Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/kgGio1zO6PsPuXFJ3JEi7_odV1M.mft
File: kgGio1zO6PsPuXFJ3JEi7_odV1M.mft (raw, json)
Hash identifier: r+NxIwU+iNxQNbBb48iIbtdI834YhPDgSboqJ/a4VBQ=
Subject key identifier: A3:0F:F7:E2:5C:DB:A2:AF:86:38:41:76:9B:24:E5:53:7F:A6:57:0A
Authority key identifier: 92:01:A2:A3:5C:CE:E8:FB:0F:B9:71:49:DC:91:22:EF:FA:1D:57:53
Certificate issuer: /CN=9201a2a35ccee8fb0fb97149dc9122effa1d5753
Certificate serial: 019F916CFA88B4EEBCB80044D4106E40A960
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kgGio1zO6PsPuXFJ3JEi7_odV1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/kgGio1zO6PsPuXFJ3JEi7_odV1M.mft
Manifest number: 40
Signing time: Fri 24 Jul 2026 00:01:05 +0000
Manifest this update: Fri 24 Jul 2026 00:01:05 +0000
Manifest next update: Sat 25 Jul 2026 00:01:05 +0000
Files and hashes: 1: 29oQ-_YhALXcaCnBoms6zHFWIUg.roa (hash: YFqwumFUQeEWBhccMhC9hd/OtihPR9k55c5uhqWfTXo=)
2: kgGio1zO6PsPuXFJ3JEi7_odV1M.crl (hash: rX5swuYYp/uQ4XRZtKeAVzyZOsrUzgKLvEFsf/ckzuw=)
3: pHG0Dgz01aKv0bEBf6QDC18dcjc.roa (hash: cW2NoY7QV6boSwo2uyAkmvFSGtyInVd1Rb4XruZtXJY=)
4: pxq446UNxMX48IpTz2HO1tgd-0s.roa (hash: DkFJ/lcWoJ1EwOJ8iauCFG324UnqbAJK8P24azgmuwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/kgGio1zO6PsPuXFJ3JEi7_odV1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/kgGio1zO6PsPuXFJ3JEi7_odV1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/kgGio1zO6PsPuXFJ3JEi7_odV1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:fa:88:b4:ee:bc:b8:00:44:d4:10:6e:40:a9:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9201a2a35ccee8fb0fb97149dc9122effa1d5753
Validity
Not Before: Jul 24 00:01:05 2026 GMT
Not After : Jul 25 00:01:05 2026 GMT
Subject: CN=a30ff7e25cdba2af863841769b24e5537fa6570a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:d4:f8:45:72:89:bf:72:a4:8a:d5:ab:9f:b7:
c3:22:95:32:e6:d3:eb:b0:91:48:6b:77:1d:f2:be:
7c:89:20:cd:81:e8:d9:27:01:46:0c:bc:da:ff:c3:
5a:15:29:e6:9b:dd:67:89:5c:f3:74:25:0d:c7:28:
f4:13:c5:e9:ee:05:c2:dc:97:62:05:f2:14:27:6e:
6d:10:56:e0:d7:86:8e:99:2e:58:4b:8a:34:f3:0a:
58:71:9b:be:4b:7b:57:61:d9:5e:27:10:d9:67:4e:
5c:0a:81:45:dd:fa:cf:94:58:f0:72:14:97:b3:a2:
c6:9d:b7:fd:4f:b8:9e:d7:09:84:b3:11:3a:94:c2:
bf:62:1b:13:a2:ce:cc:e6:6b:dd:43:df:10:73:2a:
85:6d:3b:4c:dd:24:69:be:2b:5c:32:cc:c3:3b:c3:
91:8c:31:66:52:a7:15:ef:f1:99:f7:f7:3e:63:eb:
05:44:0a:51:20:ab:c8:71:22:fa:2d:44:c6:8d:41:
0e:bf:e6:74:4c:4c:3d:74:68:71:06:e5:9d:72:bc:
d6:a3:e4:a6:f6:82:a4:ac:3a:c3:8a:19:76:87:70:
1a:72:22:e9:08:22:e5:6c:8b:fa:21:0c:e1:85:b2:
12:0c:ba:74:46:e0:ec:aa:da:93:87:5e:2b:1d:98:
0b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:0F:F7:E2:5C:DB:A2:AF:86:38:41:76:9B:24:E5:53:7F:A6:57:0A
X509v3 Authority Key Identifier:
keyid:92:01:A2:A3:5C:CE:E8:FB:0F:B9:71:49:DC:91:22:EF:FA:1D:57:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kgGio1zO6PsPuXFJ3JEi7_odV1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/kgGio1zO6PsPuXFJ3JEi7_odV1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/9cb329-0fe9-4ffe-be5f-038a54e3912f/1/kgGio1zO6PsPuXFJ3JEi7_odV1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:73:82:04:33:eb:11:c2:5b:04:aa:c5:96:cf:37:c1:fd:20:
06:b3:f4:a0:4b:c6:e3:4a:8a:c3:1b:c0:06:c2:25:2f:a6:13:
87:2c:d1:91:35:ff:8d:03:32:42:74:cc:06:43:65:28:ff:6c:
24:18:6e:38:61:5f:f5:1a:d3:21:3d:aa:83:c1:98:dc:98:c4:
58:15:d4:00:3a:d1:4e:33:d2:91:b6:63:5a:cd:27:0d:28:73:
68:cb:f1:d1:a9:60:01:41:ab:b3:05:88:49:a4:c5:54:50:cc:
1d:9f:d7:2e:9b:c0:4a:2d:e8:cb:ee:f8:c9:af:17:14:b2:bb:
a8:90:9a:72:8d:80:af:96:53:5f:96:6c:7b:ee:f5:2a:20:19:
14:ab:b5:8f:47:af:b4:03:e4:ff:06:37:ab:30:28:b0:89:77:
49:d6:16:6e:bd:53:eb:f0:75:48:5c:96:1f:e8:90:f8:17:3e:
0d:a5:d5:ec:23:c5:7d:7a:39:b1:65:3b:10:5f:a7:00:28:f3:
76:fb:4c:e7:84:e3:45:11:99:1e:b1:5c:c0:48:b1:e0:b8:d5:
be:1e:59:0a:d5:a7:5b:d0:ab:50:97:34:47:07:84:91:16:34:
b3:51:b0:5e:e1:e0:32:d8:a8:72:f2:6b:fd:ef:45:7f:d5:b3:
69:e6:a1:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:34:41 2026 by rpki-client