Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/kqOPWtZym-9NSerlHAFGmCIewUY.mft
File: kqOPWtZym-9NSerlHAFGmCIewUY.mft (raw, json)
Hash identifier: j87//o6XIfnm8Rb+RGmMT72YzkQJWJpGQzkSuLYneCU=
Subject key identifier: C2:71:10:F9:EB:CD:F3:9E:89:97:62:6D:3C:4D:D6:CC:DD:F5:21:D2
Authority key identifier: 92:A3:8F:5A:D6:72:9B:EF:4D:49:EA:E5:1C:01:46:98:22:1E:C1:46
Certificate issuer: /CN=92a38f5ad6729bef4d49eae51c014698221ec146
Certificate serial: 01A08E69D208DB4782CDD52DE050D33FA8DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kqOPWtZym-9NSerlHAFGmCIewUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/kqOPWtZym-9NSerlHAFGmCIewUY.mft
Manifest number: C3
Signing time: Fri 11 Sep 2026 03:01:34 +0000
Manifest this update: Fri 11 Sep 2026 03:01:34 +0000
Manifest next update: Sat 12 Sep 2026 03:01:34 +0000
Files and hashes: 1: 3M3gfxZWTlxlBNR3tYw4_tebKeM.roa (hash: xsykozyPFY5/0PUbC/XmVsKSACxFGy1rLASCnELrsxA=)
2: EeuHOP1ld_YxpuE_gQSJqZEtgX4.roa (hash: XyhhD+tamYBfloB02aI97R1OMdqo6L/U/hCCCp5CY44=)
3: kqOPWtZym-9NSerlHAFGmCIewUY.crl (hash: 6t8qS3h7a8cj3uXPZAHCsZAfSuRrOs9FEpkDWwippN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/kqOPWtZym-9NSerlHAFGmCIewUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/kqOPWtZym-9NSerlHAFGmCIewUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/kqOPWtZym-9NSerlHAFGmCIewUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8e:69:d2:08:db:47:82:cd:d5:2d:e0:50:d3:3f:a8:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92a38f5ad6729bef4d49eae51c014698221ec146
Validity
Not Before: Sep 11 03:01:34 2026 GMT
Not After : Sep 12 03:01:34 2026 GMT
Subject: CN=c27110f9ebcdf39e8997626d3c4dd6ccddf521d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f2:2b:33:67:07:f3:7a:1c:9c:df:c9:af:aa:
38:58:71:c4:e0:f1:41:41:40:e0:de:d5:8d:b5:11:
1f:9b:5d:c2:be:f9:6e:46:98:c0:cd:1c:e9:ea:ca:
62:52:cf:02:42:2b:d1:4d:f5:39:71:09:39:ac:a7:
68:3f:2a:47:62:cf:32:58:58:cd:a2:f7:8a:bb:a7:
09:9d:d1:d8:f1:44:15:cc:ed:6b:92:e6:04:15:3e:
07:9e:0e:b1:f1:1a:51:2b:43:58:50:61:a0:db:fe:
ff:c1:77:a3:47:01:d1:6a:5d:60:20:f1:c0:d0:d0:
95:b2:0a:e1:60:05:e8:b8:a8:6d:ea:63:77:71:05:
e9:ef:e8:79:70:f7:57:a2:39:5f:d1:a2:18:ae:78:
41:3c:d0:59:f6:73:65:61:a2:57:f7:57:b1:37:e9:
d8:9d:1c:9b:3d:0b:68:30:36:20:76:d7:f0:d2:0f:
4b:1f:60:39:93:74:2a:1e:10:fa:47:98:5d:7d:73:
cc:0b:c3:77:01:16:34:54:3e:98:ce:60:38:e8:2e:
bd:6c:a2:3e:97:35:74:b9:5f:9b:6c:05:e1:8e:d7:
94:45:b5:03:fb:38:71:cc:57:5d:6a:63:8d:4a:23:
4a:46:c6:6b:59:81:30:fa:24:c5:fe:ab:40:aa:69:
ba:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:71:10:F9:EB:CD:F3:9E:89:97:62:6D:3C:4D:D6:CC:DD:F5:21:D2
X509v3 Authority Key Identifier:
keyid:92:A3:8F:5A:D6:72:9B:EF:4D:49:EA:E5:1C:01:46:98:22:1E:C1:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kqOPWtZym-9NSerlHAFGmCIewUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/kqOPWtZym-9NSerlHAFGmCIewUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e72a9d-9ea5-47db-a67e-6d2e11fe08cd/1/kqOPWtZym-9NSerlHAFGmCIewUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:76:04:c8:90:d4:6c:bc:96:01:6f:aa:7a:c5:34:89:ce:ab:
a7:53:93:08:1a:1f:4e:5c:47:d7:7e:d7:2a:3f:57:99:d3:5d:
cc:bb:c2:1b:5f:9e:c1:a8:3a:b1:62:ef:60:b4:b9:ce:8e:96:
1c:cd:1e:a6:79:17:17:54:10:bc:db:44:4a:8d:a8:00:00:da:
19:74:f7:57:e4:37:30:76:77:1d:dd:c4:8e:0a:8b:c6:1c:59:
56:76:95:00:27:ce:fc:3d:1c:99:ca:49:08:ad:c4:13:52:ed:
20:df:20:03:5d:be:fb:d4:66:f3:18:f2:08:b1:2d:fc:06:77:
db:8d:17:86:2e:59:50:8f:da:38:f4:11:1b:7f:f8:83:95:09:
fe:1d:ae:50:d4:44:91:bd:d6:fc:77:6e:1d:1a:0a:58:09:26:
44:70:0f:1c:07:67:19:1e:a5:89:20:f3:49:ca:b5:3d:61:46:
1b:ca:b8:fe:e6:27:9c:2e:93:0b:39:02:b6:f8:b6:dd:99:40:
ee:82:80:56:9e:d2:ab:dd:9e:d8:49:78:d8:ee:2b:9a:8b:a2:
ed:27:fe:98:3e:28:bf:a4:b8:d5:79:8a:b3:2a:14:8b:9b:4a:
f7:8c:04:c9:8c:61:4a:cd:cf:35:b0:d4:5c:92:55:2a:81:63:
4e:f8:d9:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 07:06:06 2026 by rpki-client