Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.mft
File: KQLJnKcyxkoZx9lzSpj7JOVFVUk.mft (raw, json)
Hash identifier: lyve8/+Jx07KCIvoFfl5sCcuziLCqQvLgGLOnHzVqQY=
Subject key identifier: 1A:36:0E:D0:26:78:D8:37:06:1D:26:02:B8:AB:BA:3D:F3:56:25:00
Authority key identifier: 29:02:C9:9C:A7:32:C6:4A:19:C7:D9:73:4A:98:FB:24:E5:45:55:49
Certificate issuer: /CN=2902c99ca732c64a19c7d9734a98fb24e5455549
Certificate serial: 01A10E15180FCC925F85D65889033A2955F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQLJnKcyxkoZx9lzSpj7JOVFVUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.mft
Manifest number: 13F8
Signing time: Mon 05 Oct 2026 22:00:25 +0000
Manifest this update: Mon 05 Oct 2026 22:00:25 +0000
Manifest next update: Tue 06 Oct 2026 22:00:25 +0000
Files and hashes: 1: KQLJnKcyxkoZx9lzSpj7JOVFVUk.crl (hash: x7cBRCcVCi0GZ7b0/6KDJhOgKJcY7XZOYgPCUiTnSmE=)
2: KT302nZV2Y2p4WDMTwVmIhKydvc.roa (hash: RA/+n+j+c+JYu9hIIUbQQ1FyM1sNRqfioO7K+YA4lYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQLJnKcyxkoZx9lzSpj7JOVFVUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 20:22:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0e:15:18:0f:cc:92:5f:85:d6:58:89:03:3a:29:55:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2902c99ca732c64a19c7d9734a98fb24e5455549
Validity
Not Before: Oct 5 22:00:25 2026 GMT
Not After : Oct 6 22:00:25 2026 GMT
Subject: CN=1a360ed02678d837061d2602b8abba3df3562500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:96:9a:a8:2b:98:f8:08:6f:57:06:83:40:21:
14:a6:6c:24:fb:eb:9a:8b:02:33:67:d9:94:ac:19:
e3:29:46:59:9a:ef:07:7b:09:00:3a:a3:eb:79:5d:
7d:1b:dd:e2:81:36:d9:72:a2:a2:be:46:21:ba:b3:
fb:d2:bc:d6:2d:1a:3e:fd:1f:82:41:4a:1e:3a:03:
9f:f1:92:f5:54:c8:0c:f5:a7:8a:57:9f:bc:e5:d8:
58:ec:90:10:ea:53:4c:e1:05:86:f7:9f:92:28:36:
e7:95:d8:26:3a:c6:59:f8:4c:df:7a:e4:fc:f7:b2:
45:c1:2b:50:2d:d3:db:80:a5:e1:b3:5b:42:f9:e8:
d1:43:dd:8c:b0:4e:25:41:8d:12:23:b4:00:81:d9:
4b:0c:fb:7f:2e:5c:4e:28:58:82:19:4e:6a:51:fe:
89:6c:06:f2:f3:08:44:dd:26:3b:6a:57:21:95:b8:
a1:4d:84:ac:b7:18:9c:62:b7:a3:c6:fe:16:6f:88:
5c:10:a0:51:fc:c9:ef:13:82:df:52:a6:55:a3:97:
3f:13:be:79:04:9e:f1:15:38:ff:0e:8c:c3:9f:2b:
d5:b0:95:88:56:44:91:62:25:f0:5a:c4:3f:7c:3b:
03:a7:60:b5:e6:11:7c:b5:f8:93:b4:42:91:23:33:
57:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:36:0E:D0:26:78:D8:37:06:1D:26:02:B8:AB:BA:3D:F3:56:25:00
X509v3 Authority Key Identifier:
keyid:29:02:C9:9C:A7:32:C6:4A:19:C7:D9:73:4A:98:FB:24:E5:45:55:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQLJnKcyxkoZx9lzSpj7JOVFVUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:34:2f:d6:e0:00:e4:7d:a3:92:45:6c:e0:94:42:ec:0e:19:
ea:be:3f:69:5c:ab:98:3b:d5:45:18:d5:86:e4:99:03:fb:4b:
60:ab:e3:dd:84:52:5a:d1:a5:49:22:8b:c5:0b:de:1e:62:76:
80:9f:05:1f:b4:5e:8f:4e:88:15:46:02:cd:ea:f7:81:db:6b:
29:f0:79:4e:cb:6b:ff:3b:33:de:af:ed:04:00:37:f4:ed:a8:
65:21:59:ee:b0:6f:b6:12:bf:24:02:ef:c7:1f:2e:51:bc:67:
ba:52:46:fa:26:e4:40:76:3e:cb:64:a2:9b:f5:18:28:47:37:
34:53:0a:14:ff:d2:21:09:b0:05:6f:a6:d5:8a:ef:2e:bb:67:
e8:81:10:8f:98:69:29:64:ca:a0:91:a0:9a:7b:ad:90:93:92:
a3:43:94:d7:b4:d8:42:4e:1d:74:0b:59:1d:d6:67:5a:f0:84:
32:21:56:40:db:a1:c6:c8:3b:9c:6b:70:1d:07:ab:f5:f8:49:
01:51:a4:db:be:ad:90:ce:16:17:f6:a9:f7:a1:0f:e1:7d:ad:
e8:48:e8:57:f1:4f:6b:e0:93:57:5a:9c:87:fc:9b:70:f4:20:
f2:15:e3:fa:62:87:68:7a:18:29:92:55:f0:4d:f4:2e:a9:72:
5b:17:1d:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 04:08:23 2026 by rpki-client