Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.mft
File: kq8Dyi32Qjt30O83N7D0eRqgNaM.mft (raw, json)
Hash identifier: niAvqHiCjl07GRJOmslFH4887m22Xia7ndLcDRnPLxs=
Subject key identifier: AC:70:60:0A:11:4E:FE:88:25:3A:3E:0B:ED:0D:C8:94:8D:81:57:7B
Authority key identifier: 92:AF:03:CA:2D:F6:42:3B:77:D0:EF:37:37:B0:F4:79:1A:A0:35:A3
Certificate issuer: /CN=92af03ca2df6423b77d0ef3737b0f4791aa035a3
Certificate serial: 019DE66BC8BADCB7F4B684B5A8F380507BBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kq8Dyi32Qjt30O83N7D0eRqgNaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.mft
Manifest number: 0D7A
Signing time: Sat 02 May 2026 02:01:56 +0000
Manifest this update: Sat 02 May 2026 02:01:56 +0000
Manifest next update: Sun 03 May 2026 02:01:56 +0000
Files and hashes: 1: 8VSXxcCzy1RczpkkhVuNiNqCitk.roa (hash: nHCP0IVV9N4g1kQbqZXT/navSl3Gd+BXXPdTIW2ZhBA=)
2: kq8Dyi32Qjt30O83N7D0eRqgNaM.crl (hash: bH2klDLS1nPAeuslzmGM8zBT0kiPcmTuQTxTspFfsE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kq8Dyi32Qjt30O83N7D0eRqgNaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 03 May 2026 02:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:e6:6b:c8:ba:dc:b7:f4:b6:84:b5:a8:f3:80:50:7b:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92af03ca2df6423b77d0ef3737b0f4791aa035a3
Validity
Not Before: May 2 02:01:56 2026 GMT
Not After : May 3 02:01:56 2026 GMT
Subject: CN=ac70600a114efe88253a3e0bed0dc8948d81577b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:25:e3:24:2d:4e:f0:52:1f:5a:51:91:7d:14:
95:12:46:41:bb:af:75:c5:c8:9d:20:73:dd:87:71:
a9:3f:01:9e:3c:b4:1d:ad:34:ca:d6:90:02:6e:67:
0d:bb:d6:f8:0b:a1:c4:3f:5a:9e:7f:49:10:b1:b5:
df:43:22:55:ee:51:3a:df:a4:21:99:af:f0:7f:60:
0e:ee:a6:0c:cb:e9:89:9f:44:31:f7:70:d6:80:63:
0a:d6:68:7c:de:17:c3:e1:de:10:2c:31:ff:a6:c6:
73:74:f1:34:57:0e:9c:69:a3:3b:3e:64:df:2b:69:
5a:32:71:40:80:99:68:b1:25:0d:a1:e1:30:9d:83:
1d:ec:38:aa:5e:0d:17:70:66:a5:5f:83:4b:90:ba:
af:53:6a:35:21:64:cf:2e:21:0d:e0:9f:9b:6d:a4:
d1:9e:e1:dd:88:53:91:40:b9:08:52:8c:c0:e4:5f:
59:c6:52:1e:df:4e:00:ff:79:0e:79:cf:14:47:e0:
ae:45:b4:e8:a5:dc:42:46:c0:e5:26:4a:6b:a9:9a:
38:0c:a2:15:cb:ae:67:f3:4e:36:cf:d2:74:e1:11:
d8:2f:aa:d5:f4:6d:6d:07:68:28:c0:aa:cb:fd:63:
fa:44:e3:ae:0e:72:a1:57:d8:db:88:d8:8c:c8:83:
39:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:70:60:0A:11:4E:FE:88:25:3A:3E:0B:ED:0D:C8:94:8D:81:57:7B
X509v3 Authority Key Identifier:
keyid:92:AF:03:CA:2D:F6:42:3B:77:D0:EF:37:37:B0:F4:79:1A:A0:35:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kq8Dyi32Qjt30O83N7D0eRqgNaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:ae:81:6b:ee:81:fb:c7:a9:7c:2d:81:49:b7:88:5f:63:62:
4b:1a:da:25:9e:cc:35:50:7f:62:e1:05:86:39:91:de:47:04:
8d:80:b9:22:7f:d3:f7:10:82:06:64:66:5f:ac:9d:2d:4c:8d:
47:27:40:c6:da:c1:de:7d:67:89:c8:25:f7:31:cf:15:83:32:
3e:95:e2:eb:5c:54:23:22:fc:4d:6d:ba:1d:bd:40:13:54:27:
26:e5:4a:e2:35:90:72:c3:11:40:87:4f:7c:81:78:71:f0:59:
be:58:13:e9:a8:c5:df:0d:9d:4b:f8:1a:56:38:43:73:62:f1:
a1:4d:5d:35:71:1a:35:ff:56:f0:15:65:db:6b:0f:c4:33:7b:
cc:79:a5:39:71:7e:d5:9a:fe:0b:1d:55:e7:fe:88:b9:dc:ca:
df:cc:31:72:9d:56:26:b0:a7:4a:3c:85:7d:ac:fd:36:e8:f8:
94:4e:2b:c0:84:44:02:b9:5d:67:cb:1f:eb:80:e0:ec:66:23:
87:1e:ad:93:18:dd:56:84:0e:bd:44:33:60:ee:21:b5:c8:16:
be:8c:51:cc:d2:63:6a:ec:c6:27:9c:aa:18:df:4b:70:c6:bc:
14:31:08:de:00:5d:e4:d8:15:2f:87:9f:53:11:2d:ef:8e:15:
d2:3c:f8:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 2 11:12:47 2026 by rpki-client