Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/66be80-a70f-4c3d-add7-28a8a152f2f6/1/kQFfA3NVWj9WUfaYypO_SS2LQ90.mft
File: kQFfA3NVWj9WUfaYypO_SS2LQ90.mft (raw, json)
Hash identifier: dMgBnHQ5Zr/foPtvAzA9w9nex2ytbOw/71BX16eH5Xo=
Subject key identifier: 16:27:BD:FC:DC:20:CA:32:EC:15:AD:F0:43:9A:A1:C9:81:6D:79:8F
Authority key identifier: 91:01:5F:03:73:55:5A:3F:56:51:F6:98:CA:93:BF:49:2D:8B:43:DD
Certificate issuer: /CN=91015f0373555a3f5651f698ca93bf492d8b43dd
Certificate serial: 01A177DE203D31F7F0AF1474E93D8B05F502
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kQFfA3NVWj9WUfaYypO_SS2LQ90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/66be80-a70f-4c3d-add7-28a8a152f2f6/1/kQFfA3NVWj9WUfaYypO_SS2LQ90.mft
Manifest number: 1A53
Signing time: Mon 26 Oct 2026 11:00:08 +0000
Manifest this update: Mon 26 Oct 2026 11:00:08 +0000
Manifest next update: Tue 27 Oct 2026 11:00:08 +0000
Files and hashes: 1: kQFfA3NVWj9WUfaYypO_SS2LQ90.crl (hash: mOFSY78o76+Xf+WR7eRtSFDNe9XaNjGRoBk7xUvTuCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/66be80-a70f-4c3d-add7-28a8a152f2f6/1/kQFfA3NVWj9WUfaYypO_SS2LQ90.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/66be80-a70f-4c3d-add7-28a8a152f2f6/1/kQFfA3NVWj9WUfaYypO_SS2LQ90.mft
rsync://rpki.ripe.net/repository/DEFAULT/kQFfA3NVWj9WUfaYypO_SS2LQ90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:77:de:20:3d:31:f7:f0:af:14:74:e9:3d:8b:05:f5:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91015f0373555a3f5651f698ca93bf492d8b43dd
Validity
Not Before: Oct 26 11:00:08 2026 GMT
Not After : Oct 27 11:00:08 2026 GMT
Subject: CN=1627bdfcdc20ca32ec15adf0439aa1c9816d798f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ed:69:53:9a:55:3b:63:bb:7b:ef:fd:40:bc:
bb:8c:2a:bf:64:fc:ed:0e:f8:ac:e3:79:ff:d5:aa:
5b:d3:35:3b:75:cf:68:5a:9a:a3:35:bd:1f:20:0b:
d8:1a:c7:1b:d7:9c:c6:6d:b1:7e:e7:46:9d:c0:08:
ec:99:08:d3:a3:e7:76:fc:8c:ac:dc:cc:cd:41:b7:
4a:d0:07:7e:0f:8f:0c:9f:5c:69:da:1d:11:4d:05:
fa:0b:a9:4b:15:02:63:60:1a:91:89:dc:2f:41:6e:
a0:8a:d4:06:d1:92:95:3e:37:0c:5e:8a:89:45:a2:
b4:96:71:65:8e:63:69:bd:be:78:16:60:e3:c8:e4:
33:9d:a6:e2:e0:24:5d:83:1e:bc:76:76:61:17:3b:
f6:10:46:69:9e:f1:e4:47:ef:cf:ab:11:0f:ae:e4:
15:74:23:da:55:ab:7c:ba:2e:8f:c0:e0:cb:46:a0:
b2:7b:3a:24:d9:2b:38:cd:96:a8:ac:96:2f:92:b6:
95:c3:46:71:df:44:5b:88:8d:1d:16:d3:82:49:bd:
35:66:ea:f1:f6:d7:f2:98:fc:9d:e6:2e:63:1d:b4:
0f:ff:89:8f:85:c0:a6:25:43:36:83:e7:8a:a1:1e:
12:38:10:a7:50:df:cf:8c:f6:4e:47:ea:9b:ba:e4:
ed:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:27:BD:FC:DC:20:CA:32:EC:15:AD:F0:43:9A:A1:C9:81:6D:79:8F
X509v3 Authority Key Identifier:
keyid:91:01:5F:03:73:55:5A:3F:56:51:F6:98:CA:93:BF:49:2D:8B:43:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kQFfA3NVWj9WUfaYypO_SS2LQ90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/66be80-a70f-4c3d-add7-28a8a152f2f6/1/kQFfA3NVWj9WUfaYypO_SS2LQ90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/66be80-a70f-4c3d-add7-28a8a152f2f6/1/kQFfA3NVWj9WUfaYypO_SS2LQ90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:89:64:2c:04:ac:d3:52:e3:e9:a2:aa:15:35:5d:4d:d0:27:
95:50:0d:c6:f2:bc:01:36:f0:5b:71:53:7f:b8:9d:c1:bd:18:
8a:37:99:83:5e:d7:b3:67:80:c9:4e:d1:de:0b:e7:b6:ca:12:
97:11:a7:8d:36:75:f0:3d:85:19:5e:2f:87:e1:4e:4c:4c:ae:
93:c4:78:86:04:83:45:41:f4:74:fc:fb:b5:8d:80:c9:b5:0d:
0c:dc:63:4a:8a:2e:8d:c3:3c:7f:4e:5c:95:5f:8e:c6:73:e0:
b1:38:4d:d9:ea:15:89:a8:9d:b5:f8:5f:73:85:aa:9c:4f:9f:
cf:cb:91:cf:e9:4b:60:c2:fe:64:fd:8a:6a:5f:5f:46:36:8a:
99:b6:e9:43:eb:5c:00:36:0a:ae:d4:69:36:ac:fe:ca:9f:c9:
45:5b:90:58:27:33:82:0f:c7:8b:22:ea:7b:5e:d3:5b:b9:b8:
85:8c:5a:7d:67:97:78:56:fe:84:80:85:8a:3c:d0:c6:db:60:
f3:ad:e3:6c:a3:5f:43:f1:43:19:6a:b4:c4:e1:c4:eb:3b:2d:
19:94:e8:9a:26:ca:3c:c8:24:60:88:12:68:e2:20:cd:71:b3:
4e:d5:5b:2f:ac:b6:15:34:87:e6:55:f8:ef:18:ae:55:eb:62:
8c:e2:67:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 21:15:54 2026 by rpki-client