Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/1d1b72-8bcf-4500-9125-321c14dd4639/1/KGDxXSeDeUg6qgYTy_WS5yzIHkg.mft
File: KGDxXSeDeUg6qgYTy_WS5yzIHkg.mft (raw, json)
Hash identifier: 6COvq3vVlw/9SJFpMGPkqtzdyYjKSqVnRVME1liKqvU=
Subject key identifier: 8B:5A:92:92:55:A5:EF:5E:71:AA:9C:7E:45:A3:CB:C1:C9:01:41:18
Authority key identifier: 28:60:F1:5D:27:83:79:48:3A:AA:06:13:CB:F5:92:E7:2C:C8:1E:48
Certificate issuer: /CN=2860f15d278379483aaa0613cbf592e72cc81e48
Certificate serial: 019F9391A4C6D9FDB8D2943BE3212812A888
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KGDxXSeDeUg6qgYTy_WS5yzIHkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/1d1b72-8bcf-4500-9125-321c14dd4639/1/KGDxXSeDeUg6qgYTy_WS5yzIHkg.mft
Manifest number: 0CE5
Signing time: Fri 24 Jul 2026 10:00:23 +0000
Manifest this update: Fri 24 Jul 2026 10:00:23 +0000
Manifest next update: Sat 25 Jul 2026 10:00:23 +0000
Files and hashes: 1: KGDxXSeDeUg6qgYTy_WS5yzIHkg.crl (hash: W/TLtZNaPf+eDbtyPB4Jf5qaBcNI7A1WH9msvAahjko=)
2: _umM-ifUYAXN-TkvPlavvAf1aBQ.roa (hash: sCjPYzBH4hvw7Ts2Tsttu/QAIcVSkFxZGEGfyMRDD0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/1d1b72-8bcf-4500-9125-321c14dd4639/1/KGDxXSeDeUg6qgYTy_WS5yzIHkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/1d1b72-8bcf-4500-9125-321c14dd4639/1/KGDxXSeDeUg6qgYTy_WS5yzIHkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KGDxXSeDeUg6qgYTy_WS5yzIHkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:91:a4:c6:d9:fd:b8:d2:94:3b:e3:21:28:12:a8:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2860f15d278379483aaa0613cbf592e72cc81e48
Validity
Not Before: Jul 24 10:00:23 2026 GMT
Not After : Jul 25 10:00:23 2026 GMT
Subject: CN=8b5a929255a5ef5e71aa9c7e45a3cbc1c9014118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:94:dd:41:cd:83:46:e6:98:4c:51:25:2d:da:
20:75:57:d0:eb:68:a6:19:75:27:45:60:fb:76:3e:
eb:ac:6c:32:a9:fb:c1:e2:c9:d6:58:4f:10:8f:db:
d7:53:df:7b:ad:ee:a5:55:76:0d:ef:1d:fd:5f:ec:
75:f5:a1:b5:f6:da:4f:f0:0d:c2:f8:47:89:7a:a3:
ac:86:3c:69:53:9d:68:e5:a0:4b:82:77:49:15:d3:
6e:3f:91:a6:f5:a8:9d:26:5e:0d:cc:ec:2b:41:37:
85:e7:72:a1:ad:10:d5:99:64:6c:c1:c8:1e:16:68:
56:03:d4:62:d2:ca:20:8e:22:f7:64:52:cd:d0:a8:
73:1d:37:c9:13:9f:05:fd:ff:78:74:d2:12:30:04:
7c:83:01:53:04:54:ec:27:af:1c:0f:7e:71:41:ba:
11:9d:45:89:e3:10:6d:8b:8d:29:8b:a6:77:83:7e:
46:34:e3:06:54:5c:30:08:89:fe:a5:cc:29:43:1b:
b5:a1:a0:7e:cf:42:3a:8b:21:89:0a:66:f7:f0:a3:
74:7b:d4:b9:c4:0f:aa:50:6d:f7:0c:30:25:16:52:
26:44:57:5d:a8:aa:e5:92:0d:7b:23:8c:d5:1c:ac:
e3:a7:a7:89:e1:a1:b3:19:28:3c:c9:29:b9:da:2b:
42:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:5A:92:92:55:A5:EF:5E:71:AA:9C:7E:45:A3:CB:C1:C9:01:41:18
X509v3 Authority Key Identifier:
keyid:28:60:F1:5D:27:83:79:48:3A:AA:06:13:CB:F5:92:E7:2C:C8:1E:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KGDxXSeDeUg6qgYTy_WS5yzIHkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1d1b72-8bcf-4500-9125-321c14dd4639/1/KGDxXSeDeUg6qgYTy_WS5yzIHkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1d1b72-8bcf-4500-9125-321c14dd4639/1/KGDxXSeDeUg6qgYTy_WS5yzIHkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:f6:5f:bb:82:2e:ad:24:df:5f:4f:0f:6c:29:72:9e:7a:ec:
75:d7:77:df:ff:6a:87:05:5b:4d:cb:01:fd:c4:fd:1e:aa:fe:
ce:19:51:8a:a0:58:1d:42:15:97:2d:65:1b:dd:c9:81:b7:6c:
5a:83:74:88:31:10:11:a7:68:e3:d3:f3:8f:9f:17:56:13:f0:
d9:dc:49:65:3a:38:c9:19:69:ed:17:5c:b7:f4:ec:97:23:db:
bd:1c:e7:12:f4:1c:95:90:5a:66:75:8d:77:ce:20:6c:58:c2:
56:2a:b8:4d:14:db:53:82:61:35:a9:92:9e:1c:84:75:ca:2c:
ee:9a:cb:58:8d:d3:03:20:79:bb:e8:2b:57:a7:b9:5a:03:74:
75:ac:7f:d7:74:75:12:e1:2e:70:fc:ee:22:db:43:52:f5:d7:
fc:3e:4b:8e:39:12:d6:07:b4:74:18:f6:37:ef:ad:d9:fb:74:
9d:25:91:90:d7:6b:bf:f0:ee:98:09:20:af:ef:22:ca:db:b6:
05:6d:1b:19:98:01:61:ec:a0:88:ab:a8:b4:e4:2d:0f:e0:83:
72:ae:60:48:a2:f5:d6:6b:6a:b0:00:83:86:42:9c:08:e5:27:
83:41:67:e6:02:e5:d9:f2:3e:98:18:64:5a:3c:74:34:9f:1e:
c3:a0:ef:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:53:40 2026 by rpki-client