Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft
File: KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft (raw, json)
Hash identifier: fkUa4Kz0OQIhW0Xmut6r2C/SLy4hTMkPBTkM0DkqRmU=
Subject key identifier: 60:82:41:A1:FB:01:D5:D6:37:98:02:E9:0D:C4:00:C0:6D:E2:43:8C
Authority key identifier: 2A:A3:C9:9F:F5:8B:8F:73:3E:F2:C6:2A:77:72:C0:C1:F2:9E:57:FC
Certificate issuer: /CN=2aa3c99ff58b8f733ef2c62a7772c0c1f29e57fc
Certificate serial: 019FA44E6C9D0A20667E3AB2FB32EF4C2C1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqPJn_WLj3M-8sYqd3LAwfKeV_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft
Manifest number: 12DC
Signing time: Mon 27 Jul 2026 16:00:30 +0000
Manifest this update: Mon 27 Jul 2026 16:00:30 +0000
Manifest next update: Tue 28 Jul 2026 16:00:30 +0000
Files and hashes: 1: KqPJn_WLj3M-8sYqd3LAwfKeV_w.crl (hash: 7aVY0bXWVgMyVlGXJ9+uiFzvfBqc4lWtUHqfi+FuPTc=)
2: TjwUrt0QbOg_7Hv7hnE5gPoovGE.roa (hash: vCYAcdHdzTkyR5n/fzt3EtvDXfAERXz/dZUmibVHkag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqPJn_WLj3M-8sYqd3LAwfKeV_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 13:48:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a4:4e:6c:9d:0a:20:66:7e:3a:b2:fb:32:ef:4c:2c:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa3c99ff58b8f733ef2c62a7772c0c1f29e57fc
Validity
Not Before: Jul 27 16:00:30 2026 GMT
Not After : Jul 28 16:00:30 2026 GMT
Subject: CN=608241a1fb01d5d6379802e90dc400c06de2438c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:45:1b:b0:2c:ef:0b:58:a3:66:ad:b3:8d:11:
92:7e:3f:ea:be:b2:47:da:e6:ba:58:16:56:86:62:
db:70:df:9f:3d:4d:ea:a6:96:10:58:88:ac:bc:e8:
f3:0b:0e:b3:19:fc:99:fa:19:25:28:12:c8:0f:f7:
42:cb:39:d0:8d:a0:92:26:fc:ed:c6:1e:55:ae:07:
f3:1e:35:de:6e:42:c9:c3:1f:44:68:fd:d7:52:71:
86:4d:c2:26:96:f7:98:aa:23:a1:39:5d:79:c6:cf:
84:9d:4d:1e:df:db:1a:b2:bb:7b:01:22:54:a3:de:
9a:db:d9:56:a6:65:ec:ba:05:75:f3:87:c5:1c:3e:
d9:5a:25:b2:ba:60:08:74:b3:38:62:50:3f:97:39:
0c:fa:a0:df:1a:ad:0b:a2:1e:75:aa:eb:c6:9d:ea:
f9:a2:cf:4a:a2:84:8c:e7:bb:8c:67:13:a7:96:2a:
5c:d4:7d:1d:84:c1:98:fb:e5:8d:c4:dc:6e:54:46:
c9:49:35:18:ac:a2:31:4d:66:43:79:28:e2:b8:4e:
3d:99:b6:f8:2c:17:4a:5e:a6:bc:f8:0c:64:f4:c3:
e1:76:3f:fa:74:04:d2:5d:e2:78:02:0d:43:ac:4a:
67:ff:5e:e8:2c:3e:e7:b2:ff:bc:95:b2:be:a7:86:
a1:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:82:41:A1:FB:01:D5:D6:37:98:02:E9:0D:C4:00:C0:6D:E2:43:8C
X509v3 Authority Key Identifier:
keyid:2A:A3:C9:9F:F5:8B:8F:73:3E:F2:C6:2A:77:72:C0:C1:F2:9E:57:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqPJn_WLj3M-8sYqd3LAwfKeV_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:b3:82:42:59:0f:1c:a2:4d:f0:1b:91:e1:15:9e:47:e5:7e:
78:cd:d7:f8:a1:3e:77:e3:c5:ce:eb:78:38:93:78:53:cb:76:
91:c9:96:39:0f:8c:0a:a3:51:99:b5:3c:d1:9f:a2:ea:11:60:
22:d7:97:cb:41:95:cd:d7:6a:5a:2b:91:fb:1c:f8:9e:47:ee:
3f:6c:f7:f7:11:47:7c:8d:aa:aa:5c:89:7e:3c:7f:02:4d:f1:
f5:d2:9e:f2:8f:9f:99:c7:60:b3:eb:4a:ab:5e:bb:15:84:fa:
4b:67:88:fa:92:38:73:21:f7:f1:d1:df:9d:c8:d5:8c:9b:a4:
02:00:33:7a:e7:83:14:29:82:6e:07:34:18:a8:8b:c1:d5:c0:
64:bc:6b:88:bb:c1:89:ac:4a:1a:6f:cc:4e:45:b6:e0:5a:37:
4a:63:6c:a5:94:95:65:af:2f:dd:e0:ba:1b:ef:45:69:38:a2:
57:74:52:df:08:86:9a:6b:a6:8f:8a:a5:49:7d:8e:c8:50:54:
c4:46:0f:00:11:d4:80:2f:a7:97:1c:78:b8:d8:94:76:66:12:
81:e1:df:74:da:16:d4:2b:ae:b8:bf:e9:fc:17:79:17:a6:98:
21:61:10:a2:3b:cc:5d:6b:74:a4:6c:e5:f8:96:70:8c:fa:76:
0f:24:46:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 17:53:09 2026 by rpki-client