Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/145701-f65f-4e33-a7a9-8a96191fe999/1/kgtMGcL-ljv9eZwqGV-GaC3nflU.mft
File: kgtMGcL-ljv9eZwqGV-GaC3nflU.mft (raw, json)
Hash identifier: SCXIzU7JXrSoyCz2DSzihMd2j9zbyXFL+AwxA1lyzIo=
Subject key identifier: CE:32:32:16:5D:1B:F6:E9:7F:C0:D4:F8:F6:28:F7:87:20:EC:F5:12
Authority key identifier: 92:0B:4C:19:C2:FE:96:3B:FD:79:9C:2A:19:5F:86:68:2D:E7:7E:55
Certificate issuer: /CN=920b4c19c2fe963bfd799c2a195f86682de77e55
Certificate serial: 01A0E2F50E368BDF77D393C9D8931D44A704
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kgtMGcL-ljv9eZwqGV-GaC3nflU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/145701-f65f-4e33-a7a9-8a96191fe999/1/kgtMGcL-ljv9eZwqGV-GaC3nflU.mft
Manifest number: B2
Signing time: Sun 27 Sep 2026 13:01:45 +0000
Manifest this update: Sun 27 Sep 2026 13:01:45 +0000
Manifest next update: Mon 28 Sep 2026 13:01:45 +0000
Files and hashes: 1: WEwBpxaMC4nIG4w4vl_e2xC8V98.roa (hash: z9bbJLmUEVXg0O+C6bGdQnkEYUAIO6F1iJAXdJlUcMU=)
2: kgtMGcL-ljv9eZwqGV-GaC3nflU.crl (hash: Xd1qCGoCE9B8JKQfyc0VKSNWZNC3Q2TpitqiVoL3qRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/145701-f65f-4e33-a7a9-8a96191fe999/1/kgtMGcL-ljv9eZwqGV-GaC3nflU.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/145701-f65f-4e33-a7a9-8a96191fe999/1/kgtMGcL-ljv9eZwqGV-GaC3nflU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kgtMGcL-ljv9eZwqGV-GaC3nflU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 13:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:f5:0e:36:8b:df:77:d3:93:c9:d8:93:1d:44:a7:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=920b4c19c2fe963bfd799c2a195f86682de77e55
Validity
Not Before: Sep 27 13:01:45 2026 GMT
Not After : Sep 28 13:01:45 2026 GMT
Subject: CN=ce3232165d1bf6e97fc0d4f8f628f78720ecf512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5d:91:ea:0f:b4:d8:99:06:c5:7b:99:f9:00:
64:15:79:74:db:27:d9:95:3a:73:ba:9f:5d:2e:5c:
61:4d:f5:10:e4:b2:57:1d:9b:75:49:4e:e7:6f:90:
d3:69:0d:83:60:45:b4:5d:c2:63:d9:4d:0e:b3:4e:
76:86:c0:43:3f:2f:e8:b3:f5:bf:9d:85:28:48:ff:
86:36:65:d5:4b:17:de:87:44:f9:64:a0:cf:51:bf:
de:c8:92:73:5b:9a:ee:d4:56:1e:b3:9d:da:3c:79:
3d:46:c4:63:97:b1:77:40:48:d3:50:f5:15:5a:30:
45:85:1b:e9:b9:be:18:82:42:30:6a:23:0c:14:de:
23:df:bd:da:63:f3:58:47:80:5a:b5:4a:bc:ae:11:
87:cf:f8:99:51:5a:70:2b:68:0d:6f:48:e7:f3:cf:
0d:bc:63:a9:c3:79:b3:bd:88:77:a8:9b:e9:93:fe:
6c:bb:5e:d6:0f:1d:6e:39:70:1e:05:03:ac:e0:98:
fd:d8:cb:06:37:37:95:69:65:b2:43:a5:82:1f:8c:
1e:05:80:e2:77:2d:f8:fc:dc:1d:86:d4:b6:ea:48:
3f:8a:f6:d2:8d:3d:2f:31:6d:a1:75:46:2d:31:e6:
ce:44:b2:e4:6e:2f:11:dc:9a:04:a0:99:72:9d:de:
01:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:32:32:16:5D:1B:F6:E9:7F:C0:D4:F8:F6:28:F7:87:20:EC:F5:12
X509v3 Authority Key Identifier:
keyid:92:0B:4C:19:C2:FE:96:3B:FD:79:9C:2A:19:5F:86:68:2D:E7:7E:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kgtMGcL-ljv9eZwqGV-GaC3nflU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/145701-f65f-4e33-a7a9-8a96191fe999/1/kgtMGcL-ljv9eZwqGV-GaC3nflU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/145701-f65f-4e33-a7a9-8a96191fe999/1/kgtMGcL-ljv9eZwqGV-GaC3nflU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:af:e3:4d:82:1f:3b:03:58:84:da:9b:9c:77:4b:ed:a9:06:
ed:04:06:aa:26:8a:69:fa:c2:4c:99:30:59:f1:8a:2b:8a:82:
6a:02:14:c2:84:5f:76:db:8f:56:e8:60:ce:fd:f1:29:ac:5c:
5f:ce:fb:81:75:6d:13:d2:d5:48:ae:c7:20:73:ef:34:c9:dd:
d3:99:6d:1c:ce:23:71:75:8f:66:ac:3d:64:f2:3b:32:3c:16:
36:08:40:68:69:a3:21:23:e4:2b:7e:e9:ef:62:55:fd:92:5e:
24:dd:5c:f7:ba:ad:12:f0:a0:3d:24:e3:a9:67:d7:01:70:38:
fc:1e:fb:75:9a:98:69:28:49:9f:ad:86:fb:61:62:e1:16:62:
d5:74:fe:c6:85:4c:a1:47:e9:c4:43:64:18:69:0e:85:b3:0e:
3a:71:b8:0f:d0:cd:17:ea:70:99:02:ee:15:dc:48:f6:26:87:
4d:28:06:13:21:3d:48:0b:33:bc:a1:92:8d:9e:2b:54:d2:28:
22:9e:b8:86:9c:40:fd:2e:d2:8e:d9:07:2d:3a:d7:fa:ca:77:
99:7c:af:f8:28:16:7e:7e:b3:76:95:ae:92:f3:37:74:0f:ce:
4a:90:8b:a1:d6:1f:3d:7e:9a:e3:5e:ed:b4:3f:4c:0c:65:3b:
93:ff:e4:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 00:14:02 2026 by rpki-client