Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/KQvMUKmjO6VlHv0a_kC2_bAlVvA.mft
File: KQvMUKmjO6VlHv0a_kC2_bAlVvA.mft (raw, json)
Hash identifier: oBcQABgTYVo3skvN56MauQWgssPo3cTW27a9uF+A2G4=
Subject key identifier: 7D:DA:97:33:55:E9:7B:E9:B2:59:81:9A:11:00:3D:5F:23:E1:BF:BB
Authority key identifier: 29:0B:CC:50:A9:A3:3B:A5:65:1E:FD:1A:FE:40:B6:FD:B0:25:56:F0
Certificate issuer: /CN=290bcc50a9a33ba5651efd1afe40b6fdb02556f0
Certificate serial: 01A08979C5533BDC742C6E37615BFCB23A8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQvMUKmjO6VlHv0a_kC2_bAlVvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/KQvMUKmjO6VlHv0a_kC2_bAlVvA.mft
Manifest number: 0FA8
Signing time: Thu 10 Sep 2026 04:00:53 +0000
Manifest this update: Thu 10 Sep 2026 04:00:53 +0000
Manifest next update: Fri 11 Sep 2026 04:00:53 +0000
Files and hashes: 1: 2D7Qmm8lOUAmehGAGFV4EjXSwO4.roa (hash: 671n1l8f6dvtaMMT0K6YZEwm63zrF391tyZLMVtMits=)
2: 5pnLPx_2hpy3VygTZwAGCHra7kE.roa (hash: 1oHSHq2YY2wBUKVcldVeO85+GN6kBhjSJ3cQgz8RWLo=)
3: KQvMUKmjO6VlHv0a_kC2_bAlVvA.crl (hash: 6jyXf7ivtgN6HrH59YrFGZVtEcPwy2lr4Q68SB7RxHQ=)
4: KnbEX4UkCWaV7O0wuCkr7A4YupA.roa (hash: LLlXw5GN0fkhrRlbhrlywwISvztA4DkGKjffqRJI8NQ=)
5: ZlWEEzGYFVqbln14VFTl7vY0xlM.roa (hash: 4+sTiTIEM7Q8B0+aFICyPTm4dchReZ/Z4NBsp9md7hs=)
6: hARTp8Mibx8WODEuOIUHpvobncw.roa (hash: xaYjb6X7y2C4MO+aFX5sY8YM6es27SbRjICMp6w4VYw=)
7: yUO-bSyekqEzkSiFcTb4DbKNZ_o.roa (hash: Yz2sZPO7RTS7G2x7CfUC5DUG1B3ygbMjzbaefkWF+54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/KQvMUKmjO6VlHv0a_kC2_bAlVvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/KQvMUKmjO6VlHv0a_kC2_bAlVvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQvMUKmjO6VlHv0a_kC2_bAlVvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:79:c5:53:3b:dc:74:2c:6e:37:61:5b:fc:b2:3a:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=290bcc50a9a33ba5651efd1afe40b6fdb02556f0
Validity
Not Before: Sep 10 04:00:53 2026 GMT
Not After : Sep 11 04:00:53 2026 GMT
Subject: CN=7dda973355e97be9b259819a11003d5f23e1bfbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:60:ee:0c:ec:84:5b:dd:c7:d3:0a:40:ef:9d:
4d:ee:ba:2b:fb:b8:ae:7f:2a:ef:d8:97:12:27:b5:
b4:e3:df:3c:13:38:82:bf:23:6b:07:1d:05:5e:0e:
08:a1:eb:2e:4d:4c:7e:9f:84:75:3d:28:17:8c:f2:
7b:c9:af:01:ea:16:36:2a:6a:9a:25:d6:34:c5:79:
1d:46:5e:e3:7f:8b:16:e9:d0:9e:cb:da:26:a0:5b:
fc:bf:a2:94:be:de:dd:84:5f:65:f9:4f:38:7f:8a:
42:9b:0f:8c:2e:ca:42:96:bf:dc:80:a7:8c:4f:19:
98:1c:9e:b5:46:b2:a4:57:8e:1e:8a:4d:fa:c2:ce:
ae:63:88:82:c8:86:a7:54:7d:8b:3a:6f:30:3e:31:
c3:cf:96:44:4d:6d:c8:11:98:08:33:c9:f0:f8:d2:
1f:fb:27:db:62:ef:86:9f:72:80:76:ee:cb:ea:dc:
cb:81:56:19:22:7a:c9:ba:8a:d8:d5:4e:4e:36:31:
3d:aa:e4:66:ff:66:22:4f:26:1c:53:c2:5e:0b:ec:
c4:b5:01:83:83:a5:79:6d:11:90:e9:2c:08:7a:8e:
3e:59:3c:c6:ba:03:f0:67:26:de:5a:6e:f3:10:61:
33:23:a1:17:48:c1:8a:45:65:36:cd:14:e4:e5:71:
3b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:DA:97:33:55:E9:7B:E9:B2:59:81:9A:11:00:3D:5F:23:E1:BF:BB
X509v3 Authority Key Identifier:
keyid:29:0B:CC:50:A9:A3:3B:A5:65:1E:FD:1A:FE:40:B6:FD:B0:25:56:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQvMUKmjO6VlHv0a_kC2_bAlVvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/KQvMUKmjO6VlHv0a_kC2_bAlVvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/KQvMUKmjO6VlHv0a_kC2_bAlVvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:cc:e8:1e:ad:05:73:e1:ac:43:5f:06:d1:ec:6a:bd:8f:ff:
3a:af:bb:14:96:0d:63:c3:11:f9:9c:82:67:a6:02:36:4c:c7:
95:69:a5:2d:1c:3d:f9:95:52:05:06:c6:83:41:26:c1:f1:62:
25:80:df:ab:a4:40:c7:ef:6b:b7:18:36:29:eb:0b:37:b9:04:
85:20:ef:78:ff:33:ab:37:f8:81:0e:11:5c:25:75:1d:cf:a2:
fb:9e:c2:ff:9f:5b:7f:68:5f:61:ba:92:7a:c8:bc:53:29:b8:
ee:e4:12:f9:6f:45:6f:0b:38:b0:98:a4:9f:c5:48:ed:e1:ab:
a8:35:0b:64:8f:0f:8b:46:c5:fe:73:35:dc:50:a0:99:6d:89:
9e:95:77:21:39:c0:c1:a8:92:ef:2f:83:00:3f:56:3e:87:36:
d1:56:59:2d:18:64:f9:58:18:82:7d:34:91:13:e1:a7:01:60:
7c:2d:b4:87:09:63:84:21:55:0b:12:f9:36:17:cc:3d:76:40:
a7:06:81:42:7f:10:f2:f4:dc:a2:27:a3:f0:1c:a3:eb:ea:6a:
e1:45:68:1e:45:7b:f5:52:93:e0:2a:a2:e3:be:a5:2f:48:f8:
c4:99:82:ff:3f:ce:27:bd:2b:09:ea:bf:22:dd:75:b9:21:a6:
79:87:09:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 09:37:20 2026 by rpki-client