Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.mft
File: kq8Dyi32Qjt30O83N7D0eRqgNaM.mft (raw, json)
Hash identifier: /WA0eAvXVkESD6n2Zgw1sVCRa9q5M3Ygmy86Dn5kgPg=
Subject key identifier: D6:67:3C:C5:86:FC:22:78:65:BA:D6:81:A2:E0:07:E4:49:2D:70:B9
Authority key identifier: 92:AF:03:CA:2D:F6:42:3B:77:D0:EF:37:37:B0:F4:79:1A:A0:35:A3
Certificate issuer: /CN=92af03ca2df6423b77d0ef3737b0f4791aa035a3
Certificate serial: 019CEF395DB389131431518596E0F2914F62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kq8Dyi32Qjt30O83N7D0eRqgNaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.mft
Manifest number: 0CFA
Signing time: Sun 15 Mar 2026 02:00:39 +0000
Manifest this update: Sun 15 Mar 2026 02:00:39 +0000
Manifest next update: Mon 16 Mar 2026 02:00:39 +0000
Files and hashes: 1: 8VSXxcCzy1RczpkkhVuNiNqCitk.roa (hash: nHCP0IVV9N4g1kQbqZXT/navSl3Gd+BXXPdTIW2ZhBA=)
2: kq8Dyi32Qjt30O83N7D0eRqgNaM.crl (hash: Z/xhJLWFN0lZHjPQ5J24o6g3O7gvAD4dSFhy5FLN79E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kq8Dyi32Qjt30O83N7D0eRqgNaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 21:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ef:39:5d:b3:89:13:14:31:51:85:96:e0:f2:91:4f:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92af03ca2df6423b77d0ef3737b0f4791aa035a3
Validity
Not Before: Mar 15 02:00:39 2026 GMT
Not After : Mar 16 02:00:39 2026 GMT
Subject: CN=d6673cc586fc227865bad681a2e007e4492d70b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8e:b8:90:d7:06:ec:de:f2:02:e5:f2:49:4c:
b4:b9:e0:45:47:32:07:68:fb:f4:27:1c:78:13:aa:
99:b9:21:e8:68:bf:c8:b1:e1:68:e5:3c:d1:e5:63:
f9:9a:59:b5:28:eb:0e:ee:a8:dd:ae:cc:31:e6:90:
d2:5a:be:fb:64:b2:34:e6:98:a9:01:f3:64:0b:35:
b7:45:90:3b:39:9b:25:40:49:a9:d5:13:06:d4:a4:
2f:ef:dd:3b:ec:4f:bc:5d:79:30:bb:f9:45:96:b4:
1f:af:ae:06:0a:97:f1:e3:55:d1:7f:9f:96:d6:28:
27:2e:2e:11:7c:d0:65:ef:9a:ec:9f:e8:4c:c3:fe:
54:7f:a3:f3:6c:da:91:c0:7a:c3:a2:51:a0:b0:64:
19:42:dc:d9:7b:33:b5:83:40:a1:f0:33:c0:07:5a:
de:ce:3a:d4:32:64:a2:6f:a8:66:6e:3c:68:e3:58:
ab:3d:38:c1:52:2f:79:44:5a:69:16:c3:0e:e6:57:
95:2b:ac:d3:2f:a9:07:3b:f4:86:9f:ef:ef:aa:24:
b1:85:a0:96:19:8a:d3:00:74:c4:63:3e:81:23:89:
51:04:2a:3e:9f:ed:05:42:1d:29:a5:67:74:f5:fa:
38:a7:cb:6e:11:9d:8d:cf:4f:90:86:af:80:48:db:
c0:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:67:3C:C5:86:FC:22:78:65:BA:D6:81:A2:E0:07:E4:49:2D:70:B9
X509v3 Authority Key Identifier:
keyid:92:AF:03:CA:2D:F6:42:3B:77:D0:EF:37:37:B0:F4:79:1A:A0:35:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kq8Dyi32Qjt30O83N7D0eRqgNaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:82:56:fd:f9:2d:4c:52:87:2f:4d:5b:f3:2f:f3:cc:57:3d:
64:e6:8c:6f:6f:15:c1:96:b8:7b:cf:5f:4d:6f:83:14:0b:d7:
d6:63:e4:32:ec:ce:eb:d9:b3:06:d1:21:04:71:10:71:08:a6:
ef:61:8a:6c:a7:20:f8:ae:67:85:60:85:29:5f:2b:06:72:b9:
97:ba:76:16:4a:b0:83:11:f2:dc:b8:b7:df:93:65:5c:4b:e7:
13:78:16:91:2f:4d:d6:bb:35:62:d6:ff:d5:a8:15:a3:d0:49:
05:14:76:08:59:f8:ca:51:22:27:6b:c9:7b:4e:97:cd:bd:5a:
c6:d8:18:55:7e:25:ca:d8:a6:f5:c1:fa:e8:6c:83:14:8d:b8:
1b:f8:52:d0:ee:3d:38:fe:09:9c:9f:f1:5e:d4:8f:5d:c8:b4:
91:f1:28:49:37:25:ee:ed:2e:9c:06:c8:26:75:52:bc:a1:38:
75:10:9c:9a:a2:1f:83:36:8a:5a:3b:b2:35:be:b0:f0:6b:9d:
c5:15:2b:69:2d:a1:39:55:a5:df:0c:b8:cc:36:51:58:1e:f1:
4e:e5:2e:e6:ec:d7:4a:e4:6b:40:36:55:01:96:4c:fb:01:b5:
dd:86:32:74:1d:70:32:ad:69:f1:e4:34:5b:c0:14:52:41:32:
84:87:06:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 04:19:47 2026 by rpki-client