Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.mft
File: KqGB-LCskT3cN34Z1WZLEbGXU3M.mft (raw, json)
Hash identifier: zNmbt6gDlhcHQjHZD5rcjj4WKAnPtAGlwCvvHgAVfjM=
Subject key identifier: 0A:47:22:42:71:E5:64:78:A3:29:29:3D:10:DF:16:FC:EF:B9:C8:CF
Authority key identifier: 2A:A1:81:F8:B0:AC:91:3D:DC:37:7E:19:D5:66:4B:11:B1:97:53:73
Certificate issuer: /CN=2aa181f8b0ac913ddc377e19d5664b11b1975373
Certificate serial: 019D39AEA7F0AF98A52C2A53C36DF895DAFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqGB-LCskT3cN34Z1WZLEbGXU3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.mft
Manifest number: 0E03
Signing time: Sun 29 Mar 2026 13:00:40 +0000
Manifest this update: Sun 29 Mar 2026 13:00:40 +0000
Manifest next update: Mon 30 Mar 2026 13:00:40 +0000
Files and hashes: 1: 6JMQmYaXJRiml5BYtsy3jnW-erA.roa (hash: kbV9Lg8RcdOaIR/u2kpU49sw8x1vZ57CjX7SJnkdSvg=)
2: KqGB-LCskT3cN34Z1WZLEbGXU3M.crl (hash: bAHV+/Bi6lYQ6kX38mlTzEWgcbgtB1SsiialL9/P7UY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqGB-LCskT3cN34Z1WZLEbGXU3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:a7:f0:af:98:a5:2c:2a:53:c3:6d:f8:95:da:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa181f8b0ac913ddc377e19d5664b11b1975373
Validity
Not Before: Mar 29 13:00:40 2026 GMT
Not After : Mar 30 13:00:40 2026 GMT
Subject: CN=0a47224271e56478a329293d10df16fcefb9c8cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:5a:7d:a3:1e:8b:16:b7:c3:51:7f:c7:fc:07:
83:aa:0b:19:f2:8d:5e:55:c9:13:60:55:73:59:08:
4a:eb:13:c7:fc:77:ce:78:b7:df:2a:3b:1c:d2:34:
9c:c7:ce:6e:72:48:ce:5f:dc:cf:f6:f8:40:41:82:
f8:64:56:7e:e9:aa:3f:e0:cc:2a:cf:05:4a:85:b3:
a2:7c:7a:42:51:80:9d:95:26:9f:eb:a9:0d:e2:71:
73:4a:4f:67:4c:27:75:78:cf:ec:52:c6:cc:63:8f:
82:bd:9c:0d:4e:49:f8:e7:eb:f3:08:7f:f5:d6:d9:
c8:5f:16:f5:ab:78:59:f2:a5:22:8f:b1:3c:2c:a4:
44:78:8b:f5:b3:d0:65:07:15:92:1c:8c:85:d9:6b:
f6:59:da:7c:23:eb:e5:ac:71:ae:ad:e1:ac:5b:30:
29:ef:85:29:28:8f:4b:20:71:48:0a:dc:71:20:64:
4a:80:f3:ce:06:6f:39:5b:60:9e:62:a3:10:1b:2b:
2e:00:3a:f3:35:87:36:c0:27:76:5a:de:8b:47:d4:
92:58:1d:f1:df:06:65:40:72:ce:bb:7b:08:69:46:
94:fa:29:f5:de:25:bc:da:41:93:78:ca:ee:c2:ae:
20:68:4d:26:f4:c8:18:71:de:d7:ec:8b:d8:ad:e6:
23:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:47:22:42:71:E5:64:78:A3:29:29:3D:10:DF:16:FC:EF:B9:C8:CF
X509v3 Authority Key Identifier:
keyid:2A:A1:81:F8:B0:AC:91:3D:DC:37:7E:19:D5:66:4B:11:B1:97:53:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqGB-LCskT3cN34Z1WZLEbGXU3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:18:4b:1d:23:2f:05:71:c9:44:96:98:e5:ed:dc:93:52:fd:
3a:e5:7d:93:26:be:f7:d8:0b:86:c8:1a:30:fb:fc:1a:2a:57:
c3:cd:05:fd:f6:63:e8:5e:3f:2c:65:06:27:5b:ad:45:c3:bc:
1e:a3:c7:d5:04:54:d6:25:4f:21:43:1c:f8:99:8c:cf:0b:8f:
5f:36:cc:2b:45:8e:ff:2a:ec:f7:c7:40:5d:eb:eb:8f:f9:78:
e9:44:ce:66:38:fe:21:4a:e6:dd:4a:75:f5:ab:c7:85:f7:cc:
40:0d:73:c8:8d:5b:5a:aa:f5:ce:f6:2e:d2:ba:00:92:e5:e3:
eb:29:d7:ea:f9:21:fa:f2:77:9a:71:8c:39:47:1f:71:a9:ef:
9f:32:ae:b3:f3:14:d3:b6:3d:9d:68:06:94:56:29:95:22:43:
d3:63:6c:34:31:90:89:cb:7f:6d:dd:0a:f9:8a:3b:85:bf:26:
d3:c4:6a:c5:b4:17:26:37:75:9b:81:ca:d9:49:01:9f:b5:40:
f4:b8:8f:d0:8a:84:d3:e0:f6:48:d8:22:94:24:a0:72:e1:5e:
93:d6:98:8c:39:6e:96:44:06:43:44:cd:8b:ff:e6:d5:89:88:
df:4e:ce:ec:b1:25:b1:9c:59:30:2f:01:97:a1:06:40:9b:83:
a9:6f:3f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:59:43 2026 by rpki-client