Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.mft
File: KqGB-LCskT3cN34Z1WZLEbGXU3M.mft (raw, json)
Hash identifier: e/8DzTXmj69nOsWti8zki2bsFSSHQWPLKlhv+xGa2/g=
Subject key identifier: 90:15:46:96:43:29:11:2D:DE:64:2A:5C:31:D4:AD:DD:58:42:0F:43
Authority key identifier: 2A:A1:81:F8:B0:AC:91:3D:DC:37:7E:19:D5:66:4B:11:B1:97:53:73
Certificate issuer: /CN=2aa181f8b0ac913ddc377e19d5664b11b1975373
Certificate serial: 01A0705F6DDD9006A7E53AD29ABDC0202F20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqGB-LCskT3cN34Z1WZLEbGXU3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.mft
Manifest number: 0FAD
Signing time: Sat 05 Sep 2026 07:01:37 +0000
Manifest this update: Sat 05 Sep 2026 07:01:37 +0000
Manifest next update: Sun 06 Sep 2026 07:01:37 +0000
Files and hashes: 1: 6JMQmYaXJRiml5BYtsy3jnW-erA.roa (hash: kbV9Lg8RcdOaIR/u2kpU49sw8x1vZ57CjX7SJnkdSvg=)
2: KqGB-LCskT3cN34Z1WZLEbGXU3M.crl (hash: cO3D3dCc1DzmC41hhR/atAR88F+7YJFYgf7wdDZABxQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqGB-LCskT3cN34Z1WZLEbGXU3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 07:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:70:5f:6d:dd:90:06:a7:e5:3a:d2:9a:bd:c0:20:2f:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa181f8b0ac913ddc377e19d5664b11b1975373
Validity
Not Before: Sep 5 07:01:37 2026 GMT
Not After : Sep 6 07:01:37 2026 GMT
Subject: CN=901546964329112dde642a5c31d4addd58420f43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:86:5c:cf:cb:a3:39:1b:d8:b9:41:69:90:e7:
ce:65:f3:6c:2f:72:24:19:08:cf:ee:0a:58:3c:1e:
9b:b0:1d:d8:f0:3d:16:27:12:6a:a0:8e:ad:69:df:
87:33:14:58:40:5a:c4:22:a2:5a:23:bf:4d:20:fe:
d3:b6:29:8c:ea:3b:ee:13:4e:fe:c6:cf:13:c3:3b:
c1:75:ec:81:0c:8f:04:e2:e6:26:de:92:f6:0c:20:
4a:37:8f:94:3f:b8:84:06:b9:8b:83:fd:e9:9b:79:
e3:8d:0a:e3:5f:0c:83:42:14:c2:3b:08:85:b8:df:
be:9c:72:19:47:eb:ad:2a:1d:f6:ed:6c:cb:5a:4c:
9f:40:ef:ed:16:dc:2a:54:cc:00:75:e0:ec:20:2c:
ae:32:09:75:2d:79:54:a2:fe:3e:82:6d:af:8c:93:
2c:12:91:b5:25:62:7c:19:ce:5a:87:b2:7a:c7:c1:
96:2c:09:23:bc:01:54:26:22:d4:f1:d0:e9:5b:be:
76:9a:da:27:8f:2b:bd:47:f0:46:76:d6:2b:ff:95:
fd:25:1d:88:39:8a:99:e5:cf:ad:26:fc:a0:86:76:
96:39:62:05:2e:69:ce:20:37:31:f3:1d:7e:5e:27:
86:6b:ed:db:69:b1:6b:ec:b6:38:f5:11:a7:74:6a:
4a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:15:46:96:43:29:11:2D:DE:64:2A:5C:31:D4:AD:DD:58:42:0F:43
X509v3 Authority Key Identifier:
keyid:2A:A1:81:F8:B0:AC:91:3D:DC:37:7E:19:D5:66:4B:11:B1:97:53:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqGB-LCskT3cN34Z1WZLEbGXU3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:47:1f:22:66:f5:e0:71:f5:53:de:0f:00:1b:e4:3e:7d:c4:
19:74:05:04:b6:e6:4a:7a:b4:2b:55:1b:d9:80:e2:c8:74:5c:
06:69:79:8e:9e:6b:e9:7d:98:c8:6a:c7:58:39:9a:ad:54:72:
14:df:8d:14:e9:8a:5b:37:fb:0e:05:03:07:c1:13:12:13:df:
f7:14:a9:3b:d9:94:5b:7d:54:69:f7:c2:f8:73:37:d4:1d:0b:
20:68:df:d0:de:22:9b:42:04:90:96:ff:cd:e6:c9:e6:78:97:
98:80:9f:46:6b:da:3b:3f:af:cb:3d:ca:47:60:fd:65:0c:d9:
cb:0b:f5:4f:56:c9:67:31:28:1a:5d:14:de:dd:90:a7:1f:16:
53:70:c8:2c:53:8a:a9:77:15:78:4b:b2:16:c2:b0:74:13:15:
97:5b:1a:54:a8:30:6e:b2:78:99:78:9d:46:34:1a:3a:24:ca:
04:e2:e7:4d:63:a1:37:fb:9b:76:45:9c:48:48:b8:1d:ea:7b:
f6:2c:f4:21:e5:4a:a2:b2:fc:23:56:57:d9:70:e7:3d:82:fb:
bd:82:0b:23:a6:4e:c2:30:dd:55:d6:a7:01:bf:28:be:7b:54:
63:1f:de:ce:b0:53:22:d7:17:2d:6e:b0:48:2b:df:da:0e:39:
dd:f5:7d:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 15:58:21 2026 by rpki-client