Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.mft
File: KqGB-LCskT3cN34Z1WZLEbGXU3M.mft (raw, json)
Hash identifier: 1OAOGx3uXBwM/H5RcBgpkolTaQuULFo36udpv+X/olc=
Subject key identifier: EA:FB:AB:DE:3F:90:9D:C7:E2:16:96:AA:D2:CC:B4:FC:FF:72:E0:22
Authority key identifier: 2A:A1:81:F8:B0:AC:91:3D:DC:37:7E:19:D5:66:4B:11:B1:97:53:73
Certificate issuer: /CN=2aa181f8b0ac913ddc377e19d5664b11b1975373
Certificate serial: 019E7E20632172185BF7B7A64599A424147C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqGB-LCskT3cN34Z1WZLEbGXU3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.mft
Manifest number: 0EAB
Signing time: Sun 31 May 2026 13:01:52 +0000
Manifest this update: Sun 31 May 2026 13:01:52 +0000
Manifest next update: Mon 01 Jun 2026 13:01:52 +0000
Files and hashes: 1: 6JMQmYaXJRiml5BYtsy3jnW-erA.roa (hash: kbV9Lg8RcdOaIR/u2kpU49sw8x1vZ57CjX7SJnkdSvg=)
2: KqGB-LCskT3cN34Z1WZLEbGXU3M.crl (hash: ji5RmxU+pJ+1ym2HKXgP8nLJFiy1Rk9OX5gl9XKr1GY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqGB-LCskT3cN34Z1WZLEbGXU3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 01 Jun 2026 11:09:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:7e:20:63:21:72:18:5b:f7:b7:a6:45:99:a4:24:14:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa181f8b0ac913ddc377e19d5664b11b1975373
Validity
Not Before: May 31 13:01:52 2026 GMT
Not After : Jun 1 13:01:52 2026 GMT
Subject: CN=eafbabde3f909dc7e21696aad2ccb4fcff72e022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:33:9a:07:57:04:fd:b0:10:34:78:da:6a:05:
1b:96:11:28:64:16:c5:1d:1e:06:3b:85:d9:be:06:
5d:c5:34:d3:7d:aa:7a:61:48:1e:12:fe:7c:71:cf:
6c:e0:e3:d6:03:d8:e1:71:4d:f9:be:c0:d4:2e:be:
5a:74:6f:b0:7e:7d:a3:a2:50:e0:bb:7a:c0:6f:f4:
cc:db:03:96:8e:60:84:90:32:3b:3c:22:2e:10:7a:
9b:45:fa:be:be:26:1a:5f:25:f7:d0:d2:c7:35:a6:
ff:c1:83:a4:33:df:42:dd:62:5d:91:a7:0a:2f:db:
0a:e7:eb:fb:70:87:05:b5:4a:77:07:b9:0f:b0:20:
63:b7:33:44:0c:f6:bb:02:86:9b:b0:dd:fd:d8:05:
ea:3d:53:7a:b1:a5:e6:d4:b5:e0:8b:70:2c:dd:30:
94:c5:aa:df:fc:18:39:42:43:f8:6e:c8:57:32:62:
51:18:33:b5:3d:2d:d3:7e:94:d4:c4:60:b1:57:b4:
13:98:69:b9:f8:3f:65:3d:e6:43:54:c6:6b:3c:71:
42:07:3b:6f:a4:0e:76:7d:56:2b:2c:11:82:c5:d7:
a2:3b:dc:dc:a7:39:f3:84:09:1e:51:44:9b:81:ae:
42:2e:2f:91:de:e7:e2:de:64:87:00:fb:58:86:d2:
cb:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:FB:AB:DE:3F:90:9D:C7:E2:16:96:AA:D2:CC:B4:FC:FF:72:E0:22
X509v3 Authority Key Identifier:
keyid:2A:A1:81:F8:B0:AC:91:3D:DC:37:7E:19:D5:66:4B:11:B1:97:53:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqGB-LCskT3cN34Z1WZLEbGXU3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:59:e1:72:2b:b4:69:25:6f:ed:9c:95:67:7f:db:0a:19:32:
b4:c3:ac:7f:dc:0b:11:d7:d4:0b:56:9a:1d:34:4f:0d:99:b7:
4b:d5:83:7f:78:dc:d5:e5:09:33:6d:ee:8c:90:b0:91:a4:02:
e8:37:13:36:25:2b:ab:b0:de:45:90:74:27:fd:9f:5b:4c:3e:
9c:98:c1:91:1d:ad:5f:cc:df:cd:b8:ae:c0:7b:7d:2d:be:5c:
91:6c:39:4e:3f:30:83:83:68:2a:91:f1:59:02:55:e9:6c:94:
c3:f0:a7:e1:1f:00:09:41:2f:11:78:ad:44:4f:69:fe:0c:6b:
c6:69:a5:81:71:08:db:23:13:c3:6a:59:a5:a5:ba:ad:a9:10:
45:44:6e:eb:a2:2f:0c:71:3c:fa:0d:ee:3e:07:2c:0c:e8:36:
05:e4:d2:fe:e1:3f:10:66:fd:a3:02:4e:8f:e8:e1:6f:28:5b:
f3:2e:2f:2f:54:2a:a6:12:95:b5:3b:cb:96:f0:91:17:22:64:
b6:bc:eb:91:05:b2:f7:a7:c6:9b:85:2d:a9:fb:aa:c6:fe:f4:
52:9e:7b:04:a2:3e:62:0b:1c:be:8f:42:27:d9:38:d8:43:a8:
cd:16:c1:0b:88:6b:fc:d6:54:5d:08:cf:6d:51:9f:de:e5:2a:
47:6b:15:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 31 15:29:59 2026 by rpki-client