Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/2052ad-3d41-45da-8474-6339f6b36bcb/1/KGaH-2SnfwEAuvI9TzQezndZUOU.mft
File: KGaH-2SnfwEAuvI9TzQezndZUOU.mft (raw, json)
Hash identifier: yUONzGH71det59jdOWDAk7wS8C+JZL/OOvsBiPYBiU0=
Subject key identifier: C4:2C:3D:94:21:4C:10:9E:81:26:43:DD:0C:CE:A0:94:A8:D2:6D:E5
Authority key identifier: 28:66:87:FB:64:A7:7F:01:00:BA:F2:3D:4F:34:1E:CE:77:59:50:E5
Certificate issuer: /CN=286687fb64a77f0100baf23d4f341ece775950e5
Certificate serial: 019D28F240470F1E53AB3D881E2D8A361BFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KGaH-2SnfwEAuvI9TzQezndZUOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/2052ad-3d41-45da-8474-6339f6b36bcb/1/KGaH-2SnfwEAuvI9TzQezndZUOU.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 07:00:57 +0000
Manifest this update: Thu 26 Mar 2026 07:00:57 +0000
Manifest next update: Fri 27 Mar 2026 07:00:57 +0000
Files and hashes: 1: KGaH-2SnfwEAuvI9TzQezndZUOU.crl (hash: bIX0oCKdwyiJ2+cF7/dOD0dD58dzKNb81TmkQ/I8+jc=)
2: Lt1d_zlwhux2IVzKQWnKfN58kb4.roa (hash: ir0joYXK6Nxy/SHex21LkKB897GX0TnoKlLbL29fcKU=)
3: XtaithTRmiOvWOEKSiRCjVsSSJk.roa (hash: IQ/PuMeeWoBaHEJ1ygdil0Mb3v2vh5Ek1c14zbUB6a0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/2052ad-3d41-45da-8474-6339f6b36bcb/1/KGaH-2SnfwEAuvI9TzQezndZUOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/2052ad-3d41-45da-8474-6339f6b36bcb/1/KGaH-2SnfwEAuvI9TzQezndZUOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KGaH-2SnfwEAuvI9TzQezndZUOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:40:47:0f:1e:53:ab:3d:88:1e:2d:8a:36:1b:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=286687fb64a77f0100baf23d4f341ece775950e5
Validity
Not Before: Mar 26 07:00:57 2026 GMT
Not After : Mar 27 07:00:57 2026 GMT
Subject: CN=c42c3d94214c109e812643dd0ccea094a8d26de5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:73:25:09:ae:8f:91:2e:1f:f9:1e:18:09:44:
bf:34:39:4f:cf:36:5e:fe:ee:3d:c8:36:ca:1e:e9:
e9:d8:a5:a4:b1:e4:15:14:6a:25:f8:a1:81:1c:e8:
8f:ff:b2:00:c3:69:25:56:1d:d1:f5:f1:01:59:14:
0a:17:d9:ac:2b:a1:d0:a2:79:d0:af:b8:57:db:5f:
e4:57:c0:74:e0:f7:db:40:4f:04:88:91:28:69:35:
66:89:39:55:02:46:34:e7:6c:76:09:56:2c:f2:c6:
79:32:34:e9:d7:08:90:7c:3a:44:bd:43:65:3b:80:
6c:cb:64:92:28:36:b9:d0:77:68:32:2f:cc:f5:43:
f6:eb:5c:e5:60:f9:8a:54:31:c6:d7:b9:6a:57:6d:
dc:32:e5:e8:79:c3:ec:8c:91:6a:06:65:70:16:62:
7f:f2:b6:1e:22:64:5d:28:d8:c8:19:87:b5:27:9c:
92:56:63:cc:55:86:e0:fd:18:f6:f1:79:f1:7e:25:
7f:06:12:3e:5a:c8:82:14:92:f0:e6:0f:ba:28:96:
1d:f4:af:fd:34:7f:e0:88:0d:3f:d1:67:67:a1:08:
d3:37:e9:48:a6:2e:00:b7:79:77:a8:17:0a:a8:2a:
aa:0b:2a:fa:ab:00:69:cc:8d:56:4f:66:c7:40:6a:
1d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:2C:3D:94:21:4C:10:9E:81:26:43:DD:0C:CE:A0:94:A8:D2:6D:E5
X509v3 Authority Key Identifier:
keyid:28:66:87:FB:64:A7:7F:01:00:BA:F2:3D:4F:34:1E:CE:77:59:50:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KGaH-2SnfwEAuvI9TzQezndZUOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2052ad-3d41-45da-8474-6339f6b36bcb/1/KGaH-2SnfwEAuvI9TzQezndZUOU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2052ad-3d41-45da-8474-6339f6b36bcb/1/KGaH-2SnfwEAuvI9TzQezndZUOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:d3:42:3b:1e:64:ea:a1:61:df:a6:67:8d:99:86:59:4e:bc:
cf:85:e6:85:4a:e7:ed:eb:d9:26:af:97:ca:eb:86:d0:ab:b7:
ee:5a:59:62:47:62:d7:5b:8f:27:20:a3:68:bb:c6:48:01:57:
a8:64:d9:1b:1a:ff:c4:fb:44:d8:33:07:25:47:53:19:87:3b:
03:40:34:f3:63:7f:f0:fd:ce:e5:80:1e:1d:9f:62:f4:2f:a6:
57:05:31:71:ae:b4:23:2a:74:97:70:c9:d8:73:56:35:f3:9f:
f7:8c:ff:87:d4:5d:79:8d:e4:da:9d:53:7c:e1:9f:ec:42:b0:
57:ff:43:d1:c4:d9:80:fc:05:b4:c2:e2:1a:51:d7:21:fe:f3:
08:a7:77:66:c9:cd:31:90:f6:85:f6:43:d0:36:67:b6:8b:e7:
00:fe:e4:9c:3d:c0:22:e1:0d:59:51:b6:87:2a:51:6b:b8:6c:
f2:ed:59:38:f9:e0:53:a7:8f:b3:b8:a1:f3:56:63:dd:eb:02:
04:67:44:05:5e:03:f3:fc:10:cd:f0:11:fb:2a:8e:ad:6f:f8:
34:4a:0d:b0:c5:5e:53:88:7f:41:3d:fe:99:5d:24:53:37:93:
b9:f6:4d:52:e0:52:2e:16:4f:62:a4:7b:40:12:7d:32:23:d3:
a7:38:a1:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:57:45 2026 by rpki-client