Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.mft
File: KQLJnKcyxkoZx9lzSpj7JOVFVUk.mft (raw, json)
Hash identifier: vukFwWU4xBqXD5XNFm9lKr0/he+XtfsmikmA2rknsfE=
Subject key identifier: 51:CF:82:B2:BD:D3:BD:0D:9C:15:CB:1B:9E:68:F1:E7:31:2D:13:6F
Authority key identifier: 29:02:C9:9C:A7:32:C6:4A:19:C7:D9:73:4A:98:FB:24:E5:45:55:49
Certificate issuer: /CN=2902c99ca732c64a19c7d9734a98fb24e5455549
Certificate serial: 019F122E4660F7D00839D964D688064AD557
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQLJnKcyxkoZx9lzSpj7JOVFVUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.mft
Manifest number: 12F1
Signing time: Mon 29 Jun 2026 07:00:50 +0000
Manifest this update: Mon 29 Jun 2026 07:00:50 +0000
Manifest next update: Tue 30 Jun 2026 07:00:50 +0000
Files and hashes: 1: KQLJnKcyxkoZx9lzSpj7JOVFVUk.crl (hash: 5jTHvD/ZJ/Gyu7P/wJtOKKjT0qy6ea25pEOJqpoC6PM=)
2: KT302nZV2Y2p4WDMTwVmIhKydvc.roa (hash: RA/+n+j+c+JYu9hIIUbQQ1FyM1sNRqfioO7K+YA4lYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQLJnKcyxkoZx9lzSpj7JOVFVUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:2e:46:60:f7:d0:08:39:d9:64:d6:88:06:4a:d5:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2902c99ca732c64a19c7d9734a98fb24e5455549
Validity
Not Before: Jun 29 07:00:50 2026 GMT
Not After : Jun 30 07:00:50 2026 GMT
Subject: CN=51cf82b2bdd3bd0d9c15cb1b9e68f1e7312d136f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5d:3b:31:ff:12:be:d0:3d:4b:b2:a5:1d:00:
2d:c1:3a:bf:93:b0:52:78:9b:2c:c8:c3:fa:9c:e5:
b9:7c:cc:da:e8:f9:52:e4:4e:f5:0a:4b:9c:56:fa:
7e:9b:1c:57:be:38:50:31:43:5a:8a:d4:ef:ec:d0:
7e:e1:24:a4:0a:01:78:1a:40:86:4a:94:d9:3a:c5:
a8:b3:d8:d2:d0:0d:12:df:24:7e:e8:ae:bc:0b:20:
b9:d0:76:02:97:20:36:36:5c:c6:a5:fd:f1:66:a9:
a8:1d:fe:34:94:f0:fc:2b:a2:28:64:fd:e2:fc:6d:
48:4a:9a:e9:5c:1d:1d:36:77:17:2f:cd:5c:4a:07:
c6:5b:8c:8c:1b:c3:d5:47:bc:c6:24:ec:de:49:bc:
b4:92:fe:8d:63:8f:af:96:a7:be:af:18:3c:a3:ae:
7e:2c:20:3b:b2:92:1d:ef:08:e2:e8:3d:89:c7:f0:
5c:b5:a4:b0:dd:3f:2b:77:8f:16:92:ad:54:b4:6a:
c9:64:5e:8e:1f:ec:04:6d:e3:23:ce:c3:5f:5d:c4:
24:9a:fc:b8:c1:f9:2e:0d:0e:41:55:79:24:16:3b:
b0:2a:0e:aa:45:9b:4f:45:af:39:7d:2f:e8:cc:e3:
e1:89:ed:55:64:9d:3f:9b:e5:a5:06:01:2c:75:64:
14:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:CF:82:B2:BD:D3:BD:0D:9C:15:CB:1B:9E:68:F1:E7:31:2D:13:6F
X509v3 Authority Key Identifier:
keyid:29:02:C9:9C:A7:32:C6:4A:19:C7:D9:73:4A:98:FB:24:E5:45:55:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQLJnKcyxkoZx9lzSpj7JOVFVUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:ef:dc:57:42:5a:ca:e5:79:96:0b:dc:23:e1:fe:e9:d0:25:
b6:35:3d:90:e0:53:47:3a:fd:1c:73:d0:f7:82:3c:3d:ed:da:
bf:06:e3:21:91:4b:41:0d:92:77:ba:1f:91:0f:19:6d:c2:f4:
72:84:3b:c4:33:65:b3:6d:65:99:bf:20:b7:e4:30:fb:b8:45:
d0:a3:d2:11:e9:bd:ae:2b:dd:f8:5f:95:b8:3d:97:da:48:b7:
e9:f3:13:65:e1:91:fb:45:0c:eb:f5:c0:ab:be:29:d8:7d:8d:
62:23:26:53:69:1a:e1:68:94:b0:97:25:e3:6f:13:99:6d:87:
fa:02:9f:dd:31:6d:51:84:07:e1:38:9e:cc:52:4f:8a:8a:fa:
26:32:86:f2:c0:02:f5:be:0f:c7:2c:1e:0c:00:74:f6:e9:bb:
73:29:6b:0b:68:28:c8:1b:25:a2:e1:f8:cd:ec:3c:44:9a:82:
85:34:46:ee:5f:fc:4f:d9:39:13:46:33:c2:89:fd:f0:72:a0:
f1:01:e3:b2:dc:10:86:78:ab:68:f5:8d:a4:98:f5:75:ca:ea:
a1:12:72:9c:bf:ad:99:80:f6:cc:c2:9c:e0:5d:b0:c5:36:1b:
63:05:4f:d8:8f:1e:73:ae:bd:57:1e:41:df:46:67:1d:33:91:
8b:40:44:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:45:34 2026 by rpki-client