Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft
File: KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft (raw, json)
Hash identifier: 0yW+KrD7kdaejVkUg9KLjWLFexrW3a0uQe2c4NJxLeI=
Subject key identifier: DB:05:97:4F:DE:C9:DB:96:31:4C:60:CB:58:21:74:3A:F3:9D:F3:CA
Authority key identifier: 2A:A3:C9:9F:F5:8B:8F:73:3E:F2:C6:2A:77:72:C0:C1:F2:9E:57:FC
Certificate issuer: /CN=2aa3c99ff58b8f733ef2c62a7772c0c1f29e57fc
Certificate serial: 019CE93772FD4AC3CBA50B9EE5FCB16565C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqPJn_WLj3M-8sYqd3LAwfKeV_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft
Manifest number: 1172
Signing time: Fri 13 Mar 2026 22:00:51 +0000
Manifest this update: Fri 13 Mar 2026 22:00:51 +0000
Manifest next update: Sat 14 Mar 2026 22:00:51 +0000
Files and hashes: 1: KqPJn_WLj3M-8sYqd3LAwfKeV_w.crl (hash: nw82R0ekClN0+K3WK+WrhwTx/rn9ITy8o3HuPJC2VLQ=)
2: TjwUrt0QbOg_7Hv7hnE5gPoovGE.roa (hash: vCYAcdHdzTkyR5n/fzt3EtvDXfAERXz/dZUmibVHkag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqPJn_WLj3M-8sYqd3LAwfKeV_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 18:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e9:37:72:fd:4a:c3:cb:a5:0b:9e:e5:fc:b1:65:65:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa3c99ff58b8f733ef2c62a7772c0c1f29e57fc
Validity
Not Before: Mar 13 22:00:51 2026 GMT
Not After : Mar 14 22:00:51 2026 GMT
Subject: CN=db05974fdec9db96314c60cb5821743af39df3ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3d:b5:3b:24:e9:d5:be:01:3a:78:d4:68:73:
8f:3b:2a:34:40:3e:fd:31:45:78:bb:fd:ab:59:2c:
19:09:d6:c4:89:08:e0:c2:ce:ec:0a:10:a3:2b:45:
00:b2:1f:a0:46:52:36:5a:eb:cf:41:9d:8b:89:ba:
f7:cd:f5:14:1b:89:c2:92:97:ee:b0:73:08:75:ff:
cd:84:ab:c3:14:63:52:26:5a:ec:be:a5:4d:b7:b4:
92:44:b7:d0:30:52:18:9a:bb:73:fd:6a:1c:dd:22:
f5:82:89:e4:2a:7c:4e:9a:8d:db:25:cf:78:94:f8:
9c:d0:55:72:12:6f:3c:cc:26:4c:e8:ce:b1:ce:f3:
f5:72:2f:e4:f2:b3:88:09:28:27:07:6e:e7:31:7c:
b0:3e:63:aa:97:d7:ce:0e:53:15:8b:28:d8:f5:c1:
43:6c:e4:1e:4f:ce:67:a8:4d:99:a6:52:9d:3f:39:
b4:f8:f3:7e:9b:c8:0e:6f:87:7d:fc:83:ac:6e:9c:
0e:73:c4:52:da:fa:55:fc:16:1d:e2:f8:cd:53:7f:
33:08:37:56:9a:91:be:db:7a:52:b4:a3:eb:51:ee:
48:3d:3f:10:15:fc:91:60:64:7c:66:b6:b7:e9:02:
98:3c:b5:a7:45:90:ba:a0:23:be:96:7a:1d:0d:fd:
74:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:05:97:4F:DE:C9:DB:96:31:4C:60:CB:58:21:74:3A:F3:9D:F3:CA
X509v3 Authority Key Identifier:
keyid:2A:A3:C9:9F:F5:8B:8F:73:3E:F2:C6:2A:77:72:C0:C1:F2:9E:57:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqPJn_WLj3M-8sYqd3LAwfKeV_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a0b63e-1166-46b5-9e3e-38b5d1788007/1/KqPJn_WLj3M-8sYqd3LAwfKeV_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:e0:d8:de:4c:6c:f7:0d:5d:d7:5c:38:0b:b7:18:6e:6f:73:
4b:d2:28:75:eb:b5:63:82:bf:a5:6d:20:b6:33:41:7d:f3:f5:
95:ec:e1:28:b7:d4:93:81:27:d4:37:aa:fd:7a:f8:57:86:a6:
98:4a:56:62:d1:11:af:c9:1f:a1:20:9c:47:d5:8e:a2:20:c9:
90:3c:de:bb:bb:14:c4:35:dd:6a:7c:f8:52:cf:d1:d9:fc:a5:
41:77:54:19:06:fb:50:9e:85:5e:86:b9:5a:4a:2c:80:65:fc:
c5:7b:77:57:4d:a2:60:94:f1:9f:70:66:44:d7:53:26:13:34:
f8:be:2c:6b:2f:f2:95:00:88:a0:d7:d6:59:56:0a:b9:6f:65:
53:8a:76:dc:5f:0d:9f:a3:a4:79:a6:4b:47:5d:93:b3:54:8f:
87:4a:84:3a:65:a4:2a:f6:c6:60:28:ac:8d:17:41:53:8b:28:
a1:f0:db:f9:23:fb:2d:88:c9:7b:e9:e7:78:77:cc:18:38:23:
fc:91:43:70:1f:5c:96:9f:d9:c1:07:fa:7f:54:57:8e:2a:7b:
34:55:5d:10:ea:8f:ac:15:2e:51:13:94:0b:47:1e:23:8e:80:
cd:46:ca:d6:9d:75:06:c1:af:6b:f1:f0:d0:be:91:6b:47:17:
61:9f:f8:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzpN3L9SsPLpQue5fyxZWXIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYTNjOTlmZjU4YjhmNzMzZWYyYzYyYTc3NzJjMGMxZjI5
ZTU3ZmMwHhcNMjYwMzEzMjIwMDUxWhcNMjYwMzE0MjIwMDUxWjAzMTEwLwYDVQQD
EyhkYjA1OTc0ZmRlYzlkYjk2MzE0YzYwY2I1ODIxNzQzYWYzOWRmM2NhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0D21OyTp1b4BOnjUaHOPOyo0QD79
MUV4u/2rWSwZCdbEiQjgws7sChCjK0UAsh+gRlI2WuvPQZ2Libr3zfUUG4nCkpfu
sHMIdf/NhKvDFGNSJlrsvqVNt7SSRLfQMFIYmrtz/Woc3SL1gonkKnxOmo3bJc94
lPic0FVyEm88zCZM6M6xzvP1ci/k8rOICSgnB27nMXywPmOql9fODlMViyjY9cFD
bOQeT85nqE2ZplKdPzm0+PN+m8gOb4d9/IOsbpwOc8RS2vpV/BYd4vjNU38zCDdW
mpG+23pStKPrUe5IPT8QFfyRYGR8Zra36QKYPLWnRZC6oCO+lnodDf10owIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNsFl0/eyduWMUxgy1ghdDrznfPKMB8GA1UdIwQY
MBaAFCqjyZ/1i49zPvLGKndywMHynlf8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3FQSm5fV0xqM00tOHNZcWQzTEF3ZktlVl93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hMGI2M2UtMTE2Ni00NmI1LTllM2Ut
MzhiNWQxNzg4MDA3LzEvS3FQSm5fV0xqM00tOHNZcWQzTEF3ZktlVl93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9hMGI2M2UtMTE2Ni00NmI1LTllM2UtMzhiNWQxNzg4MDA3
LzEvS3FQSm5fV0xqM00tOHNZcWQzTEF3ZktlVl93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoODY3kxs
9w1d11w4C7cYbm9zS9Iodeu1Y4K/pW0gtjNBffP1lezhKLfUk4En1Deq/Xr4V4am
mEpWYtERr8kfoSCcR9WOoiDJkDzeu7sUxDXdanz4Us/R2fylQXdUGQb7UJ6FXoa5
WkosgGX8xXt3V02iYJTxn3BmRNdTJhM0+L4say/ylQCIoNfWWVYKuW9lU4p23F8N
n6OkeaZLR12Ts1SPh0qEOmWkKvbGYCisjRdBU4soofDb+SP7LYjJe+nneHfMGDgj
/JFDcB9clp/ZwQf6f1RXjip7NFVdEOqPrBUuUROUC0ceI46AzUbK1p11BsGva/Hw
0L6Ra0cXYZ/4Jg==
-----END CERTIFICATE-----
Generated at Sat Mar 14 00:26:07 2026 by rpki-client