Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.mft
File: KqGB-LCskT3cN34Z1WZLEbGXU3M.mft (raw, json)
Hash identifier: 1OGD0Paj0OAUFZBlI/3iSAlZlo4P9XQ8hI/GWf924T0=
Subject key identifier: 0B:D9:7B:F7:87:DB:A8:A4:90:62:3E:97:69:3D:9F:2B:86:06:FF:18
Authority key identifier: 2A:A1:81:F8:B0:AC:91:3D:DC:37:7E:19:D5:66:4B:11:B1:97:53:73
Certificate issuer: /CN=2aa181f8b0ac913ddc377e19d5664b11b1975373
Certificate serial: 01A17EBCBFBD33B836C9FDCF6F1920011AA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqGB-LCskT3cN34Z1WZLEbGXU3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.mft
Manifest number: 1039
Signing time: Tue 27 Oct 2026 19:01:01 +0000
Manifest this update: Tue 27 Oct 2026 19:01:01 +0000
Manifest next update: Wed 28 Oct 2026 19:01:01 +0000
Files and hashes: 1: 6JMQmYaXJRiml5BYtsy3jnW-erA.roa (hash: kbV9Lg8RcdOaIR/u2kpU49sw8x1vZ57CjX7SJnkdSvg=)
2: KqGB-LCskT3cN34Z1WZLEbGXU3M.crl (hash: shw8wnKjFKAg5YzK9vEO5BK/ON81odGepgsbWH5oTmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqGB-LCskT3cN34Z1WZLEbGXU3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 19:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:bc:bf:bd:33:b8:36:c9:fd:cf:6f:19:20:01:1a:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa181f8b0ac913ddc377e19d5664b11b1975373
Validity
Not Before: Oct 27 19:01:01 2026 GMT
Not After : Oct 28 19:01:01 2026 GMT
Subject: CN=0bd97bf787dba8a490623e97693d9f2b8606ff18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:75:cf:e0:1e:26:5b:25:0c:02:83:63:9e:89:
ee:59:bb:51:50:ae:67:3e:e0:d4:06:2b:74:c2:be:
04:f1:52:e0:d0:5d:72:59:9c:ba:ab:fe:c8:ed:c7:
2a:25:22:4f:68:59:a5:7f:a8:1f:27:fb:c0:c8:1e:
00:2c:44:05:c6:ed:03:44:e9:b9:23:03:d9:b7:45:
a1:a9:6b:f6:e2:09:51:f2:23:d3:ec:e1:10:5e:88:
26:99:2e:1f:fb:74:6b:e5:52:d2:a4:30:cc:31:15:
30:59:d2:dd:ec:51:9a:21:02:15:8b:fa:7e:19:c0:
9a:10:7a:fd:44:20:6a:0e:09:ca:5b:d2:ee:ec:29:
eb:81:02:a4:b3:2e:57:ad:2a:22:88:3c:b1:9e:a2:
66:1e:25:52:cc:54:d9:ce:ac:4f:d5:6d:47:e0:2d:
eb:ed:ad:a8:f6:f9:24:15:60:c7:bf:2e:f4:8b:2f:
5d:8b:0b:c8:fa:c6:84:d7:fd:b2:b1:1a:a7:cb:5b:
2d:0a:2c:ec:bc:71:0e:37:85:72:48:25:fa:52:a3:
fe:41:65:53:74:45:9b:75:f9:8d:74:c8:01:87:19:
cb:08:90:b7:b3:c8:0d:29:85:bd:be:64:ce:79:1c:
22:33:a4:a4:55:7c:8e:fb:ec:12:87:e0:43:20:e9:
c5:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:D9:7B:F7:87:DB:A8:A4:90:62:3E:97:69:3D:9F:2B:86:06:FF:18
X509v3 Authority Key Identifier:
keyid:2A:A1:81:F8:B0:AC:91:3D:DC:37:7E:19:D5:66:4B:11:B1:97:53:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqGB-LCskT3cN34Z1WZLEbGXU3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:1d:00:72:eb:42:3c:85:67:6b:e5:ef:ea:4e:25:42:1b:a1:
a7:41:91:59:b8:24:86:9b:03:51:a2:e1:7c:2e:4d:1d:bf:d4:
36:1e:02:dd:4f:5a:cc:a8:53:d9:bc:99:5a:54:f0:14:a4:c3:
3c:b8:e3:18:2a:29:03:d2:3f:20:7d:d3:32:1f:b4:39:7d:a9:
aa:04:d1:b7:d3:d8:f7:7a:8d:61:cd:24:48:b5:35:ab:98:24:
59:95:30:20:ad:08:4e:f9:42:39:c9:3b:49:0a:fc:9d:b0:8c:
f1:32:91:09:7d:12:02:ab:c7:a7:cf:e5:72:99:65:ae:5f:55:
41:8c:4c:7c:fc:4e:6e:d6:86:94:04:de:9c:6e:c4:1a:f8:70:
54:24:2e:04:89:ef:07:e8:ce:0d:43:58:f0:3e:6b:84:33:53:
ee:fc:e6:60:39:4a:5b:06:14:2e:ba:8d:d6:a7:b3:df:06:4a:
e8:d6:3a:84:fd:15:3d:b6:d7:39:86:4f:1d:b3:25:b8:7f:2a:
6c:7d:15:97:a5:4b:61:cd:76:35:e0:ec:06:10:cc:8f:86:13:
b9:9f:84:32:81:c3:1a:70:91:96:f7:ae:c3:1b:32:ab:3a:36:
18:71:86:cc:8d:90:13:0f:01:86:76:26:45:ea:6d:64:d3:8a:
5e:f3:77:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 05:21:17 2026 by rpki-client