Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/KqggK00MXBEdN08emLc9tJJNZLE.mft
File: KqggK00MXBEdN08emLc9tJJNZLE.mft (raw, json)
Hash identifier: 6L+aaASw7UoCNHumQVsLKtxzm1bdG6qwRTwoOcAeubw=
Subject key identifier: E0:68:B9:08:8F:92:7D:7E:23:98:34:0F:B7:0B:B8:F4:30:AB:33:9B
Authority key identifier: 2A:A8:20:2B:4D:0C:5C:11:1D:37:4F:1E:98:B7:3D:B4:92:4D:64:B1
Certificate issuer: /CN=2aa8202b4d0c5c111d374f1e98b73db4924d64b1
Certificate serial: 019D3865B975161499081EE92030A745CA4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqggK00MXBEdN08emLc9tJJNZLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/KqggK00MXBEdN08emLc9tJJNZLE.mft
Manifest number: 0EC4
Signing time: Sun 29 Mar 2026 07:01:23 +0000
Manifest this update: Sun 29 Mar 2026 07:01:23 +0000
Manifest next update: Mon 30 Mar 2026 07:01:23 +0000
Files and hashes: 1: KqggK00MXBEdN08emLc9tJJNZLE.crl (hash: n9XWN0hDrtv0N1SVKvA9EjX9cs+iWCO/TCU99lx1ecw=)
2: Ws4in-OWRWSEcoBN7waoCEBULUk.roa (hash: Uju7zYqejr4rhXJP4MJKAs7Vc49ym9vbx4ol+jWt7tA=)
3: hQ65-JJPcn9XxnJlMV8R8YaKILg.roa (hash: BnQj/39qzfqqWoNJrrD5UWocu4HxdA3qcueXigYXVac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/KqggK00MXBEdN08emLc9tJJNZLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/KqggK00MXBEdN08emLc9tJJNZLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqggK00MXBEdN08emLc9tJJNZLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:b9:75:16:14:99:08:1e:e9:20:30:a7:45:ca:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa8202b4d0c5c111d374f1e98b73db4924d64b1
Validity
Not Before: Mar 29 07:01:23 2026 GMT
Not After : Mar 30 07:01:23 2026 GMT
Subject: CN=e068b9088f927d7e2398340fb70bb8f430ab339b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:bd:c1:67:d3:e2:38:a3:a0:ad:9b:31:af:f2:
02:7a:a6:b9:ca:d8:d4:c7:e9:9c:e3:09:44:44:8d:
03:4d:50:5f:d4:d9:94:f8:2c:1b:bf:43:90:56:1a:
f4:72:33:1d:ab:b1:f6:cf:79:ee:c4:92:8f:a5:50:
1a:19:4a:7b:f0:f1:0e:80:e9:26:7f:65:bc:ba:0c:
29:5a:e6:75:b2:8a:6d:02:29:c0:62:ae:8d:b2:c3:
63:d9:8c:cd:06:ec:ad:17:37:99:eb:1a:e0:b9:39:
68:ae:5f:fd:69:d6:0d:c6:05:fe:f5:0a:70:8d:3e:
42:ca:7a:7e:2d:61:d3:6c:62:94:7c:ff:80:ef:38:
90:7b:c2:ae:5c:ea:f6:c8:15:90:8d:27:e2:94:78:
57:55:36:47:9a:8c:62:d9:b0:d5:4a:4c:3e:41:e8:
d9:de:55:3f:53:5f:3d:51:c2:38:2a:38:a5:bd:96:
4b:1e:b8:85:7f:9a:5b:4b:6f:46:00:06:8f:b5:97:
32:5d:3f:19:f2:bf:08:6c:83:3d:2e:17:d1:b4:57:
dd:c1:c2:51:fd:23:ae:b7:05:23:89:b6:c0:5c:3e:
3a:31:53:36:6b:86:a7:6d:c7:72:a9:30:6e:bd:90:
40:0e:2a:1a:eb:18:b5:b9:de:7f:55:53:42:b0:c3:
71:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:68:B9:08:8F:92:7D:7E:23:98:34:0F:B7:0B:B8:F4:30:AB:33:9B
X509v3 Authority Key Identifier:
keyid:2A:A8:20:2B:4D:0C:5C:11:1D:37:4F:1E:98:B7:3D:B4:92:4D:64:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqggK00MXBEdN08emLc9tJJNZLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/KqggK00MXBEdN08emLc9tJJNZLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/KqggK00MXBEdN08emLc9tJJNZLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:a6:b2:96:b7:cb:61:fd:16:99:2f:0c:ea:87:39:85:bb:09:
ac:88:a7:48:1f:bd:34:b9:74:22:c5:3e:44:a0:a2:05:cc:bc:
e9:ae:ba:76:d2:01:a0:80:6f:32:b0:78:94:26:51:5b:af:9e:
f1:9f:3f:73:2b:00:7b:1c:2a:6a:d8:81:7a:a4:17:b6:93:48:
7e:37:e6:90:76:df:0e:aa:0a:cf:0e:d9:5f:e5:64:23:81:4d:
94:df:5e:ad:d4:00:51:52:8c:94:6e:48:5d:eb:86:45:0e:48:
32:c5:ca:b3:bd:1e:31:22:31:e2:73:75:88:8e:dc:f0:a6:5d:
a2:f6:10:cb:b7:76:53:cc:dd:90:bc:45:7a:88:15:2e:0f:7f:
1a:0f:dc:83:22:ed:36:a7:4b:2c:fa:10:73:2d:38:2b:e1:2c:
0f:00:11:ec:b5:c6:33:f1:d6:15:27:4f:ea:07:b6:3e:c5:b6:
35:38:7c:84:eb:70:a0:c7:f6:a0:08:9d:69:4c:8c:9d:2b:37:
a3:4e:cd:c7:5f:e1:a5:de:a4:56:14:7b:50:7f:69:4e:3a:b2:
be:ae:77:bc:ec:f8:71:42:e8:59:63:c9:03:e1:ad:9e:dd:a3:
21:a8:57:5e:e0:be:3c:6a:81:38:d6:1d:e2:30:d5:14:2e:d1:
83:da:1f:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:37:52 2026 by rpki-client