Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.mft
File: KqF-1AdDLEGLHJ6vYf0cocv_anQ.mft (raw, json)
Hash identifier: kLepg4WdIEZJ+IMPd9wqO2d1p8lvESrJS/1JJZE8iA8=
Subject key identifier: 01:0A:1D:55:A9:9D:1F:75:C3:86:EB:72:18:97:9B:3F:F7:A5:F1:4A
Authority key identifier: 2A:A1:7E:D4:07:43:2C:41:8B:1C:9E:AF:61:FD:1C:A1:CB:FF:6A:74
Certificate issuer: /CN=2aa17ed407432c418b1c9eaf61fd1ca1cbff6a74
Certificate serial: 019D37C0D812735503CAC1E05BC4B4550667
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqF-1AdDLEGLHJ6vYf0cocv_anQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.mft
Manifest number: 0C79
Signing time: Sun 29 Mar 2026 04:01:18 +0000
Manifest this update: Sun 29 Mar 2026 04:01:18 +0000
Manifest next update: Mon 30 Mar 2026 04:01:18 +0000
Files and hashes: 1: KqF-1AdDLEGLHJ6vYf0cocv_anQ.crl (hash: UAV4jhCOxtBbFQr5R2oOIn30AwJVI98EE/IFtl1fUkg=)
2: SaYypv9VAJ84xKAeNkRLodoblMc.roa (hash: GtKZWyv3+glT6p+I3huIJVfHLB6xoMQ/NbzSHVIURY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqF-1AdDLEGLHJ6vYf0cocv_anQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:d8:12:73:55:03:ca:c1:e0:5b:c4:b4:55:06:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa17ed407432c418b1c9eaf61fd1ca1cbff6a74
Validity
Not Before: Mar 29 04:01:18 2026 GMT
Not After : Mar 30 04:01:18 2026 GMT
Subject: CN=010a1d55a99d1f75c386eb7218979b3ff7a5f14a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e2:d8:6c:33:9d:7f:7a:94:91:d2:10:68:0e:
6d:47:8f:5e:c2:ea:cb:8a:a3:03:c6:55:22:f4:e0:
17:b9:ff:af:49:8d:e4:fd:1c:89:03:34:67:a0:81:
a1:a1:62:5a:c8:d9:aa:4d:0d:00:e1:a1:60:93:17:
b6:4b:d6:4f:d3:d9:ef:29:9d:e2:d7:1a:3a:6a:cc:
02:49:4a:c3:bf:92:1c:39:32:69:a5:d7:2d:69:e1:
be:84:29:37:c5:bc:3a:39:61:eb:9d:b5:8c:0d:80:
05:80:14:c5:72:af:13:a0:39:3d:cc:ea:18:9a:65:
31:33:90:dc:f8:9a:24:ca:30:e5:b9:7f:25:a1:0f:
f9:b6:ed:17:0a:5c:90:49:83:2b:47:ab:79:45:e0:
da:e3:b2:8e:79:26:e1:a4:1c:ae:8f:e2:93:5a:ca:
59:32:1f:78:8c:dd:2f:5d:f4:a4:3f:93:e5:11:da:
c4:45:e7:76:57:3d:1b:1d:40:fc:72:ff:0f:88:d9:
56:07:a1:61:52:ce:1d:9f:49:a5:7e:e4:65:6d:e5:
a9:51:ec:57:9b:3b:31:1d:9c:f4:37:11:d4:1e:28:
e0:27:51:b0:2b:fb:73:01:80:c1:d1:65:32:b3:34:
9c:68:2a:e4:08:64:32:32:b6:01:42:79:0e:af:bb:
c5:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:0A:1D:55:A9:9D:1F:75:C3:86:EB:72:18:97:9B:3F:F7:A5:F1:4A
X509v3 Authority Key Identifier:
keyid:2A:A1:7E:D4:07:43:2C:41:8B:1C:9E:AF:61:FD:1C:A1:CB:FF:6A:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqF-1AdDLEGLHJ6vYf0cocv_anQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:84:d3:1f:48:6d:d0:83:81:81:a3:25:9f:5e:50:dd:18:78:
a0:4d:00:49:59:26:8d:af:bc:21:44:1f:e2:86:6e:ad:2e:bf:
a2:7d:a2:e3:dd:04:2f:31:79:d2:e2:23:a4:a5:07:14:80:23:
99:17:b6:2d:ac:52:43:03:71:70:61:bb:94:16:54:b7:79:0e:
ab:7c:e8:3c:85:20:19:e8:67:10:e3:90:a1:15:a4:33:fb:49:
75:18:54:f7:5d:e5:c2:72:7b:fb:a8:f2:cb:d7:7a:00:14:5b:
a1:93:22:e2:43:fb:fe:21:36:dd:49:dd:a3:5b:3e:bf:61:e4:
5c:0c:d9:4e:04:81:a9:97:34:09:cd:70:b2:d5:23:b5:eb:20:
ec:ec:00:9d:b9:15:62:2a:66:8c:7e:fc:35:5f:f7:01:6e:7b:
d0:f2:8f:94:45:9a:a7:c5:5d:f6:1a:c5:63:67:02:69:ad:15:
c2:8d:62:7c:70:ca:20:d5:65:31:a4:9e:b1:0a:bd:20:fc:9f:
71:b8:3f:9a:0c:a5:2b:22:94:ea:a0:c9:9e:34:87:cf:fb:e6:
97:77:21:d9:34:84:e7:6a:39:2f:3c:3a:29:eb:b6:de:8a:c2:
00:1c:01:db:37:ca:a8:24:97:30:00:09:91:34:60:ca:79:f8:
7f:6e:c2:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wNgSc1UDysHgW8S0VQZnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYTE3ZWQ0MDc0MzJjNDE4YjFjOWVhZjYxZmQxY2ExY2Jm
ZjZhNzQwHhcNMjYwMzI5MDQwMTE4WhcNMjYwMzMwMDQwMTE4WjAzMTEwLwYDVQQD
EygwMTBhMWQ1NWE5OWQxZjc1YzM4NmViNzIxODk3OWIzZmY3YTVmMTRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+LYbDOdf3qUkdIQaA5tR49ewurL
iqMDxlUi9OAXuf+vSY3k/RyJAzRnoIGhoWJayNmqTQ0A4aFgkxe2S9ZP09nvKZ3i
1xo6aswCSUrDv5IcOTJppdctaeG+hCk3xbw6OWHrnbWMDYAFgBTFcq8ToDk9zOoY
mmUxM5Dc+JokyjDluX8loQ/5tu0XClyQSYMrR6t5ReDa47KOeSbhpByuj+KTWspZ
Mh94jN0vXfSkP5PlEdrERed2Vz0bHUD8cv8PiNlWB6FhUs4dn0mlfuRlbeWpUexX
mzsxHZz0NxHUHijgJ1GwK/tzAYDB0WUyszScaCrkCGQyMrYBQnkOr7vFawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAEKHVWpnR91w4brchiXmz/3pfFKMB8GA1UdIwQY
MBaAFCqhftQHQyxBixyer2H9HKHL/2p0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3FGLTFBZERMRUdMSEo2dllmMGNvY3ZfYW5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni81NGQ0MzctYTI3Ny00MWJkLTk4OGYt
OTUwZjBhMDEwMWE5LzEvS3FGLTFBZERMRUdMSEo2dllmMGNvY3ZfYW5RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni81NGQ0MzctYTI3Ny00MWJkLTk4OGYtOTUwZjBhMDEwMWE5
LzEvS3FGLTFBZERMRUdMSEo2dllmMGNvY3ZfYW5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQITTH0ht
0IOBgaMln15Q3Rh4oE0ASVkmja+8IUQf4oZurS6/on2i490ELzF50uIjpKUHFIAj
mRe2LaxSQwNxcGG7lBZUt3kOq3zoPIUgGehnEOOQoRWkM/tJdRhU913lwnJ7+6jy
y9d6ABRboZMi4kP7/iE23Undo1s+v2HkXAzZTgSBqZc0Cc1wstUjtesg7OwAnbkV
YipmjH78NV/3AW570PKPlEWap8Vd9hrFY2cCaa0Vwo1ifHDKINVlMaSesQq9IPyf
cbg/mgylKyKU6qDJnjSHz/vml3ch2TSE52o5Lzw6Keu23orCABwB2zfKqCSXMAAJ
kTRgynn4f27Clw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:02 2026 by rpki-client