1mg.roa (hash: DbsY9yqJmKOSdLO9tL/m8Sp1oKJbQqdJXvqChVz5qJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/10346e-1504-43dd-ab28-66858bc8eb77/1/KqJOWBL8wxBrnrCusA5ie6I10FY.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/10346e-1504-43dd-ab28-66858bc8eb77/1/KqJOWBL8wxBrnrCusA5ie6I10FY.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqJOWBL8wxBrnrCusA5ie6I10FY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 00:43:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:24:2f:89:88:6b:ba:a8:d6:aa:b8:3d:6a:9b:4f:98:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa24e5812fcc3106b9eb0aeb00e627ba235d056
Validity
Not Before: Oct 10 05:00:57 2026 GMT
Not After : Oct 11 05:00:57 2026 GMT
Subject: CN=4df5d180ad20539ba7eae91b9ba47f39d182b27b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:f4:fe:5d:18:c4:19:e6:b7:50:67:84:54:65:
00:96:44:c4:64:b3:32:1f:dd:b4:89:09:13:27:99:
3a:61:34:24:0a:f7:2a:85:1b:b1:af:d0:03:31:6e:
49:b7:3f:c3:b6:a2:a1:38:b6:dd:c7:88:ff:9c:f5:
1d:3c:c3:e1:f2:0e:13:86:04:d1:10:bc:cd:f9:db:
9a:16:11:e0:9f:8b:36:a1:cd:39:b9:65:de:3a:01:
27:10:46:2c:bd:1c:e9:4c:c4:a1:be:5e:ea:8b:ca:
58:98:c0:fa:c5:b5:88:17:85:30:18:21:f5:ea:66:
0f:96:10:41:05:fa:54:09:1c:d9:40:e0:38:41:41:
cc:8d:60:4b:c0:34:75:01:65:18:12:ec:aa:71:59:
5f:d3:2f:f8:2c:e0:d2:84:b5:d1:06:3d:5b:15:9c:
e1:91:e7:4f:20:2a:1d:f2:66:b4:40:ff:da:ae:62:
08:9f:c8:18:9a:68:ae:dd:6e:f0:5a:41:13:a2:5c:
91:6a:a0:01:90:be:7c:01:f9:68:c6:e0:cb:a3:d6:
72:a1:ee:15:4a:3f:44:3f:89:f1:db:81:4b:5f:f3:
6e:c2:61:9a:f8:1b:9b:7b:93:52:19:73:ac:fa:40:
a8:73:3e:88:45:87:92:cb:cc:06:f3:20:be:8d:86:
4b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:F5:D1:80:AD:20:53:9B:A7:EA:E9:1B:9B:A4:7F:39:D1:82:B2:7B
X509v3 Authority Key Identifier:
keyid:2A:A2:4E:58:12:FC:C3:10:6B:9E:B0:AE:B0:0E:62:7B:A2:35:D0:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqJOWBL8wxBrnrCusA5ie6I10FY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/10346e-1504-43dd-ab28-66858bc8eb77/1/KqJOWBL8wxBrnrCusA5ie6I10FY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/10346e-1504-43dd-ab28-66858bc8eb77/1/KqJOWBL8wxBrnrCusA5ie6I10FY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:d2:a3:e8:43:ad:73:aa:d2:62:7d:c3:d8:53:40:d2:c6:32:
ba:ee:c0:cc:16:7c:2d:ec:cc:60:e0:78:34:23:73:57:ee:b7:
0f:b0:3f:d2:64:78:f3:61:1e:91:02:5a:c2:62:6a:ad:c0:25:
9b:b6:45:5c:be:c1:69:0a:8d:d6:42:5c:fc:93:e8:76:87:c0:
65:ce:ae:cc:d3:41:5f:a5:11:dd:dd:e5:e0:9a:73:a3:4d:c4:
82:72:30:e0:96:3e:dc:6a:fb:46:78:7e:a4:86:34:8b:a4:ec:
60:d5:f6:3a:bb:db:f7:be:40:e4:10:a5:11:77:cd:81:2b:31:
b4:83:18:75:8a:8d:7f:ce:b6:43:a4:5c:89:43:63:b3:1e:1e:
6b:8b:65:c4:e9:ab:0b:5a:67:e9:a0:8c:0a:d5:e2:b8:f7:f6:
1b:89:88:eb:9d:8c:7f:0a:09:75:8c:14:9b:3f:95:d9:1a:1c:
6c:2c:b9:30:37:9d:06:44:73:ae:df:30:19:41:ac:85:34:dd:
fe:da:e8:52:b3:e2:2c:f1:44:b7:87:35:5d:33:df:b1:f4:af:
38:c8:e8:52:50:0f:eb:65:bb:bd:99:41:d9:22:17:83:89:ae:
d8:48:80:da:b9:31:0b:ed:c6:e1:2e:9c:f4:dc:27:a4:16:45:
48:05:cf:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 11:05:58 2026 by rpki-client