Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/KqWx1eAQafqWlumUTlGRCLfB5NE.mft
File: KqWx1eAQafqWlumUTlGRCLfB5NE.mft (raw, json)
Hash identifier: E87571uZ/kctRPxsEN1yA2DZQo4BWi6U9yuAFXZa0bo=
Subject key identifier: CC:F1:D1:F9:E0:03:AE:D7:4D:5E:2F:4E:B4:40:15:12:CE:DD:CD:F2
Authority key identifier: 2A:A5:B1:D5:E0:10:69:FA:96:96:E9:94:4E:51:91:08:B7:C1:E4:D1
Certificate issuer: /CN=2aa5b1d5e01069fa9696e9944e519108b7c1e4d1
Certificate serial: 01A1593093A99B77417571D32D05B20AB604
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqWx1eAQafqWlumUTlGRCLfB5NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/KqWx1eAQafqWlumUTlGRCLfB5NE.mft
Manifest number: 012C
Signing time: Tue 20 Oct 2026 12:01:57 +0000
Manifest this update: Tue 20 Oct 2026 12:01:57 +0000
Manifest next update: Wed 21 Oct 2026 12:01:57 +0000
Files and hashes: 1: KqWx1eAQafqWlumUTlGRCLfB5NE.crl (hash: PPSjg6yIpNHQkQH2f1yE29Ee6GpasolDaMxG04Otlxg=)
2: ku84zJjTWzV_Uw0D2cCHPAGq8WA.roa (hash: l+xQkMBojqSS3t8VI6Qv1n5lrRHRggLZADBsh+xBAik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/KqWx1eAQafqWlumUTlGRCLfB5NE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/KqWx1eAQafqWlumUTlGRCLfB5NE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqWx1eAQafqWlumUTlGRCLfB5NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:59:30:93:a9:9b:77:41:75:71:d3:2d:05:b2:0a:b6:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa5b1d5e01069fa9696e9944e519108b7c1e4d1
Validity
Not Before: Oct 20 12:01:57 2026 GMT
Not After : Oct 21 12:01:57 2026 GMT
Subject: CN=ccf1d1f9e003aed74d5e2f4eb4401512ceddcdf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:aa:aa:96:1b:00:de:84:62:1e:8a:49:02:b0:
31:de:56:e6:98:23:09:04:16:74:b9:2a:d8:5d:c5:
9c:aa:fa:e5:37:ee:02:7b:06:e6:42:b4:82:31:8f:
7d:28:f1:00:57:eb:6a:29:90:ce:ea:50:30:6b:a3:
37:de:9a:56:a7:53:52:a9:60:82:3f:72:0b:29:c7:
46:5f:7f:7c:73:66:23:1e:79:d1:6e:c6:50:93:c3:
7d:99:99:0b:32:31:46:0c:6b:16:9a:74:a2:14:68:
00:56:dc:c5:f7:08:0c:0a:fa:95:26:a3:c3:ee:90:
ef:67:bf:2d:bd:70:bc:b2:1a:ff:c8:fb:ab:e1:85:
52:3b:c9:f9:9c:27:8a:1e:95:1c:b2:ce:07:58:15:
2c:6e:97:43:41:9f:ca:07:ee:0d:19:cd:6a:fd:d7:
16:3b:a8:31:55:51:b2:40:23:76:54:41:17:52:cb:
85:bf:6d:d6:43:18:5d:1e:ee:af:41:f0:cf:1b:6e:
54:5b:3a:59:f2:cf:28:c9:34:75:00:b5:8d:c5:56:
46:f3:6f:5d:fd:c1:32:04:0b:ca:bd:33:56:8c:78:
05:eb:06:6b:bf:bb:9d:c5:f8:0f:23:1f:b5:f3:de:
f2:19:af:25:65:89:30:d5:ba:9c:46:e6:f8:7f:fc:
fe:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:F1:D1:F9:E0:03:AE:D7:4D:5E:2F:4E:B4:40:15:12:CE:DD:CD:F2
X509v3 Authority Key Identifier:
keyid:2A:A5:B1:D5:E0:10:69:FA:96:96:E9:94:4E:51:91:08:B7:C1:E4:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqWx1eAQafqWlumUTlGRCLfB5NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/KqWx1eAQafqWlumUTlGRCLfB5NE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6ef09b-802a-45f7-9e7f-06d530cefd8a/1/KqWx1eAQafqWlumUTlGRCLfB5NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:c3:12:fd:10:fc:f5:2f:e5:7f:a0:2b:fa:82:50:1a:69:b0:
b8:cf:d8:12:dd:65:42:81:0b:97:5e:9b:4e:ab:ec:95:d2:d5:
b1:4c:59:0a:6a:13:8c:15:b1:10:c2:92:51:f1:7f:c0:fd:47:
2c:fc:a3:5c:25:01:f7:76:c8:15:e4:17:9c:a5:dc:42:9b:4f:
c2:b7:34:90:2a:3c:89:3b:83:56:98:e5:26:14:91:91:a6:82:
14:37:2d:a3:1d:ab:69:e2:65:ee:f1:89:b0:f1:cd:83:b7:c5:
bd:2a:70:c6:cd:b6:72:ce:09:c7:06:11:c5:e3:a0:1f:db:ba:
67:ec:27:5c:0f:11:0b:15:99:0c:e4:bb:9a:32:99:29:36:2b:
d8:b2:24:a6:09:7d:b2:28:bc:af:90:c3:79:68:2c:17:a7:5c:
43:6b:47:94:9d:86:3c:97:1c:8a:2a:6b:3e:8b:65:b7:e5:b1:
08:22:28:f0:ad:b9:21:c6:d6:57:99:25:2d:0e:1f:b6:19:f5:
13:46:66:dd:14:6f:b7:51:6a:f0:34:18:13:bf:96:6a:32:c1:
c3:7e:d7:d3:23:f7:29:4c:ec:b8:29:1a:c7:7c:98:10:70:3b:
b1:de:95:0f:32:34:1d:df:e3:01:50:b3:35:eb:67:15:cc:68:
de:ba:8c:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 19:29:22 2026 by rpki-client