Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/1d1b72-8bcf-4500-9125-321c14dd4639/1/KGDxXSeDeUg6qgYTy_WS5yzIHkg.mft
File: KGDxXSeDeUg6qgYTy_WS5yzIHkg.mft (raw, json)
Hash identifier: wSGt5NzBqFZ7QG7FwwOSr8Rpne4tMVugwCngTqthxV4=
Subject key identifier: 12:4E:51:9D:3A:AA:7E:64:F9:ED:1B:72:98:80:EE:44:C6:05:FE:53
Authority key identifier: 28:60:F1:5D:27:83:79:48:3A:AA:06:13:CB:F5:92:E7:2C:C8:1E:48
Certificate issuer: /CN=2860f15d278379483aaa0613cbf592e72cc81e48
Certificate serial: 019E1ED9A0545F3CD0F6B0269020C1C8EED0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KGDxXSeDeUg6qgYTy_WS5yzIHkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/1d1b72-8bcf-4500-9125-321c14dd4639/1/KGDxXSeDeUg6qgYTy_WS5yzIHkg.mft
Manifest number: 0C24
Signing time: Wed 13 May 2026 01:00:39 +0000
Manifest this update: Wed 13 May 2026 01:00:39 +0000
Manifest next update: Thu 14 May 2026 01:00:39 +0000
Files and hashes: 1: KGDxXSeDeUg6qgYTy_WS5yzIHkg.crl (hash: M8t0ZwrrN4Z9M8OxFwBZDMMmSCnNQCMmnXqG9na/euQ=)
2: _umM-ifUYAXN-TkvPlavvAf1aBQ.roa (hash: sCjPYzBH4hvw7Ts2Tsttu/QAIcVSkFxZGEGfyMRDD0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/1d1b72-8bcf-4500-9125-321c14dd4639/1/KGDxXSeDeUg6qgYTy_WS5yzIHkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/1d1b72-8bcf-4500-9125-321c14dd4639/1/KGDxXSeDeUg6qgYTy_WS5yzIHkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KGDxXSeDeUg6qgYTy_WS5yzIHkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 01:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:d9:a0:54:5f:3c:d0:f6:b0:26:90:20:c1:c8:ee:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2860f15d278379483aaa0613cbf592e72cc81e48
Validity
Not Before: May 13 01:00:39 2026 GMT
Not After : May 14 01:00:39 2026 GMT
Subject: CN=124e519d3aaa7e64f9ed1b729880ee44c605fe53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:85:b4:33:31:fa:26:14:6d:d6:5e:55:73:21:
fe:a8:f3:0f:d6:a0:da:f1:04:7c:80:b6:59:f7:ab:
b9:07:74:2e:33:1e:4f:8d:2a:c1:ca:2e:17:59:f0:
cf:47:75:21:0d:e1:26:6c:c8:d8:b9:d2:54:c4:d4:
e4:66:5c:7d:50:27:52:ec:5d:a6:e5:f0:b0:2e:8e:
ca:54:3d:c9:62:b1:e1:75:c9:eb:18:f6:db:49:34:
cc:14:b1:01:19:b1:fc:37:a9:02:4f:49:de:7a:60:
d4:0f:92:e3:0e:9c:1d:13:b8:80:6c:a5:2e:0b:23:
2d:12:40:9b:07:7d:46:c0:89:e3:7a:f1:d3:df:67:
a6:bd:56:87:4f:a0:9d:09:07:3a:00:50:af:2d:86:
b3:9f:46:a7:a8:61:84:19:c3:83:16:12:97:e8:96:
de:f1:df:1d:14:d5:ef:0a:57:88:67:81:ad:eb:95:
78:bf:37:1e:f0:dc:30:f1:3e:24:e1:05:69:a5:a7:
f6:02:77:ac:2e:af:5c:60:45:0c:46:5b:4e:33:f1:
36:18:36:db:fd:ba:a7:ab:0a:6a:16:27:e2:a4:37:
3a:72:24:cf:eb:7f:28:5a:c5:6b:c2:33:4c:56:b3:
18:7a:ff:e9:1f:b8:f9:5d:34:1f:88:fb:16:7f:c4:
7f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:4E:51:9D:3A:AA:7E:64:F9:ED:1B:72:98:80:EE:44:C6:05:FE:53
X509v3 Authority Key Identifier:
keyid:28:60:F1:5D:27:83:79:48:3A:AA:06:13:CB:F5:92:E7:2C:C8:1E:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KGDxXSeDeUg6qgYTy_WS5yzIHkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1d1b72-8bcf-4500-9125-321c14dd4639/1/KGDxXSeDeUg6qgYTy_WS5yzIHkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1d1b72-8bcf-4500-9125-321c14dd4639/1/KGDxXSeDeUg6qgYTy_WS5yzIHkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:00:d1:6d:b8:48:dd:88:58:82:6a:08:11:ed:18:6c:ab:d7:
b8:ad:8d:8d:ef:8d:0f:28:c6:9d:07:d3:23:0a:8f:6d:04:85:
31:68:51:f9:0d:86:41:42:fa:ee:4a:22:e8:19:82:87:48:ce:
7b:42:4c:ff:68:66:f8:29:21:82:f7:57:d8:6b:38:4e:c7:d1:
36:57:36:3b:01:5c:0f:0e:00:28:fd:90:33:67:35:12:da:71:
1d:cd:f8:7d:8e:22:4b:f3:83:10:bb:44:5e:b2:73:de:ad:7c:
e2:a3:09:4d:d4:84:62:ad:8e:00:94:31:30:13:a6:1e:0d:10:
16:ed:44:55:0e:2d:e5:88:e7:af:56:2a:ea:50:e3:5f:71:64:
af:98:de:8f:fc:0f:88:d5:5d:f0:84:75:be:39:0c:f2:ee:14:
a4:3b:d6:0b:60:a5:56:37:83:23:ef:7a:8e:5e:17:af:40:33:
02:c1:35:f7:60:b1:44:c1:4f:15:0b:8b:66:1f:ad:42:36:d8:
3a:37:81:7e:9f:6b:6d:5b:2a:db:b3:d7:62:a4:d6:d2:b4:e7:
32:a1:b4:fe:a1:c2:38:f3:83:f3:25:d2:79:21:3a:05:a1:8a:
f1:a6:43:f8:40:d4:f0:a3:7c:71:16:cd:6c:9c:b5:62:ff:51:
ab:78:ca:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:17:08 2026 by rpki-client