Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/1d1b72-8bcf-4500-9125-321c14dd4639/1/KGDxXSeDeUg6qgYTy_WS5yzIHkg.mft
File: KGDxXSeDeUg6qgYTy_WS5yzIHkg.mft (raw, json)
Hash identifier: Z0VOcsMX9YJbEtLc5gho1zAi4Z48vYeRcwg23K5cr90=
Subject key identifier: D6:31:85:82:C0:99:3B:A1:C2:D2:4C:C1:D0:83:90:13:0A:03:39:32
Authority key identifier: 28:60:F1:5D:27:83:79:48:3A:AA:06:13:CB:F5:92:E7:2C:C8:1E:48
Certificate issuer: /CN=2860f15d278379483aaa0613cbf592e72cc81e48
Certificate serial: 01A0F6E902A950690620D9CAEF300C4B0834
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KGDxXSeDeUg6qgYTy_WS5yzIHkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/1d1b72-8bcf-4500-9125-321c14dd4639/1/KGDxXSeDeUg6qgYTy_WS5yzIHkg.mft
Manifest number: 0D9D
Signing time: Thu 01 Oct 2026 10:01:00 +0000
Manifest this update: Thu 01 Oct 2026 10:01:00 +0000
Manifest next update: Fri 02 Oct 2026 10:01:00 +0000
Files and hashes: 1: KGDxXSeDeUg6qgYTy_WS5yzIHkg.crl (hash: xfIS1ciuQL/HCW80PsmZrmjNIss2VVWwwZ7Wum1W2BU=)
2: _umM-ifUYAXN-TkvPlavvAf1aBQ.roa (hash: sCjPYzBH4hvw7Ts2Tsttu/QAIcVSkFxZGEGfyMRDD0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/1d1b72-8bcf-4500-9125-321c14dd4639/1/KGDxXSeDeUg6qgYTy_WS5yzIHkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/1d1b72-8bcf-4500-9125-321c14dd4639/1/KGDxXSeDeUg6qgYTy_WS5yzIHkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KGDxXSeDeUg6qgYTy_WS5yzIHkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:e9:02:a9:50:69:06:20:d9:ca:ef:30:0c:4b:08:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2860f15d278379483aaa0613cbf592e72cc81e48
Validity
Not Before: Oct 1 10:01:00 2026 GMT
Not After : Oct 2 10:01:00 2026 GMT
Subject: CN=d6318582c0993ba1c2d24cc1d08390130a033932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:20:35:5d:ba:5a:11:26:78:2d:36:b0:32:5b:
b1:23:c7:02:19:92:a9:88:3c:87:b7:e1:1b:e3:b3:
46:f3:3f:fa:03:34:c9:5e:71:50:09:58:39:7f:2e:
82:1b:be:12:0f:9d:c8:40:33:8d:b3:c7:87:43:03:
ac:97:d2:ce:18:6a:b5:15:47:35:75:2d:92:4e:51:
27:ae:b7:6d:80:f0:45:8f:5d:e5:d7:65:2d:5f:12:
8b:ec:db:01:6f:1b:8f:ce:e8:d2:7b:d7:24:fa:04:
9f:05:1f:f2:c7:90:0f:fd:1d:0c:ae:9b:e4:38:64:
76:98:69:48:4b:cf:9b:0a:85:7a:57:12:2d:57:59:
00:e5:22:6a:76:23:8c:c7:e2:bc:93:a8:8b:3f:89:
91:26:23:68:7c:9d:d6:c8:e4:bc:94:24:b6:92:15:
34:8d:2b:5e:d2:60:56:36:cb:86:1a:27:0a:ca:7c:
b6:8b:6e:6e:d6:cc:4f:18:a9:9e:cb:5a:04:90:b8:
24:89:da:c1:00:b0:e4:ad:b4:86:c5:ae:67:47:e9:
0a:cf:5c:36:3b:4e:73:06:b7:7f:e4:2e:06:cc:b0:
b9:d0:c7:a6:73:3e:44:1e:78:28:1d:a3:0e:e8:4a:
a5:14:40:10:d5:5f:f3:3b:e7:f6:00:8e:07:bb:67:
06:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:31:85:82:C0:99:3B:A1:C2:D2:4C:C1:D0:83:90:13:0A:03:39:32
X509v3 Authority Key Identifier:
keyid:28:60:F1:5D:27:83:79:48:3A:AA:06:13:CB:F5:92:E7:2C:C8:1E:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KGDxXSeDeUg6qgYTy_WS5yzIHkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1d1b72-8bcf-4500-9125-321c14dd4639/1/KGDxXSeDeUg6qgYTy_WS5yzIHkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1d1b72-8bcf-4500-9125-321c14dd4639/1/KGDxXSeDeUg6qgYTy_WS5yzIHkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:68:c1:f9:f4:06:5c:82:50:39:cf:65:84:e5:f3:d7:a9:cd:
6f:5c:a8:39:85:b8:d6:63:73:f5:15:89:9f:b6:83:cd:7e:89:
ba:ee:a1:ca:31:35:e3:b4:fc:93:df:67:47:49:70:08:d9:11:
98:36:13:e8:ee:5d:03:4e:b8:5d:cc:42:fe:a2:c3:0c:ad:f7:
91:52:e6:19:2c:a3:76:9d:88:e2:d2:03:da:bf:49:af:5f:1e:
79:6e:66:13:ee:17:dc:5e:b3:b4:a5:59:7f:2f:90:ae:b8:b2:
1c:7d:68:dc:5b:44:3f:b2:36:79:8d:1e:8e:f3:a9:34:68:e3:
c7:85:a0:2b:bb:c7:c6:70:59:5f:b6:6f:c4:e9:86:eb:6b:ba:
82:5d:a6:fe:5a:a1:8b:70:ea:e7:61:16:38:76:9c:bb:9b:9d:
7f:12:c1:83:dd:90:14:f3:18:0d:07:eb:2f:32:71:9c:e3:92:
67:a6:6a:eb:6c:ca:44:fe:61:d1:62:ff:5c:8b:1c:cd:be:3b:
6b:ac:39:a5:99:ef:0e:66:1f:d9:21:be:c7:e3:d8:98:62:e7:
e9:04:b0:e6:2e:db:91:36:da:00:07:d6:a4:d2:79:79:9e:f4:
53:b6:ea:5a:a1:59:7f:70:f4:20:3a:e6:3f:bd:85:aa:46:03:
b7:74:f1:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaD26QKpUGkGINnK7zAMSwg0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4NjBmMTVkMjc4Mzc5NDgzYWFhMDYxM2NiZjU5MmU3MmNj
ODFlNDgwHhcNMjYxMDAxMTAwMTAwWhcNMjYxMDAyMTAwMTAwWjAzMTEwLwYDVQQD
EyhkNjMxODU4MmMwOTkzYmExYzJkMjRjYzFkMDgzOTAxMzBhMDMzOTMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2iA1XbpaESZ4LTawMluxI8cCGZKp
iDyHt+Eb47NG8z/6AzTJXnFQCVg5fy6CG74SD53IQDONs8eHQwOsl9LOGGq1FUc1
dS2STlEnrrdtgPBFj13l12UtXxKL7NsBbxuPzujSe9ck+gSfBR/yx5AP/R0Mrpvk
OGR2mGlIS8+bCoV6VxItV1kA5SJqdiOMx+K8k6iLP4mRJiNofJ3WyOS8lCS2khU0
jSte0mBWNsuGGicKyny2i25u1sxPGKmey1oEkLgkidrBALDkrbSGxa5nR+kKz1w2
O05zBrd/5C4GzLC50Memcz5EHngoHaMO6EqlFEAQ1V/zO+f2AI4Hu2cGAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNYxhYLAmTuhwtJMwdCDkBMKAzkyMB8GA1UdIwQY
MBaAFChg8V0ng3lIOqoGE8v1kucsyB5IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0dEeFhTZURlVWc2cWdZVHlfV1M1eXpJSGtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8xZDFiNzItOGJjZi00NTAwLTkxMjUt
MzIxYzE0ZGQ0NjM5LzEvS0dEeFhTZURlVWc2cWdZVHlfV1M1eXpJSGtnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC8xZDFiNzItOGJjZi00NTAwLTkxMjUtMzIxYzE0ZGQ0NjM5
LzEvS0dEeFhTZURlVWc2cWdZVHlfV1M1eXpJSGtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdmjB+fQG
XIJQOc9lhOXz16nNb1yoOYW41mNz9RWJn7aDzX6Juu6hyjE147T8k99nR0lwCNkR
mDYT6O5dA064XcxC/qLDDK33kVLmGSyjdp2I4tID2r9Jr18eeW5mE+4X3F6ztKVZ
fy+QrriyHH1o3FtEP7I2eY0ejvOpNGjjx4WgK7vHxnBZX7ZvxOmG62u6gl2m/lqh
i3Dq52EWOHacu5udfxLBg92QFPMYDQfrLzJxnOOSZ6Zq62zKRP5h0WL/XIsczb47
a6w5pZnvDmYf2SG+x+PYmGLn6QSw5i7bkTbaAAfWpNJ5eZ70U7bqWqFZf3D0IDrm
P72FqkYDt3TxGA==
-----END CERTIFICATE-----
Generated at Thu Oct 1 13:22:50 2026 by rpki-client