Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/145701-f65f-4e33-a7a9-8a96191fe999/1/kgtMGcL-ljv9eZwqGV-GaC3nflU.mft
File: kgtMGcL-ljv9eZwqGV-GaC3nflU.mft (raw, json)
Hash identifier: 6nwC65OLaTC2mrEd6yKtPbZOojyUl04A+dF1D6WlRjU=
Subject key identifier: 47:86:08:10:A2:95:04:8D:17:6A:6C:22:8C:A9:B7:54:DA:32:45:56
Authority key identifier: 92:0B:4C:19:C2:FE:96:3B:FD:79:9C:2A:19:5F:86:68:2D:E7:7E:55
Certificate issuer: /CN=920b4c19c2fe963bfd799c2a195f86682de77e55
Certificate serial: 01A0E6D3AF180D88726E7838DCC4034ABD72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kgtMGcL-ljv9eZwqGV-GaC3nflU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/145701-f65f-4e33-a7a9-8a96191fe999/1/kgtMGcL-ljv9eZwqGV-GaC3nflU.mft
Manifest number: B4
Signing time: Mon 28 Sep 2026 07:03:47 +0000
Manifest this update: Mon 28 Sep 2026 07:03:47 +0000
Manifest next update: Tue 29 Sep 2026 07:03:47 +0000
Files and hashes: 1: WEwBpxaMC4nIG4w4vl_e2xC8V98.roa (hash: z9bbJLmUEVXg0O+C6bGdQnkEYUAIO6F1iJAXdJlUcMU=)
2: kgtMGcL-ljv9eZwqGV-GaC3nflU.crl (hash: uaOPvdQcKVaX6/v1iCatlfQI5JyF3S+tGUdU1JGX6B0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/145701-f65f-4e33-a7a9-8a96191fe999/1/kgtMGcL-ljv9eZwqGV-GaC3nflU.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/145701-f65f-4e33-a7a9-8a96191fe999/1/kgtMGcL-ljv9eZwqGV-GaC3nflU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kgtMGcL-ljv9eZwqGV-GaC3nflU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 07:03:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e6:d3:af:18:0d:88:72:6e:78:38:dc:c4:03:4a:bd:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=920b4c19c2fe963bfd799c2a195f86682de77e55
Validity
Not Before: Sep 28 07:03:47 2026 GMT
Not After : Sep 29 07:03:47 2026 GMT
Subject: CN=47860810a295048d176a6c228ca9b754da324556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d9:44:59:a8:cb:d0:37:0b:72:38:a3:ec:a0:
14:df:b0:26:e2:e9:cc:9a:33:c9:cf:20:11:9b:85:
92:4f:bc:3b:f4:4a:04:13:47:5e:5c:b5:8d:89:2d:
c6:6a:a5:92:48:23:09:6a:bd:c7:1b:7c:32:69:5e:
96:fa:65:eb:26:35:6f:bd:01:1c:25:82:08:55:49:
77:6a:44:e2:a3:b7:ec:30:15:b9:84:b9:b7:71:15:
41:29:57:ec:94:8d:70:88:b4:c4:02:fd:50:9d:56:
9f:a2:b4:50:dc:a3:b1:b5:ef:35:76:66:33:36:2d:
ad:c7:6e:5f:ad:33:7c:e8:69:81:c4:ff:11:f7:5b:
3c:c7:51:13:ec:b0:09:06:83:46:44:dc:13:b2:78:
98:c0:c4:ff:0b:56:e3:aa:d3:8b:2b:b1:49:9e:ca:
ac:1e:80:95:a8:06:e5:16:6a:d4:86:e5:aa:5c:df:
05:43:99:8e:8b:00:4a:bd:f8:2e:c8:51:44:a9:e6:
4e:98:c5:b9:97:cf:ab:c7:83:ed:a7:bc:bf:cf:3c:
95:5b:04:ca:ec:d8:fa:5b:aa:80:0b:d0:9d:fa:83:
06:34:54:c0:01:a6:c4:91:ed:a9:38:95:cc:97:28:
87:a3:b3:d6:ef:f8:48:83:2b:78:4d:8b:6f:44:cc:
03:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:86:08:10:A2:95:04:8D:17:6A:6C:22:8C:A9:B7:54:DA:32:45:56
X509v3 Authority Key Identifier:
keyid:92:0B:4C:19:C2:FE:96:3B:FD:79:9C:2A:19:5F:86:68:2D:E7:7E:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kgtMGcL-ljv9eZwqGV-GaC3nflU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/145701-f65f-4e33-a7a9-8a96191fe999/1/kgtMGcL-ljv9eZwqGV-GaC3nflU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/145701-f65f-4e33-a7a9-8a96191fe999/1/kgtMGcL-ljv9eZwqGV-GaC3nflU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:05:a3:ff:13:bc:86:80:0c:13:01:07:3f:00:21:3b:2e:d1:
9e:10:d6:db:91:b4:d2:09:c6:9e:d1:42:6e:d3:47:55:57:ed:
74:c2:b9:80:b0:6c:3c:e8:16:20:52:33:ab:14:47:e6:bb:7c:
ce:87:c4:33:22:d9:44:8a:75:cf:81:17:10:b6:03:41:f5:38:
32:54:4c:1f:32:5c:cb:98:7d:13:84:69:34:35:5d:67:b4:8b:
3c:77:dc:a1:fc:a2:1e:1b:5e:4e:b0:8f:82:2b:4c:d6:81:68:
b5:bc:70:59:59:18:ad:88:e1:d3:d6:6c:e0:63:d2:77:7e:8e:
06:e0:7f:fb:81:61:3e:e6:f4:60:b9:b9:3d:e3:e1:d0:a0:c1:
03:5d:34:7c:98:04:78:4d:4b:45:73:73:d2:f4:ff:84:0f:7b:
7a:90:9e:a8:93:c8:50:0c:4a:57:ad:da:a5:5e:a1:44:0b:32:
c1:ae:25:2c:44:01:eb:4b:93:d4:8f:92:3a:55:a6:ea:34:da:
ab:89:bf:4d:ab:81:ee:cb:bd:bd:1e:56:34:3c:05:db:14:7d:
ad:f8:b5:3f:8c:6c:11:72:ac:47:1d:e2:08:87:93:20:e5:d1:
b0:0c:ce:cb:0a:b7:0a:f6:ca:82:84:a2:16:cf:df:bc:06:b1:
0a:91:b2:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 12:04:01 2026 by rpki-client