Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/1d1b72-8bcf-4500-9125-321c14dd4639/1/KGDxXSeDeUg6qgYTy_WS5yzIHkg.mft
File: KGDxXSeDeUg6qgYTy_WS5yzIHkg.mft (raw, json)
Hash identifier: xhHVKWxiGu2ot3zYOrbwMaYhCikiMss5J+yojngvL60=
Subject key identifier: 96:C7:D0:E6:D7:F1:1C:19:4B:73:8C:B1:19:6A:2C:35:96:34:9F:AD
Authority key identifier: 28:60:F1:5D:27:83:79:48:3A:AA:06:13:CB:F5:92:E7:2C:C8:1E:48
Certificate issuer: /CN=2860f15d278379483aaa0613cbf592e72cc81e48
Certificate serial: 019D29970C3F7BAF164BC9C262267FC2C9EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KGDxXSeDeUg6qgYTy_WS5yzIHkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/1d1b72-8bcf-4500-9125-321c14dd4639/1/KGDxXSeDeUg6qgYTy_WS5yzIHkg.mft
Manifest number: 0BA5
Signing time: Thu 26 Mar 2026 10:00:58 +0000
Manifest this update: Thu 26 Mar 2026 10:00:58 +0000
Manifest next update: Fri 27 Mar 2026 10:00:58 +0000
Files and hashes: 1: KGDxXSeDeUg6qgYTy_WS5yzIHkg.crl (hash: X/tS9rWHckWEpjU1iKjFLHRlLDByOD7spC7AwGYbzok=)
2: _umM-ifUYAXN-TkvPlavvAf1aBQ.roa (hash: sCjPYzBH4hvw7Ts2Tsttu/QAIcVSkFxZGEGfyMRDD0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/1d1b72-8bcf-4500-9125-321c14dd4639/1/KGDxXSeDeUg6qgYTy_WS5yzIHkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/1d1b72-8bcf-4500-9125-321c14dd4639/1/KGDxXSeDeUg6qgYTy_WS5yzIHkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KGDxXSeDeUg6qgYTy_WS5yzIHkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:0c:3f:7b:af:16:4b:c9:c2:62:26:7f:c2:c9:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2860f15d278379483aaa0613cbf592e72cc81e48
Validity
Not Before: Mar 26 10:00:58 2026 GMT
Not After : Mar 27 10:00:58 2026 GMT
Subject: CN=96c7d0e6d7f11c194b738cb1196a2c3596349fad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:62:27:cd:8e:04:19:d6:1e:87:bb:59:63:e6:
b6:99:56:e3:0f:cc:99:6f:38:7c:dd:80:80:40:3c:
c5:8f:ea:08:1f:1f:61:fa:e5:03:06:67:d5:c4:c8:
41:e0:3e:cc:62:00:9e:9a:f0:31:ba:e2:67:3d:8a:
bd:3e:fe:07:42:c0:35:5b:6f:f8:67:3d:0f:10:45:
6c:cf:73:97:1c:4b:d7:9e:fd:14:81:e1:0d:33:3d:
8d:2e:9a:4b:73:b7:83:75:14:24:99:44:f4:99:bd:
b0:2d:fd:d7:b3:9a:3c:b3:be:0d:b7:41:a8:27:86:
47:e6:52:49:a8:2d:86:30:8d:6d:bb:29:53:35:d2:
ae:26:1a:9d:89:74:5a:a8:08:f9:1c:16:a4:80:63:
84:8a:17:39:c0:02:8e:e1:df:c3:3a:23:64:a8:52:
59:05:57:87:84:89:e8:cf:c8:5c:4c:7d:b3:50:8f:
05:b3:7a:c7:ba:36:90:1b:d4:63:47:af:00:af:d8:
a4:ae:4d:b1:ba:44:be:5d:ec:8e:f8:85:92:47:1d:
9e:86:82:ba:f6:22:b4:1e:28:73:93:f7:02:31:78:
1c:ed:c4:22:87:fa:36:65:5d:95:66:64:fa:f3:fe:
74:72:57:2d:b9:91:33:3f:da:00:20:cd:75:45:fb:
96:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:C7:D0:E6:D7:F1:1C:19:4B:73:8C:B1:19:6A:2C:35:96:34:9F:AD
X509v3 Authority Key Identifier:
keyid:28:60:F1:5D:27:83:79:48:3A:AA:06:13:CB:F5:92:E7:2C:C8:1E:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KGDxXSeDeUg6qgYTy_WS5yzIHkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1d1b72-8bcf-4500-9125-321c14dd4639/1/KGDxXSeDeUg6qgYTy_WS5yzIHkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1d1b72-8bcf-4500-9125-321c14dd4639/1/KGDxXSeDeUg6qgYTy_WS5yzIHkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:2d:87:d7:c1:58:48:ad:32:90:24:eb:9d:8a:81:29:e6:29:
8d:d9:e0:73:a9:03:6b:c0:e4:94:a8:88:86:92:b9:54:4c:71:
23:0c:06:0b:c7:3c:90:ff:92:38:94:30:52:69:02:af:4f:ef:
52:3b:f7:cd:ad:ba:a6:96:82:d3:ba:40:de:93:db:55:a6:b6:
0a:31:97:ff:79:ad:37:c8:6f:20:e7:f7:7b:7b:35:a1:c1:3a:
07:35:18:96:52:e0:01:da:9c:36:61:9a:5d:8f:8d:d7:65:0a:
a9:ef:d8:3d:2e:5c:96:8e:a3:08:17:8a:c3:8f:c0:9a:d4:fd:
1c:81:b3:ee:89:d0:27:ad:b2:d4:b5:28:49:53:82:0d:a2:d5:
09:d2:2c:4f:c4:80:fd:93:dc:56:66:b7:48:32:f7:3d:93:d7:
51:48:7e:49:74:b0:56:79:49:10:3d:c8:88:0b:86:a2:eb:70:
a0:d6:3c:5d:6e:a8:44:10:f1:3d:e1:79:68:8c:56:71:56:d4:
00:f3:8f:ae:d8:6e:48:a9:1b:98:1e:88:70:19:cf:62:86:c0:
92:21:a7:d8:0b:f6:f4:49:3e:20:70:73:97:f8:97:31:c1:07:
ac:49:ed:20:2b:c6:c0:4c:72:bc:75:56:e3:ac:33:8e:35:99:
f9:b7:45:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0plww/e68WS8nCYiZ/wsnuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4NjBmMTVkMjc4Mzc5NDgzYWFhMDYxM2NiZjU5MmU3MmNj
ODFlNDgwHhcNMjYwMzI2MTAwMDU4WhcNMjYwMzI3MTAwMDU4WjAzMTEwLwYDVQQD
Eyg5NmM3ZDBlNmQ3ZjExYzE5NGI3MzhjYjExOTZhMmMzNTk2MzQ5ZmFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3mInzY4EGdYeh7tZY+a2mVbjD8yZ
bzh83YCAQDzFj+oIHx9h+uUDBmfVxMhB4D7MYgCemvAxuuJnPYq9Pv4HQsA1W2/4
Zz0PEEVsz3OXHEvXnv0UgeENMz2NLppLc7eDdRQkmUT0mb2wLf3Xs5o8s74Nt0Go
J4ZH5lJJqC2GMI1tuylTNdKuJhqdiXRaqAj5HBakgGOEihc5wAKO4d/DOiNkqFJZ
BVeHhInoz8hcTH2zUI8Fs3rHujaQG9RjR68Ar9ikrk2xukS+XeyO+IWSRx2ehoK6
9iK0Hihzk/cCMXgc7cQih/o2ZV2VZmT68/50clctuZEzP9oAIM11RfuWdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJbH0ObX8RwZS3OMsRlqLDWWNJ+tMB8GA1UdIwQY
MBaAFChg8V0ng3lIOqoGE8v1kucsyB5IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0dEeFhTZURlVWc2cWdZVHlfV1M1eXpJSGtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8xZDFiNzItOGJjZi00NTAwLTkxMjUt
MzIxYzE0ZGQ0NjM5LzEvS0dEeFhTZURlVWc2cWdZVHlfV1M1eXpJSGtnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC8xZDFiNzItOGJjZi00NTAwLTkxMjUtMzIxYzE0ZGQ0NjM5
LzEvS0dEeFhTZURlVWc2cWdZVHlfV1M1eXpJSGtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqC2H18FY
SK0ykCTrnYqBKeYpjdngc6kDa8DklKiIhpK5VExxIwwGC8c8kP+SOJQwUmkCr0/v
Ujv3za26ppaC07pA3pPbVaa2CjGX/3mtN8hvIOf3e3s1ocE6BzUYllLgAdqcNmGa
XY+N12UKqe/YPS5clo6jCBeKw4/AmtT9HIGz7onQJ62y1LUoSVOCDaLVCdIsT8SA
/ZPcVma3SDL3PZPXUUh+SXSwVnlJED3IiAuGoutwoNY8XW6oRBDxPeF5aIxWcVbU
APOPrthuSKkbmB6IcBnPYobAkiGn2Av29Ek+IHBzl/iXMcEHrEntICvGwExyvHVW
46wzjjWZ+bdFwA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:34:30 2026 by rpki-client