Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/e57efb-861b-4931-88d3-dd973da42721/1/KQgY9N9Ka9El1fIhJBRaafW2o0w.mft
File: KQgY9N9Ka9El1fIhJBRaafW2o0w.mft (raw, json)
Hash identifier: dqQ5bhSdR5IlSs/9hKNkN/qL6TQn65x+k1GkbeuqfpM=
Subject key identifier: DE:2B:EC:E9:CE:5D:A4:56:44:6F:37:A6:B5:B9:5A:51:27:D3:FF:64
Authority key identifier: 29:08:18:F4:DF:4A:6B:D1:25:D5:F2:21:24:14:5A:69:F5:B6:A3:4C
Certificate issuer: /CN=290818f4df4a6bd125d5f22124145a69f5b6a34c
Certificate serial: 019D3909F93B5F03CF5FC059426338AE02A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQgY9N9Ka9El1fIhJBRaafW2o0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/e57efb-861b-4931-88d3-dd973da42721/1/KQgY9N9Ka9El1fIhJBRaafW2o0w.mft
Manifest number: 030C
Signing time: Sun 29 Mar 2026 10:00:48 +0000
Manifest this update: Sun 29 Mar 2026 10:00:48 +0000
Manifest next update: Mon 30 Mar 2026 10:00:48 +0000
Files and hashes: 1: GTic-MQ5tjMwB87XapipECuOaNo.roa (hash: OAjAKLqBUkKM9qmV4HtnwZI6RlKw3QQt+qVs91Rbq9g=)
2: KQgY9N9Ka9El1fIhJBRaafW2o0w.crl (hash: walTxGnTfBV17Ga2gC1YPjHma6QG679NeBqecj/TI+I=)
3: pgKR608oN6zximuaUEgX6MpmTUU.roa (hash: saw7XgMmN0878UPRiyR58fLRD+GohosuFlhuOGzETeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/e57efb-861b-4931-88d3-dd973da42721/1/KQgY9N9Ka9El1fIhJBRaafW2o0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/e57efb-861b-4931-88d3-dd973da42721/1/KQgY9N9Ka9El1fIhJBRaafW2o0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQgY9N9Ka9El1fIhJBRaafW2o0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:f9:3b:5f:03:cf:5f:c0:59:42:63:38:ae:02:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=290818f4df4a6bd125d5f22124145a69f5b6a34c
Validity
Not Before: Mar 29 10:00:48 2026 GMT
Not After : Mar 30 10:00:48 2026 GMT
Subject: CN=de2bece9ce5da456446f37a6b5b95a5127d3ff64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:47:ef:ac:3d:4c:0c:f9:59:80:5f:f4:84:43:
cb:e4:e2:43:9c:68:c9:26:42:11:71:62:b9:71:96:
c1:5d:6f:15:3e:2f:eb:0a:67:c7:f9:a7:21:4a:92:
5b:5a:a2:b5:5c:ad:37:75:af:70:76:35:e9:64:7f:
b1:51:ac:24:b6:92:15:59:6e:a4:53:f4:11:58:c2:
cb:bc:32:dd:27:09:2a:55:31:df:30:a2:bc:2f:c9:
d4:a8:f2:ce:90:7a:e6:11:7c:39:db:79:f5:6d:23:
82:fc:18:c8:44:f9:d0:09:78:b2:76:8a:65:03:e7:
f6:73:e6:63:b4:5c:b2:92:5d:63:0b:08:8e:0f:eb:
fd:71:05:4b:b7:c5:d6:10:bf:98:17:3c:c2:5f:1f:
21:fa:c6:93:c2:a9:f7:83:d1:71:b4:3b:0d:dd:f5:
78:95:ef:9a:43:32:11:74:48:4a:85:f5:d1:a0:4a:
09:bd:a5:4e:d1:43:d8:44:95:38:7d:92:82:9b:1e:
a0:03:24:42:19:e4:d7:f0:25:37:90:5d:54:0d:7f:
98:15:71:18:d2:d9:c7:fe:df:d7:3a:b8:a4:de:0f:
ff:ba:87:29:85:12:1d:e6:97:3b:00:f0:30:1a:cc:
1c:02:42:de:cc:5d:59:d8:28:99:57:10:f3:8e:a9:
28:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:2B:EC:E9:CE:5D:A4:56:44:6F:37:A6:B5:B9:5A:51:27:D3:FF:64
X509v3 Authority Key Identifier:
keyid:29:08:18:F4:DF:4A:6B:D1:25:D5:F2:21:24:14:5A:69:F5:B6:A3:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQgY9N9Ka9El1fIhJBRaafW2o0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/e57efb-861b-4931-88d3-dd973da42721/1/KQgY9N9Ka9El1fIhJBRaafW2o0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/e57efb-861b-4931-88d3-dd973da42721/1/KQgY9N9Ka9El1fIhJBRaafW2o0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:a1:07:e2:c9:61:99:71:cc:02:69:8f:3f:49:c5:48:c9:30:
7a:85:ae:22:f8:89:1a:2d:5e:e6:68:fa:7c:73:c2:16:62:69:
6c:14:37:b6:c0:f3:f4:52:db:80:2a:33:88:e1:93:94:4b:b4:
6f:97:3e:52:fe:e6:16:f4:f3:6e:c6:71:3a:5b:33:11:5f:94:
ab:22:08:f3:d5:1b:b2:e3:3b:07:25:4a:c4:ef:e1:78:34:9b:
3d:33:96:67:97:24:1a:ae:cf:af:ee:bb:62:6a:19:57:84:3b:
ca:87:41:a8:4b:27:ef:92:4a:ce:07:7a:53:a2:ec:ce:b6:15:
f7:6d:3e:e0:b0:70:b5:85:15:5c:fb:9f:cc:51:eb:03:53:93:
c1:04:4f:3a:dc:37:a3:5e:3b:b0:55:fc:e8:36:e4:23:15:75:
cc:22:0b:de:7a:79:b6:51:2e:39:eb:c6:f7:b7:67:15:a1:cf:
b1:7e:93:2c:3f:06:5f:8e:0c:8e:ba:67:f1:c6:13:5f:d8:d6:
ab:88:1a:fb:d9:b1:6f:d7:89:c8:19:67:6b:ec:b6:f2:d2:6a:
b6:a2:fe:b4:29:9e:38:e4:dc:e9:dc:b6:ee:fd:4f:3f:df:20:
da:eb:ac:24:5f:34:4f:45:38:18:57:be:3d:d8:7b:b3:e1:77:
18:c1:77:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:46 2026 by rpki-client