Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/66be80-a70f-4c3d-add7-28a8a152f2f6/1/kQFfA3NVWj9WUfaYypO_SS2LQ90.mft
File: kQFfA3NVWj9WUfaYypO_SS2LQ90.mft (raw, json)
Hash identifier: PKLu/xBKKVhkdBIr86yebPQRBR2B0udAtI2/YqapZmY=
Subject key identifier: 09:F1:D6:1D:D5:22:C0:23:C5:E9:07:B1:52:E5:5A:CA:59:9C:06:5D
Authority key identifier: 91:01:5F:03:73:55:5A:3F:56:51:F6:98:CA:93:BF:49:2D:8B:43:DD
Certificate issuer: /CN=91015f0373555a3f5651f698ca93bf492d8b43dd
Certificate serial: 019FA0A903D1A004DF500A302CAE4208570D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kQFfA3NVWj9WUfaYypO_SS2LQ90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/66be80-a70f-4c3d-add7-28a8a152f2f6/1/kQFfA3NVWj9WUfaYypO_SS2LQ90.mft
Manifest number: 195F
Signing time: Sun 26 Jul 2026 23:00:58 +0000
Manifest this update: Sun 26 Jul 2026 23:00:58 +0000
Manifest next update: Mon 27 Jul 2026 23:00:58 +0000
Files and hashes: 1: kQFfA3NVWj9WUfaYypO_SS2LQ90.crl (hash: sHYkB/M91PrrUt8N7fja6TNms3j+0/3Zn8MSu6/nIYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/66be80-a70f-4c3d-add7-28a8a152f2f6/1/kQFfA3NVWj9WUfaYypO_SS2LQ90.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/66be80-a70f-4c3d-add7-28a8a152f2f6/1/kQFfA3NVWj9WUfaYypO_SS2LQ90.mft
rsync://rpki.ripe.net/repository/DEFAULT/kQFfA3NVWj9WUfaYypO_SS2LQ90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:a9:03:d1:a0:04:df:50:0a:30:2c:ae:42:08:57:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91015f0373555a3f5651f698ca93bf492d8b43dd
Validity
Not Before: Jul 26 23:00:58 2026 GMT
Not After : Jul 27 23:00:58 2026 GMT
Subject: CN=09f1d61dd522c023c5e907b152e55aca599c065d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:8a:55:5f:d2:ad:f8:2f:51:19:78:f0:0a:d2:
12:41:14:4f:5e:cf:fc:e5:62:04:4a:2f:2c:bd:79:
2e:93:5a:76:35:8c:dc:e0:cb:5f:d3:74:19:83:1c:
5a:1b:11:43:89:d9:bb:24:5a:48:2d:f6:3e:e1:33:
74:e1:52:77:c9:7d:84:4a:51:f0:05:05:16:3d:89:
78:a5:5d:1d:ed:20:e7:6d:56:fe:7f:94:ee:b0:4e:
a5:e8:99:bf:fa:47:d3:c9:3a:08:8d:3e:45:26:3d:
a2:4c:29:74:0e:cc:d0:02:fc:46:d9:f6:2b:35:0e:
f3:40:31:f2:bc:81:6c:3b:d2:da:7f:27:97:55:d0:
8c:7b:e7:dd:e8:9b:52:14:47:04:0a:a1:67:ed:d2:
d5:1b:36:3a:e2:2a:eb:32:c4:16:1f:7a:a3:a7:48:
8f:d5:80:e4:27:ca:d6:e4:b2:3c:b3:0c:f6:d4:02:
ea:52:01:5a:c0:26:e7:af:55:17:01:82:0f:e9:f2:
8f:e9:d6:d3:8d:0a:76:a7:6e:27:05:75:57:17:c1:
86:53:45:78:78:cc:77:f4:f0:3d:b1:53:3c:ce:64:
5c:d1:24:78:76:81:cd:76:0d:98:e5:72:28:2f:af:
f6:b3:73:53:3d:50:e0:4f:dd:55:3d:ce:76:e1:04:
16:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:F1:D6:1D:D5:22:C0:23:C5:E9:07:B1:52:E5:5A:CA:59:9C:06:5D
X509v3 Authority Key Identifier:
keyid:91:01:5F:03:73:55:5A:3F:56:51:F6:98:CA:93:BF:49:2D:8B:43:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kQFfA3NVWj9WUfaYypO_SS2LQ90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/66be80-a70f-4c3d-add7-28a8a152f2f6/1/kQFfA3NVWj9WUfaYypO_SS2LQ90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/66be80-a70f-4c3d-add7-28a8a152f2f6/1/kQFfA3NVWj9WUfaYypO_SS2LQ90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:1e:e8:7b:e9:3b:65:b3:fc:fa:42:d0:99:f4:59:0a:4e:e1:
21:11:d4:99:5e:9b:fd:1b:57:63:65:ae:f8:88:6f:fc:8a:56:
80:de:2b:52:e0:b8:fe:32:04:04:e0:c0:16:37:20:c8:9d:34:
0d:0e:d6:2c:dd:4a:dc:e4:77:e4:b2:34:8e:d1:5d:3a:35:3a:
17:b6:44:35:a5:31:36:fb:f0:d5:1c:37:0c:c9:29:4d:c1:1d:
50:4d:55:2b:1c:a7:6d:02:0b:38:c3:17:c2:43:43:ae:f1:8f:
e0:24:69:83:f9:f2:8d:5e:c0:5c:53:2d:47:bc:70:c6:68:42:
98:e6:f1:ba:9e:92:df:b1:d4:3f:05:60:92:50:4a:7c:3a:0a:
39:a0:3d:07:94:a5:0a:90:5b:29:45:b4:2c:f4:bd:75:cc:db:
7d:38:a1:b3:e0:06:df:4c:f4:02:15:51:87:41:38:4f:b5:43:
b4:37:5c:12:39:ca:c8:04:cb:9b:38:ec:04:20:68:2c:af:b1:
73:51:92:71:99:6f:7e:7b:af:89:0a:27:5a:0e:77:9a:25:b2:
ed:d2:51:d6:5b:9f:22:90:07:45:cb:38:28:33:f1:37:ea:cc:
5b:05:ca:84:6f:ee:2d:0a:6f:4b:56:a9:b4:82:ec:e3:2c:de:
d8:49:ef:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:50:46 2026 by rpki-client