Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/a0b266-3c9e-4e0c-8a6d-5895b69d189e/1/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.mft
File: KjacqbqErYR9SdMeJ0Zfr1e_KOQ.mft (raw, json)
Hash identifier: YfnMizuwhWM84bdQXgPc3HdVm8Ujo0tZRF1IOe+1UUA=
Subject key identifier: E5:28:63:2F:CA:CB:A2:74:10:69:CE:AE:74:FD:B7:19:EF:33:5E:2A
Authority key identifier: 2A:36:9C:A9:BA:84:AD:84:7D:49:D3:1E:27:46:5F:AF:57:BF:28:E4
Certificate issuer: /CN=2a369ca9ba84ad847d49d31e27465faf57bf28e4
Certificate serial: 019D39E5F86B615CFAB0B22D39AD4B4C1C51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/a0b266-3c9e-4e0c-8a6d-5895b69d189e/1/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 14:01:05 +0000
Manifest this update: Sun 29 Mar 2026 14:01:05 +0000
Manifest next update: Mon 30 Mar 2026 14:01:05 +0000
Files and hashes: 1: KjacqbqErYR9SdMeJ0Zfr1e_KOQ.crl (hash: gc9ahrNX5YSkd5hiakC4jnlhDRHIHi4gmGWjWmawL5o=)
2: kJEiuD-GMOjhqR0rKkDRKANvZg0.roa (hash: VBIq2jI9wWHxfuXZX8azYqnz8N0JMYIJ6HfvAGOQ2uk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/a0b266-3c9e-4e0c-8a6d-5895b69d189e/1/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/a0b266-3c9e-4e0c-8a6d-5895b69d189e/1/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:f8:6b:61:5c:fa:b0:b2:2d:39:ad:4b:4c:1c:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a369ca9ba84ad847d49d31e27465faf57bf28e4
Validity
Not Before: Mar 29 14:01:05 2026 GMT
Not After : Mar 30 14:01:05 2026 GMT
Subject: CN=e528632fcacba2741069ceae74fdb719ef335e2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d1:5f:62:af:0a:2d:7c:86:b4:28:88:1e:f6:
86:ec:3a:57:8f:8f:b9:b8:fd:07:86:2e:65:51:4d:
5f:de:fa:1d:fd:a2:ba:37:e9:8a:4f:d7:34:5d:39:
2c:b1:2e:30:9a:d9:e7:49:99:ee:59:f2:75:59:cb:
da:39:80:23:6a:ff:f5:1f:10:65:ab:78:3a:e2:b3:
88:6d:13:9f:fb:6a:04:8a:a1:a7:a8:4b:8c:5b:0b:
9d:c2:1b:b9:43:3a:2d:f3:97:00:f9:8f:dc:d4:d2:
3d:1f:6c:5a:0d:fc:bd:f0:fb:79:9d:e4:d0:a1:fe:
48:8e:07:ce:df:17:17:8d:10:9d:e6:ae:f9:78:13:
c4:4f:81:2f:cb:a6:e2:11:bc:9b:93:ac:8b:b3:d1:
d5:bb:fd:c2:24:a8:35:fa:75:4b:87:23:2c:e4:ea:
17:62:f4:b1:0d:b2:49:36:94:70:fe:49:1a:18:fc:
da:63:7e:14:c7:25:cd:77:e0:d9:8d:73:0f:37:93:
63:1b:c3:bd:5c:37:5d:0e:e4:3a:48:d0:ed:5f:5e:
01:7d:7a:ec:83:10:3b:1c:ce:39:e0:b3:0e:66:1a:
f7:c6:4e:9f:cf:53:1b:c2:3f:bf:69:de:76:27:b6:
e0:b4:fe:59:76:f7:b9:2d:ba:6f:18:81:02:59:be:
8f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:28:63:2F:CA:CB:A2:74:10:69:CE:AE:74:FD:B7:19:EF:33:5E:2A
X509v3 Authority Key Identifier:
keyid:2A:36:9C:A9:BA:84:AD:84:7D:49:D3:1E:27:46:5F:AF:57:BF:28:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a0b266-3c9e-4e0c-8a6d-5895b69d189e/1/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a0b266-3c9e-4e0c-8a6d-5895b69d189e/1/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:d6:d1:5b:38:24:e9:4a:77:54:91:d8:05:a3:46:8d:13:2e:
26:10:6d:01:a2:31:a8:5f:07:c3:a1:1c:f8:a1:3c:56:ec:2f:
23:2a:23:9f:fe:86:c0:c7:8b:a3:57:07:bc:20:8d:74:c2:40:
5c:1d:27:b2:04:ce:db:0c:f3:b0:4d:38:22:28:c1:bf:4b:08:
68:17:7d:75:b4:f3:22:a7:c2:ca:72:48:c8:98:50:30:88:7d:
0c:89:fe:2d:cc:7b:51:92:81:f1:af:76:27:38:81:44:53:9c:
3c:61:18:b3:b9:f3:18:a4:0a:4f:99:3c:c6:20:07:7b:45:f9:
62:7e:c1:bc:1a:37:9c:b6:d5:0e:02:12:a4:0f:5b:72:3e:a3:
07:97:37:11:ba:ba:42:91:0a:c7:1e:ad:c0:c2:67:ba:1e:19:
46:2f:f4:87:96:35:99:8e:c3:86:f6:14:ee:53:59:72:b3:b2:
ed:54:8a:d7:4c:a5:53:ee:55:25:bc:d8:93:c9:03:10:86:f9:
66:21:0f:8d:80:a2:27:07:f0:ce:e3:b1:07:e0:6c:19:72:e9:
7f:cd:9e:94:8f:bb:71:e0:fc:3b:d9:6d:14:63:e0:12:2e:0b:
03:65:ea:ec:54:2d:7e:07:a7:63:cc:07:3f:6e:96:99:df:55:
a1:b3:63:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:48:01 2026 by rpki-client