Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft
File: KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft (raw, json)
Hash identifier: TMmil1aTe8FQ+irl0nDIWZjYRqzmQU2uLYoI9c44S9E=
Subject key identifier: 83:76:A4:10:54:10:4F:BB:67:96:99:99:11:76:BD:A8:F1:E2:1C:23
Authority key identifier: 2A:A3:C9:9F:F5:8B:8F:73:3E:F2:C6:2A:77:72:C0:C1:F2:9E:57:FC
Certificate issuer: /CN=2aa3c99ff58b8f733ef2c62a7772c0c1f29e57fc
Certificate serial: 01A08DFBD940633443D180371AE93D3FE937
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqPJn_WLj3M-8sYqd3LAwfKeV_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft
Manifest number: 1355
Signing time: Fri 11 Sep 2026 01:01:27 +0000
Manifest this update: Fri 11 Sep 2026 01:01:27 +0000
Manifest next update: Sat 12 Sep 2026 01:01:27 +0000
Files and hashes: 1: KqPJn_WLj3M-8sYqd3LAwfKeV_w.crl (hash: LYuZJatmNefjrqY19S677K7bLjhqf4WjlFVf660cvqE=)
2: TjwUrt0QbOg_7Hv7hnE5gPoovGE.roa (hash: vCYAcdHdzTkyR5n/fzt3EtvDXfAERXz/dZUmibVHkag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqPJn_WLj3M-8sYqd3LAwfKeV_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:fb:d9:40:63:34:43:d1:80:37:1a:e9:3d:3f:e9:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa3c99ff58b8f733ef2c62a7772c0c1f29e57fc
Validity
Not Before: Sep 11 01:01:27 2026 GMT
Not After : Sep 12 01:01:27 2026 GMT
Subject: CN=8376a41054104fbb679699991176bda8f1e21c23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:15:7a:35:12:6f:85:09:f2:1a:c4:26:c5:df:
c6:b4:03:43:dc:97:ac:d1:5b:c2:7d:04:27:3e:10:
0c:73:05:1a:52:a4:6d:74:57:30:5a:4f:1a:81:3d:
ba:fe:bc:27:93:19:69:e3:2c:47:9f:a7:8c:21:7b:
4e:a5:fa:cd:2a:a0:b7:bf:c5:0a:d8:98:4e:51:2a:
1e:5b:89:c0:36:be:82:6c:10:96:22:69:f0:70:27:
10:78:ad:36:54:36:f4:ba:bc:f6:91:3c:e9:6d:29:
8c:eb:cc:f6:28:c2:39:06:22:b4:4a:33:a4:e9:2d:
4d:17:db:f3:a8:24:e3:ab:c6:5d:b9:06:64:5b:5d:
6f:b6:c8:3c:67:af:4f:a3:f7:7a:79:e4:d0:9d:f5:
10:c7:d0:1a:1c:81:7a:04:04:db:f6:57:b1:02:55:
05:a4:9e:de:7b:6c:c6:0a:a3:d0:4f:f2:b2:d2:9f:
26:30:45:02:b5:fa:7a:69:69:66:1e:06:6a:82:ee:
49:af:03:e6:89:be:31:5e:54:5e:6e:b5:5e:71:85:
23:f8:a0:d3:b8:88:5f:7e:2c:f6:87:fb:09:4a:05:
2d:04:63:68:53:fb:4d:f0:7c:73:00:1f:19:a3:62:
e1:c8:ea:96:57:38:d1:19:f3:1f:06:50:0a:a0:30:
9f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:76:A4:10:54:10:4F:BB:67:96:99:99:11:76:BD:A8:F1:E2:1C:23
X509v3 Authority Key Identifier:
keyid:2A:A3:C9:9F:F5:8B:8F:73:3E:F2:C6:2A:77:72:C0:C1:F2:9E:57:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqPJn_WLj3M-8sYqd3LAwfKeV_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:01:12:9f:f7:40:28:5e:90:47:0b:1c:b2:41:c8:c2:62:be:
3c:c4:79:6d:54:f5:50:b8:d4:81:b0:34:a9:a4:8c:80:9e:96:
59:76:60:3a:e6:92:25:c0:b2:fa:62:9f:f8:99:ca:4f:11:fa:
d8:44:a0:de:5a:d9:a2:91:a1:4d:33:e6:13:9e:06:12:4e:5c:
13:5b:db:ca:20:3c:e6:80:c2:6b:5e:69:04:49:76:9b:39:7c:
8c:45:e2:59:ec:e8:ee:e4:03:88:5d:51:cc:53:ca:1b:05:82:
58:7d:bf:fe:4f:77:8c:bc:23:27:d9:14:af:a1:44:a4:98:78:
78:4e:31:0b:4a:d6:a9:b4:d2:68:36:d1:aa:e3:f4:55:8a:ac:
e1:1f:74:5b:ed:24:b6:98:84:78:87:40:1c:eb:56:75:17:76:
73:6f:ec:a7:de:c0:ae:22:a6:cc:88:ee:59:65:6e:d1:95:ca:
a6:eb:6d:cf:f3:5f:06:fc:80:62:5a:37:29:e1:c4:12:e3:10:
96:c3:36:e1:48:38:a1:35:b2:2e:ae:e1:35:06:6d:e7:ca:df:
d9:18:bb:c2:6c:d3:0e:e2:78:08:42:3c:c7:0b:fe:79:ef:3e:
64:9b:7e:63:6f:17:0c:86:b1:ad:9f:16:d2:5b:91:b5:22:a7:
11:03:70:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 07:08:34 2026 by rpki-client