Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft
File: KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft (raw, json)
Hash identifier: EQ+iesXqydp75n4v76P0Op2Wtm6H0Ojug551y8jCBwY=
Subject key identifier: 29:31:72:27:B4:CC:F7:BE:CC:3F:39:F5:CA:35:DD:AB:F5:E2:61:8E
Authority key identifier: 2A:A3:C9:9F:F5:8B:8F:73:3E:F2:C6:2A:77:72:C0:C1:F2:9E:57:FC
Certificate issuer: /CN=2aa3c99ff58b8f733ef2c62a7772c0c1f29e57fc
Certificate serial: 019DD0F6289C45B128E55CB621845B4358A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqPJn_WLj3M-8sYqd3LAwfKeV_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft
Manifest number: 11EA
Signing time: Mon 27 Apr 2026 22:01:26 +0000
Manifest this update: Mon 27 Apr 2026 22:01:26 +0000
Manifest next update: Tue 28 Apr 2026 22:01:26 +0000
Files and hashes: 1: KqPJn_WLj3M-8sYqd3LAwfKeV_w.crl (hash: mW9CpS1i1j1tdIFRJNJSJ+oZEKnCzbei2n7cQvAmZ6w=)
2: TjwUrt0QbOg_7Hv7hnE5gPoovGE.roa (hash: vCYAcdHdzTkyR5n/fzt3EtvDXfAERXz/dZUmibVHkag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqPJn_WLj3M-8sYqd3LAwfKeV_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 22:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:f6:28:9c:45:b1:28:e5:5c:b6:21:84:5b:43:58:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa3c99ff58b8f733ef2c62a7772c0c1f29e57fc
Validity
Not Before: Apr 27 22:01:26 2026 GMT
Not After : Apr 28 22:01:26 2026 GMT
Subject: CN=29317227b4ccf7becc3f39f5ca35ddabf5e2618e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:2f:15:d3:e9:f7:fb:38:5c:0b:05:85:2e:a8:
7b:e6:17:92:58:56:6c:39:7d:5b:ca:5f:36:0a:71:
23:62:58:cb:8c:23:c8:59:fd:1d:96:f0:59:b3:99:
85:76:2e:1d:a3:a4:e2:62:67:f6:7d:e4:00:39:ae:
76:6a:96:04:99:e6:6a:ba:84:ed:7f:5e:85:bb:30:
1d:99:52:db:de:31:1f:80:eb:ba:7c:7f:88:0f:05:
65:9e:86:3d:3c:9e:14:37:ee:7c:2a:16:f5:8f:65:
2c:42:d6:87:ac:74:67:ee:20:0e:f0:83:86:6b:55:
8e:b2:b5:90:66:b1:0b:5c:ac:2d:32:ac:b2:90:07:
ec:dc:6f:02:10:35:48:07:e5:fa:98:e2:55:01:5a:
e6:66:96:32:09:41:a9:70:08:bd:9f:41:6d:95:c9:
d4:53:37:22:ce:c7:ee:a8:1c:c9:2e:49:a5:f3:d8:
4b:33:84:7e:21:e1:04:e5:d6:94:81:d6:12:56:7d:
10:a0:67:b5:73:9b:2f:5d:aa:31:1f:1a:09:95:cd:
3f:90:02:4a:87:d3:cf:56:a0:7e:cd:07:76:a6:b2:
ea:6f:6f:1c:24:b7:73:18:2e:a0:eb:63:0d:3f:c6:
2b:57:4f:79:dc:b5:d6:8b:74:3a:47:a0:6d:12:a8:
d8:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:31:72:27:B4:CC:F7:BE:CC:3F:39:F5:CA:35:DD:AB:F5:E2:61:8E
X509v3 Authority Key Identifier:
keyid:2A:A3:C9:9F:F5:8B:8F:73:3E:F2:C6:2A:77:72:C0:C1:F2:9E:57:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqPJn_WLj3M-8sYqd3LAwfKeV_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:b1:ab:66:72:be:2d:67:51:97:0d:44:97:5e:34:47:ed:93:
5f:22:e1:e1:05:91:58:00:da:e9:3e:86:c7:fe:57:4f:69:7b:
1c:e0:25:c0:ca:2a:e7:ef:07:ce:5b:10:e7:35:48:c9:1e:dc:
45:b4:c6:58:e7:aa:e5:17:9d:a7:bf:9b:55:db:88:3c:6c:b0:
a6:68:9c:c3:78:97:dc:d1:d1:0c:82:84:d8:58:6c:48:8a:fa:
cc:54:4f:7e:e6:64:cc:b0:5f:ca:04:23:16:5d:0b:d9:61:31:
3c:e0:06:91:9f:69:41:3b:42:02:17:8b:62:9c:e7:d4:13:2e:
e7:a2:e0:30:81:11:1f:57:1d:a5:97:12:9e:bc:69:51:5d:07:
8f:93:c4:4a:42:4a:8c:5f:b3:0d:a9:1a:a1:97:50:9e:0e:c1:
f8:85:35:a1:6e:ef:6b:1c:d6:44:d6:ec:7d:28:96:dc:ab:2a:
b6:d5:6c:70:2f:14:7a:ee:39:d4:3f:2b:1d:b3:1a:29:e2:8f:
a5:f4:23:ad:7b:59:8f:17:e1:57:4b:7f:a4:e8:80:3e:b4:35:
cd:3c:6c:94:34:61:bf:b7:78:91:39:06:af:91:db:ca:08:39:
8e:cf:ba:50:83:f6:14:fd:15:f5:66:8c:bc:12:cb:dd:d5:34:
58:d1:8c:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 07:06:42 2026 by rpki-client