Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.mft
File: KQLJnKcyxkoZx9lzSpj7JOVFVUk.mft (raw, json)
Hash identifier: h7x5xF+MzZJvSCJnA4djV3EuIxsttzZ6ut+wJnkRgak=
Subject key identifier: 53:72:69:E4:E4:FE:7E:31:DD:D9:8F:25:8B:87:5B:F2:36:BC:71:EF
Authority key identifier: 29:02:C9:9C:A7:32:C6:4A:19:C7:D9:73:4A:98:FB:24:E5:45:55:49
Certificate issuer: /CN=2902c99ca732c64a19c7d9734a98fb24e5455549
Certificate serial: 019D390A59F7895AFA4EC4BA176A2BCF92BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQLJnKcyxkoZx9lzSpj7JOVFVUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.mft
Manifest number: 11FC
Signing time: Sun 29 Mar 2026 10:01:12 +0000
Manifest this update: Sun 29 Mar 2026 10:01:12 +0000
Manifest next update: Mon 30 Mar 2026 10:01:12 +0000
Files and hashes: 1: KQLJnKcyxkoZx9lzSpj7JOVFVUk.crl (hash: WR39adnup6Wx6cMXtdiImIQbvHeTkoNnF4ZHdXy/TKc=)
2: KT302nZV2Y2p4WDMTwVmIhKydvc.roa (hash: RA/+n+j+c+JYu9hIIUbQQ1FyM1sNRqfioO7K+YA4lYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQLJnKcyxkoZx9lzSpj7JOVFVUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:59:f7:89:5a:fa:4e:c4:ba:17:6a:2b:cf:92:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2902c99ca732c64a19c7d9734a98fb24e5455549
Validity
Not Before: Mar 29 10:01:12 2026 GMT
Not After : Mar 30 10:01:12 2026 GMT
Subject: CN=537269e4e4fe7e31ddd98f258b875bf236bc71ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:68:01:81:cd:20:7c:d0:bd:34:98:1c:3d:9e:
b1:2e:a8:af:ac:27:f9:07:8d:5a:ae:4f:7c:49:0d:
13:9c:58:31:64:b9:fd:6a:c5:c3:ab:84:54:7a:c6:
ee:99:c3:59:37:ce:d4:50:d6:13:27:16:9c:f3:aa:
8f:31:5b:99:15:f3:33:e3:13:d1:cc:1e:6e:5f:b6:
a7:97:81:d2:34:91:74:a3:5a:f1:bd:f6:3d:a4:d0:
87:99:2b:a8:d6:04:54:b0:8f:78:54:ac:b0:35:0e:
62:b0:06:b3:06:1e:fa:b7:68:c9:a4:9d:61:cb:3f:
11:c5:4a:0b:69:46:35:fc:38:50:bc:82:2a:7b:8c:
9b:80:06:dc:d9:4b:32:1b:56:ce:e6:25:c5:e5:b4:
f1:58:aa:bf:9d:1d:0c:8e:58:00:7a:9c:24:29:a8:
78:a5:2c:9f:88:eb:2c:e6:52:ae:e7:a8:f4:af:e8:
06:60:f3:5e:6b:ed:d2:fe:75:68:41:39:84:f0:c4:
b2:73:6d:08:b1:ab:b0:d2:62:2d:db:05:50:7b:a3:
1b:07:08:a4:58:19:42:ec:37:2c:a8:18:4b:dc:4f:
78:aa:6a:90:75:66:ce:a5:b6:97:5c:5a:b5:12:ea:
39:ee:5a:ce:b7:ea:6c:68:1f:f2:d6:f9:a0:68:7e:
b8:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:72:69:E4:E4:FE:7E:31:DD:D9:8F:25:8B:87:5B:F2:36:BC:71:EF
X509v3 Authority Key Identifier:
keyid:29:02:C9:9C:A7:32:C6:4A:19:C7:D9:73:4A:98:FB:24:E5:45:55:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQLJnKcyxkoZx9lzSpj7JOVFVUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:05:75:37:9c:5f:19:29:53:f2:4f:82:f8:30:bd:5a:ed:f8:
18:17:8d:8c:bf:6b:07:f6:9a:2d:b9:61:8e:cc:0e:35:14:ca:
59:c5:f7:91:4f:6b:db:f3:65:89:16:4c:96:f0:24:d6:53:20:
82:d1:d6:79:6d:18:2c:e0:00:ed:d5:a7:ad:45:1a:d0:1d:db:
d8:60:8e:5f:a1:74:f2:9c:7b:14:84:7b:d5:ff:ae:9d:25:7f:
6f:a3:53:75:ef:80:95:e9:df:76:97:5b:45:c0:db:f4:6f:ef:
df:9e:42:15:d4:7f:b3:2e:2d:51:d4:25:62:47:89:5a:57:cd:
a9:cc:f0:a6:8a:cd:5f:ca:14:08:20:09:10:e0:f9:11:6d:ab:
b1:df:a1:71:c5:db:19:89:35:9a:5b:65:88:aa:c2:41:18:76:
61:85:a5:79:88:44:f3:ac:d4:3e:ea:84:ea:f6:d4:32:5e:6e:
a8:26:7c:ef:bb:f3:a1:75:15:66:22:b5:f4:0f:15:4c:13:6c:
e5:e9:ba:49:e5:c7:7b:4c:3a:2c:6b:fb:8e:35:d4:51:1e:b9:
5a:0c:93:17:84:f4:2d:17:3f:c5:48:30:a8:70:37:8c:20:17:
0e:06:96:87:b2:8e:f0:8e:99:b8:a7:12:f4:33:0d:8e:56:59:
16:ff:40:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:28:30 2026 by rpki-client