Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.mft
File: KQLJnKcyxkoZx9lzSpj7JOVFVUk.mft (raw, json)
Hash identifier: ROW9fTB2JNRHkllMR5v3VRiuGxEvcnOpHUK5uA/zVc0=
Subject key identifier: 39:7F:29:CA:42:D3:9B:31:C9:70:FA:08:E9:D6:70:EA:FA:FD:4A:40
Authority key identifier: 29:02:C9:9C:A7:32:C6:4A:19:C7:D9:73:4A:98:FB:24:E5:45:55:49
Certificate issuer: /CN=2902c99ca732c64a19c7d9734a98fb24e5455549
Certificate serial: 019E288182F072E3B98A456ACA22BD90D4FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQLJnKcyxkoZx9lzSpj7JOVFVUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.mft
Manifest number: 1278
Signing time: Thu 14 May 2026 22:00:36 +0000
Manifest this update: Thu 14 May 2026 22:00:36 +0000
Manifest next update: Fri 15 May 2026 22:00:36 +0000
Files and hashes: 1: KQLJnKcyxkoZx9lzSpj7JOVFVUk.crl (hash: uZmidbv8Ag0kdgdS+jconS1jq+OEWoOzdimrndFv2B4=)
2: KT302nZV2Y2p4WDMTwVmIhKydvc.roa (hash: RA/+n+j+c+JYu9hIIUbQQ1FyM1sNRqfioO7K+YA4lYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQLJnKcyxkoZx9lzSpj7JOVFVUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 15 May 2026 22:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:28:81:82:f0:72:e3:b9:8a:45:6a:ca:22:bd:90:d4:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2902c99ca732c64a19c7d9734a98fb24e5455549
Validity
Not Before: May 14 22:00:36 2026 GMT
Not After : May 15 22:00:36 2026 GMT
Subject: CN=397f29ca42d39b31c970fa08e9d670eafafd4a40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:69:10:c0:a6:37:22:b1:15:63:67:30:f8:a5:
d4:7d:aa:25:6f:39:e8:36:bb:50:41:20:48:7d:16:
9d:9c:ab:eb:29:97:48:27:a1:cb:55:34:14:bb:b5:
de:92:e4:d6:ae:91:43:b6:fa:6b:97:a1:c7:67:34:
97:18:61:19:df:af:40:6c:70:05:7c:ab:87:9e:d4:
01:5c:5a:66:7e:c3:7e:92:b8:bd:0b:e6:6e:ed:88:
38:d9:67:27:d4:b3:e1:eb:63:e3:af:18:31:6c:1e:
27:a5:cb:52:f3:9e:9f:ab:ff:74:2e:4c:b9:b9:8f:
0f:17:7e:a6:8b:fc:83:3e:db:dc:6d:fc:82:f1:de:
9b:0b:a3:d4:6d:72:4a:e1:60:3a:0d:c4:44:38:84:
04:37:22:ef:f4:3d:81:76:b1:db:6a:f2:7c:a5:4f:
6f:2a:1e:91:b1:f4:4f:c6:a4:10:ce:17:7a:78:14:
54:5a:8b:4f:0f:5b:f3:21:be:f8:4c:fc:0e:69:71:
b5:ba:93:99:25:0f:7a:6d:5e:19:24:da:c1:0b:45:
88:6d:df:cd:57:aa:db:66:22:b9:68:e7:61:48:71:
9b:0c:3d:e9:41:75:69:d3:f1:7f:f8:75:5e:d2:92:
a5:96:66:5a:01:fd:3a:62:22:a7:52:4d:ec:17:66:
f9:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:7F:29:CA:42:D3:9B:31:C9:70:FA:08:E9:D6:70:EA:FA:FD:4A:40
X509v3 Authority Key Identifier:
keyid:29:02:C9:9C:A7:32:C6:4A:19:C7:D9:73:4A:98:FB:24:E5:45:55:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQLJnKcyxkoZx9lzSpj7JOVFVUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:3f:e9:01:a9:5c:cf:71:93:98:f0:bb:d1:14:9f:bb:64:9a:
04:66:cc:45:85:9a:53:35:5a:b3:35:40:e1:b6:17:4e:22:1b:
fe:09:c1:67:29:09:e1:ee:7f:f1:e2:40:85:a3:8c:c8:3d:17:
a6:e9:4d:a2:95:da:4b:c4:47:8d:19:2b:17:49:d5:e2:36:8a:
c7:a2:c4:db:9f:52:9d:24:43:43:77:1d:57:d0:48:67:ee:80:
19:40:68:12:90:f0:6d:e2:c8:62:46:78:8b:7b:06:91:1b:4a:
4f:05:7c:73:58:6a:9f:07:cf:96:d6:d9:09:fc:d4:e7:54:62:
ae:2c:22:85:61:e6:fa:52:e5:a9:d8:41:10:fb:f5:2f:1f:14:
9e:21:69:4f:c8:0d:45:41:73:1c:c1:1f:4b:42:17:f3:00:48:
b9:b5:01:df:17:56:eb:3f:ba:26:29:9a:09:e2:63:af:9c:09:
67:90:f3:16:fd:17:f4:37:ae:84:e0:ec:dc:e2:05:85:37:6f:
b5:4e:72:d1:01:e9:0b:b1:d8:65:a5:ad:d8:7e:1b:a4:5e:43:
08:d1:25:65:25:61:d7:87:51:d1:9e:6e:d9:f6:af:57:9a:98:
9f:24:f8:89:75:fd:ee:1f:18:0b:c8:05:ac:55:47:44:f0:e1:
ef:4e:df:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 07:03:16 2026 by rpki-client