Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/KQvMUKmjO6VlHv0a_kC2_bAlVvA.mft
File: KQvMUKmjO6VlHv0a_kC2_bAlVvA.mft (raw, json)
Hash identifier: Gc7LHem1akPlXWFJW2dtvbQMJ0F6xvqfQgQzbXd9zqY=
Subject key identifier: 1A:9F:C8:E3:08:58:16:7D:6A:36:16:AC:D8:2C:57:1D:CA:3C:AF:DB
Authority key identifier: 29:0B:CC:50:A9:A3:3B:A5:65:1E:FD:1A:FE:40:B6:FD:B0:25:56:F0
Certificate issuer: /CN=290bcc50a9a33ba5651efd1afe40b6fdb02556f0
Certificate serial: 01A1770329D15D81BF0BEB1EBE58F3B097EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQvMUKmjO6VlHv0a_kC2_bAlVvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/KQvMUKmjO6VlHv0a_kC2_bAlVvA.mft
Manifest number: 1023
Signing time: Mon 26 Oct 2026 07:00:58 +0000
Manifest this update: Mon 26 Oct 2026 07:00:58 +0000
Manifest next update: Tue 27 Oct 2026 07:00:58 +0000
Files and hashes: 1: 2D7Qmm8lOUAmehGAGFV4EjXSwO4.roa (hash: 671n1l8f6dvtaMMT0K6YZEwm63zrF391tyZLMVtMits=)
2: 5pnLPx_2hpy3VygTZwAGCHra7kE.roa (hash: 1oHSHq2YY2wBUKVcldVeO85+GN6kBhjSJ3cQgz8RWLo=)
3: KQvMUKmjO6VlHv0a_kC2_bAlVvA.crl (hash: gm3+W/ma3AldOy4WBI3P4H/Xove7ykM/h68/3pLyzJM=)
4: KnbEX4UkCWaV7O0wuCkr7A4YupA.roa (hash: LLlXw5GN0fkhrRlbhrlywwISvztA4DkGKjffqRJI8NQ=)
5: ZlWEEzGYFVqbln14VFTl7vY0xlM.roa (hash: 4+sTiTIEM7Q8B0+aFICyPTm4dchReZ/Z4NBsp9md7hs=)
6: hARTp8Mibx8WODEuOIUHpvobncw.roa (hash: xaYjb6X7y2C4MO+aFX5sY8YM6es27SbRjICMp6w4VYw=)
7: yUO-bSyekqEzkSiFcTb4DbKNZ_o.roa (hash: Yz2sZPO7RTS7G2x7CfUC5DUG1B3ygbMjzbaefkWF+54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/KQvMUKmjO6VlHv0a_kC2_bAlVvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/KQvMUKmjO6VlHv0a_kC2_bAlVvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQvMUKmjO6VlHv0a_kC2_bAlVvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:77:03:29:d1:5d:81:bf:0b:eb:1e:be:58:f3:b0:97:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=290bcc50a9a33ba5651efd1afe40b6fdb02556f0
Validity
Not Before: Oct 26 07:00:58 2026 GMT
Not After : Oct 27 07:00:58 2026 GMT
Subject: CN=1a9fc8e30858167d6a3616acd82c571dca3cafdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6e:a1:e8:01:72:ac:ae:8d:ba:2f:9d:85:00:
a5:76:ff:49:eb:68:5d:b2:94:59:45:31:f2:55:1e:
b8:7f:c8:e1:eb:71:b1:37:14:4d:1d:a1:ff:ee:d9:
85:02:bd:44:72:23:62:9b:73:02:88:66:89:02:6d:
3e:d5:5a:21:29:4e:e0:88:6d:72:67:b9:da:71:44:
04:f7:b8:f2:f9:78:b2:bf:fc:4c:52:c5:6b:d0:b3:
d6:63:3f:14:39:29:78:f0:a3:f9:dc:15:20:a1:24:
93:6b:b0:5d:f9:08:81:a0:71:09:c3:ff:0e:4e:42:
01:48:f7:0c:77:ac:0f:87:d9:5a:f1:c2:66:dc:fc:
fe:64:ff:96:8a:ce:43:c1:ae:9f:79:38:89:97:59:
b3:6f:8e:fa:cb:58:7b:3e:ac:de:a3:5b:b2:3e:ff:
7a:41:3f:c3:c9:d7:70:2b:e8:b8:71:50:6a:63:1b:
8e:68:a7:26:84:2b:22:4b:8a:a1:d3:b3:3c:14:66:
7d:5a:c4:3d:ce:df:1f:71:82:f7:8c:f9:61:9d:9f:
c2:24:2f:9c:2b:60:66:fb:74:d2:fb:c0:80:02:29:
af:10:8c:a0:6a:b6:8c:87:f9:2c:81:85:12:0d:58:
4a:46:44:e9:1a:a9:f6:e0:a2:96:5f:ed:29:00:8d:
02:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:9F:C8:E3:08:58:16:7D:6A:36:16:AC:D8:2C:57:1D:CA:3C:AF:DB
X509v3 Authority Key Identifier:
keyid:29:0B:CC:50:A9:A3:3B:A5:65:1E:FD:1A:FE:40:B6:FD:B0:25:56:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQvMUKmjO6VlHv0a_kC2_bAlVvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/KQvMUKmjO6VlHv0a_kC2_bAlVvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/KQvMUKmjO6VlHv0a_kC2_bAlVvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:5a:29:eb:99:c1:16:b1:58:95:a0:ab:e2:fe:62:50:81:ee:
93:de:b0:07:7e:b7:74:0c:4f:18:fc:1f:4b:5c:dc:9f:33:cb:
44:8c:27:52:f2:ce:83:9e:3d:63:41:c1:ac:31:43:e4:58:ce:
41:f6:b6:18:97:3b:61:f6:d0:27:e2:64:96:2f:6c:b5:70:96:
eb:7b:f2:77:d5:7f:c9:3f:cc:4e:85:d8:3b:09:12:53:57:0a:
bc:1b:26:8e:14:79:63:26:b4:12:a0:21:c7:1a:6a:0b:21:31:
72:51:8b:2c:86:b2:ec:29:07:13:80:67:1b:62:e1:c8:3e:dd:
a6:fb:e8:d9:f6:50:c1:be:57:f5:70:8d:71:81:5b:fc:d7:c7:
ec:60:fc:a9:71:72:f8:de:2e:db:23:7c:90:f9:2b:84:fe:2e:
c3:e1:a7:c8:9b:76:52:b8:db:f7:e6:e4:7d:94:4d:16:bb:a4:
8c:fb:f0:11:49:70:5f:b0:83:6a:90:ee:b5:e5:cf:90:8b:11:
25:98:25:f2:ec:d0:25:77:05:0c:47:d3:0e:a0:e8:ad:62:d3:
cb:38:2b:46:8b:1e:62:05:45:53:d8:3f:a7:47:06:15:44:00:
0c:77:a2:d8:a5:58:a7:57:1b:ad:3d:1c:20:3d:96:8c:46:7c:
b7:e4:fb:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 14:24:48 2026 by rpki-client