Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/10346e-1504-43dd-ab28-66858bc8eb77/1/KqJOWBL8wxBrnrCusA5ie6I10FY.mft
File: KqJOWBL8wxBrnrCusA5ie6I10FY.mft (raw, json)
Hash identifier: F4j70U0N5ebH+2OYze8QWfoSR9B+xkM1AsO9X3Y92eU=
Subject key identifier: CE:B8:E1:C9:5B:BD:83:D6:FF:41:98:44:42:A1:37:1B:4B:26:DE:1D
Authority key identifier: 2A:A2:4E:58:12:FC:C3:10:6B:9E:B0:AE:B0:0E:62:7B:A2:35:D0:56
Certificate issuer: /CN=2aa24e5812fcc3106b9eb0aeb00e627ba235d056
Certificate serial: 019FA1F29FDAD6F9507E096FB242374C9C96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqJOWBL8wxBrnrCusA5ie6I10FY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/10346e-1504-43dd-ab28-66858bc8eb77/1/KqJOWBL8wxBrnrCusA5ie6I10FY.mft
Manifest number: 0C63
Signing time: Mon 27 Jul 2026 05:01:00 +0000
Manifest this update: Mon 27 Jul 2026 05:01:00 +0000
Manifest next update: Tue 28 Jul 2026 05:01:00 +0000
Files and hashes: 1: KqJOWBL8wxBrnrCusA5ie6I10FY.crl (hash: AwmlFmO0xsN4KNuj5hqa5TYyfwyGtFOjlfc2/cgUG6E=)
2: yXEtTJb7Q9QNq9QwBOpKF1Og1mg.roa (hash: DbsY9yqJmKOSdLO9tL/m8Sp1oKJbQqdJXvqChVz5qJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/10346e-1504-43dd-ab28-66858bc8eb77/1/KqJOWBL8wxBrnrCusA5ie6I10FY.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/10346e-1504-43dd-ab28-66858bc8eb77/1/KqJOWBL8wxBrnrCusA5ie6I10FY.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqJOWBL8wxBrnrCusA5ie6I10FY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 05:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:f2:9f:da:d6:f9:50:7e:09:6f:b2:42:37:4c:9c:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa24e5812fcc3106b9eb0aeb00e627ba235d056
Validity
Not Before: Jul 27 05:01:00 2026 GMT
Not After : Jul 28 05:01:00 2026 GMT
Subject: CN=ceb8e1c95bbd83d6ff41984442a1371b4b26de1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:48:2d:9b:b8:a3:eb:a1:da:61:e2:ca:14:b9:
90:d0:2c:c8:65:e4:2e:08:fe:e6:72:b4:73:af:48:
22:9e:f1:90:49:e7:78:31:71:9e:c3:b0:a4:77:ee:
e0:aa:cc:e1:fd:60:53:2e:d0:a6:72:97:ab:2f:02:
97:34:57:f1:ea:5c:3d:f2:0c:6f:89:7e:12:5c:d3:
92:b0:8c:e3:84:67:7d:1e:60:1f:2b:5f:58:e0:a6:
0c:fb:6b:94:b5:3a:ab:8b:0a:60:3a:49:3c:af:45:
7d:cf:9e:00:f7:f4:57:dd:6c:e3:6a:77:0d:e9:a4:
72:4c:2a:09:50:c3:80:52:4d:09:d4:5a:06:67:85:
36:75:63:8f:0c:57:be:ca:93:ee:19:64:36:93:84:
d3:c9:d7:5c:7a:ee:1f:8e:7c:06:0c:db:2e:cb:dc:
4e:73:d2:7b:ac:f6:d2:2f:b5:db:de:b1:94:28:e9:
68:b6:84:33:5f:e6:9d:c2:d0:3e:5c:01:95:b6:dc:
3e:d2:31:b9:b4:4a:b3:28:1c:a1:d3:07:5e:24:cf:
38:6a:4b:f6:4c:df:ff:b3:f6:ca:1b:a7:e1:0d:e7:
ed:36:1b:73:d4:5b:37:7f:8e:36:8d:b8:dd:37:4e:
51:65:4d:04:0c:75:8e:93:c0:bd:eb:78:55:9c:25:
55:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:B8:E1:C9:5B:BD:83:D6:FF:41:98:44:42:A1:37:1B:4B:26:DE:1D
X509v3 Authority Key Identifier:
keyid:2A:A2:4E:58:12:FC:C3:10:6B:9E:B0:AE:B0:0E:62:7B:A2:35:D0:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqJOWBL8wxBrnrCusA5ie6I10FY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/10346e-1504-43dd-ab28-66858bc8eb77/1/KqJOWBL8wxBrnrCusA5ie6I10FY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/10346e-1504-43dd-ab28-66858bc8eb77/1/KqJOWBL8wxBrnrCusA5ie6I10FY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:cd:5b:15:b8:c6:6f:93:63:cf:4f:d6:85:4f:57:6f:b1:ee:
f4:83:e4:f3:b0:d1:fa:4f:99:63:5b:b6:50:cb:61:9a:8c:ef:
35:8e:cf:7f:7f:cd:4b:b0:94:63:48:85:3f:72:6b:b1:5c:65:
50:f0:9d:0e:4d:75:3b:06:b8:61:e9:3d:19:42:a7:53:6d:e7:
17:56:37:51:03:61:c0:82:15:c3:4e:9b:ce:fc:97:c2:50:91:
c1:64:fb:21:08:54:32:e6:7e:63:dc:36:54:22:f6:a1:19:4a:
40:63:66:47:ab:14:ad:31:7c:2d:42:65:74:ee:3e:c3:ea:c4:
79:d9:65:28:b7:78:d3:ae:01:62:0c:59:6e:da:f2:4f:69:19:
cf:5f:f1:24:73:a1:6b:22:ea:42:d1:0a:db:26:89:5e:d9:54:
df:ed:99:5e:1e:f5:58:87:2d:7c:3b:6c:38:69:a1:f3:d3:ad:
fe:c6:55:e2:49:bb:1f:67:5b:4b:2b:06:e5:72:63:2d:29:6e:
77:0a:2d:18:1d:79:b9:d5:0b:39:d2:f8:12:93:1e:01:7d:d8:
e1:4c:a0:c1:f4:46:59:5a:10:9a:20:be:55:75:5e:22:a9:af:
14:89:0c:ba:0d:d7:c3:07:80:68:61:c2:1d:4c:08:4b:47:aa:
89:16:6a:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 09:43:27 2026 by rpki-client