Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/145701-f65f-4e33-a7a9-8a96191fe999/1/kgtMGcL-ljv9eZwqGV-GaC3nflU.mft
File: kgtMGcL-ljv9eZwqGV-GaC3nflU.mft (raw, json)
Hash identifier: BPusZJNTrKmuHqheMKi/FU2eNVmNTfC+oS32F5jWzu4=
Subject key identifier: 23:A3:C4:49:9C:18:73:29:AC:5A:43:F0:21:C1:AB:15:85:D3:6E:53
Authority key identifier: 92:0B:4C:19:C2:FE:96:3B:FD:79:9C:2A:19:5F:86:68:2D:E7:7E:55
Certificate issuer: /CN=920b4c19c2fe963bfd799c2a195f86682de77e55
Certificate serial: 019F92EDC3BFF21FA9251B4D798F188E89FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kgtMGcL-ljv9eZwqGV-GaC3nflU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/145701-f65f-4e33-a7a9-8a96191fe999/1/kgtMGcL-ljv9eZwqGV-GaC3nflU.mft
Manifest number: 04
Signing time: Fri 24 Jul 2026 07:01:23 +0000
Manifest this update: Fri 24 Jul 2026 07:01:23 +0000
Manifest next update: Sat 25 Jul 2026 07:01:23 +0000
Files and hashes: 1: WEwBpxaMC4nIG4w4vl_e2xC8V98.roa (hash: z9bbJLmUEVXg0O+C6bGdQnkEYUAIO6F1iJAXdJlUcMU=)
2: kgtMGcL-ljv9eZwqGV-GaC3nflU.crl (hash: j3zK2qWHOufgbvV43JbN0Itl3uk6+8pFbfUnsyQR/lc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/145701-f65f-4e33-a7a9-8a96191fe999/1/kgtMGcL-ljv9eZwqGV-GaC3nflU.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/145701-f65f-4e33-a7a9-8a96191fe999/1/kgtMGcL-ljv9eZwqGV-GaC3nflU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kgtMGcL-ljv9eZwqGV-GaC3nflU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:c3:bf:f2:1f:a9:25:1b:4d:79:8f:18:8e:89:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=920b4c19c2fe963bfd799c2a195f86682de77e55
Validity
Not Before: Jul 24 07:01:23 2026 GMT
Not After : Jul 25 07:01:23 2026 GMT
Subject: CN=23a3c4499c187329ac5a43f021c1ab1585d36e53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d1:1a:b1:9f:59:89:1e:45:0c:80:6d:f7:3a:
5e:14:17:92:b3:22:7b:48:d8:9b:88:2a:9f:ef:40:
a8:d0:5b:38:45:ec:65:5f:4a:8c:9c:fc:62:c8:f0:
78:76:3b:68:68:92:38:ba:0d:a4:b5:78:bb:4b:b9:
d0:8e:34:40:c8:92:1b:0c:9a:e8:85:f7:dc:97:1b:
a8:e4:45:0e:a2:12:b9:24:c3:86:81:95:6d:bf:be:
c9:82:e0:db:e6:94:84:a0:a9:50:6e:86:77:7f:5c:
f3:97:ac:1b:b6:15:a2:12:eb:71:0f:30:72:69:f3:
5b:d4:9e:9b:d7:d9:11:6f:2d:54:0d:1c:da:66:95:
15:4a:be:f8:94:02:33:b0:73:26:27:9b:35:d0:83:
89:15:37:7f:97:df:fb:5f:53:5c:16:79:88:1a:07:
0f:5a:3b:e6:2b:fe:ac:43:a4:6b:33:40:00:35:47:
96:ad:92:a4:1e:b2:a6:79:67:d9:a3:73:db:e5:89:
2b:1b:11:e5:e3:78:1f:70:c1:33:3f:ff:a3:ad:80:
06:04:1e:89:c0:88:96:65:20:1d:e4:01:5b:d5:0a:
7e:44:f4:0c:98:72:11:19:ec:ef:fa:ef:2d:fa:d5:
68:66:b8:40:50:af:35:23:20:8b:f4:98:65:41:f1:
9e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:A3:C4:49:9C:18:73:29:AC:5A:43:F0:21:C1:AB:15:85:D3:6E:53
X509v3 Authority Key Identifier:
keyid:92:0B:4C:19:C2:FE:96:3B:FD:79:9C:2A:19:5F:86:68:2D:E7:7E:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kgtMGcL-ljv9eZwqGV-GaC3nflU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/145701-f65f-4e33-a7a9-8a96191fe999/1/kgtMGcL-ljv9eZwqGV-GaC3nflU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/145701-f65f-4e33-a7a9-8a96191fe999/1/kgtMGcL-ljv9eZwqGV-GaC3nflU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:66:98:04:21:87:bb:32:02:44:b6:ae:2f:da:46:ea:7b:e5:
1e:d2:f4:5f:f5:ae:0a:fe:b6:71:28:8e:93:21:f8:b8:00:2f:
ba:b9:c6:1f:86:e3:e8:f9:66:77:47:b9:6a:f5:4b:a5:99:1c:
37:1c:af:e4:53:58:fe:f2:98:90:a1:3e:d5:f0:56:7f:19:e6:
e1:ea:47:eb:12:0e:df:db:a2:d2:43:d0:a2:3b:e6:90:44:48:
08:74:ea:75:1c:e9:b7:dc:fb:4b:14:11:13:b3:d0:76:21:7e:
da:da:c1:a0:f2:5f:80:01:a2:42:12:48:e5:d0:ec:40:9c:64:
ca:95:ca:a1:05:fe:e2:8b:4f:80:a2:08:d6:1b:42:8e:32:45:
70:08:06:a4:f7:ae:b1:e0:d3:cf:77:f1:83:0c:cd:22:e7:6b:
d1:a3:6f:24:f4:a9:72:9f:2a:99:75:6c:4e:e4:9e:75:ed:e4:
a2:fd:dc:03:e4:53:d3:72:70:ea:36:3d:f1:20:f2:98:fb:6a:
47:7e:87:84:ed:bf:dd:2c:f0:c0:cb:2d:51:22:d0:c5:5b:98:
86:9f:4c:73:34:53:d6:19:a1:d3:96:11:91:11:38:f2:c4:a9:
d7:a7:17:c0:22:3a:79:38:59:e1:9d:cb:64:e0:36:90:6a:a3:
15:80:cc:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:15:44 2026 by rpki-client