Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/0bb8a0-3fb3-41ee-9f65-1c8d9e6ed124/1/KgedPD3CTph79wxKn6u6QFsIOkU.mft
File: KgedPD3CTph79wxKn6u6QFsIOkU.mft (raw, json)
Hash identifier: xRj/iw2IkgzYU2ASLVtuwHJLbsHF6cmFdnHN1E3+ayk=
Subject key identifier: 84:3B:86:53:D3:18:11:DE:63:14:2F:FC:B4:03:7B:48:43:88:13:91
Authority key identifier: 2A:07:9D:3C:3D:C2:4E:98:7B:F7:0C:4A:9F:AB:BA:40:5B:08:3A:45
Certificate issuer: /CN=2a079d3c3dc24e987bf70c4a9fabba405b083a45
Certificate serial: 01A0D9172E0E31F449973E2A85DCE1689A1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KgedPD3CTph79wxKn6u6QFsIOkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/0bb8a0-3fb3-41ee-9f65-1c8d9e6ed124/1/KgedPD3CTph79wxKn6u6QFsIOkU.mft
Manifest number: 0FF7
Signing time: Fri 25 Sep 2026 15:02:49 +0000
Manifest this update: Fri 25 Sep 2026 15:02:49 +0000
Manifest next update: Sat 26 Sep 2026 15:02:49 +0000
Files and hashes: 1: 8I-T0SAa0Aq_73NiYmLeAZeA6-8.roa (hash: EcYbc0JJhYj9cueeOUOF6D2ImbWnBSB3mqW1Q4k/8AY=)
2: DwX1SC_cs56fLlS6FPAMCX-Xu-g.roa (hash: E2FXua4YE/EaNkgeUflK173eYdNrtusjWgWWbRvvf60=)
3: KgedPD3CTph79wxKn6u6QFsIOkU.crl (hash: AwopyfABwvj18yauMeJ+LPfg3otUrg8zcllmBte7k9g=)
4: LssdpCqBsqTDNkq_1fNZk292m4Y.roa (hash: 3sGeV4EkIAUVZp5hTUfJIwdgV3ThxleH5h9tn2o5fdo=)
5: Rtx65YwOK2woTGcbrjBm4aKbwU8.roa (hash: TY4eV3HCd/AOs65OQsFGfOd3gVc1uO4pq0GcNRWWaV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/0bb8a0-3fb3-41ee-9f65-1c8d9e6ed124/1/KgedPD3CTph79wxKn6u6QFsIOkU.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/0bb8a0-3fb3-41ee-9f65-1c8d9e6ed124/1/KgedPD3CTph79wxKn6u6QFsIOkU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KgedPD3CTph79wxKn6u6QFsIOkU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:17:2e:0e:31:f4:49:97:3e:2a:85:dc:e1:68:9a:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a079d3c3dc24e987bf70c4a9fabba405b083a45
Validity
Not Before: Sep 25 15:02:49 2026 GMT
Not After : Sep 26 15:02:49 2026 GMT
Subject: CN=843b8653d31811de63142ffcb4037b4843881391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:29:2b:d8:84:39:56:e4:f7:b2:4d:39:b7:b0:
6c:6f:9d:b6:38:e5:69:25:f5:2b:17:c5:a1:5a:83:
18:4a:96:a3:bf:17:49:a8:5d:00:e6:43:9b:d0:a5:
3c:e7:4c:d1:0a:9e:41:f6:5c:cc:1f:cf:0a:94:7f:
22:81:70:54:d4:ad:84:c9:bc:11:47:ae:61:61:b5:
70:8c:bb:59:05:d7:6e:79:d0:fe:5a:cf:fa:63:19:
c8:9a:d4:cb:c4:20:8b:5f:54:d5:9f:e9:e8:17:a1:
68:31:db:76:00:8a:65:22:f1:39:b0:8a:08:c4:d3:
fc:ed:a1:17:fa:cc:99:b2:21:a8:08:5b:15:3d:00:
f6:a0:84:30:de:ef:92:80:a1:6d:b4:27:f5:46:42:
8f:84:fb:64:03:91:25:ca:dc:fa:10:f9:15:f2:73:
21:3f:4d:a8:ac:88:01:39:3b:de:03:8b:79:c3:73:
1c:e9:6b:87:a0:27:20:f3:5e:ad:02:32:ab:ff:03:
59:96:1f:18:22:0d:72:cc:7a:17:0c:cd:86:84:6e:
94:4e:75:fe:e7:20:db:e8:94:a1:75:3b:cb:aa:44:
3b:20:9a:95:f2:47:b3:53:79:6e:ca:0f:08:56:69:
61:53:92:17:88:4e:45:01:c9:e2:6c:61:e8:06:df:
cc:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:3B:86:53:D3:18:11:DE:63:14:2F:FC:B4:03:7B:48:43:88:13:91
X509v3 Authority Key Identifier:
keyid:2A:07:9D:3C:3D:C2:4E:98:7B:F7:0C:4A:9F:AB:BA:40:5B:08:3A:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KgedPD3CTph79wxKn6u6QFsIOkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0bb8a0-3fb3-41ee-9f65-1c8d9e6ed124/1/KgedPD3CTph79wxKn6u6QFsIOkU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0bb8a0-3fb3-41ee-9f65-1c8d9e6ed124/1/KgedPD3CTph79wxKn6u6QFsIOkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:9a:b4:c0:19:87:a2:ca:1c:88:60:55:b0:06:27:e8:1c:00:
fe:35:76:60:9d:5d:6e:60:0b:50:23:47:51:ad:01:bf:0a:9b:
6e:58:79:1b:e1:ec:91:db:c7:de:54:34:f2:8d:b0:c1:3b:37:
eb:22:81:bd:90:b0:c1:28:c4:25:db:07:8b:85:d2:c9:64:b3:
34:68:82:40:0f:68:97:a8:32:4d:c0:e2:9e:a1:51:17:73:ae:
dc:fb:8b:21:33:9f:9d:6f:0e:3f:2e:a6:48:53:f7:2a:7b:26:
6a:31:19:86:ab:a4:81:d6:c2:64:d6:fe:08:44:94:6c:50:db:
6f:c1:69:4c:55:22:80:16:28:91:25:d9:8f:5b:a1:7c:c5:be:
36:79:db:1d:8c:90:72:67:3d:09:06:4a:15:29:44:ea:a4:e1:
46:48:21:7c:8e:9a:6f:3c:0b:96:b8:23:2c:f6:da:78:41:23:
3f:ce:95:5d:79:62:25:d6:7f:d0:f7:b1:e3:4b:b0:2e:19:9e:
33:50:f9:71:25:fa:1d:d1:e6:a3:7d:5d:db:8c:2e:1a:0c:35:
5f:f2:a4:9b:93:b1:81:8e:81:76:5e:fb:10:ce:29:27:a5:e3:
e6:69:91:06:d8:d0:d9:89:fc:60:ca:35:30:f5:6c:55:02:1a:
44:4c:f4:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 20:03:50 2026 by rpki-client