Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.mft
File: KEQn3OurQOvBmDny0l7qLOClYv8.mft (raw, json)
Hash identifier: Pp3UHlI9CgA0STevQvH04LKCnF71ec701SjdX+PKEDw=
Subject key identifier: A8:57:5F:C4:01:AE:13:5C:69:CF:F2:BE:30:EF:14:8A:4E:E7:27:99
Authority key identifier: 28:44:27:DC:EB:AB:40:EB:C1:98:39:F2:D2:5E:EA:2C:E0:A5:62:FF
Certificate issuer: /CN=284427dcebab40ebc19839f2d25eea2ce0a562ff
Certificate serial: 01A154AE471BA6757246A3A4834D5DAA4A2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KEQn3OurQOvBmDny0l7qLOClYv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.mft
Manifest number: 0979
Signing time: Mon 19 Oct 2026 15:01:09 +0000
Manifest this update: Mon 19 Oct 2026 15:01:09 +0000
Manifest next update: Tue 20 Oct 2026 15:01:09 +0000
Files and hashes: 1: KEQn3OurQOvBmDny0l7qLOClYv8.crl (hash: s0F46eigKRw+qIqMBrOLyFOlOEw+t2MhOcHhm8nvUl4=)
2: cHwhEhAGxzfypZx4-M1NRLg_x6g.roa (hash: iI8gUBUQGaxZbo8P6CcEli8I0PR4IRfA40i94puh4EU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KEQn3OurQOvBmDny0l7qLOClYv8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:28:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:54:ae:47:1b:a6:75:72:46:a3:a4:83:4d:5d:aa:4a:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=284427dcebab40ebc19839f2d25eea2ce0a562ff
Validity
Not Before: Oct 19 15:01:09 2026 GMT
Not After : Oct 20 15:01:09 2026 GMT
Subject: CN=a8575fc401ae135c69cff2be30ef148a4ee72799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6a:71:36:af:2a:a7:14:8d:79:e3:34:aa:ea:
a1:3a:45:f4:0c:80:06:37:29:3b:27:59:de:7b:d5:
61:7e:30:2d:85:5b:ee:5d:bd:50:97:3a:f4:3f:b1:
ef:2f:02:9a:26:40:c1:0c:48:06:2b:48:37:10:55:
a2:c9:ca:2e:87:f2:1a:bd:24:7d:79:34:4f:5a:fd:
0a:3d:24:69:ca:8c:4e:4a:c2:24:6a:c0:37:c7:49:
85:69:05:73:31:92:3a:dc:f3:98:da:81:28:14:8b:
4f:a0:32:59:55:8c:ca:39:bc:cb:8b:41:c9:83:4c:
5e:56:d9:64:e7:cf:c5:7a:c1:f3:94:c1:e9:f2:64:
ca:c1:de:10:da:9d:28:54:50:ce:f5:a6:9a:4e:9a:
27:23:96:fa:64:15:f3:d9:47:54:e0:07:3d:f0:49:
54:42:c8:a7:aa:4c:25:8d:42:6a:03:35:2b:69:f6:
10:d3:33:04:a8:d8:9d:29:0a:7f:f8:ba:b0:57:cd:
3e:96:19:b1:4f:66:c0:51:83:03:72:fb:0b:1f:19:
4d:85:b6:76:e4:c0:f7:eb:19:aa:4d:d2:6f:0b:f3:
2b:82:8b:f2:5f:bb:4f:5a:39:16:f9:49:f9:c0:37:
b2:db:b3:c1:66:65:c5:a5:9c:0b:69:6c:fe:a6:ac:
7f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:57:5F:C4:01:AE:13:5C:69:CF:F2:BE:30:EF:14:8A:4E:E7:27:99
X509v3 Authority Key Identifier:
keyid:28:44:27:DC:EB:AB:40:EB:C1:98:39:F2:D2:5E:EA:2C:E0:A5:62:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KEQn3OurQOvBmDny0l7qLOClYv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:40:37:f7:48:78:2a:e2:fb:21:81:13:ee:99:70:d7:a2:88:
9f:90:f7:e6:38:aa:48:c2:d8:35:8c:44:3e:9c:91:ec:18:51:
cf:e3:ad:36:c3:67:3a:2c:22:f0:3e:f3:45:31:80:8c:0f:db:
fb:bf:ef:ff:8a:d1:09:b6:79:97:64:05:f9:8c:48:d2:0f:96:
19:d2:97:47:0e:d9:f6:5c:94:a1:29:08:59:ef:61:78:fe:21:
a9:69:6e:2b:11:cf:36:87:4b:cd:cb:9c:66:e8:8c:36:b1:30:
1c:f4:39:82:48:89:6d:e5:d0:8f:3a:66:58:da:71:26:11:99:
43:23:13:32:59:d1:70:55:02:d6:23:0b:61:55:35:24:ab:e3:
39:9d:23:52:62:37:e9:3a:37:2a:3c:1d:2e:ec:29:0f:05:d3:
7a:bd:5b:91:db:4e:93:9f:d2:4a:13:48:da:3e:2c:bb:f9:97:
f1:d5:2c:7f:3d:3b:0f:65:e6:42:ce:fb:06:5e:ad:76:ec:0b:
ef:b4:97:d1:f8:45:55:55:b5:3f:2c:27:6f:a5:ce:f6:be:cd:
e6:25:97:14:29:1c:f6:43:48:28:31:3f:d7:d5:a9:ec:f4:73:
59:04:8b:14:ab:ae:f8:2e:83:b7:5f:25:91:d5:fb:9c:f5:91:
80:4a:c6:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 21:53:42 2026 by rpki-client