Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ad8d09-39e9-408f-a370-9bb3f57c0ef0/1/KGURKILY5sctAiwsPaF7UsKtsHs.mft
File: KGURKILY5sctAiwsPaF7UsKtsHs.mft (raw, json)
Hash identifier: eQHOW8xBJMpuyr86JJ7yH2BuGtOnz5FVoZpt64fgvN0=
Subject key identifier: C4:C8:97:20:10:E4:41:1A:C5:57:07:E1:90:DC:19:DC:F2:E8:93:3C
Authority key identifier: 28:65:11:28:82:D8:E6:C7:2D:02:2C:2C:3D:A1:7B:52:C2:AD:B0:7B
Certificate issuer: /CN=2865112882d8e6c72d022c2c3da17b52c2adb07b
Certificate serial: 019D27040D1A75AEFCF787FB1C7AC12DB3F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KGURKILY5sctAiwsPaF7UsKtsHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/ad8d09-39e9-408f-a370-9bb3f57c0ef0/1/KGURKILY5sctAiwsPaF7UsKtsHs.mft
Manifest number: 0B53
Signing time: Wed 25 Mar 2026 22:01:10 +0000
Manifest this update: Wed 25 Mar 2026 22:01:10 +0000
Manifest next update: Thu 26 Mar 2026 22:01:10 +0000
Files and hashes: 1: KGURKILY5sctAiwsPaF7UsKtsHs.crl (hash: rLlmeVsNc8ib6EBmbE0IxlupMgRwj2rQwOuhELTYeW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/ad8d09-39e9-408f-a370-9bb3f57c0ef0/1/KGURKILY5sctAiwsPaF7UsKtsHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/ad8d09-39e9-408f-a370-9bb3f57c0ef0/1/KGURKILY5sctAiwsPaF7UsKtsHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/KGURKILY5sctAiwsPaF7UsKtsHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:0d:1a:75:ae:fc:f7:87:fb:1c:7a:c1:2d:b3:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2865112882d8e6c72d022c2c3da17b52c2adb07b
Validity
Not Before: Mar 25 22:01:10 2026 GMT
Not After : Mar 26 22:01:10 2026 GMT
Subject: CN=c4c8972010e4411ac55707e190dc19dcf2e8933c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:36:24:a0:56:1d:a4:a7:c5:6d:5e:e5:61:f0:
17:a8:ce:de:6b:32:20:99:9d:8c:d5:72:64:ce:f2:
e1:1d:fd:6d:f1:e6:a4:07:1f:65:c4:00:49:d2:c6:
56:bc:cc:d8:e9:ef:2b:8e:90:8a:c9:cc:c3:85:22:
f6:06:f8:96:ac:bf:c0:6b:33:33:7a:49:4d:b7:c9:
d9:63:0a:50:3b:cf:68:61:a9:8f:c2:fd:58:03:f7:
fa:54:16:e8:2f:91:55:68:78:e0:94:24:3d:10:e7:
98:d0:25:00:ec:af:8b:bc:9d:db:2d:63:db:00:81:
ed:8b:03:2f:c1:f4:79:81:a5:98:b3:f7:13:ea:b2:
87:11:a3:05:af:76:22:b6:0e:a5:95:b5:f3:92:95:
a5:4b:4e:3b:b6:00:5e:7f:4c:84:a6:91:bd:b4:e5:
f4:db:05:0b:cc:9a:b1:f8:a2:48:9a:6e:0a:a6:74:
53:3a:f6:d3:5e:0f:71:85:e8:5e:84:65:a5:71:d6:
44:7a:e2:6e:ef:53:81:09:f8:58:99:2e:ca:67:39:
3a:35:de:ca:1b:76:44:79:c4:b0:4d:03:b7:70:c4:
c5:d1:28:06:19:57:fa:c3:25:68:f8:c3:21:39:23:
5f:95:7c:23:97:6c:40:e4:ef:95:e1:a7:d1:a7:7b:
17:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:C8:97:20:10:E4:41:1A:C5:57:07:E1:90:DC:19:DC:F2:E8:93:3C
X509v3 Authority Key Identifier:
keyid:28:65:11:28:82:D8:E6:C7:2D:02:2C:2C:3D:A1:7B:52:C2:AD:B0:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KGURKILY5sctAiwsPaF7UsKtsHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ad8d09-39e9-408f-a370-9bb3f57c0ef0/1/KGURKILY5sctAiwsPaF7UsKtsHs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ad8d09-39e9-408f-a370-9bb3f57c0ef0/1/KGURKILY5sctAiwsPaF7UsKtsHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:93:55:60:06:29:df:79:33:cd:e1:89:2e:ae:60:3a:5a:fa:
e2:8a:5b:90:40:1b:73:43:4f:31:3f:87:aa:8f:15:db:6a:1d:
66:ff:d7:1b:29:1e:94:bb:96:d2:5f:89:49:32:5c:ec:a1:ae:
a9:dc:ea:46:18:8d:b0:aa:d0:15:e5:ae:68:90:64:10:c4:bb:
fa:43:0e:a4:d3:3d:c1:5f:28:cd:93:88:df:65:f0:1c:66:5a:
df:f9:25:9f:47:95:a3:59:30:64:8e:d4:87:88:b2:a7:89:3d:
4e:4f:b2:e9:af:5a:ec:36:a1:fe:48:fa:82:62:59:88:3d:d0:
58:d8:c3:65:9e:12:3f:c0:f5:7a:bb:ea:1d:ad:62:4c:91:6e:
9a:d4:0b:87:f1:18:47:cc:9e:76:4d:df:68:e2:f5:27:1a:8f:
bd:ad:d3:87:45:cc:1f:b2:26:9a:80:28:74:bb:26:3c:dc:7f:
3b:af:9e:54:de:4b:3b:74:bd:3a:56:a1:25:66:a5:eb:10:cd:
ff:67:39:dd:2d:37:47:bb:69:29:1b:c0:b7:05:97:e4:b5:e6:
aa:99:48:75:4d:08:79:86:63:de:ca:e6:ec:20:87:b1:4b:55:
04:52:0a:8e:7b:78:5b:9d:19:d3:ae:bd:1b:0f:0d:1c:7d:45:
0f:db:c5:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:53:39 2026 by rpki-client