Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/43d7fb-4c9b-4263-be15-988ee7fe70a9/1/KgP8wEA8wUCsF8yUq_ZLpxlU5_w.mft
File: KgP8wEA8wUCsF8yUq_ZLpxlU5_w.mft (raw, json)
Hash identifier: wF0/rM3BJ52bWXV9Be0sc2dkMTo/RT1Ej8nqUqhaW4Q=
Subject key identifier: 36:88:DB:49:7E:D0:9E:D4:5A:9C:9E:34:74:71:E3:19:5F:ED:E7:A3
Authority key identifier: 2A:03:FC:C0:40:3C:C1:40:AC:17:CC:94:AB:F6:4B:A7:19:54:E7:FC
Certificate issuer: /CN=2a03fcc0403cc140ac17cc94abf64ba71954e7fc
Certificate serial: 019D2703AB124A7B72A2B5C339384842F07D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KgP8wEA8wUCsF8yUq_ZLpxlU5_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/43d7fb-4c9b-4263-be15-988ee7fe70a9/1/KgP8wEA8wUCsF8yUq_ZLpxlU5_w.mft
Manifest number: 020C
Signing time: Wed 25 Mar 2026 22:00:44 +0000
Manifest this update: Wed 25 Mar 2026 22:00:44 +0000
Manifest next update: Thu 26 Mar 2026 22:00:44 +0000
Files and hashes: 1: KC3pwRJlxssQCjrX0g5HrbfU1EI.roa (hash: si4EVd8souGe3WH04N57kO7Q5aV9/qU7ZKR+lctmJH4=)
2: KgP8wEA8wUCsF8yUq_ZLpxlU5_w.crl (hash: RWHVkYv6yzm/g0sLyoorypk3HwAtrpY46FeMwtKQtTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/43d7fb-4c9b-4263-be15-988ee7fe70a9/1/KgP8wEA8wUCsF8yUq_ZLpxlU5_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/43d7fb-4c9b-4263-be15-988ee7fe70a9/1/KgP8wEA8wUCsF8yUq_ZLpxlU5_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/KgP8wEA8wUCsF8yUq_ZLpxlU5_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:ab:12:4a:7b:72:a2:b5:c3:39:38:48:42:f0:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a03fcc0403cc140ac17cc94abf64ba71954e7fc
Validity
Not Before: Mar 25 22:00:44 2026 GMT
Not After : Mar 26 22:00:44 2026 GMT
Subject: CN=3688db497ed09ed45a9c9e347471e3195fede7a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:aa:34:0d:e0:b4:45:42:68:20:63:de:b7:6b:
63:6b:05:8e:3c:06:3e:6c:74:0b:4d:de:5f:6d:bb:
7c:92:3b:38:a9:01:13:94:ec:9f:ab:05:27:3b:f2:
3f:b2:ea:9c:6e:6f:05:48:d3:93:d9:50:09:26:cc:
68:8f:04:dd:09:6e:bc:c5:59:c8:86:68:d5:58:63:
84:53:34:9f:dc:c0:40:e0:94:b0:de:94:a2:87:58:
b4:1c:0f:a8:4a:62:9f:8c:1f:f2:92:7e:fe:16:a4:
2c:10:96:41:05:f1:36:18:0f:21:34:a5:cb:bc:25:
23:a3:52:47:de:57:a9:e5:3f:0e:f4:67:a8:a1:6c:
b7:e1:a2:74:30:66:a0:58:9b:5d:42:d7:ad:ad:41:
b3:e5:07:2c:30:d9:04:79:8f:10:87:b1:a9:96:a9:
28:dc:97:ae:70:ed:b5:a0:ad:c3:d7:e9:2b:ac:85:
ee:e8:23:4c:90:bc:44:25:ca:9c:5e:d2:38:9f:16:
be:5c:0c:6b:9a:d7:b5:f2:f4:bf:0a:e9:ec:a1:02:
0a:a4:5b:19:28:7c:bd:a7:93:f1:cd:c5:02:2c:48:
6f:f4:94:6d:f8:f6:39:e6:e4:58:b5:80:0f:30:80:
d0:16:4e:44:36:5e:8b:ce:c3:7e:d7:21:20:cf:ee:
27:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:88:DB:49:7E:D0:9E:D4:5A:9C:9E:34:74:71:E3:19:5F:ED:E7:A3
X509v3 Authority Key Identifier:
keyid:2A:03:FC:C0:40:3C:C1:40:AC:17:CC:94:AB:F6:4B:A7:19:54:E7:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KgP8wEA8wUCsF8yUq_ZLpxlU5_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/43d7fb-4c9b-4263-be15-988ee7fe70a9/1/KgP8wEA8wUCsF8yUq_ZLpxlU5_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/43d7fb-4c9b-4263-be15-988ee7fe70a9/1/KgP8wEA8wUCsF8yUq_ZLpxlU5_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:70:2d:4f:02:27:14:23:4f:b8:d1:a3:55:b1:31:82:86:7b:
67:0c:8f:e5:33:90:9a:5c:78:61:22:ff:84:f7:52:cb:e6:af:
11:7b:74:62:2f:2e:44:8e:1e:aa:a8:bd:ba:63:51:1a:f0:e3:
2c:7c:ee:75:0c:c9:8e:09:0a:07:34:cc:3a:65:6a:9a:cb:89:
1f:29:76:3f:14:ba:c8:02:39:89:41:ca:8f:9f:cb:a2:ea:83:
e4:b7:49:cc:8f:5d:98:f9:62:5d:7e:b8:fd:85:2c:a5:b7:19:
6c:38:84:4a:04:18:df:65:a4:88:2a:e8:11:7b:e4:cb:2a:2d:
4f:12:82:a0:7d:33:0d:ce:9c:44:ba:0c:3f:17:0f:43:f0:4a:
8b:a9:47:e4:4e:ca:6a:b1:0e:3f:24:c2:29:29:f0:44:43:4e:
6e:ff:ab:b5:4a:d0:51:61:43:8b:07:cf:39:02:68:cc:93:a9:
8f:f2:ff:b3:fd:95:c7:10:9f:86:39:c5:30:38:01:23:cd:af:
ee:a9:31:b5:64:ac:55:8f:74:e4:d6:1f:99:e3:d6:38:1e:ad:
66:f9:2d:f1:a1:c5:34:dc:f2:3f:ad:f2:df:ef:9d:e1:a0:ca:
fc:46:b9:b7:50:3c:31:43:c3:2d:0b:0e:24:69:29:67:21:dd:
d8:64:d4:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:10:51 2026 by rpki-client